last executing test programs:

9.087532398s ago: executing program 2 (id=912):
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x280, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
mount(&(0x7f0000002780)=@filename='./cgroup\x00', &(0x7f0000002800)='./cgroup\x00', 0x0, 0x1001, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0)
dup2(r2, r1)
poll(&(0x7f00000026c0)=[{0xffffffffffffffff, 0x4}], 0x1, 0x10000)
mount$9p_unix(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x928071, 0x0)
syz_mount_image$minix(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00c24194452acb080f3029bcc512ce2f72feb6b761b338658e2c1080375606e1bf51b24cd2edea80e64bd9463fe6fc49859fa7a76f547da38f43ee952c5755424792d56c8657d4599568a0ad9d5c0cd851b87dd0b828a736840ad1035fcbde6a1d74ff3d76fe8a71a2be5bcaf5247015042c5d7dc79add2ed2518098cb23705a784c5b85c45bcb953334790b8b5ab2081e349366d65d66b0705cb7a2ee38e0b68247f064f1d4f240f6"], 0x1, 0x180, &(0x7f0000000040)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[], 0xa0e)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0xfd14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0xfc, 0x160, &(0x7f00000001c0)="$eJzszsGLUlEUx/Hv7T3DSLOowIJKaNEjM59PrDZBGkkuUirctBL0RYFiJJS7lGjXImjrQhNaif+CZW00g7A/YmbjepYO1/cYZjHgHzDns7nwO+eecx7d/2sFY2AAPICHzcabt26r5dZiz0pP8s93J5OsLp0Eghyus/EjC6/0a8KqCzr+FYaXr+vu7WqzXoNT+qMF5E57ua0zOAEMTLwshfffug7Ti17mHJGl/eyyCbmIPy8A6wHc0DvOHcxT+r52Lz7O7hQXs0Li5vcrBp8K8Wvn1VpBnM488lTnV93PTv7SMBQ1KLu/v5FT0Oz9T84S/5Lj0RJf2nHupO2UbWeWpT+LQqbzBfNx6B28UN6e0by4MP1mswwfFXzd1FY/VRiY9vdKjTN3+17LvVvvjRiodq9aiQaGlQtnOxiWdzZdtviwrUEIIYQQQgghhBBCCCGEEEIIIcRxsh8AAP//66BcjA==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)

7.557768784s ago: executing program 2 (id=924):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x351, &(0x7f0000001980)="$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")
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4002, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x11, 0x22f, &(0x7f0000000880)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)

7.301410324s ago: executing program 4 (id=925):
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x10003)
lseek(r0, 0x0, 0x4)

7.10518165s ago: executing program 4 (id=926):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000008b0000009500000000000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6, 0x6, 0x8001, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0xffff, r5}, 0x38)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)

6.019130069s ago: executing program 2 (id=927):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))

5.990199421s ago: executing program 4 (id=928):
syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0xd4, 0x7c, 0xc1, 0x40, 0x67b, 0x23c3, 0x18a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2d, 0x9b, 0xcd, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)

5.667480037s ago: executing program 2 (id=929):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400})

5.666872778s ago: executing program 2 (id=930):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, r6, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}}, 0x0)

5.204893865s ago: executing program 3 (id=934):
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04025506000000000000070703b165300e00ffffffffffff090607360a8e0800aaaaaaaaaa1007700a00691e0300ffffffffffff05cf05e77707000000000000fc27f25e1308ff07ffffffffffff00fc0d699cf7"], 0x58)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pidfd_send_signal(r0, 0x30, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0)
timerfd_create(0x9, 0x800)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r4, 0x89f0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000080)='./file0\x00')
unlink(&(0x7f0000000280)='./file1\x00')

4.991177283s ago: executing program 0 (id=935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80}, 0x1c)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0)
splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003c00)=@req={0x0, 0x9}, 0x10)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
close(r8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005380)=ANY=[@ANYBLOB="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"], 0x5140}}, 0x0)

4.209071046s ago: executing program 3 (id=936):
socket$nl_route(0x10, 0x3, 0x0)
ioperm(0x0, 0x2, 0x2)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x65c)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4)
write$binfmt_script(r1, &(0x7f0000000300), 0xfe7f)
recvmmsg(r1, &(0x7f0000010bc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000cc0)=""/142, 0x8e}, {0x0, 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001040)=""/191, 0xbf}], 0x1}}], 0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000740)='syz1\x00', 0x1ff)
sendfile(r3, r3, 0x0, 0x9)

3.936040689s ago: executing program 2 (id=938):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000070000000700c2817875bdd1fe7e36673314"], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.670936681s ago: executing program 0 (id=939):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

3.582339648s ago: executing program 0 (id=940):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r1, @ANYBLOB="010000000000000000000f0000000800010000000040"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="000204"], 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0)
connect$inet6(r6, &(0x7f0000002200)={0xa, 0x0, 0x0, @private2}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x4000914)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

3.489486865s ago: executing program 0 (id=943):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x202, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000680)=0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @private}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1}, 0x31c467c443849ffc)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK={0x8}, @replay_esn_val={0x1c}]}, 0x15c}}, 0x0)

3.405561382s ago: executing program 1 (id=944):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c)
sendmmsg$alg(r2, &(0x7f0000001840)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='team_slave_1\x00')
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000054000480240001800b0001007470726f7879000014000280080003400000000b08000140000000022c0001800b0001006e756d67656e00001c0002800800014000deff0f0800024000000001080003"], 0xa8}}, 0x0)

3.366992875s ago: executing program 4 (id=945):
prlimit64(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
io_uring_setup(0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="001000010000000000144400000000000a2c000000060e00000000000000000000000000001800048014000180"], 0x54}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00'], 0x44}}, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000440), &(0x7f0000000000)=0x80)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}})
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x0, 0xffffffff, 0xfffffff9}})
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000340), &(0x7f0000000380))
io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0x0)

2.960133878s ago: executing program 1 (id=946):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x5, 0x0, 0x9, 0x1a00}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000360000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008090000b703000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff00002007000000000000010000840600000000"], 0x0, 0x42}, 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x34, r7, 0x601, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(r5, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast})

2.45934187s ago: executing program 0 (id=947):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000100))
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x29, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}}}, 0x24}}, 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@umask={'umask', 0x3d, 0x9}}, {@utf8}, {@discard}, {@errors_continue}, {}, {}, {@errors_remount}, {@utf8}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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")
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000a00)=0x4, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_devices(r4, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0)
r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$RTC_WIE_OFF(r5, 0x7010)
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1210080, &(0x7f0000000840)={[{@codepage={'codepage', 0x3d, 'cp862'}}, {@creator={'creator', 0x3d, "fbaaf044"}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@creator={'creator', 0x3d, "e5cb853d"}}, {@uid}, {}, {}]}, 0x7, 0x320, &(0x7f0000001800)="$eJzs3U1r1E4cB/DvJLvt7r+l/9hWCh6rgqfS1oPixSLFi2/AgxRru4XSWEEraEFcPYt4EwSP3jyLvgW9iG9ATz2IJ70UD0bml8nmoZPsQ+tmy34/0HU3mYffZDLJTMsaENHQurL89c35Pf2jqgBcAJcAB0ANqAA4iZna/e2dzR2/sV5UkCs59I9CmFMdSLO23bBl1fkkh+HpTxWMJ7fRvxEEQfCtbaqffYmFyqPCsX+AA4ya0Sn7a32P7GhkL0bNsF3DJdHDah/7eDBSZjRERDQAzP3fMXeJcXPLdBzgrJmHH+v7PzLzm/3y4hgI4f0fE9Ljeh2g9PH5X3bF6z2ZNened6JVoq0s6zkRxIdbZhlOpgNUu1WlxOLUNzb9xlxTCniKy0Yi2bS8riNqiMiL1sx3Zi1r0wJFbS82Jm2o6jYs5sQ/1XWNH77jpb26lU8dxKQ+qs9qRXl4hXVMmI2VQOmDI8fHy/RUGP98fonSSi9MlWplvH4/IZWcinrg/du4lfW841qDq2Ox0aWo7Pzdi+J8kTOtlc2TSP9aIWzdQn7rJNeUNddi6/Nva67pbK76RtVvzK3d8Qt/lXJkrCs69VxdV7P4gXdYbvW/Hj6uvtTnj8zUKFeS0pwZhe2pSMqcfkyRAXy7q5FJ4qq1o4s9wy1cxMS9h7tbq77fuFv+m2ioDEg84YloTke9Rf+bSIOaflMFcGSV/gmCwLqrgn40uSpNvfA6bvLu1qpqhh8PVwWarQKjXUv5iQEsATBboitCL7U/buUajQvsKPsv3duyxX5CRlH14YSMqkrtcjHa0Uip91DptUdbq35PVyI6ZuJOx8yNsoOhMuh5lwrXf4n1yrxcdfSLV7AaCdoVnihxIWcFNCmv/3W2gmsVmztPHIvetFlznT4HnMnU6CCq8Um2WM/EiUH8q2T3f8pQy/iCm4n5PxERERERERERERERERERERERERERHQvdfhuhl68TpGvcG8L/eIOIiIiIiIiIiIiIiIiIiIiIiIiIiIiI6HASz/8FXHlizEjpz/91O3j+b/RcCiLq2d8AAAD//9E5YJo=")
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/53, 0x35, 0x1, &(0x7f0000000940)=""/188, 0xbc}, &(0x7f00000003c0)=0x40)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r6, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0)

2.368582107s ago: executing program 3 (id=948):
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_proto_private(r0, 0x8991, &(0x7f0000000080)="85a84ffa1eaa50c092509b3a")

2.037747824s ago: executing program 1 (id=949):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000500000008001e01060000fe000000c87b656e285d281181111413f0081ddc21c51ffc7e9526ed8503c2aa9a5e0a96d01a3ad6c30d6baa1bdf0f6c4db0f4286fccba8944cee7e579a8dc8b3cde07b51c0a437334c8c52b2cc9301fdc5a473aaf13fbd5536aa0c719f9e37963f8e40ae29ee94ccd6deef4750b5d9d6e8dc3967a4a5190ce4bc0dc8fac276a4270ec739ecf34dbb9a2c0797698e4386e2c1872d2a04e6904ccd29d2a7b59082689da3602b982a9a619fa91f33a33723f92930f8a"], 0x154}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

2.033581304s ago: executing program 3 (id=950):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x1, 0x0, {0xa, 0x0, 0x14}, [@RTA_TABLE={0x8}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x20, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa523c993daabb86dd6079fbf700180200fe8000000000000000000000000000aaff020000000000000000000000000001000000000000000000fda6d8cc00"/78], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x0, 0x19, 0x0, &(0x7f00000001c0)=""/25, 0x7, 0x0, 0x0, 0x58, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
unshare(0x2000680)
r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fsc'])
openat$cgroup_pressure(r3, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0)
unshare(0x2000000)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$KDGKBDIACR(r3, 0x4b4a, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
removexattr(0x0, &(0x7f0000000040)=ANY=[])
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1.990355608s ago: executing program 4 (id=951):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

1.765091616s ago: executing program 4 (id=952):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3cb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mlock2(&(0x7f00006f7000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x14)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xc002a0, 0x0)

1.692865472s ago: executing program 1 (id=953):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c3d5de0c"}})

1.681581023s ago: executing program 3 (id=954):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9e70617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r1, @ANYBLOB="010000000000000000000f0000000800010000000040"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="000204"], 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0)
connect$inet6(r6, &(0x7f0000002200)={0xa, 0x0, 0x0, @private2}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x4000914)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

680.372965ms ago: executing program 0 (id=955):
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1})
fcntl$setlease(r0, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='leases_conflict\x00', r2}, 0x10)
open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0)

680.115655ms ago: executing program 1 (id=956):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x2, 0xa, 0x405, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
listen(r4, 0x0)
r5 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000001440)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0})
io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0x6248, &(0x7f0000000280))

673.430095ms ago: executing program 3 (id=957):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x551d, &(0x7f0000005c80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
unshare(0x28000600)
socket$inet(0x2, 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xc020f509, &(0x7f0000000100)={0x3})

0s ago: executing program 1 (id=958):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f3, &(0x7f0000000f40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

w USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   94.264647][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.292565][    T7] usb 2-1: config 0 descriptor??
[   94.351196][    T7] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   94.363178][ T4251] loop2: detected capacity change from 0 to 512
[   94.398698][ T4253] netlink: 'syz.0.206': attribute type 20 has an invalid length.
[   94.430072][ T4251] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   94.448445][ T4251] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   94.469674][ T4251] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   94.496366][ T4251] EXT4-fs (loop2): 1 truncate cleaned up
[   94.502108][ T4251] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback.
[   94.547421][ T4230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'.
[   95.034739][   T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   95.304677][   T21] usb 1-1: Using ep0 maxpacket: 16
[   95.444816][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[   95.465084][   T21] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[   95.474448][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.507543][   T21] usb 1-1: config 0 descriptor??
[   95.536424][    T7] usb 2-1: USB disconnect, device number 3
[   95.884417][ T4293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   95.972632][ T4259] udc-core: couldn't find an available UDC or it's busy
[   95.991617][ T4259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   96.015177][   T21] hid (null): nested delimiters
[   96.021191][   T21] hid (null): bogus close delimiter
[   96.027916][   T21] hid (null): invalid report_size 812540268
[   96.031971][ T4295] loop2: detected capacity change from 0 to 4096
[   96.034254][   T21] hid (null): unknown global tag 0x83
[   96.064606][   T21] hid (null): global environment stack underflow
[   96.083745][   T21] hid-generic 0003:0158:0100.0002: nested delimiters
[   96.108078][   T21] hid-generic 0003:0158:0100.0002: item 0 2 2 10 parsing failed
[   96.135016][   T21] hid-generic: probe of 0003:0158:0100.0002 failed with error -22
[   96.177209][ T4286] loop4: detected capacity change from 0 to 40427
[   96.263473][ T4286] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   96.288686][ T4286] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   96.306217][ T4286] F2FS-fs (loop4): invalid crc value
[   96.351675][ T4286] F2FS-fs (loop4): Found nat_bits in checkpoint
[   96.533718][ T4286] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   96.549475][ T4286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   96.568828][ T4319] binder_alloc: binder_alloc_mmap_handler: 4317 20ffc000-20ffd000 already mapped failed -16
[   96.705785][ T1244] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   97.356906][ T3617] usb 1-1: USB disconnect, device number 5
[   97.988179][ T4328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.231'.
[   98.816714][ T1244] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   99.037761][    T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   99.106177][ T4338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'.
[   99.731204][ T4350] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  100.782272][ T4373] loop4: detected capacity change from 0 to 512
[  102.451005][ T4375] sched: RT throttling activated
[  102.920714][ T4373] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  102.941718][ T4382] loop0: detected capacity change from 0 to 128
[  102.944859][ T4373] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[  102.979622][ T4373] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.249: Corrupt directory, running e2fsck is recommended
[  103.020305][   T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  103.050012][ T4373] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  103.063630][ T4382] VFS: Found a Xenix FS (block size = 512) on device loop0
[  103.065248][ T4373] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.249: corrupted in-inode xattr
[  103.090188][ T4373] EXT4-fs (loop4): Remounting filesystem read-only
[  103.097352][ T4373] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.249: couldn't read orphan inode 15 (err -117)
[  103.142772][ T4373] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback.
[  103.201699][ T4382] attempt to access beyond end of device
[  103.201699][ T4382] loop0: rw=0, want=8767745, limit=128
[  103.234803][ T4382] Buffer I/O error on dev loop0, logical block 8767744, async page read
[  103.251259][ T4382] attempt to access beyond end of device
[  103.251259][ T4382] loop0: rw=0, want=13269810, limit=128
[  103.275092][ T4382] Buffer I/O error on dev loop0, logical block 13269809, async page read
[  103.421015][   T21] usb 3-1: Using ep0 maxpacket: 16
[  103.425214][ T4382] attempt to access beyond end of device
[  103.425214][ T4382] loop0: rw=0, want=1158, limit=128
[  103.445034][ T4382] Buffer I/O error on dev loop0, logical block 1157, async page read
[  103.454956][ T4382] attempt to access beyond end of device
[  103.454956][ T4382] loop0: rw=0, want=3211265, limit=128
[  103.478735][ T4382] Buffer I/O error on dev loop0, logical block 3211264, async page read
[  103.636707][ T4392] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  103.648589][ T4392] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[  103.658775][ T4392] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.249: Corrupt directory, running e2fsck is recommended
[  104.433317][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  104.531297][ T4382] attempt to access beyond end of device
[  104.531297][ T4382] loop0: rw=0, want=8768636, limit=128
[  104.594642][   T21] usb 3-1: unable to read config index 0 descriptor/all
[  104.601658][   T21] usb 3-1: can't read configurations, error -71
[  104.638817][ T4382] Buffer I/O error on dev loop0, logical block 8768635, async page read
[  104.700708][ T4382] attempt to access beyond end of device
[  104.700708][ T4382] loop0: rw=0, want=13466418, limit=128
[  104.757084][ T4382] Buffer I/O error on dev loop0, logical block 13466417, async page read
[  104.807016][ T4388] chnl_net:caif_netlink_parms(): no params data found
[  104.826760][ T4382] attempt to access beyond end of device
[  104.826760][ T4382] loop0: rw=0, want=209286, limit=128
[  104.838030][ T4382] Buffer I/O error on dev loop0, logical block 209285, async page read
[  104.847455][ T4382] attempt to access beyond end of device
[  104.847455][ T4382] loop0: rw=0, want=8767745, limit=128
[  104.858512][ T4382] Buffer I/O error on dev loop0, logical block 8767744, async page read
[  104.867338][ T4382] attempt to access beyond end of device
[  104.867338][ T4382] loop0: rw=0, want=13269810, limit=128
[  104.878940][ T4382] Buffer I/O error on dev loop0, logical block 13269809, async page read
[  104.894595][ T4382] attempt to access beyond end of device
[  104.894595][ T4382] loop0: rw=0, want=1158, limit=128
[  104.923431][ T4382] Buffer I/O error on dev loop0, logical block 1157, async page read
[  104.973800][   T26] audit: type=1800 audit(1723139573.183:4): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.251" name="/" dev="loop0" ino=2 res=0 errno=0
[  105.012112][ T3570] sysv_free_block: trying to free block not in datazone
[  105.030204][ T3570] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  105.161562][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.204941][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.242421][ T4388] device bridge_slave_0 entered promiscuous mode
[  105.264578][   T13] Bluetooth: hci5: command 0x0409 tx timeout
[  105.319690][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.361278][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.392518][ T4388] device bridge_slave_1 entered promiscuous mode
[  105.508014][ T4388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.547549][ T4388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.835202][ T4135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  106.416819][ T4388] team0: Port device team_slave_0 added
[  106.465520][ T4388] team0: Port device team_slave_1 added
[  106.533840][ T4388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.554843][ T4388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.589258][ T4432] loop2: detected capacity change from 0 to 1024
[  106.596651][ T4388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.609529][ T4388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.616609][ T4388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.642705][ T4388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.741252][ T4388] device hsr_slave_0 entered promiscuous mode
[  106.776792][ T4388] device hsr_slave_1 entered promiscuous mode
[  106.800974][ T4388] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.834570][ T4388] Cannot create hsr debugfs directory
[  106.942788][ T1244] hfsplus: b-tree write err: -5, ino 4
[  107.185760][ T4428] loop4: detected capacity change from 0 to 32768
[  107.257398][ T4388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.353010][ T4428] XFS (loop4): Mounting V5 Filesystem
[  107.353021][   T21] Bluetooth: hci5: command 0x041b tx timeout
[  107.476150][ T4428] XFS (loop4): Ending clean mount
[  107.496146][ T4388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.511199][ T4428] XFS (loop4): Quotacheck needed: Please wait.
[  107.625114][ T4428] XFS (loop4): Quotacheck: Done.
[  107.647501][ T4388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.027747][ T4388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.539118][ T4514] netlink: 'syz.1.279': attribute type 12 has an invalid length.
[  108.555773][ T4512] loop2: detected capacity change from 0 to 2048
[  108.589216][ T4514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.279'.
[  108.625582][ T3582] XFS (loop4): Unmounting Filesystem
[  108.673005][ T4512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.868920][ T4388] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  108.909041][ T4388] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  109.121524][ T4388] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  109.133581][ T4508] loop0: detected capacity change from 0 to 32768
[  109.150128][ T4388] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  109.205356][ T4508] XFS: attr2 mount option is deprecated.
[  109.296093][ T4532] netlink: 60 bytes leftover after parsing attributes in process `syz.2.284'.
[  109.360899][ T4508] XFS (loop0): Mounting V5 Filesystem
[  109.512042][   T21] Bluetooth: hci5: command 0x040f tx timeout
[  109.572130][ T4508] XFS (loop0): Ending clean mount
[  109.581205][ T4508] XFS (loop0): Quotacheck needed: Please wait.
[  109.821326][ T3715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  110.395047][ T4388] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.433192][ T4508] XFS (loop0): Quotacheck: Done.
[  110.455365][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  110.464005][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  110.475639][ T4388] 8021q: adding VLAN 0 to HW filter on device team0
[  110.486945][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  110.496424][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.505929][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.513024][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.566461][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.575745][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.600434][ T4547] netlink: 'syz.1.288': attribute type 2 has an invalid length.
[  110.618376][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.665423][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.672830][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.685404][ T4547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.288'.
[  110.731765][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  111.557583][ T4549] loop4: detected capacity change from 0 to 4096
[  111.590417][ T1205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  111.590906][   T21] Bluetooth: hci5: command 0x0419 tx timeout
[  111.595413][ T4388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  111.595437][ T4388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.647147][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  111.648190][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  111.649169][ T3570] XFS (loop0): Unmounting Filesystem
[  111.650310][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  111.651060][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  111.653780][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  111.654742][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  111.655406][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  111.656159][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  111.656734][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  111.658759][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  111.660258][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  111.745676][ T1244] wlan1: Trigger new scan to find an IBSS to join
[  111.780752][ T4549] ntfs: volume version 3.1.
[  111.957222][ T4388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.995315][   T26] audit: type=1800 audit(1723139580.213:5): pid=4549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.286" name="file0" dev="loop4" ino=65 res=0 errno=0
[  112.021971][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  112.132597][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  112.161914][ T4562] netlink: 'syz.1.291': attribute type 1 has an invalid length.
[  112.173006][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  112.189599][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  112.406694][ T3715] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.387295][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.388062][ T4573] sctp: [Deprecated]: syz.4.292 (pid 4573) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.388062][ T4573] Use struct sctp_sack_info instead
[  113.395911][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.443743][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.465518][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.495062][ T4388] device veth0_vlan entered promiscuous mode
[  113.514282][ T4577] netlink: 104 bytes leftover after parsing attributes in process `syz.0.298'.
[  113.548246][ T3715] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.608169][ T4388] device veth1_vlan entered promiscuous mode
[  113.639293][ T4580] loop0: detected capacity change from 0 to 512
[  113.686626][ T3715] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.859622][ T4580] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  113.884669][ T4580] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (28729!=33349)
[  113.891269][ T4583] loop4: detected capacity change from 0 to 512
[  113.908932][ T3715] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.925534][ T4580] EXT4-fs (loop0): orphan cleanup on readonly fs
[  113.932369][ T4580] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.299: bad orphan inode 15
[  113.952232][ T4388] device veth0_macvtap entered promiscuous mode
[  113.987532][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  114.006563][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  114.021621][ T4580] ext4_test_bit(bit=14, block=20) = 0
[  114.043862][ T4583] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  114.053918][ T4580] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,inode_readahead_blks=0x0000000000000080,noload,noblock_validity,init_itable,noblock_validity,,errors=continue. Quota mode: none.
[  114.139650][ T4583] EXT4-fs warning (device loop4): ext4_multi_mount_protect:326: fsck is running on the filesystem
[  114.150857][ T4388] device veth1_macvtap entered promiscuous mode
[  114.170857][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.184435][ T4583] EXT4-fs warning (device loop4): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[  114.207531][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.220827][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.231522][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.241676][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.253774][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.263811][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.274414][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.285003][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.296034][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.311604][ T4388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.327523][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  114.336102][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  114.344179][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  114.354212][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  114.363417][ T4580] netlink: 3 bytes leftover after parsing attributes in process `syz.0.299'.
[  114.485235][ T4587] device veth0_vlan left promiscuous mode
[  114.528045][ T4587] device veth0_vlan entered promiscuous mode
[  114.551516][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.574980][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.611934][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.632871][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.643058][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.655683][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.666637][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.677426][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.687824][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.701000][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.713080][ T4388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.737391][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  114.746965][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  114.761691][ T4388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.772846][ T4388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.783118][ T4388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.793850][ T4388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.100363][ T4579] chnl_net:caif_netlink_parms(): no params data found
[  115.150255][ T4607] netlink: 'syz.0.304': attribute type 2 has an invalid length.
[  115.160542][ T4607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.304'.
[  115.172665][ T4607] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  115.209952][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.242571][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.284889][ T3574] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  115.350802][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  115.396467][ T4616] loop0: detected capacity change from 0 to 128
[  115.426525][ T4500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  115.442702][ T3891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.504182][ T3891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.658915][ T3574] usb 5-1: Using ep0 maxpacket: 16
[  115.696946][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  115.747224][ T3618] Bluetooth: hci0: command 0x0409 tx timeout
[  115.755673][ T4500] wlan1: Trigger new scan to find an IBSS to join
[  115.784845][ T3574] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.185725][ T3574] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=6f.4b
[  116.302637][ T3574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.426725][ T3574] usb 5-1: Product: syz
[  116.431100][ T3574] usb 5-1: Manufacturer: syz
[  116.436199][ T3574] usb 5-1: SerialNumber: syz
[  116.443771][ T3574] usb 5-1: config 0 descriptor??
[  116.459712][ T4579] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.480079][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.516813][ T4579] device bridge_slave_0 entered promiscuous mode
[  116.561616][ T4631] netlink: 'syz.1.307': attribute type 3 has an invalid length.
[  116.580854][ T4579] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.588460][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.605970][ T4579] device bridge_slave_1 entered promiscuous mode
[  116.635294][ T4500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  116.723494][ T3618] usb 5-1: USB disconnect, device number 3
[  116.768621][ T4634] loop0: detected capacity change from 0 to 1024
[  116.813938][ T4579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.828725][ T4500] wlan1: Creating new IBSS network, BSSID 26:8a:76:27:2e:0c
[  116.841966][ T4579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.923428][ T4634] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nombcache,minixdf,norecovery,debug_want_extra_isize=0x000000000000007e,lazytime,init_itable=0x0000000000000005,user_xattr,errors=remount-ro,. Quota mode: none.
[  117.010942][ T4634] EXT4-fs error (device loop0): ext4_lookup:1855: inode #14: comm syz.0.308: iget: immutable or append flags not allowed on symlinks
[  117.021231][ T4579] team0: Port device team_slave_0 added
[  117.040341][ T4634] EXT4-fs (loop0): Remounting filesystem read-only
[  117.066867][ T4579] team0: Port device team_slave_1 added
[  117.232060][ T4649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.311'.
[  117.244240][ T4650] can: request_module (can-proto-0) failed.
[  117.298379][ T4650] loop0: detected capacity change from 0 to 512
[  117.314071][ T4579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.333028][ T4579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.378809][ T4657] loop4: detected capacity change from 0 to 512
[  117.382618][ T4579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.445826][ T4657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  117.477065][ T4650] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.310: corrupted in-inode xattr
[  117.508112][ T4657] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002]
[  117.516767][ T4650] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.310: couldn't read orphan inode 15 (err -117)
[  117.533397][ T4650] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  117.549700][ T4657] System zones: 1-12
[  117.550092][ T4579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.586187][ T4579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.614740][ T4579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.627750][ T4657] EXT4-fs (loop4): 1 truncate cleaned up
[  117.663784][ T4657] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,grpid,journal_ioprio=0x0000000000000007,debug,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback.
[  117.851111][   T13] Bluetooth: hci0: command 0x041b tx timeout
[  118.671923][ T3617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  118.683727][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.923025][ T4579] device hsr_slave_0 entered promiscuous mode
[  118.939159][ T4579] device hsr_slave_1 entered promiscuous mode
[  119.084881][ T4579] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.128285][ T4579] Cannot create hsr debugfs directory
[  120.247353][ T3617] Bluetooth: hci0: command 0x040f tx timeout
[  120.767378][ T4695] netlink: 104 bytes leftover after parsing attributes in process `syz.1.330'.
[  121.211080][ T4500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  121.856514][ T4709] netlink: 872 bytes leftover after parsing attributes in process `syz.1.324'.
[  121.955032][ T4711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'.
[  122.236096][ T3715] device hsr_slave_0 left promiscuous mode
[  122.247112][ T3715] device hsr_slave_1 left promiscuous mode
[  122.254107][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.257781][ T4722] loop0: detected capacity change from 0 to 512
[  122.264660][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.294155][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.304881][ T3628] Bluetooth: hci0: command 0x0419 tx timeout
[  122.321193][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.328330][ T4722] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  122.349436][ T4722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002]
[  122.354267][ T4717] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  122.390333][ T4722] System zones: 1-12
[  122.401449][   T26] audit: type=1326 audit(1723139590.613:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.4.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e0fe999f9 code=0x0
[  122.424417][ T3715] device bridge_slave_1 left promiscuous mode
[  122.436477][ T4722] EXT4-fs (loop0): 1 truncate cleaned up
[  122.441196][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.442144][ T4722] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,grpid,journal_ioprio=0x0000000000000007,debug,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback.
[  122.476945][ T3891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  122.548618][ T3715] device bridge_slave_0 left promiscuous mode
[  122.592164][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.669637][ T3715] device veth1_macvtap left promiscuous mode
[  122.703526][ T3715] device veth0_macvtap left promiscuous mode
[  122.728476][ T3715] device veth1_vlan left promiscuous mode
[  122.745316][ T3715] device veth0_vlan left promiscuous mode
[  124.655599][ T4755] loop4: detected capacity change from 0 to 64
[  124.830051][ T3891] handle_bad_sector: 4 callbacks suppressed
[  124.830071][ T3891] attempt to access beyond end of device
[  124.830071][ T3891] loop4: rw=1, want=8194, limit=64
[  124.846187][ T3715] team0 (unregistering): Port device team_slave_1 removed
[  124.859108][ T3891] buffer_io_error: 4 callbacks suppressed
[  124.859127][ T3891] Buffer I/O error on dev loop4, logical block 4096, lost async page write
[  124.884369][ T3715] team0 (unregistering): Port device team_slave_0 removed
[  124.949943][ T3715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.993736][ T3715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.005180][ T4747] loop0: detected capacity change from 0 to 32768
[  125.069941][ T4747] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.331 (4747)
[  125.119739][ T4747] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  125.138188][ T4747] BTRFS info (device loop0): use zlib compression, level 3
[  125.146605][ T4747] BTRFS info (device loop0): using free space tree
[  125.153349][ T4747] BTRFS info (device loop0): has skinny extents
[  125.153388][ T3715] bond0 (unregistering): Released all slaves
[  125.313632][ T4747] BTRFS info (device loop0): enabling ssd optimizations
[  125.566496][ T4783] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  125.789091][ T4579] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  125.842374][ T4579] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  125.882315][ T4579] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  125.932173][ T4579] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  126.305967][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  126.518007][ T4579] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.597454][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  126.625626][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  126.680996][ T4579] 8021q: adding VLAN 0 to HW filter on device team0
[  126.756057][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  126.957728][ T3698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  127.498803][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.511725][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.518865][ T4806] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.576357][   T26] audit: type=1326 audit(1723139595.793:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4827 comm="syz.1.342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3453a19f9 code=0x0
[  127.580356][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  127.698836][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  127.735206][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.753969][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.761143][ T4806] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.793814][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  127.821400][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  127.851616][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  127.885995][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  127.910478][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  127.941098][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.025079][ T4579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.073554][ T4579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.149717][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  128.166042][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.196052][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.223659][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.232206][ T4503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  128.285373][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.314338][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  128.430221][ T4857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'.
[  128.446837][ T4815] loop4: detected capacity change from 0 to 32768
[  128.494912][ T4815] XFS: attr2 mount option is deprecated.
[  128.619856][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'.
[  128.641583][ T4832] loop0: detected capacity change from 0 to 32768
[  128.650867][ T4815] XFS (loop4): Mounting V5 Filesystem
[  128.781252][ T4832] XFS (loop0): Mounting V5 Filesystem
[  128.852581][ T4832] XFS (loop0): Ending clean mount
[  128.861460][ T4832] XFS (loop0): Quotacheck needed: Please wait.
[  128.933662][ T4815] XFS (loop4): Ending clean mount
[  128.937740][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  128.945493][ T4815] XFS (loop4): Quotacheck needed: Please wait.
[  128.952399][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  128.952951][ T4832] XFS (loop0): Quotacheck: Done.
[  129.010079][ T4579] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.259745][ T4815] XFS (loop4): Quotacheck: Done.
[  129.268608][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  129.278297][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  129.607043][ T3582] XFS (loop4): Unmounting Filesystem
[  129.942886][ T3570] XFS (loop0): Unmounting Filesystem
[  129.958864][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  129.967963][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  129.980026][ T4579] device veth0_vlan entered promiscuous mode
[  129.996509][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  130.005382][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  130.022309][ T4579] device veth1_vlan entered promiscuous mode
[  130.167255][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  130.177155][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  130.200253][ T4579] device veth0_macvtap entered promiscuous mode
[  130.237753][ T4579] device veth1_macvtap entered promiscuous mode
[  130.337182][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.385267][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.414803][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.452996][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.484587][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.525533][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.555825][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.594491][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.604350][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.642407][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.655244][ T4914] loop0: detected capacity change from 0 to 512
[  130.677989][ T4579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.705648][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  130.711790][ T4914] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.359: inode #0: comm syz.0.359: iget: illegal inode #
[  130.716996][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  130.774652][ T4914] EXT4-fs (loop0): get orphan inode failed
[  130.792943][ T4914] EXT4-fs (loop0): mount failed
[  130.805458][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  130.838210][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.871532][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.899683][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.919861][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.942879][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.957018][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.974586][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.984413][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.014661][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.030348][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.047030][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.066179][ T4579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.075851][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  131.095940][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.115675][ T4579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.134797][ T4579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.168603][ T4579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.193275][ T4579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.247943][ T3698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  132.435062][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.443626][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.517549][ T4503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.653296][ T4503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.665089][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  132.724945][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  132.732386][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  132.732976][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  133.333362][ T1244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  133.498324][ T4964] sctp: [Deprecated]: syz.3.363 (pid 4964) Use of int in maxseg socket option.
[  133.498324][ T4964] Use struct sctp_assoc_value instead
[  133.566730][ T4967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.360'.
[  133.599495][ T4971] process 'syz.1.364' launched './file1' with NULL argv: empty string added
[  133.708977][ T4971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.364'.
[  133.730958][ T4963] loop4: detected capacity change from 0 to 8192
[  133.743130][ T4971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[  133.795519][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'.
[  133.835513][ T4963] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  133.874975][ T4963] REISERFS (device loop4): using ordered data mode
[  133.881517][ T4963] reiserfs: using flush barriers
[  133.956358][ T4963] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  133.973197][ T4963] REISERFS (device loop4): checking transaction log (loop4)
[  134.040419][ T4963] REISERFS (device loop4): Using r5 hash to sort names
[  134.060062][ T4963] REISERFS (device loop4): using 3.5.x disk format
[  134.086814][ T4963] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  134.267260][ T4994] loop2: detected capacity change from 0 to 512
[  134.949024][ T4994] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  134.965319][ T4994] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it
[  135.007295][ T4994] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.372: Corrupt directory, running e2fsck is recommended
[  135.085089][ T4994] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  135.093454][ T4994] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.372: corrupted in-inode xattr
[  135.108028][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  135.136105][ T4994] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.372: couldn't read orphan inode 15 (err -117)
[  135.168646][ T4994] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback.
[  135.659234][ T5010] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  135.670843][ T5010] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it
[  135.681001][ T5010] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.372: Corrupt directory, running e2fsck is recommended
[  137.008623][ T5011] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  137.020172][ T5011] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it
[  137.030346][ T5011] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.372: Corrupt directory, running e2fsck is recommended
[  138.089258][ T4135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  139.258056][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  139.582411][ T5039] loop2: detected capacity change from 0 to 512
[  139.690093][ T5039] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000200000,minixdf,,errors=continue. Quota mode: writeback.
[  139.707022][ T5052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.389'.
[  139.714926][ T5039] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff)
[  139.751174][ T5041] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  139.774428][   T26] audit: type=1326 audit(1723139607.983:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.3.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd64b3969f9 code=0x0
[  141.716900][ T3590] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  142.254867][ T3590] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  142.304275][ T3590] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  142.330467][ T3590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.397468][ T3590] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1
[  142.511012][ T5100] loop0: detected capacity change from 0 to 8192
[  142.611022][ T5076] udc-core: couldn't find an available UDC or it's busy
[  142.618147][ T5076] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  142.628369][ T3590] usb 3-1: USB disconnect, device number 9
[  142.714717][ T5100] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  142.734278][ T5100] REISERFS (device loop0): using ordered data mode
[  142.741415][ T5100] reiserfs: using flush barriers
[  142.756535][ T5100] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  142.775170][ T5100] REISERFS (device loop0): checking transaction log (loop0)
[  142.787869][ T5100] REISERFS (device loop0): Using tea hash to sort names
[  142.803061][ T5100] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  143.216921][ T5120] loop2: detected capacity change from 0 to 16
[  143.358536][ T5120] erofs: (device loop2): mounted with root inode @ nid 36.
[  143.440208][ T5120] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  143.583123][ T5120] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851]
[  143.598298][ T5120] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  143.616174][ T4135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  143.916403][ T5128] netlink: 'syz.1.412': attribute type 11 has an invalid length.
[  143.946980][ T5128] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.412'.
[  144.135519][ T4805] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  144.434838][ T4805] usb 5-1: Using ep0 maxpacket: 8
[  144.562895][ T4805] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  144.687657][ T4805] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  144.869548][ T4805] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  144.878666][ T1205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  144.944559][ T4805] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  145.011877][ T4805] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  145.063465][ T4805] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  145.086455][ T4805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.249519][ T5155] fuse: Bad value for 'fd'
[  145.374801][ T4805] usb 5-1: GET_CAPABILITIES returned 0
[  145.380338][ T4805] usbtmc 5-1:16.0: can't read capabilities
[  145.541253][ T5163] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  145.579865][ T4805] usb 5-1: USB disconnect, device number 4
[  145.610755][ T5165] devtmpfs: Bad value for 'size'
[  147.364555][    T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  147.461072][ T5172] loop0: detected capacity change from 0 to 40427
[  147.529406][ T5172] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  147.542110][ T5172] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  147.594205][ T5172] F2FS-fs (loop0): invalid crc value
[  147.604536][    T7] usb 3-1: Using ep0 maxpacket: 8
[  147.633873][ T5172] F2FS-fs (loop0): Found nat_bits in checkpoint
[  147.724790][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  147.744737][    T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  147.754211][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.784663][ T5172] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  147.791739][ T5172] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  147.814374][    T7] usb 3-1: config 0 descriptor??
[  147.935639][ T5190] loop4: detected capacity change from 0 to 40427
[  148.037369][ T5190] F2FS-fs (loop4): invalid crc value
[  148.096158][    T7] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  148.140619][ T5190] F2FS-fs (loop4): Found nat_bits in checkpoint
[  148.218841][ T3570] attempt to access beyond end of device
[  148.218841][ T3570] loop0: rw=2049, want=45104, limit=40427
[  148.277500][ T5206] mkiss: ax0: crc mode is auto.
[  148.335101][ T5190] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  148.489614][ T5206] mkiss: ax0: crc mode is auto.
[  148.544218][ T5182] loop2: detected capacity change from 0 to 4096
[  148.572324][ T3582] attempt to access beyond end of device
[  148.572324][ T3582] loop4: rw=2049, want=45112, limit=40427
[  148.613823][ T5182] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  148.633775][ T5182] ntfs3: loop2: RAW NTFS volume: Filesystem size 4096.00 Gb > volume size 0.00 Gb. Mount in read-only
[  148.681550][ T5182] ntfs3: loop2: failed to read volume at offset 0x200000
[  148.711344][ T5182] ntfs3: loop2: Failed to load $Volume.
[  148.715038][ T4503] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  149.346146][ T1205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  149.571612][    T7] usb 3-1: USB disconnect, device number 10
[  149.616970][    T7] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected
[  150.909258][ T4503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  151.010253][ T5261] xt_TCPMSS: Only works on TCP SYN packets
[  154.373835][ T5310] futex_wake_op: syz.4.477 tries to shift op by 32; fix this program
[  154.412951][ T5312] mkiss: ax0: crc mode is auto.
[  154.471232][ T5122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  154.601171][ T5316] loop2: detected capacity change from 0 to 256
[  154.721870][ T5313] mkiss: ax0: crc mode is auto.
[  155.176757][   T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  155.414580][   T23] usb 1-1: Using ep0 maxpacket: 8
[  155.483590][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.506586][ T5327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'.
[  155.588957][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.613590][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.667499][   T23] usb 1-1: New USB device found, idVendor=227d, idProduct=0709, bcdDevice= 0.00
[  155.708143][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.732302][   T23] usb 1-1: config 0 descriptor??
[  155.766385][ T5344] syz.2.490 (5344): /proc/5343/oom_adj is deprecated, please use /proc/5343/oom_score_adj instead.
[  156.048567][   T26] audit: type=1326 audit(1723139624.263:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.2.493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c7a4ca9f9 code=0x0
[  156.243055][   T23] hid-generic 0003:227D:0709.0003: hidraw0: USB HID v0.00 Device [HID 227d:0709] on usb-dummy_hcd.0-1/input0
[  156.245508][ T5338] loop4: detected capacity change from 0 to 32768
[  156.291200][ T5338] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.487 (5338)
[  156.386786][ T3891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  156.438933][    T7] usb 1-1: USB disconnect, device number 6
[  156.467043][ T5338] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  156.524648][ T5338] BTRFS info (device loop4): setting nodatacow, compression disabled
[  156.575246][ T5338] BTRFS info (device loop4): enabling auto defrag
[  156.618947][ T5338] BTRFS info (device loop4): max_inline at 0
[  156.666426][ T5338] BTRFS info (device loop4): using free space tree
[  156.686208][ T5338] BTRFS info (device loop4): has skinny extents
[  157.928279][ T5393] netlink: 'syz.3.502': attribute type 5 has an invalid length.
[  157.936200][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'.
[  158.513832][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'.
[  158.580413][ T5377] loop2: detected capacity change from 0 to 32768
[  158.635288][ T5412] loop0: detected capacity change from 0 to 4096
[  158.664242][ T5377] Dev loop2 Sun disklabel: Csum bad, label corrupted
[  158.673828][ T5377]  loop2: unable to read partition table
[  158.683675][ T5377] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  158.697906][ T5412] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  158.724955][ T3028] Dev loop2 Sun disklabel: Csum bad, label corrupted
[  158.734362][ T5412] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  158.737240][ T1074] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  158.764292][ T5412] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  158.777686][ T3028]  loop2: unable to read partition table
[  158.783961][ T5412] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  158.815995][ T5412] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  158.825027][ T5412] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  158.857351][ T5412] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  158.883885][ T5412] ntfs: volume version 3.1.
[  158.897673][ T5412] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  158.913777][ T5412] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  158.934554][ T5388] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  159.002833][ T5429] device team0 entered promiscuous mode
[  159.008609][ T5429] device team_slave_0 entered promiscuous mode
[  159.020067][ T5429] device team_slave_1 entered promiscuous mode
[  159.087917][ T5429] team0: Port device team_slave_0 removed
[  159.106214][ T5429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.124916][ T1074] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  159.134216][ T1074] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895
[  159.144541][ T1074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  159.215032][ T5428] device team0 left promiscuous mode
[  159.220949][ T5428] device team_slave_1 left promiscuous mode
[  159.234692][ T1074] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00
[  159.250526][ T1074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  159.261247][ T1074] usb 5-1: SerialNumber: syz
[  159.301241][ T1074] usb 5-1: config 0 descriptor??
[  159.384915][ T5408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  159.415558][ T1074] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  159.982918][ T1074] usb 5-1: USB disconnect, device number 5
[  160.228731][ T2660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  160.340004][ T5444] netlink: 'syz.1.524': attribute type 1 has an invalid length.
[  160.468118][ T5453] loop2: detected capacity change from 0 to 256
[  160.877497][ T5456] futex_wake_op: syz.0.527 tries to shift op by 32; fix this program
[  161.032208][ T5388] usb 4-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=28.ba
[  161.042203][ T5388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.050374][ T5388] usb 4-1: Product: syz
[  161.054612][ T5388] usb 4-1: Manufacturer: syz
[  161.059219][ T5388] usb 4-1: SerialNumber: syz
[  161.095493][ T5388] usb 4-1: config 0 descriptor??
[  161.504971][ T3715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  161.784003][ T5473] loop0: detected capacity change from 0 to 256
[  161.839110][ T5388] usb 4-1: USB disconnect, device number 4
[  161.875920][ T5473] exfat: Deprecated parameter 'namecase'
[  161.945139][ T5473] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  162.202387][ T5463] loop2: detected capacity change from 0 to 32768
[  162.365687][ T5467] loop4: detected capacity change from 0 to 32768
[  162.399085][ T5467] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.531 (5467)
[  162.399151][ T5463] XFS (loop2): Mounting V5 Filesystem
[  162.447364][ T5467] BTRFS error (device loop4): unsupported checksum algorithm: 8
[  162.799283][ T5493] ODEBUG: Out of memory. ODEBUG disabled
[  163.195014][ T5299] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  163.302596][ T5463] XFS (loop2): Ending clean mount
[  163.360438][ T5467] BTRFS error (device loop4): open_ctree failed
[  163.436076][ T5463] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 
[  163.447576][ T5299] usb 1-1: Using ep0 maxpacket: 32
[  163.464011][ T5463] XFS (loop2): Unmount and run xfs_repair
[  163.504631][ T5388] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  163.525298][ T5463] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  163.532823][ T5463] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  163.567171][ T5463] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  163.595399][ T5463] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  163.610405][ T5463] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  163.623469][ T5463] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  163.633100][ T5463] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  163.642891][ T5463] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  163.654142][ T5463] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  163.663117][ T5463] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74
[  163.683428][ T5463] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  163.698879][ T5463] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  163.735189][ T5299] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  163.903352][ T5299] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  164.204799][ T5299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  164.244840][ T5299] usb 1-1: config 1 has no interface number 0
[  164.251005][ T5299] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  164.320839][ T5299] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  164.384992][ T5299] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  164.394279][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.489044][ T4579] XFS (loop2): Unmounting Filesystem
[  164.497963][ T5299] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  164.595592][ T5388] usb 4-1: config 45 has too many interfaces: 194, using maximum allowed: 32
[  164.620493][ T5388] usb 4-1: config 45 has 1 interface, different from the descriptor's value: 194
[  164.644554][ T5388] usb 4-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.655605][ T5388] usb 4-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.674759][ T5388] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  164.683929][ T5388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.929395][ T5516] loop4: detected capacity change from 0 to 2048
[  165.008175][ T5516] Dev loop4: RDB in block 2 has bad checksum
[  165.059896][ T5299] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  165.068603][ T3028] Dev loop4: RDB in block 2 has bad checksum
[  165.227854][ T5388] uclogic 0003:5543:0042.0004: unknown main item tag 0x0
[  165.245615][ T5388] uclogic 0003:5543:0042.0004: unknown main item tag 0x0
[  165.252896][ T5388] uclogic 0003:5543:0042.0004: unknown main item tag 0x0
[  165.290096][ T5388] uclogic 0003:5543:0042.0004: unknown main item tag 0x0
[  165.307544][ T5388] uclogic 0003:5543:0042.0004: unknown main item tag 0x0
[  165.358585][ T5388] uclogic 0003:5543:0042.0004: No inputs registered, leaving
[  165.390671][ T5388] uclogic 0003:5543:0042.0004: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.3-1/input0
[  165.460881][ T3679] udevd[3679]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.465669][ T5388] usb 4-1: USB disconnect, device number 5
[  165.549357][ T5529] loop4: detected capacity change from 0 to 2048
[  165.679262][ T5529] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  165.824581][ T5299] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  165.949648][ T5536] loop2: detected capacity change from 0 to 256
[  165.985445][ T3891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  166.038627][ T5536] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  166.072878][ T4605] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  166.201456][ T5299] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  166.219735][ T5299] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 48, changing to 9
[  166.233222][ T5299] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 8302, setting to 1024
[  166.254964][ T5299] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  166.274525][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.282225][ T5540] netlink: 124 bytes leftover after parsing attributes in process `syz.2.551'.
[  166.338177][ T5299] usb 2-1: invalid MIDI out EP 0
[  166.360613][ T5529] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  166.429800][ T5542] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 12287 with max blocks 1 with error 28
[  166.430548][ T5299] snd-usb-audio: probe of 2-1:27.0 failed with error -22
[  166.453752][ T5387] usb 1-1: USB disconnect, device number 7
[  166.463847][ T5387] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  166.501780][ T3718] udevd[3718]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  166.598675][ T5529] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 0 with max blocks 2 with error 28
[  166.604615][ T5542] EXT4-fs (loop4): This should not happen!! Data will be lost
[  166.604615][ T5542] 
[  166.691399][ T5388] usb 2-1: USB disconnect, device number 4
[  166.693806][ T5542] EXT4-fs (loop4): Total free blocks count 0
[  166.726919][ T5529] EXT4-fs (loop4): This should not happen!! Data will be lost
[  166.726919][ T5529] 
[  166.764666][ T5529] EXT4-fs (loop4): Total free blocks count 0
[  166.771596][ T5529] EXT4-fs (loop4): Free/Dirty block details
[  166.823528][ T5542] EXT4-fs (loop4): Free/Dirty block details
[  166.864826][ T5542] EXT4-fs (loop4): free_blocks=2415919120
[  166.870820][ T5542] EXT4-fs (loop4): dirty_blocks=48
[  166.969872][ T5567] loop0: detected capacity change from 0 to 64
[  167.007282][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  167.038231][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  167.069234][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  167.125935][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  167.151249][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  167.200811][ T5570] sd 0:0:1:0: device reset
[  167.224573][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  167.242703][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  167.264926][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  168.156356][ T5580] netlink: 'syz.3.566': attribute type 1 has an invalid length.
[  168.256516][   T26] audit: type=1326 audit(1723139636.473:10): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.2.571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c7a4ca9f9 code=0x0
[  168.699690][ T5615] netlink: 'syz.4.573': attribute type 13 has an invalid length.
[  169.698320][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'.
[  170.454843][ T3617] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  170.714609][ T3617] usb 2-1: Using ep0 maxpacket: 32
[  170.749253][ T5662] loop4: detected capacity change from 0 to 4096
[  170.832759][ T5662] ntfs: (device loop4): parse_ntfs_boot_sector(): Mft record size (131072) exceeds the PAGE_SIZE on your system (4096).  This is not supported.  Sorry.
[  170.848870][ T3617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  170.885200][ T5662] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem.
[  171.046415][ T3617] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2
[  171.124012][ T3617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.161889][ T3617] usb 2-1: Product: syz
[  171.249844][ T3617] usb 2-1: Manufacturer: syz
[  171.314736][ T3617] usb 2-1: SerialNumber: syz
[  171.323827][ T3617] usb 2-1: config 0 descriptor??
[  171.343559][ T5299] kernel read not supported for file /media0 (pid: 5299 comm: kworker/0:8)
[  171.686655][ T3617] usb 2-1: USB disconnect, device number 5
[  171.934299][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  172.116953][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'.
[  172.198534][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'.
[  172.364579][   T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  172.877575][ T5723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.602'.
[  172.955763][   T21] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=28.ba
[  172.991353][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.025144][ T3715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  173.027084][   T21] usb 5-1: Product: syz
[  173.063832][   T21] usb 5-1: Manufacturer: syz
[  173.088935][   T21] usb 5-1: SerialNumber: syz
[  173.124488][   T21] usb 5-1: config 0 descriptor??
[  173.268999][ T5725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.277131][ T5725] IPv6: NLM_F_CREATE should be set when creating new route
[  173.375080][ T5733] loop2: detected capacity change from 0 to 256
[  173.428828][ T1074] usb 5-1: USB disconnect, device number 6
[  173.818753][ T5744] SET target dimension over the limit!
[  174.395255][   T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  174.687247][ T5753] netlink: 'syz.0.618': attribute type 21 has an invalid length.
[  174.787493][   T21] usb 3-1: Using ep0 maxpacket: 8
[  174.921481][   T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.034278][   T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  175.070429][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  175.089344][   T21] usb 3-1: SerialNumber: syz
[  175.092450][ T5767] netlink: 'syz.3.623': attribute type 11 has an invalid length.
[  175.124315][   T21] usb 3-1: config 0 descriptor??
[  175.394737][   T21] usb 3-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  175.406235][   T21] usb 3-1: No valid video chain found.
[  175.509367][ T5781] Bluetooth: hci3: too big key_count value 28022
[  175.537514][ T5387] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  175.606707][ T5749] netlink: 'syz.2.614': attribute type 8 has an invalid length.
[  175.719700][ T5787] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  175.744779][ T1074] Bluetooth: hci2: command 0x0406 tx timeout
[  175.755470][ T1074] Bluetooth: hci3: command 0x0406 tx timeout
[  175.834749][ T4605] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  175.848676][ T5788] udc-core: couldn't find an available UDC or it's busy
[  175.863083][ T5788] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  175.954788][ T5387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.969084][ T5387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.016734][ T5387] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  176.044607][ T5387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.074580][ T4605] usb 4-1: Using ep0 maxpacket: 16
[  176.084809][ T5387] usb 5-1: config 0 descriptor??
[  176.194859][ T4605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  176.305834][   T26] audit: type=1326 audit(1723139644.523:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3453a19f9 code=0x7ffc0000
[  176.363163][   T26] audit: type=1326 audit(1723139644.543:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3453a19f9 code=0x7ffc0000
[  176.386183][ T4605] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  176.404300][ T4605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.430599][ T4605] usb 4-1: Product: syz
[  176.435780][ T4605] usb 4-1: Manufacturer: syz
[  176.440806][ T4605] usb 4-1: SerialNumber: syz
[  176.446936][   T26] audit: type=1326 audit(1723139644.543:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3453a19f9 code=0x7ffc0000
[  176.478879][ T4605] usb 4-1: config 0 descriptor??
[  176.493069][   T26] audit: type=1326 audit(1723139644.543:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3453a19f9 code=0x7ffc0000
[  176.518551][   T26] audit: type=1326 audit(1723139644.543:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3453a19f9 code=0x7ffc0000
[  176.544081][ T4605] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  176.573509][ T4605] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  176.610702][   T26] audit: type=1326 audit(1723139644.553:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3453a19f9 code=0x7ffc0000
[  176.633835][   T26] audit: type=1326 audit(1723139644.553:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3453a19f9 code=0x7ffc0000
[  176.660462][   T26] audit: type=1326 audit(1723139644.553:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3453a19f9 code=0x7ffc0000
[  176.683597][   T26] audit: type=1326 audit(1723139644.553:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3453a19f9 code=0x7ffc0000
[  176.724739][   T26] audit: type=1326 audit(1723139644.553:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3453a19f9 code=0x7ffc0000
[  176.804828][ T5387] usbhid 5-1:0.0: can't add hid device: -71
[  176.813886][ T5387] usbhid: probe of 5-1:0.0 failed with error -71
[  176.840987][ T5808] device team0 entered promiscuous mode
[  176.848981][ T5808] device team_slave_1 entered promiscuous mode
[  176.861029][ T5387] usb 5-1: USB disconnect, device number 7
[  176.897391][ T5808] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  176.914026][ T5812] input: syz1 as /devices/virtual/input/input8
[  176.937773][ T5808] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  176.980477][ T5812] loop0: detected capacity change from 0 to 512
[  176.992933][ T5388] usb 3-1: USB disconnect, device number 11
[  177.065507][ T5815] loop2: detected capacity change from 0 to 256
[  177.071068][ T5812] EXT4-fs (loop0): Unrecognized mount option "permit_directio" or missing value
[  177.196860][ T4605] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  177.291052][ T5820] loop0: detected capacity change from 0 to 16
[  177.395253][ T5820] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  178.155225][ T4503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  178.180945][ T4503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  178.263683][ T5830] loop4: detected capacity change from 0 to 4096
[  178.388081][ T5830] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  178.559980][ T5833] netlink: 'syz.1.647': attribute type 1 has an invalid length.
[  178.567743][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'.
[  179.232101][ T5299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  179.269452][ T5830] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  179.335042][ T4605] em28xx 4-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1)
[  179.354734][ T4605] em28xx 4-1:0.0: failed to read eeprom (err=-5)
[  179.362320][ T4605] em28xx 4-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  179.610277][ T4605] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  179.628896][ T4605] em28xx 4-1:0.0: dvb set to bulk mode.
[  179.670082][ T4605] usb 4-1: USB disconnect, device number 6
[  179.705452][ T4605] em28xx 4-1:0.0: Disconnecting em28xx
[  179.765724][ T1074] em28xx 4-1:0.0: Binding DVB extension
[  179.857648][ T1074] em28xx 4-1:0.0: Registering input extension
[  179.864817][ T4605] em28xx 4-1:0.0: Closing input extension
[  179.944822][ T5299] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  179.976000][ T4605] em28xx 4-1:0.0: Freeing device
[  180.065605][ T3890] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  180.184873][ T5299] usb 2-1: Using ep0 maxpacket: 32
[  180.306295][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  180.485070][ T5299] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  180.520606][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.552825][ T5299] usb 2-1: Product: syz
[  180.579731][ T5299] usb 2-1: Manufacturer: syz
[  180.584393][ T5299] usb 2-1: SerialNumber: syz
[  180.610505][ T5299] usb 2-1: config 0 descriptor??
[  180.702813][ T5299] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  180.906645][ T5299] usb 2-1: USB disconnect, device number 6
[  180.924784][ T3891] usb 2-1: Failed to submit usb control message: -71
[  180.932302][ T3891] usb 2-1: unable to send the bmi data to the device: -71
[  180.950203][ T3891] usb 2-1: unable to get target info from device
[  180.972896][  T144] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22.
[  180.973371][ T3891] usb 2-1: could not get target info (-71)
[  181.000757][ T3582] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  181.017390][ T3891] usb 2-1: could not probe fw (-71)
[  181.796938][ T5919] device netdevsim0 entered promiscuous mode
[  181.811835][ T5891] loop0: detected capacity change from 0 to 32768
[  181.814640][ T3617] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  181.828633][ T5919] device macvtap1 entered promiscuous mode
[  181.970537][ T5299] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  181.983428][ T5919] device netdevsim0 left promiscuous mode
[  182.234747][ T5299] usb 3-1: Using ep0 maxpacket: 16
[  182.355450][ T5299] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  182.388505][ T5299] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  182.439149][ T5299] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  182.848869][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.681'.
[  182.862446][ T5299] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  182.887104][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.681'.
[  182.894969][ T3617] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  182.907550][ T3617] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  182.918514][ T3617] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[  182.928755][ T3617] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  182.938156][ T3617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.949959][ T5891] XFS (loop0): Mounting V5 Filesystem
[  182.991864][ T5909] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  183.005896][ T3617] hub 4-1:1.0: bad descriptor, ignoring hub
[  183.013909][ T3617] hub: probe of 4-1:1.0 failed with error -5
[  183.022841][ T3617] cdc_wdm 4-1:1.0: skipping garbage
[  183.028581][ T3617] cdc_wdm 4-1:1.0: skipping garbage
[  183.035385][ T5299] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  183.051368][ T5299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.061497][ T3617] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  183.067920][ T3617] cdc_wdm 4-1:1.0: Unknown control protocol
[  183.074745][ T5299] usb 3-1: Product: syz
[  183.082275][ T5299] usb 3-1: Manufacturer: syz
[  183.105863][ T5299] usb 3-1: SerialNumber: syz
[  183.139934][ T5891] XFS (loop0): Ending clean mount
[  183.315045][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  183.420369][ T3570] XFS (loop0): Unmounting Filesystem
[  183.672746][ T5299] usb 3-1: USB disconnect, device number 12
[  183.735734][ T3712] udevd[3712]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  183.909243][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.923056][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  186.854213][ T5965] loop0: detected capacity change from 0 to 8192
[  186.971901][ T5965] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  186.981467][ T5965] REISERFS (device loop0): using ordered data mode
[  186.994846][ T5965] reiserfs: using flush barriers
[  187.010105][ T5972] loop4: detected capacity change from 0 to 512
[  187.022696][ T5965] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  187.040779][ T5965] REISERFS (device loop0): checking transaction log (loop0)
[  187.052074][ T5965] REISERFS (device loop0): Using r5 hash to sort names
[  187.057758][ T3700] usb 4-1: USB disconnect, device number 7
[  187.070357][ T5965] REISERFS (device loop0): using 3.5.x disk format
[  187.094237][ T5965] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  187.144858][ T5972] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  187.156662][ T5972] EXT4-fs (loop4): orphan cleanup on readonly fs
[  187.245871][ T5972] __quota_error: 81 callbacks suppressed
[  187.245895][ T5972] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0).
[  187.315122][ T5972] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  187.390304][ T5972] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  187.404854][ T5983] loop2: detected capacity change from 0 to 256
[  187.605182][ T5972] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.695: bg 0: block 40: padding at end of block bitmap is not set
[  187.636399][ T5984] netlink: 'syz.1.699': attribute type 8 has an invalid length.
[  187.947387][ T5972] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  188.113650][ T5978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.696'.
[  188.139503][ T5972] EXT4-fs (loop4): 1 truncate cleaned up
[  188.164922][ T5972] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  188.390854][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  188.636677][ T5986] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  188.668279][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.701'.
[  189.665927][ T4503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  191.050337][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'.
[  191.134604][ T4605] Bluetooth: hci4: command 0x0406 tx timeout
[  191.266985][ T6028] loop2: detected capacity change from 0 to 128
[  191.574963][ T6031] loop4: detected capacity change from 0 to 512
[  191.697571][ T6039] loop2: detected capacity change from 0 to 128
[  191.722251][ T6031] EXT4-fs (loop4): orphan cleanup on readonly fs
[  191.838189][ T6031] EXT4-fs (loop4): 1 orphan inode deleted
[  191.896939][ T6031] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  191.940561][ T6046] loop2: detected capacity change from 0 to 2048
[  192.227612][ T6052] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.372466][ T6057] loop0: detected capacity change from 0 to 64
[  193.542424][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  193.769793][ T6072] attempt to access beyond end of device
[  193.769793][ T6072] loop0: rw=34817, want=706, limit=64
[  194.184972][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  194.221746][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  194.270551][ T3616] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  195.194797][ T3616] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  195.205706][    T9] attempt to access beyond end of device
[  195.205706][    T9] loop0: rw=1, want=66, limit=64
[  195.214611][ T3616] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  195.230509][    T9] Buffer I/O error on dev loop0, logical block 65, lost async page write
[  195.234881][ T3616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.261028][    T9] attempt to access beyond end of device
[  195.261028][    T9] loop0: rw=1, want=67, limit=64
[  195.279441][    T7] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  195.292549][    T9] Buffer I/O error on dev loop0, logical block 66, lost async page write
[  195.307567][    T9] attempt to access beyond end of device
[  195.307567][    T9] loop0: rw=1, want=68, limit=64
[  195.316818][ T3616] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1
[  195.325298][    T9] Buffer I/O error on dev loop0, logical block 67, lost async page write
[  195.343183][    T9] attempt to access beyond end of device
[  195.343183][    T9] loop0: rw=1, want=69, limit=64
[  195.355470][    T9] Buffer I/O error on dev loop0, logical block 68, lost async page write
[  195.363970][    T9] attempt to access beyond end of device
[  195.363970][    T9] loop0: rw=1, want=73, limit=64
[  195.385382][    T9] Buffer I/O error on dev loop0, logical block 72, lost async page write
[  195.394043][    T9] attempt to access beyond end of device
[  195.394043][    T9] loop0: rw=1, want=74, limit=64
[  195.413373][    T9] Buffer I/O error on dev loop0, logical block 73, lost async page write
[  195.422960][    T9] attempt to access beyond end of device
[  195.422960][    T9] loop0: rw=1, want=77, limit=64
[  195.425459][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  195.441521][    T9] Buffer I/O error on dev loop0, logical block 76, lost async page write
[  195.454238][    T9] attempt to access beyond end of device
[  195.454238][    T9] loop0: rw=1, want=78, limit=64
[  195.465231][    T9] Buffer I/O error on dev loop0, logical block 77, lost async page write
[  195.475637][    T9] attempt to access beyond end of device
[  195.475637][    T9] loop0: rw=1, want=167, limit=64
[  195.486451][    T7] usb 3-1: device descriptor read/64, error -71
[  195.491293][ T6091] loop4: detected capacity change from 0 to 32768
[  195.526886][ T6078] udc-core: couldn't find an available UDC or it's busy
[  195.533949][ T6078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  195.545574][ T3616] usb 4-1: USB disconnect, device number 8
[  195.601262][ T6105] netlink: 104 bytes leftover after parsing attributes in process `syz.0.742'.
[  195.681036][ T6091] XFS (loop4): Mounting V5 Filesystem
[  195.732497][ T6091] XFS (loop4): Ending clean mount
[  195.755120][    T7] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  195.873867][ T3582] XFS (loop4): Unmounting Filesystem
[  195.947550][    T7] usb 3-1: device descriptor read/64, error -71
[  196.816032][    T7] usb usb3-port1: attempt power cycle
[  196.914370][ T6123] loop0: detected capacity change from 0 to 512
[  197.004888][ T6123] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  197.023310][ T6123] EXT4-fs (loop0): orphan cleanup on readonly fs
[  197.062743][ T6123] Quota error (device loop0): v2_read_file_info: Free block number too big (0 >= 0).
[  197.063023][ T6123] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  197.063058][ T6123] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  197.067190][ T6123] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.746: bg 0: block 40: padding at end of block bitmap is not set
[  197.068602][ T6123] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  197.075661][ T6123] EXT4-fs (loop0): 1 truncate cleaned up
[  197.132071][ T6123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  197.177811][   T26] audit: type=1326 audit(1723139665.393:102): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=6124 comm="syz.1.749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3453a19f9 code=0x0
[  197.274918][    T7] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  197.374879][    T7] usb 3-1: device descriptor read/8, error -71
[  197.654876][    T7] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  197.784634][    T7] usb 3-1: device descriptor read/8, error -71
[  197.924702][    T7] usb usb3-port1: unable to enumerate USB device
[  198.083403][ T6154] syz.1.757[6154] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.083499][ T6154] syz.1.757[6154] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  198.134883][ T6154] tipc: Started in network mode
[  198.207800][ T6154] tipc: Node identity , cluster identity 4711
[  198.218717][ T6154] tipc: Failed to set node id, please configure manually
[  198.234631][ T6154] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  198.763668][ T6171] loop4: detected capacity change from 0 to 4096
[  198.777696][ T6173] kvm [6172]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000
[  198.815887][ T6173] kvm [6172]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x250000f7ff
[  198.841126][ T6173] kvm [6172]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x250000ffff
[  198.913102][ T6173] kvm [6172]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x250000ffff
[  198.980294][ T6171] ntfs3: loop4: failed to convert "0000" to iso8859-15
[  198.987776][ T6171] ntfs3: loop4: failed to convert name for inode 1e.
[  198.994614][ T3700] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  199.235815][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'.
[  199.256780][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'.
[  199.326818][ T3698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  199.861922][ T1074] Bluetooth: hci0: command 0x0405 tx timeout
[  199.868502][    T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  199.914745][ T3700] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  199.965824][ T3700] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  200.006346][ T3700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.089648][ T3700] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1
[  200.249637][ T6193] loop4: detected capacity change from 0 to 512
[  200.299842][ T6179] udc-core: couldn't find an available UDC or it's busy
[  200.299864][ T6179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  200.303030][ T3700] usb 1-1: USB disconnect, device number 8
[  200.347930][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'.
[  200.372198][ T6193] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  200.393454][ T6193] EXT4-fs (loop4): Encoding requested by superblock is unknown
[  200.750942][ T6210] loop4: detected capacity change from 0 to 1024
[  200.887011][ T6212] loop0: detected capacity change from 0 to 16
[  201.192800][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  201.520806][ T6212] erofs: (device loop0): mounted with root inode @ nid 36.
[  201.548699][ T6211] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  201.560077][ T6211] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851]
[  201.573185][ T6211] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  201.580846][ T6210] hfsplus: xattr searching failed
[  201.975030][ T6205] Sensor A: =================  START STATUS  =================
[  201.989705][ T6205] Sensor A: Test Pattern: 75% Colorbar
[  202.017587][ T6205] Sensor A: Show Information: All
[  202.033116][ T6207] Sensor A: =================  START STATUS  =================
[  202.051299][ T6205] Sensor A: Vertical Flip: false
[  202.077977][ T6205] Sensor A: Horizontal Flip: false
[  202.098206][ T6205] Sensor A: Brightness: 128
[  202.098284][ T6205] Sensor A: Contrast: 128
[  202.098310][ T6205] Sensor A: Hue: 0
[  202.098334][ T6205] Sensor A: Saturation: 128
[  202.098386][ T6207] Sensor A: Test Pattern: 75% Colorbar
[  202.098411][ T6207] Sensor A: Show Information: All
[  202.098435][ T6207] Sensor A: Vertical Flip: false
[  202.098459][ T6207] Sensor A: Horizontal Flip: false
[  202.098491][ T6207] Sensor A: Brightness: 128
[  202.098515][ T6207] Sensor A: Contrast: 128
[  202.098539][ T6207] Sensor A: Hue: 0
[  202.098562][ T6207] Sensor A: Saturation: 128
[  202.098586][ T6207] Sensor A: ==================  END STATUS  ==================
[  202.110791][ T6205] Sensor A: ==================  END STATUS  ==================
[  202.214642][ T5388] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  202.497893][ T6240] netlink: 48 bytes leftover after parsing attributes in process `syz.2.788'.
[  202.594757][ T5388] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[  202.608358][ T5388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.716271][ T5388] usb 2-1: config 0 descriptor??
[  202.766780][ T5388] gspca_main: mars-2.14.0 probing 093a:050f
[  202.829216][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'.
[  203.053012][ T5388] usb 2-1: USB disconnect, device number 7
[  203.196226][ T6256] netlink: 104 bytes leftover after parsing attributes in process `syz.4.796'.
[  203.206760][ T6252] loop2: detected capacity change from 0 to 4096
[  203.233770][ T4503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.335965][ T4503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.388924][ T6252] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  203.460617][ T4503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.647169][ T4503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.868185][   T26] audit: type=1800 audit(1723139672.083:103): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.794" name="file0" dev="loop2" ino=13 res=0 errno=0
[  204.486053][ T3698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  204.616558][ T6267] chnl_net:caif_netlink_parms(): no params data found
[  204.786138][ T6292] loop2: detected capacity change from 0 to 4096
[  204.876562][ T6292] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  204.904329][ T6292] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  204.921267][ T6292] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  204.933895][ T6292] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  204.979269][ T6292] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  204.994278][ T6292] ntfs: volume version 3.1.
[  205.012337][ T6292] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  205.038235][ T6292] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  205.085092][ T6292] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  205.111633][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.121197][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.131667][ T6292] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  205.161345][ T6267] device bridge_slave_0 entered promiscuous mode
[  205.220051][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.228431][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.260023][ T6267] device bridge_slave_1 entered promiscuous mode
[  205.411540][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.003924][    T7] Bluetooth: hci5: command 0x0409 tx timeout
[  206.045890][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.192813][ T6336] kAFS: unable to lookup cell ',�8/�e�'w��z`v�^+��5�-;��boSl%srً�Cp�4唙���|��OUӑ��q�U���K�qn8.�7�P_ڀ��b1	��$dy®/݂�xD&������ڵ$�9�O>QR��$�=TI�\ �!�ܐg�������C�j�s2�>��+,\��v����ۤ�/��)@�D�cF���*��y��iO`n�k�j��ƾ�ӂ�FD���Q���^r�*��޳�+�A�wP��Y�j#4u����z�~���3���9,N'
[  206.304902][ T3700] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  206.348249][ T6267] team0: Port device team_slave_0 added
[  206.408469][ T6267] team0: Port device team_slave_1 added
[  206.544613][ T3700] usb 2-1: Using ep0 maxpacket: 8
[  206.649979][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.659783][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.664781][ T3700] usb 2-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56
[  206.688801][ T6351] loop4: detected capacity change from 0 to 128
[  206.707133][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.783779][ T6351] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  206.815912][ T3700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.832972][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.837750][ T3700] usb 2-1: config 0 descriptor??
[  206.862239][ T6351] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038 (0x7fffffff)
[  206.874882][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.902101][ T3700] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  206.944899][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  207.119547][ T3700] usb 2-1: Detected FT8U232AM
[  207.137017][ T3700] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  207.191094][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.326313][ T6339] loop2: detected capacity change from 0 to 32768
[  207.446428][ T6326] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20003
[  207.476117][    T7] usb 2-1: USB disconnect, device number 8
[  207.544572][ T5299] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  207.573384][    T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  207.628637][    T7] ftdi_sio 2-1:0.0: device disconnected
[  207.666681][ T6339] XFS (loop2): Mounting V5 Filesystem
[  207.677182][ T6267] device hsr_slave_0 entered promiscuous mode
[  207.708362][ T6267] device hsr_slave_1 entered promiscuous mode
[  207.739664][ T6267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.768028][ T6267] Cannot create hsr debugfs directory
[  207.812459][ T6339] XFS (loop2): Ending clean mount
[  207.834899][ T5299] usb 5-1: Using ep0 maxpacket: 8
[  207.965080][ T5299] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9
[  207.994757][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.029764][ T5299] usb 5-1: config 0 descriptor??
[  208.064890][    T7] Bluetooth: hci5: command 0x041b tx timeout
[  208.088470][ T5299] usblcd 5-1:0.0: USBLCD model not supported.
[  208.198814][ T4503] device hsr_slave_0 left promiscuous mode
[  208.214031][ T4503] device hsr_slave_1 left promiscuous mode
[  208.222767][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.245042][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.251255][ T4579] XFS (loop2): Unmounting Filesystem
[  208.271109][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.309270][   T21] usb 5-1: USB disconnect, device number 8
[  208.340702][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.395062][ T4503] device bridge_slave_1 left promiscuous mode
[  208.411644][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.463760][ T4503] device bridge_slave_0 left promiscuous mode
[  208.493973][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.548162][ T4503] device veth1_macvtap left promiscuous mode
[  208.601163][ T4503] device veth0_macvtap left promiscuous mode
[  208.634556][ T4503] device veth1_vlan left promiscuous mode
[  208.645132][ T4503] device veth0_vlan left promiscuous mode
[  208.948845][ T4503] bond1 (unregistering): Released all slaves
[  209.643593][ T4503] team0 (unregistering): Port device team_slave_1 removed
[  209.674051][ T4503] team0 (unregistering): Port device team_slave_0 removed
[  209.700803][ T4503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.763326][ T4503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.827760][ T6402] loop0: detected capacity change from 0 to 512
[  209.856114][ T4605] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  209.869554][ T6402] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value
[  209.922478][ T4503] bond0 (unregistering): Released all slaves
[  210.141261][ T6411] loop0: detected capacity change from 0 to 256
[  210.148402][ T4605] usb 5-1: Using ep0 maxpacket: 8
[  210.153934][    T7] Bluetooth: hci5: command 0x040f tx timeout
[  210.182376][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  210.277168][ T4605] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  210.307461][ T4605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.330399][ T4605] usb 5-1: config 0 descriptor??
[  210.527323][ T6423] futex_wake_op: syz.2.841 tries to shift op by 35; fix this program
[  211.124712][ T3616] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  211.451393][ T4605] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  211.490054][ T3616] usb 3-1: Using ep0 maxpacket: 8
[  211.617285][ T3616] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.655407][ T3616] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  211.674874][ T3616] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  211.699458][ T3616] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  211.724502][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.817791][ T3616] hub 3-1:1.0: bad descriptor, ignoring hub
[  211.824582][ T3616] hub: probe of 3-1:1.0 failed with error -5
[  211.845040][ T3616] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  211.902232][ T6267] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  211.926502][ T6267] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  211.955424][ T6267] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  211.965613][ T6267] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  212.058060][ T6423] udc-core: couldn't find an available UDC or it's busy
[  212.076351][ T3698] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  212.090081][ T6423] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  212.198087][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.235302][ T5299] Bluetooth: hci5: command 0x0419 tx timeout
[  212.236841][ T5388] usb 3-1: USB disconnect, device number 17
[  212.272078][ T6267] 8021q: adding VLAN 0 to HW filter on device team0
[  212.284878][ T4605] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  212.290742][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  212.310669][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  212.333266][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  212.336593][ T4605] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  212.369155][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  212.394126][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.401394][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.422902][ T4605] asix: probe of 5-1:0.0 failed with error -71
[  212.443044][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  212.470190][ T4605] usb 5-1: USB disconnect, device number 9
[  212.475631][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  212.527575][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.534766][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.595726][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  212.615077][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  212.634782][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  212.696724][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  212.726475][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  212.741931][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  212.792367][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  212.815453][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  212.885948][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  212.943112][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  212.985528][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  213.013618][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  213.032869][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  213.048295][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  213.103605][ T6475] loop2: detected capacity change from 0 to 4096
[  213.229312][ T6475] __ntfs_error: 6 callbacks suppressed
[  213.229331][ T6475] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (131072) exceeds the PAGE_SIZE on your system (4096).  This is not supported.  Sorry.
[  213.316884][ T6475] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem.
[  213.553960][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.588948][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  213.604541][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  213.687456][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  213.706786][ T6502] loop0: detected capacity change from 0 to 4096
[  213.717641][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  213.811469][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  213.823275][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  213.855619][ T6267] device veth0_vlan entered promiscuous mode
[  213.892002][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  213.896200][ T6502] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  213.900801][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  213.923509][ T6267] device veth1_vlan entered promiscuous mode
[  214.055845][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  214.072705][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  214.084295][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  214.097489][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  214.170756][ T6267] device veth0_macvtap entered promiscuous mode
[  214.542625][ T6267] device veth1_macvtap entered promiscuous mode
[  214.761833][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.801305][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.825724][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.891324][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.942095][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.975216][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.986520][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.998005][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.009378][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.020292][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.179132][   T26] audit: type=1800 audit(1723139683.393:105): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.857" name="file0" dev="loop0" ino=13 res=0 errno=0
[  215.215594][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.284025][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.352044][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.393837][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.462366][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.514576][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.557161][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.567152][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.584455][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.594330][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.683460][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.758511][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.784718][ T6540] loop2: detected capacity change from 0 to 512
[  215.821588][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  215.846002][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  215.861138][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  215.872421][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  215.926029][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  215.948115][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  215.977955][ T6540] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  216.001378][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  216.022971][ T6540] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038 (0x7fffffff)
[  216.160714][ T6267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.174971][ T6267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.183805][ T6267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.195155][ T6267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.843014][ T6554] input: syz1 as /devices/virtual/input/input12
[  216.928126][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.989876][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.030599][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  217.057962][ T3698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.081666][ T3698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.166693][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  218.408391][ T6575] loop4: detected capacity change from 0 to 256
[  218.476002][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.657153][ T6589] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  219.698180][ T6594] loop0: detected capacity change from 0 to 17
[  219.933134][ T6589] FAT-fs (loop4): Filesystem has been set read-only
[  220.276815][ T6595] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  220.330767][ T6595] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  221.830044][ T3715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  221.874850][ T6600] loop0: detected capacity change from 0 to 1024
[  222.347473][ T6632] input: syz1 as /devices/virtual/input/input13
[  222.491914][ T6638] loop2: detected capacity change from 0 to 64
[  222.623165][ T6638] hfs: part requires an argument
[  222.668074][ T6638] hfs: unable to parse mount options
[  222.725534][ T6640] loop0: detected capacity change from 0 to 4096
[  223.320712][ T6650] loop4: detected capacity change from 0 to 256
[  223.490253][ T6650] FAT-fs (loop4): Directory bread(block 64) failed
[  223.521026][ T6657] loop0: detected capacity change from 0 to 512
[  223.534647][ T6650] FAT-fs (loop4): Directory bread(block 65) failed
[  223.541887][ T6650] FAT-fs (loop4): Directory bread(block 66) failed
[  223.578959][ T6650] FAT-fs (loop4): Directory bread(block 67) failed
[  223.591399][ T6650] FAT-fs (loop4): Directory bread(block 68) failed
[  223.600063][ T6650] FAT-fs (loop4): Directory bread(block 69) failed
[  223.609083][ T6650] FAT-fs (loop4): Directory bread(block 70) failed
[  223.616006][ T6650] FAT-fs (loop4): Directory bread(block 71) failed
[  223.622733][ T6650] FAT-fs (loop4): Directory bread(block 72) failed
[  223.630211][ T6650] FAT-fs (loop4): Directory bread(block 73) failed
[  223.753104][ T6657] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.888: casefold flag without casefold feature
[  223.988134][ T6657] EXT4-fs error (device loop0): __ext4_iget:4861: inode #12: block 2: comm syz.0.888: invalid block
[  224.389876][ T6657] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.888: error while reading EA inode 12 err=-117
[  224.549021][ T4135] attempt to access beyond end of device
[  224.549021][ T4135] loop4: rw=1, want=1228, limit=256
[  224.575046][ T6657] EXT4-fs (loop0): 1 orphan inode deleted
[  224.607564][ T6657] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  224.866500][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  224.977678][ T6694] loop4: detected capacity change from 0 to 4096
[  225.063863][ T6694] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  225.149298][ T6701] option changes via remount are deprecated (pid=6700 comm=syz.0.904)
[  225.154967][ T6694] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  225.392398][ T6710] loop0: detected capacity change from 0 to 256
[  225.410181][ T6709] loop2: detected capacity change from 0 to 2048
[  225.556486][ T6714] devtmpfs: Bad value for 'size'
[  225.783787][ T6709] NILFS (loop2): invalid segment: Sequence number mismatch
[  226.022633][ T6709] NILFS (loop2): trying rollback from an earlier position
[  226.178596][ T6709] NILFS (loop2): recovery complete
[  226.236233][ T6715] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.968296][ T6742] mmap: syz.1.915 (6742): VmData 164384768 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  227.080916][ T6743] loop2: detected capacity change from 0 to 64
[  227.442647][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  227.657468][ T6741] loop2: detected capacity change from 0 to 16
[  227.792975][ T6750] loop0: detected capacity change from 0 to 1024
[  227.882840][ T6750] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  227.897990][ T6758] loop4: detected capacity change from 0 to 2048
[  227.909402][ T6750] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data
[  227.936973][ T6758] NILFS (loop4): invalid segment: Sequence number mismatch
[  227.993023][ T6758] NILFS (loop4): trying rollback from an earlier position
[  228.007012][ T6760] loop2: detected capacity change from 0 to 256
[  228.008565][ T6758] NILFS (loop4): recovery complete
[  228.035831][ T6761] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.065596][ T5388] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  228.167205][ T6760] FAT-fs (loop2): Directory bread(block 64) failed
[  228.185069][ T6760] FAT-fs (loop2): Directory bread(block 65) failed
[  228.202122][ T6760] FAT-fs (loop2): Directory bread(block 66) failed
[  228.219293][ T6760] FAT-fs (loop2): Directory bread(block 67) failed
[  228.240362][ T6760] FAT-fs (loop2): Directory bread(block 68) failed
[  228.254694][ T6760] FAT-fs (loop2): Directory bread(block 69) failed
[  228.271598][ T6760] FAT-fs (loop2): Directory bread(block 70) failed
[  228.284595][ T6760] FAT-fs (loop2): Directory bread(block 71) failed
[  228.314513][   T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  228.335568][ T6760] FAT-fs (loop2): Directory bread(block 72) failed
[  228.363037][ T6760] FAT-fs (loop2): Directory bread(block 73) failed
[  228.424636][ T5388] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 209
[  228.450328][ T5388] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  228.511915][ T5388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.716304][ T5388] usb 4-1: config 0 descriptor??
[  228.734798][ T6755] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  228.858298][   T21] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[  228.871388][   T21] usb 1-1: config 0 has no interface number 0
[  228.888417][   T21] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  228.912066][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.315806][   T21] usb 1-1: config 0 descriptor??
[  229.475456][ T5388] ath6kl: Failed to submit usb control message: -71
[  229.482162][ T5388] ath6kl: unable to send the bmi data to the device: -71
[  229.552282][ T5388] ath6kl: Unable to send get target info: -71
[  229.623124][ T3700] usb 1-1: USB disconnect, device number 9
[  229.768898][ T5388] ath6kl: Failed to init ath6kl core: -71
[  229.868592][ T5388] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[  229.912381][ T5388] usb 4-1: USB disconnect, device number 9
[  229.964708][   T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  230.334759][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  230.354501][   T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  230.384525][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  230.394547][   T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  230.585314][ T6789] syz.2.930[6789] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  230.585417][ T6789] syz.2.930[6789] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  230.605239][   T23] usb 5-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2
[  230.630475][ T3715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  231.000873][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.160736][   T23] usb 5-1: Product: syz
[  231.232849][   T23] usb 5-1: Manufacturer: syz
[  231.251955][   T23] usb 5-1: SerialNumber: syz
[  231.293291][   T23] usb 5-1: config 0 descriptor??
[  231.356518][   T23] pl2303 5-1:0.0: required interrupt-in endpoint missing
[  231.494835][ T6796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.935'.
[  231.590109][ T1074] usb 5-1: USB disconnect, device number 10
[  231.894093][ T6806] binder_alloc: 6805: binder_alloc_buf failed to map page at 20ffe000 in userspace
[  231.908012][   T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  232.112699][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.284512][   T23] usb 3-1: Using ep0 maxpacket: 8
[  232.734722][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.089602][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.171425][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  233.186957][ T3890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  233.207432][ T6827] loop0: detected capacity change from 0 to 256
[  233.229632][   T23] usb 3-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00
[  233.239737][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.261458][   T23] usb 3-1: config 0 descriptor??
[  233.282650][ T6827] exfat: Deprecated parameter 'utf8'
[  233.291924][ T6827] exfat: Deprecated parameter 'utf8'
[  233.301423][ T6688] syz.3.899 (6688) used greatest stack depth: 18744 bytes left
[  233.325153][ T6827] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  233.748422][   T23] ntrig 0003:1B96:0010.0005: hidraw0: USB HID v0.00 Device [HID 1b96:0010] on usb-dummy_hcd.2-1/input0
[  234.037804][   T23] usb 3-1: USB disconnect, device number 18
[  235.929959][ T6863] loop2: detected capacity change from 0 to 512
[  236.386197][ T3698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  236.775722][ T6865] ------------[ cut here ]------------
[  236.793493][ T6865] WARNING: CPU: 1 PID: 6865 at net/mac80211/rate.c:282 ieee80211_check_rate_mask+0x23b/0x3b0
[  236.813868][ T6865] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  236.820952][ T6865] CPU: 1 PID: 6865 Comm: syz.1.960 Not tainted 5.15.164-syzkaller #0
[  236.845434][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  236.969953][ T6865] RIP: 0010:ieee80211_check_rate_mask+0x23b/0x3b0
[  236.981443][ T6865] Code: b6 04 38 84 c0 0f 85 99 00 00 00 89 2a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 99 bd f7 0f 0b eb e8 e8 65 99 bd f7 <0f> 0b eb df 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fe ff ff e8 1c
[  237.056897][ T6863] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2.
[  237.080366][ T6865] RSP: 0018:ffffc9000352f270 EFLAGS: 00010283
[  237.105631][ T6865] RAX: ffffffff89c2c7fb RBX: ffff88801d35cc80 RCX: 0000000000040000
[  237.140668][ T6865] RDX: ffffc900036ab000 RSI: 000000000000029d RDI: 000000000000029e
[  237.180864][ T6865] RBP: ffff88807e4d3510 R08: ffffffff89c2c689 R09: ffffffff89c4a966
[  237.189687][ T6865] R10: 0000000000000002 R11: ffff8880220abb80 R12: 0000000000000000
[  237.224491][ T6865] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807e4d0da0
[  237.233120][ T6865] FS:  00007fc3438206c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[  237.266387][ T6865] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.278288][ T6865] CR2: 000000110c26579d CR3: 000000007ce1d000 CR4: 00000000003506f0
[  237.296189][ T6865] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  237.304216][ T6865] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  237.319938][ T6865] Call Trace:
[  237.323297][ T6865]  <TASK>
[  237.328341][ T6865]  ? __warn+0x15b/0x300
[  237.333379][ T6865]  ? ieee80211_check_rate_mask+0x23b/0x3b0
[  237.352850][ T6865]  ? report_bug+0x1b7/0x2e0
[  237.362058][ T6865]  ? handle_bug+0x3d/0x70
[  237.366649][ T6865]  ? exc_invalid_op+0x16/0x40
[  237.371548][ T6865]  ? asm_exc_invalid_op+0x16/0x20
[  237.377077][ T6865]  ? ieee80211_change_bss+0x276/0x910
[  237.382500][ T6865]  ? ieee80211_check_rate_mask+0xc9/0x3b0
[  237.389043][ T6865]  ? ieee80211_check_rate_mask+0x23b/0x3b0
[  237.395350][ T6865]  ? ieee80211_check_rate_mask+0x23b/0x3b0
[  237.401212][ T6865]  ieee80211_change_bss+0x462/0x910
[  237.407017][ T6865]  nl80211_set_bss+0x84c/0xce0
[  237.411867][ T6865]  ? nl80211_del_mpath+0x3a0/0x3a0
[  237.436471][ T6865]  genl_rcv_msg+0xfbd/0x14a0
[  237.441224][ T6865]  ? genl_bind+0x420/0x420
[  237.446116][ T6865]  ? local_bh_enable+0x5/0x20
[  237.450883][ T6865]  ? mark_lock+0x98/0x340
[  237.457072][ T6865]  ? __lock_acquire+0x1295/0x1ff0
[  237.462155][ T6865]  ? nl80211_del_mpath+0x3a0/0x3a0
[  237.467792][ T6865]  netlink_rcv_skb+0x1cf/0x410
[  237.472599][ T6865]  ? genl_bind+0x420/0x420
[  237.477693][ T6865]  ? netlink_ack+0xb10/0xb10
[  237.482446][ T6865]  ? down_read+0x1b3/0x2e0
[  237.487562][ T6865]  ? genl_rcv+0x9/0x40
[  237.491677][ T6865]  genl_rcv+0x24/0x40
[  237.496159][ T6865]  netlink_unicast+0x7b6/0x980
[  237.500993][ T6865]  ? netlink_detachskb+0x90/0x90
[  237.506531][ T6865]  ? __virt_addr_valid+0x3bb/0x460
[  237.511688][ T6865]  ? 0xffffffff81000000
[  237.516201][ T6865]  ? __check_object_size+0x300/0x410
[  237.521801][ T6865]  ? bpf_lsm_netlink_send+0x5/0x10
[  237.527502][ T6865]  netlink_sendmsg+0xa30/0xd60
[  237.532325][ T6865]  ? netlink_getsockopt+0x5b0/0x5b0
[  237.539976][ T6865]  ? aa_sock_msg_perm+0x91/0x150
[  237.545421][ T6865]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  237.550745][ T6865]  ? security_socket_sendmsg+0x7d/0xa0
[  237.556740][ T6865]  ? netlink_getsockopt+0x5b0/0x5b0
[  237.561978][ T6865]  ____sys_sendmsg+0x59e/0x8f0
[  237.568001][ T6865]  ? iovec_from_user+0x300/0x390
[  237.572980][ T6865]  ? __sys_sendmsg_sock+0x30/0x30
[  237.583840][ T6865]  ___sys_sendmsg+0x252/0x2e0
[  237.590253][ T6865]  ? __sys_sendmsg+0x260/0x260
[  237.595807][ T6865]  ? __fdget+0x191/0x220
[  237.607746][ T6865]  __se_sys_sendmsg+0x19a/0x260
[  237.613120][ T6865]  ? __x64_sys_sendmsg+0x80/0x80
[  237.613798][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.631245][ T6865]  ? syscall_enter_from_user_mode+0x2e/0x240
[  237.639184][ T6865]  ? lockdep_hardirqs_on+0x94/0x130
[  237.644791][ T6865]  ? syscall_enter_from_user_mode+0x2e/0x240
[  237.650950][ T6865]  do_syscall_64+0x3b/0xb0
[  237.663157][ T6865]  ? clear_bhb_loop+0x15/0x70
[  237.668797][ T6865]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  237.676351][ T6865] RIP: 0033:0x7fc3453a19f9
[  237.680836][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.701364][ T6865] RSP: 002b:00007fc343820038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.710233][ T6865] RAX: ffffffffffffffda RBX: 00007fc34552ff80 RCX: 00007fc3453a19f9
[  237.718874][ T6865] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006
[  237.727115][ T6865] RBP: 00007fc34540f8ee R08: 0000000000000000 R09: 0000000000000000
[  237.738046][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.747075][ T6865] R13: 0000000000000000 R14: 00007fc34552ff80 R15: 00007ffd7c13ecf8
[  237.755863][ T6865]  </TASK>
[  237.758929][ T6865] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  237.760084][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.766213][ T6865] CPU: 0 PID: 6865 Comm: syz.1.960 Not tainted 5.15.164-syzkaller #0
[  237.766291][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  237.766305][ T6865] Call Trace:
[  237.766313][ T6865]  <TASK>
[  237.766323][ T6865]  dump_stack_lvl+0x1e3/0x2d0
[  237.766352][ T6865]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  237.766375][ T6865]  ? panic+0x860/0x860
[  237.766406][ T6865]  ? ieee80211_check_rate_mask+0x140/0x3b0
[  237.821247][ T6865]  ? ieee80211_check_rate_mask+0x140/0x3b0
[  237.827086][ T6865]  panic+0x318/0x860
[  237.831004][ T6865]  ? __warn+0x16a/0x300
[  237.835171][ T6865]  ? fb_is_primary_device+0xd0/0xd0
[  237.840403][ T6865]  ? ieee80211_check_rate_mask+0x23b/0x3b0
[  237.846493][ T6865]  __warn+0x2b2/0x300
[  237.850473][ T6865]  ? ieee80211_check_rate_mask+0x23b/0x3b0
[  237.856281][ T6865]  report_bug+0x1b7/0x2e0
[  237.860638][ T6865]  handle_bug+0x3d/0x70
[  237.864800][ T6865]  exc_invalid_op+0x16/0x40
[  237.869294][ T6865]  asm_exc_invalid_op+0x16/0x20
[  237.874313][ T6865] RIP: 0010:ieee80211_check_rate_mask+0x23b/0x3b0
[  237.880727][ T6865] Code: b6 04 38 84 c0 0f 85 99 00 00 00 89 2a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 99 bd f7 0f 0b eb e8 e8 65 99 bd f7 <0f> 0b eb df 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fe ff ff e8 1c
[  237.900356][ T6865] RSP: 0018:ffffc9000352f270 EFLAGS: 00010283
[  237.906443][ T6865] RAX: ffffffff89c2c7fb RBX: ffff88801d35cc80 RCX: 0000000000040000
[  237.915632][ T6865] RDX: ffffc900036ab000 RSI: 000000000000029d RDI: 000000000000029e
[  237.923620][ T6865] RBP: ffff88807e4d3510 R08: ffffffff89c2c689 R09: ffffffff89c4a966
[  237.931589][ T6865] R10: 0000000000000002 R11: ffff8880220abb80 R12: 0000000000000000
[  237.939559][ T6865] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807e4d0da0
[  237.947550][ T6865]  ? ieee80211_change_bss+0x276/0x910
[  237.952922][ T6865]  ? ieee80211_check_rate_mask+0xc9/0x3b0
[  237.958637][ T6865]  ? ieee80211_check_rate_mask+0x23b/0x3b0
[  237.964490][ T6865]  ieee80211_change_bss+0x462/0x910
[  237.969711][ T6865]  nl80211_set_bss+0x84c/0xce0
[  237.974478][ T6865]  ? nl80211_del_mpath+0x3a0/0x3a0
[  237.979610][ T6865]  genl_rcv_msg+0xfbd/0x14a0
[  237.984200][ T6865]  ? genl_bind+0x420/0x420
[  237.988602][ T6865]  ? local_bh_enable+0x5/0x20
[  237.993279][ T6865]  ? mark_lock+0x98/0x340
[  237.997609][ T6865]  ? __lock_acquire+0x1295/0x1ff0
[  238.002650][ T6865]  ? nl80211_del_mpath+0x3a0/0x3a0
[  238.007783][ T6865]  netlink_rcv_skb+0x1cf/0x410
[  238.012565][ T6865]  ? genl_bind+0x420/0x420
[  238.017067][ T6865]  ? netlink_ack+0xb10/0xb10
[  238.021678][ T6865]  ? down_read+0x1b3/0x2e0
[  238.026089][ T6865]  ? genl_rcv+0x9/0x40
[  238.030167][ T6865]  genl_rcv+0x24/0x40
[  238.034243][ T6865]  netlink_unicast+0x7b6/0x980
[  238.039006][ T6865]  ? netlink_detachskb+0x90/0x90
[  238.043945][ T6865]  ? __virt_addr_valid+0x3bb/0x460
[  238.049047][ T6865]  ? 0xffffffff81000000
[  238.053194][ T6865]  ? __check_object_size+0x300/0x410
[  238.058473][ T6865]  ? bpf_lsm_netlink_send+0x5/0x10
[  238.063592][ T6865]  netlink_sendmsg+0xa30/0xd60
[  238.068475][ T6865]  ? netlink_getsockopt+0x5b0/0x5b0
[  238.073693][ T6865]  ? aa_sock_msg_perm+0x91/0x150
[  238.078627][ T6865]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  238.083902][ T6865]  ? security_socket_sendmsg+0x7d/0xa0
[  238.089350][ T6865]  ? netlink_getsockopt+0x5b0/0x5b0
[  238.094547][ T6865]  ____sys_sendmsg+0x59e/0x8f0
[  238.099320][ T6865]  ? iovec_from_user+0x300/0x390
[  238.104260][ T6865]  ? __sys_sendmsg_sock+0x30/0x30
[  238.109285][ T6865]  ___sys_sendmsg+0x252/0x2e0
[  238.113973][ T6865]  ? __sys_sendmsg+0x260/0x260
[  238.118786][ T6865]  ? __fdget+0x191/0x220
[  238.123045][ T6865]  __se_sys_sendmsg+0x19a/0x260
[  238.127989][ T6865]  ? __x64_sys_sendmsg+0x80/0x80
[  238.133022][ T6865]  ? syscall_enter_from_user_mode+0x2e/0x240
[  238.138995][ T6865]  ? lockdep_hardirqs_on+0x94/0x130
[  238.144189][ T6865]  ? syscall_enter_from_user_mode+0x2e/0x240
[  238.150190][ T6865]  do_syscall_64+0x3b/0xb0
[  238.154606][ T6865]  ? clear_bhb_loop+0x15/0x70
[  238.159293][ T6865]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  238.165189][ T6865] RIP: 0033:0x7fc3453a19f9
[  238.169615][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.189385][ T6865] RSP: 002b:00007fc343820038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  238.197800][ T6865] RAX: ffffffffffffffda RBX: 00007fc34552ff80 RCX: 00007fc3453a19f9
[  238.205791][ T6865] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006
[  238.213772][ T6865] RBP: 00007fc34540f8ee R08: 0000000000000000 R09: 0000000000000000
[  238.221732][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.229708][ T6865] R13: 0000000000000000 R14: 00007fc34552ff80 R15: 00007ffd7c13ecf8
[  238.237701][ T6865]  </TASK>
[  238.241007][ T6865] Kernel Offset: disabled
[  238.245645][ T6865] Rebooting in 86400 seconds..