last executing test programs:

31.384372219s ago: executing program 0:
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x4}, {0x0}], 0x2, &(0x7f00000001c0)=""/96, 0x60}}], 0x1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000008400000001000000000000480102"], 0x30}, 0x4005)
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000080)={{@hyper, 0x1}, 0xffffe804, 0x9})
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500002000000000001190c71f7800000000ffffffff00004e20000c90780100"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000240)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x5c}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=@newtaction={0x14}, 0x14}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1b00000019007f08995f18f5a4dc04f11c672274119dd27d616f3a", 0x1b}], 0x1}, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[], 0x2, 0x279, &(0x7f0000000640)="$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")

30.624362247s ago: executing program 3:
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)='k', 0x1}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x0, 0x4, 0x6, 0x0, r1}, 0x48)
recvmsg(0xffffffffffffffff, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
write$cgroup_pid(r2, &(0x7f0000000140), 0x12)
r3 = syz_open_dev$vim2m(&(0x7f0000000640), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000040), 0x12)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0)

5.872234559s ago: executing program 1:
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x4}, {0x0}], 0x2, &(0x7f00000001c0)=""/96, 0x60}}], 0x1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000008400000001000000000000480102"], 0x30}, 0x4005)
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000080)={{@hyper, 0x1}, 0xffffe804, 0x9})
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000240)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x5c}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=@newtaction={0x14}, 0x14}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1b00000019007f08995f18f5a4dc04f11c672274119dd27d616f3a", 0x1b}], 0x1}, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[], 0x2, 0x279, &(0x7f0000000640)="$eJzs3MFLW3ccAPBvlqhRGPEwkI3BMnbZKahjd2UojAU2NsLY2GEyIxt5TjAgJIepp/0TG/0P2mOvhR5KLz30HyiFYgu91FtpCyn6EqsSfamiKfXzubwfz+/3fb/v9374Egi/3z9dbSyvNVd2d3ciV8xFYS7m4kXEZHwQ+UhtBQDwPnne6cSzTmrYvQAAl8P7HwCungHf/z+kh83LagsAuEC+/wPA1fPTL79+N1+tLvxYLhcjVv/dqG3U9o/j3YCV+CuSqMd0lOJVROdAOl78trowXd7zeDJqq5vd/M2NWvrrwfle/kyUYrJffm5hppxK80e7hUdiopv/YCLqMRul+Kh//dkj+b36o/HlF4fqV6IU9/+ItUhiOfZy3+SPRcQ331fLUYhD+WP7cfvG+06dz0sAAAAAAAAAAAAAAAAAAAAAAJxZpXyg7/49lcpJf0/z50/eH6h4dH+g4/vzFOKTwnDvHQAAAAAAAAAAAAAAAAAAAN4VzVa7sZQk9fXTBn/fvX47K6a1c2/r56yYdiPXrZtd9KIHH37+6L+TY7Zz2fOTyyiR717jLRu79dmxM7/lB7hObmuAEsXu7Ge3kc9o9c7Onx9/1Zz6un9MPs7yUF52zvVMR05bWk9LEX2zts+9kG4MdRn37jozeOr/uaWb/zx8MuiVL+9/EAAAAAAAAAAAAAAAAAAAkGq22o3isJsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCFrttqNpSSpj0arfS2SpL7eO3PqYHGAmIPBsO8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeBwAA//8vJY/H")

4.910708199s ago: executing program 3:
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)='k', 0x1}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x0, 0x4, 0x6, 0x0, r1}, 0x48)
recvmsg(0xffffffffffffffff, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
write$cgroup_pid(r2, &(0x7f0000000140), 0x12)
r3 = syz_open_dev$vim2m(&(0x7f0000000640), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000040), 0x12)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0)

4.715978063s ago: executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x6}, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {}], 0x54)
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "dda79475"}]}}, 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x63, 0xe8, 0x1e, 0x10, 0x1199, 0x25, 0x1e64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x99, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a00fbbe00000000000000000a000000000000004cd4ac5d131535a66538de3d4211756c8a8c235eddd35ebe5127635bda9f78fbdba7a043dbb51308a47b7b28683537056d6e04314f03ec5ac1f527c7f949101d440dd5d18f6234f5016fad2d59e6388af73ab284f3babf72414cf36c42ee480000000000000000"], 0x1c}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_targets\x00')
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, 0x0, 0x0)
lseek(r2, 0x80000001, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x3)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x14)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4)

4.312708947s ago: executing program 4:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x2000000000000099, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000e83827557d23f01000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x60, &(0x7f0000000200)={0x0, 'veth1_virt_wifi\x00'}, 0x18)
r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000002c00)=ANY=[], 0x440)
fcntl$setstatus(r5, 0x4, 0x46c00)
r6 = dup3(r5, r1, 0x0)
io_setup(0x6, &(0x7f0000000240)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000001680)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x8001, r1}])
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4)
readv(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
lseek(r8, 0x300000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7c}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r9}, 0x10)
r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r10, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020100001039be6603e50b3df62af4a40010000000000000a7ad5da01f609302ccc71b"], 0xfe44, 0x0)
io_submit(r7, 0x5, &(0x7f00000004c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xff7e, r1, &(0x7f0000000140)="df3997640236082c7e27fa8a83b08febc59d225fb907944364d4a3cbd9841bbc00bc5bbc779186d84c11bb274f94d7758f72e2d9b82e246d77a077e56610a636cc3100b4cf85782e8b112de97ef5bcce9f6b6e159ba51a3bb68b2893774e3c5dfd8edb2c01d3892ee6caf9bf994670dbbbf1548fdbf18060df46512e8bd40b224827df42c287b936f029815082ee9ec634bce57bf62f12dec7b21284a3e1738ac51763d5cb35a0bc3f5ba7532dd0dcaf2a401820c99138dad3a9b2628732e3d3", 0xc0, 0x8000000000000001, 0x0, 0x0, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4aa, r5, &(0x7f0000000340)="915203cee951b52ce7ac5ee08ee196c7de19d5f440000ce3cf01b79ed0265d028109199face849e6b16dbee1123e69b8ab2bcac5946cc456b1a6fbe49a52f26469c7905889eafc6118084282ec6ef6d24b2e1084499f86e345b885bf4869bf5b0b4643f285f418584f5c803817ec9db33098a44b96b8ac463e39d2fc29369dea3690bf3a038b52cd1fdc44473fff9aa931c3abad6743470e", 0x98, 0x8, 0x0, 0x0, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x28, r6, &(0x7f0000000580)="c8b363940e470a2b75a677725bffbe9559fdeb72cafe0cfd8d46cbb0690ac2b1e233fef9786f40aadfc3518c7218b040ee6529a64fb820f97aa031683ce89ebec6942a242cfc1ed600c0bfb1c19d6ee24567c8b76a218b1b244beebd56521650b9921fc5f7950b87091fa8f71c5b9fbaef15355b68aad100a148d6d1f7c536d3c7f4a4a18e6ac8192e2c2498872f2cf7345620e140265f9b926cb4e0121d9416de3d3be05435a2c6d19e0ebaddd2fd139205897d60e075c1f3915d7daf536db4f67f8cdbe90ee0baa7ad7dedc7fca7819f", 0xd1, 0x100000000, 0x0, 0x0, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x80, r5, &(0x7f00000002c0)="3eed1b931f7c3e41e2af093c470b4330da94a0840ed5a3ee7fa778312667ba783d4af6", 0x23, 0xfff, 0x0, 0x2, r6}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000680)="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", 0x1000, 0x0, 0x0, 0x2}])
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000540)={{&(0x7f0000581000/0x2000)=nil, 0x2000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000566000/0x1000)=nil, &(0x7f00001b8000/0x2000)=nil, 0x1000})

4.22696444s ago: executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x100000, 0xb000})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0)

3.749021583s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10)

3.571075672s ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030000000000000000000c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="04000380100003800c000180"], 0x34}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x90)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000240)={0xc029})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@del={0xe8, 0x11, 0x0, 0x70bd3d, 0x25dfdbff, {{'essiv(rfc4309(gcm_base(pcbc(fcrypt),wp512)),ghash-clmulni)\x00'}, '\x00', '\x00', 0x400, 0x6400}, [{0x8, 0x1, 0x7fff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004010}, 0x81)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000540), &(0x7f0000000100)=0x68)

3.518641312s ago: executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x5100, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0)

3.39946709s ago: executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8)
fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v2, 0x14, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x21}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="8500000061000000350000000000002085000000080000009500000000000000f4670880271e3503200ffa95b251adde96fcc309926fa3b4b87b3e0cc7444a2391511c97fabd5f9810e81ae0b737136ea6f7be39e434d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903002000000000006c6386d7ec7209d031f40f3012e9576e51a7f578602f5807785b92e544fc46c744aeeee4418d6af3e4195cc03710212436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be61a7c04b4c5324812696aa89e393c941d9541cc6238d0a4f8070000000b1b2d2747c45b0c52087b5efabf84960ba0e3c4c00322de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbf975d9c07d8d3c76e65760ff000000b78863e629b3b200000000000000000000000000008b0000000a449c810d3174cc7ee545867a3126af7a8920744ea9875b9cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac929a4fc6e62524f510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee51f581d124216e8bd9b1855f77138e438bdc037865f07f98c068be4c6155ec27365410866059475714844a3ea4cbe37e0000000000ef6dc4dd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec596838e38068b5e438cbcd585a8cf37c496a8d2dab79d4242a353917ebdf2dc7926d80260898d4e1ca5e3a833f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd961a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1473fa0ac0c0e71925a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c71a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032e485cc664921b7f9133bdbc2ba3cd845997b0dd103c784a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e6191078aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71859f6bb5c08ce5fc61353f1e659d7ad53f54a7e2c94cba21994930a423ac7f84ed873a76b0dda0a4b4c5f87eef3164a0c03bc2a7f08290ddf300b298de3fd9167fb8b9c2f26e27f97cf5e90586ea50b85eb5b420eebe171893782b8326148ef5f5174e7ea5dd7f1caa699e4a241291c2f43e9edbf44c0ffb8ee32a18b6e8f0b61836146e2eab9a767800c2c91190c96cf88466adf775b4cf517dc5e39be99c4ab471f381c3915203cd2f27466c8943a80ba03150699c787696de272affa4e4940e59d8b7c69f804d425e77976c00ca6d3fa7543176a4df033532e5053d72521d097dda0c7a70bd1278c61513c1b87b01d9a9ec4de14693096dab53d3224f245fd5d87984d58dc09d11ba0094ba8c39942be41f362e29bba1cdcf8068a4d8d67d2d6d79aa2d089bc4d475097d7523860ec41dab4fa4b0cfe674c163ad419753bd73882336d42036a179bb33162b31f2a58436ea88fba598fad987a60b1847cc63a77c2bb30477ecbeaaa590cde56be4102d0365987eed64bdf01bbd9aaeb77dde491845e612557fde64b3a185122ff97a365844582ef9086aa0b74bf8a1ba90a8daf3c716f1e7d7d2b20c878027b2f15cb8576d4cbac85aee331a7e38473a91027daec042fc1e2e7665bf3d3e79aed63b521a1541b2e302c9cf222a86ba7a3889861aa18a3104d657a3a5eeac42d91fbaa4188500"/1508], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1}, 0x48)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r1, 0x0, 0x6, 0x0)
write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7}, 0x7)
fcntl$setstatus(r1, 0x4, 0x7c00)
write$uinput_user_dev(r1, &(0x7f0000000640)={'syz0\x00', {0x0, 0x3}, 0x0, [0x4, 0x40, 0xa7, 0x4, 0x6, 0x5, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x6, 0x80000000, 0x0, 0x3, 0x7, 0x101, 0x94, 0x64, 0x7fff, 0x6da, 0x9, 0xff, 0x6, 0x0, 0x3ff, 0x4, 0x8, 0x800, 0x1ff, 0x400, 0x5, 0x1f, 0x8a2a, 0x4, 0xfff, 0xfffffffb, 0x2, 0xf2aa, 0xc5, 0x10001, 0x0, 0x5, 0x1, 0x2, 0x3f, 0x2, 0xffffff81, 0x7, 0x3f, 0x3, 0x81, 0x100, 0x1, 0x7, 0x8, 0x0, 0x80, 0x401, 0x0, 0x0, 0x3ff], [0x6, 0x0, 0x1f, 0x6, 0x1, 0x200, 0xbf, 0x4, 0x7f, 0x4000, 0x1, 0xff, 0x4, 0x9, 0xfffffffc, 0x3afcfd42, 0x26, 0xa7, 0xfff, 0x2000, 0x1, 0x9, 0x1, 0xff, 0xd3, 0xed, 0x40, 0x7fffffff, 0x2, 0x1, 0xfff, 0x9, 0x8cc4, 0x3, 0x4, 0x0, 0x2000000, 0xffffffff, 0x10000000, 0x9, 0x80000001, 0x8, 0x6, 0x4dda, 0x2, 0x0, 0x8, 0x29, 0x7, 0x9, 0x8, 0x6, 0x0, 0x7fe000, 0x8, 0x3, 0x1f, 0xfffff800, 0x3f, 0x1, 0x6, 0x9, 0x4, 0x3], [0x1000, 0x80000000, 0x1, 0x2, 0x81, 0x6, 0x7, 0x1ff, 0x1, 0x4, 0x5, 0x9, 0x5, 0x5, 0x1, 0x7ff, 0x100, 0x6, 0x1, 0x5, 0x1, 0x80000001, 0xfffffffe, 0x0, 0x5, 0x317, 0x5, 0x5, 0x1, 0x6, 0x1000, 0x40, 0xcc, 0x5, 0x1, 0x6, 0xacf0, 0x7b0, 0x7f, 0x5, 0x2, 0x4, 0xffffffcd, 0xf20, 0x27, 0x1, 0x0, 0xffffffff, 0x5d3a38a8, 0xefe3, 0x80000000, 0x1, 0x8, 0xc7e1, 0xcdec, 0x5, 0x2, 0x951, 0x8, 0x9, 0x8, 0xdb15, 0x7, 0x101], [0x80000000, 0x8, 0xff, 0x7, 0x2, 0x2, 0x7fffffff, 0x3, 0x7, 0xffff, 0x2, 0x6, 0x4e8d3541, 0x5, 0x800, 0x7, 0x3b, 0x400, 0x8, 0x9, 0xffff, 0x3, 0x100, 0x4, 0xff, 0x588, 0x9, 0x1, 0x5, 0x10001, 0x7, 0x3, 0x9da, 0x3, 0x4, 0xfffff801, 0x943, 0x9, 0x4, 0x1ff, 0x8001, 0x4543b62, 0x8, 0x100, 0xa3, 0x8, 0x6, 0xe5, 0x17a, 0xffff, 0x6, 0x80000, 0x6, 0x9, 0x200, 0x7, 0x7, 0x80000000, 0x3, 0x7a, 0x3f, 0x5, 0x40, 0xfbb]}, 0x45c)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='5', 0xfdef}], 0x1)
dup3(r2, r1, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000e50601"], 0x14}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r3, 0xb, 0x0, @val=@tracing}, 0x40)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={<r5=>0x0}, &(0x7f00000001c0)=0xc)
write$P9_RGETLOCK(r3, &(0x7f0000000200)={0x619, 0x37, 0x2, {0x1, 0x10001, 0x4, r5, 0x5fb, 'Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea'}}, 0x619)
fchown(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x21000f, &(0x7f00000000c0), 0x1, 0x4f0, &(0x7f0000000a40)="$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")

3.287178147s ago: executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x0)
io_setup(0x2, &(0x7f0000000180)=<r1=>0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, <r2=>0x0})
r3 = syz_open_procfs(r2, &(0x7f0000000480)='mounts\x00') (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f00000003c0)=@ethtool_sset_info={0x29}}) (async)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x64, 0x0, 0x400, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="1dcb"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="686ca0d4509d"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x68841) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x26e1, 0x0)
close(r6) (async, rerun: 32)
io_submit(r1, 0x1, &(0x7f00000017c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (rerun: 32)

3.200633781s ago: executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{}, {0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0)
syz_io_uring_setup(0x4dc3, &(0x7f0000000140)={0x0, 0x80000}, 0x0, &(0x7f0000000000))
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
prlimit64(0x0, 0x6, 0x0, 0x0)
setuid(0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0)
dup2(r3, r2)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

2.878373568s ago: executing program 2:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(0xffffffffffffffff, &(0x7f0000000100)=""/85, 0x55)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)

2.837636641s ago: executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
socketpair(0x2a, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000001740)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e70009058a", @ANYRES8], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000001800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0xa08, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x8080)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async)
socketpair(0x2a, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async)
sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) (async)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000001740)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e70009058a", @ANYRES8], 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000001800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0xa08, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x8080) (async)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) (async)

2.412733814s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r3)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580), r7, 0x0, 0x2, 0x4}}, 0x20)
r8 = socket$inet6(0xa, 0x0, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000600000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, 0xa1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000400)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000002900000004000000ffff"], 0x98}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r7}}, 0x48)

2.208583135s ago: executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2810854, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESDEC, @ANYRES64], 0x1, 0xa29, &(0x7f0000001740)="$eJzs3c1vVOd+B/DvGWwwTkRJQlOKSBiISJzENbZpQCiLBOwxOPVLZRspqK1CFKBCWE2VtFISdUGkqqtGjaqqUttNlWVXkdJFs6nYtcuuurjSvfkPrqK7uVzpXs3VnBmbsT0zxo6xudzPZ3Q4b7/nbc6Z8zDjmfOE32T1er2ctrl+9T92s7I8fi5NfvfV1180ps/vZn/25Y3iv5KBJNWk71fludI/MbkwP7tJRneS60nuJUWSA2nOuzi4Zu16in/I0w/W76X4txztkGxgi41jU3V+q+31+QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+licnR0bEiM9NzV9+tdlcOAd5j/0p235ajfhffblZskRSNKQMDK0N9Hz3yYPfzjX9OJXfLtePNkb8H8tlTzx9+87m+ykr6HhXaFR9/+tmd95eXb370YFN/x8C+Vrsaywd2rXoPb//2kl2uzb2VZPbi5Vp1enG+euHcudEzV6YWq1PTqS1eW1yqzVYnFmoXl+YXqkMTr1bHLlw4W62NXJu/Ond5cmSmtrLx/B+Mj46eq74z8se1iwuL83Nn3hlZnLgyPTMzPXe5jGnsbsScb5yIfzS9VF2qXZytVm/dXr55drNKNoLGOu4p1gaNb5bT+Oj4+NjY+PjYuTcuvHF+dLRvw4bRdbIhYu9PWvbOf+7sxRt+mEqr/89MpjOXq3k31Y6PiUxmIfOZ7bK/ZaX/P32m1rPc9v7/eHPT8aMPdh9L2f+/2Fx7sVv/36Uumz/q9WbO202/8vg4n+az3Mn7Wc5ybuajH5zjhscvdiif6g9v7cbH5dQyl+ksZj7Tmc3Fcku1taWaCzmXcxnNe7mSqSymmqlMZya1LOZaFrOUWnlGTWQhtVzMUuazkGqGMpFXU81YLuRCzqaaWkZyLfO5mrlczmQulrncyu3yeT/bo46rQWMPEzTeI2iH+//64/g/QR61Hb+Gw3bVW/3//q4B9ZWloYldqxUAAACwk37/f3PoyLP/8+OkPy+Un8tPTc/URve6WgAAAMAOKr+ud7wx628svZDC+38AAAB40hTlb+yKJIM50Vxq/hJqX3wIAAAAAE+I8u//LzZmg42lEylW74Ryfa/rBgAAAOyMU6t33125x2513T12N0asuwtvMbxy+9/qjeb8RiuidZ/fwanpmdrIxPzMm2N5ubzLQPlLgw257UuK/vLnB6/lZDPq5GBzPrg2x4FG1NjIm2N5LadaDRl6qTF7aahD5Hgz8pVm5Cs9Is82IgHgSXeqR3/8sP3/axluRgwf69ufpO9Yh551VM8KAI+LzcfY2TSi+MMH7//7W9n+sl6vr/b/z+bWz5tfKRjJB/kwy7mR4fLXBuU3Dtbk+qdftj4zWP0awmiGN/k0YCX2/85XMrzJ5wGDbQO9DG/yicBgbjUW/yw5++gPBADsolNd+uGt9P/Dbe//s/H9/+rQQjf9pBAAHgurI9g/woW9biMAsJZeGgAAAAAAAAAAAAAAAAAAAAAAAAAAAHbejt7tf2CbyX/SGtfv0Q5DsGHhYJIDSbafzz8m2b06FztcVmUH8qkn2a3jtXsLOZxs+1nteBrvT7L37dp0oa91Wbjz/vJeXpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYLUWyr9P2SnIgyWiSM7tfq0fn7l5XYPe91b5S3M/9fJJDe1cdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnU+v+/5U05081N6WvkpxOcj3Jn+x1HXfS/b2uwA45uM10bff/bxzz1Iv0NQ97iv6JyYX52cbhL8d+qHz31ddfNKa25AcetpwysLJucIlWCetj//3plaVnylSDkzc/vvNXH/5ldfJSKtmfS0tTM5OzlxfefpDk+eKbpJrmtGKlvn9z+r+/7NDybxot7Wx9uVPlkzO5sdzf65S6d7m93F6+Od4oaan27tJf/8XtT9p2PZuTyUtDydDakv68MXUp6WT6e5VWfF/8XXEo/5zr5fFvPBtFvWgcot8p23/w1u3lmyMffLh8o0udDudEkhvJQO86fd62+0R5PemoPOsq/Y1SR8ugxj9HNmljT205jnVpwzPlKTPYasP+rm1oV+3ehlLb817ptL9Zo7NdavRcXu5wpOsHku41ern3ke6s+L74UXEl/5+/bRv/o9I4/qfT/dW5Nosysu1M6RpZaUaWLR9v3/He+sif/stD1b7jMDVs1d+vefFW2q7/rWO1Q9ejetHzetRW4tZeF+tKXHdW9HhdlD3SkXUpWlefbmla9TzSjOpSz9/N60nfsV5XxQ299eubXFFW07/defd2X///WgzlZ7lr/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODxVyT7Om2vJKeTHF5Zryb1LWR7oNuOymCx1SruqLur/zwRKltNUNzP/XySQ4+mOgAAAAAAAADstkuT33319ReNqTjY2tT6+3416UtyuPing5lcmJ/dJKP+5HqSe43lgQ77e/y5v5EuTz9Yv9dYO7rVlgAAD+vXAQAA//+sj2NA")
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, 0x0)

1.990081069s ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x420, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r1}, 0x10)
getdents(r0, &(0x7f0000002380)=""/102, 0x66)

1.52810319s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3, 0x4})
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000180)=@newtaction={0x6d0, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4b55}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}, {0x63c, 0x1, [@m_skbedit={0x120, 0x15, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7fff}]}, {0xe2, 0x6, "e7d85a7b10c193ef295a3d6c138fd906819bdaf8f2193e9ccd5c6d6c58052fcf823e1599a6afff3065fdece53ec73439898bb44a4e6bb1a9ce5010a6c66333518a083874beddc5eb7a99d879a80925fc3a84dcdd9ae233fe277d63cbabfc7f1889400ca40215afee122b540afd4de4a811e0eec7a1ed9f85c1beb934a612742020fec64bf72af1d7a89a9090741273891ba04519e6284bc889d975ba5be95899bbc9ffda43cdacb914e407d0e298008fe1254d949c11235763b5e8942aec189d528b86aa4131e31adf1ac56459910cdf46ad1bd1967250f9a1d5bdc76517"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x124, 0x1, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_TYPE={0x6, 0x5, 0xd1}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8000, 0x3, 0x6, 0x4}}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x83, 0x6, "16b7e67c105e51e8b17b5cf116781e4db73e4b263a4e531f6802b299a6b57936f8ab3b20e7f69de9a8b9ec1367a768fd054758a4551b93aeaafb4825ec3c8551c693797e86d3c57a05d20f3944281d5ad83a76ddc7a69acb99713b9820bc896a990aa8b2d089dd7766b007f627a9c5e7788262db225213069b3c46b1c12f7c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x198, 0x9, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x80000001, 0x2, 0x6, 0x1}, @loopback, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xcf0f, 0x20000000, 0x401, 0x1ff}, @remote, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x101, 0x10000000, 0xe5a7, 0x1}, @local, @multicast1}}]}, {0xf5, 0x6, "aca327cf53d5b0776aaf5c31d58c59808d9049cdd1321910777c0744b61124c77f53fd7fa75e8657b55d7a94b43586d9c52e7d309d2bc55cd186e337c4c71fcbfdba4db3e9c27835e26f8345f6b511f840383871243898e9b82bd63f1f68e550e8508a560809dda0519f27772a1d9bd099495946463d0c9843ddda2b71d7a3ebb3d51c80e49e03ff5892e5125209de80b500513db3c655626992edf3dbf0d05503e8dc030319e2f79daabdacb084282ecbc8c083deda374582d8977a79b06006cb20ead74d3292ee5aaa3a956044b23bb3b287c17254d2a8cc87bfa65265ded8089cee7eaa5fdc5694e593e9b58897932e"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x164, 0x8, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xfff}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff9}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xdcb4}, @IFE_META_PRIO={0x8, 0x3, @val=0x6575}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0xffffffff, 0x2, 0x303, 0x7f}, 0x2}}]}, {0xc0, 0x6, "4c1d450229ede5d42b1d7d0f661cdca0fd3c247ebb2cf2decd1b8ff3171401024c48eba353d8a94b86e2eb13284314c5b6be8f7a938a9cf7cf011b0ee030e52130eefe17ce6b689ed419cd99bfbe460facad15157b4e5f7fe5d1ecbdea3626e32b0daef5d9d60377c4749bd5f5cdd318750dc2651266a9c7b014b96cd336476f7f10c2ac47305c293c29c5b95f844823c47abcfefcb2dee90a3f1352c22f89caa89fa6dc3189d324bf9e2e8c625ae6920095eb266c36490ae7a8a222"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x18, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x96ba0}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x68f0}, @TCA_MPLS_BOS={0x5}]}, {0xd, 0x6, "f49c277b0674144766"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x9c, 0x1a, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xe1d}]}, {0x67, 0x6, "7e716932ef0821c851412da6f1bd785bd58508c08d5653e88c060d5c41793d20370fdcfff19ed0a0c97dadc8e509240e2934e06d279d1ae467f753d9d09def2d67747219bbca822b441f3226fad96b71f21adb70875471f9fa7602e7efb7dee57e5a7c"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x6d0}}, 0x0)

1.479738394s ago: executing program 4:
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',shortname=winnt,uni_xlate=1,iocharset=maccroatian,iocharset=cp437,usefree,rodir,uid>', @ANYRES16, @ANYBLOB="2c2b8f688a67e7770600"], 0x6, 0x2aa, &(0x7f0000000500)="$eJzs3T1re1UYAPDnpulN1CEZnETwgg5Ope3qkiItFDMpGdRBi21BmiC0UPAFYydXF0c/gSC4+SVc/AQKrqKbHQpX7s29Jq1paqSx/5ffb+nTc89zznNODy0d7sn7L45ODrM4vvjsl2i3k2j0oheXSXSjEbUv4preVwEAPM4u8zz+yCeWyUsior26sgCAFVr67//3Ky8JAFixt95+542dfn/3zSxrx97oy/NB8Z998XXyfOc4PoxhHMVmdOIqIv/bJN7L83zczArdeGU0Ph8UmaP3fqzG3/ktoszfik50y6br+fv93a1sYiZ/XNTxbDV/r8jfjk48P2f+/f7u9pz8GKTx6ssz9W9EJ376ID6KYRyWRUzzP9/Kstfzr//89N2ivCI/GZ8PWmW/qXzt5t61Vv/jAQAAAAAAAAAAAAAAAAAAAADgCbVR3Z3TivL+nqKpun9n7ar4Zj2yWvf6/TyT/KQeaOZ+oDTyfJzHN/X9OptZluVVx2l+M15oRvNhVg0AAAAAAAAAAAAAAAAAAACPlrOPPzk5GA6PTu8lqG8DqF/r/6/j9GZaXorFnVvTuRpVuGDkWKv7JBG3lZEU21Is4p625a7gmdtq/va7ZQds391nfdH+3E9Qn66Tg2T+HraibmnXh+SH2T5plMHPv981V3rbo3yp45fOfdRZeu3pc2UwXtAnkkWFvfbrZOeqluTmKtJyV+emr1fBTPqNs7HUef7n74rEbR0AAAAAAAAAAAAAAAAAALBS05d+5zy8WJjayFsrKwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/lfTz/9fIhhXyf+icxqnZw+8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4CfwUAAP//UZdgPQ==")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48)
syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@quota}, {@journal_async_commit}, {@resuid}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x10001}}, {@data_err_abort}, {@data_err_abort}, {@i_version}, {@auto_da_alloc}]}, 0x1, 0x5d6, &(0x7f0000000c00)="$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")
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000800)={'vcan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {0x11}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_subtree(r7, 0x0, 0x2, 0x0)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x3f)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0x87, &(0x7f00000008c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000940), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x13, 0x22, &(0x7f0000000600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x2, 0x1, 0xa, 0x2, 0x0, 0xfffffffffffffff0}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000200)='GPL\x00', 0x10000000, 0xbe, &(0x7f0000000380)=""/190, 0x41000, 0x49, '\x00', 0x0, 0x5, r9, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x5, 0x4, 0x4a}, 0x10, r10, r1, 0x5, &(0x7f0000000b80)=[r0, r0, r0, r0, r0], &(0x7f0000001200)=[{0x1, 0x4, 0x5, 0x5}, {0x5, 0x5, 0xb}, {0x5, 0x5, 0xb, 0x5}, {0x4, 0x5, 0x7, 0x3}, {0x3, 0x5, 0x10, 0xb}], 0x10, 0x7fffffff}, 0x90)
r11 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r11, 0x29, 0x33, &(0x7f0000000080)=0x6, 0x4)
setsockopt$inet6_int(r11, 0x29, 0x42, &(0x7f0000000000)=0x46, 0x4)
getsockopt$inet6_buf(r11, 0x29, 0x6, &(0x7f0000000240)=""/159, &(0x7f0000000300)=0x9f)
write(r0, &(0x7f0000000080)="ab5204ee426e8f3c0edb963ecce18098a20599f46b45b0f6feabb0be73c17de3c9d7ada6decdfb70f189d844", 0x2c)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0)
ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x505da283, 0x5})

1.31122508s ago: executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0xe})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@deltclass={0x24}, 0x24}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xcc}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.033052566s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030000000000000000000c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="04000380100003800c000180"], 0x34}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x90)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000240)={0xc029})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@del={0xe8, 0x11, 0x0, 0x70bd3d, 0x25dfdbff, {{'essiv(rfc4309(gcm_base(pcbc(fcrypt),wp512)),ghash-clmulni)\x00'}, '\x00', '\x00', 0x400, 0x6400}, [{0x8, 0x1, 0x7fff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004010}, 0x81)
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000540), &(0x7f0000000100)=0x68)

826.606934ms ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x5, 0x4a7, &(0x7f0000001140)="$eJzs3EtvG0UcAPD/bl59hZhSXm2hhoKIeCRNWqAHJB4CqRckJDiUY0jTqjRtUBMkWkU0IFSOqJ+gcETiE3CCCwIkJBBXuCOkCuXS0gNatLY3dRI7OGkc0+T3k1zPeGZ3ZnY969mZbgLYssr5P0nEroj4LSIGqtHFGcrVtxvzs+N/z8+OJ5Flb/6VVPJdn58dL7IW2+2sRQbTiPSTJPY1KHf6wsUzY5OTE+dr8eGZs+8NT1+4+Mzps2OnJk5NnBs9evTI4ZHnnxt9dl3a2Z/Xde+HU/sfPPb2ldfHj19554ev8vruqqVfn5/tXbxFqQjsjYhs6f5eaqHMcpQXH8s6j6+u+v97/XXhpLuDFWFVuiIiP109lf4/EF1x6+QNxGsfR6QdrR/QPlmWZX3LPs2vCtvzwFwGbGJJdLoGQGcUv/j5fXzx2uAhSEdde7l6A5S3+0btVU3prtz5lEvVe6P+NpVfjgMRcfPq8bmbV2PJfAoAQDt8k49/nm40/kvjvrp8d9XWhkoRcXdE7I6IeyJiT0TcG1HJe39EPNBqwUnjpZHl459ftq+xaS3Jx38v1Na2Fo//Fua9S121WH+l/T3JydOTE4dqx2Qwevry+MgKZXz76q+fNUsrR0Q+9iteefnFWLBWjz+7l0zQnRibGbudNte7diBib3ej9icLKwFJbFvz/vNjdvrJL/c3S//v9q9gHdaZsi8inqie/7lY0v5CsvL65PC2mJw4NFx8K5b78efLbzQr/7bavw6ufRSxo+H3f6H9paR+vXZ61UV0X/7906b3NGv9/vcmb1XCxaLtB2MzM+dHInqTueWfj97atogX+fP2Dx5s3P93R/zzeW27fRGRf4kfioiHIyp3bXndH4mIRyPi4AoH4PtXHns3f/9pTe1vr7z9J1Z1/usDPbH0k0aBrjPffd2s/NbO/5FKaLD2SSvXv2rhxXWreQXXetwAAADgTpJW/g98kkRU50121aXtiR3p5NT0zFMnp94/d6KaVoqetJjpGqibDx2pzQ0X8dEl8cOVeeMsy7LtlfjQ+NRku9bUgdbsrPb/dGjhWpCmQ0PVtD+6Fud9sSM1BNpqVetozZ5oA+5IrfV/HR82o4X+v/xJwILOD5tUtf93DXS6HsDG8/daYOtq1P8vRdzoQFWADeb3H7Yu/R+2rtX2/1Kb6gFsPL//sCUtfiS+N1p4nL+lwO5j67OfzR/o6nQ1+ta2eaQdP3TLA0mDpLRB5rTlPfeuS8VipTx9EdHqDi/FRh3MTl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1se/AQAA//++KOKq")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1})

785.477816ms ago: executing program 0:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{}, {0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0)
syz_io_uring_setup(0x4dc3, &(0x7f0000000140)={0x0, 0x80000}, 0x0, &(0x7f0000000000))
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
prlimit64(0x0, 0x6, 0x0, 0x0)
setuid(0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0)
dup2(r3, r2)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

591.55277ms ago: executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x3d}, {0x6}]}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60d198fd00102100fc02000000000011000000fe8000000000000000000000000000aa000000000401907800c03d4e000121d73d2e8f92856cd32f5b"], 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x40086604, 0x1000000000000)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kyber_throttled\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x24c}}, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r7 = dup2(r6, r6)
ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000001c0)={0x14000000})
read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0x2020)

587.748099ms ago: executing program 2:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(0xffffffffffffffff, &(0x7f0000000100)=""/85, 0x55)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)

481.518691ms ago: executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8)
fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v2, 0x14, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x21}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/1508], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1}, 0x48)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r1, 0x0, 0x6, 0x0)
write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7}, 0x7)
fcntl$setstatus(r1, 0x4, 0x7c00)
write$uinput_user_dev(r1, &(0x7f0000000640)={'syz0\x00', {0x0, 0x3}, 0x0, [0x4, 0x40, 0xa7, 0x4, 0x6, 0x5, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x6, 0x80000000, 0x0, 0x3, 0x7, 0x101, 0x94, 0x64, 0x7fff, 0x6da, 0x9, 0xff, 0x6, 0x0, 0x3ff, 0x4, 0x8, 0x800, 0x1ff, 0x400, 0x5, 0x1f, 0x8a2a, 0x4, 0xfff, 0xfffffffb, 0x2, 0xf2aa, 0xc5, 0x10001, 0x0, 0x5, 0x1, 0x2, 0x3f, 0x2, 0xffffff81, 0x7, 0x3f, 0x3, 0x81, 0x100, 0x1, 0x7, 0x8, 0x0, 0x80, 0x401, 0x0, 0x0, 0x3ff], [0x6, 0x0, 0x1f, 0x6, 0x1, 0x200, 0xbf, 0x4, 0x7f, 0x4000, 0x1, 0xff, 0x4, 0x9, 0xfffffffc, 0x3afcfd42, 0x26, 0xa7, 0xfff, 0x2000, 0x1, 0x9, 0x1, 0xff, 0xd3, 0xed, 0x40, 0x7fffffff, 0x2, 0x1, 0xfff, 0x9, 0x8cc4, 0x3, 0x4, 0x0, 0x2000000, 0xffffffff, 0x10000000, 0x9, 0x80000001, 0x8, 0x6, 0x4dda, 0x2, 0x0, 0x8, 0x29, 0x7, 0x9, 0x8, 0x6, 0x0, 0x7fe000, 0x8, 0x3, 0x1f, 0xfffff800, 0x3f, 0x1, 0x6, 0x9, 0x4, 0x3], [0x1000, 0x80000000, 0x1, 0x2, 0x81, 0x6, 0x7, 0x1ff, 0x1, 0x4, 0x5, 0x9, 0x5, 0x5, 0x1, 0x7ff, 0x100, 0x6, 0x1, 0x5, 0x1, 0x80000001, 0xfffffffe, 0x0, 0x5, 0x317, 0x5, 0x5, 0x1, 0x6, 0x1000, 0x40, 0xcc, 0x5, 0x1, 0x6, 0xacf0, 0x7b0, 0x7f, 0x5, 0x2, 0x4, 0xffffffcd, 0xf20, 0x27, 0x1, 0x0, 0xffffffff, 0x5d3a38a8, 0xefe3, 0x80000000, 0x1, 0x8, 0xc7e1, 0xcdec, 0x5, 0x2, 0x951, 0x8, 0x9, 0x8, 0xdb15, 0x7, 0x101], [0x80000000, 0x8, 0xff, 0x7, 0x2, 0x2, 0x7fffffff, 0x3, 0x7, 0xffff, 0x2, 0x6, 0x4e8d3541, 0x5, 0x800, 0x7, 0x3b, 0x400, 0x8, 0x9, 0xffff, 0x3, 0x100, 0x4, 0xff, 0x588, 0x9, 0x1, 0x5, 0x10001, 0x7, 0x3, 0x9da, 0x3, 0x4, 0xfffff801, 0x943, 0x9, 0x4, 0x1ff, 0x8001, 0x4543b62, 0x8, 0x100, 0xa3, 0x8, 0x6, 0xe5, 0x17a, 0xffff, 0x6, 0x80000, 0x6, 0x9, 0x200, 0x7, 0x7, 0x80000000, 0x3, 0x7a, 0x3f, 0x5, 0x40, 0xfbb]}, 0x45c)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='5', 0xfdef}], 0x1)
dup3(r2, r1, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000e50601"], 0x14}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r3, 0xb, 0x0, @val=@tracing}, 0x40)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={<r5=>0x0}, &(0x7f00000001c0)=0xc)
write$P9_RGETLOCK(r3, &(0x7f0000000200)={0x619, 0x37, 0x2, {0x1, 0x10001, 0x4, r5, 0x5fb, 'Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea'}}, 0x619)
fchown(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x21000f, &(0x7f00000000c0), 0x1, 0x4f0, &(0x7f0000000a40)="$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")

157.25858ms ago: executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x6}, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {}], 0x54)
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "dda79475"}]}}, 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x63, 0xe8, 0x1e, 0x10, 0x1199, 0x25, 0x1e64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x99, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a00fbbe00000000000000000a000000000000004cd4ac5d131535a66538de3d4211756c8a8c235eddd35ebe5127635bda9f78fbdba7a043dbb51308a47b7b28683537056d6e04314f03ec5ac1f527c7f949101d440dd5d18f6234f5016fad2d59e6388af73ab284f3babf72414cf36c42ee480000000000000000"], 0x1c}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_targets\x00')
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, 0x0, 0x0)
lseek(r2, 0x80000001, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x3)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x14)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4)

10.759605ms ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x420, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
getdents(r0, &(0x7f0000002380)=""/102, 0x66)

0s ago: executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff)
fchown(r1, 0x0, 0x0)
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x15)
ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000000c0)={0x100000, 0x1000, 0x5, 0x9, 0x4})
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000500)='./bus\x00', 0x410, &(0x7f0000000000), 0xfc, 0x540, &(0x7f0000000540)="$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")
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2004d95, &(0x7f0000000040), 0x0, 0x523, &(0x7f0000000a80)="$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")
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, <r4=>0x0}, 0x2058)
write$FUSE_INIT(r2, &(0x7f0000004340)={0x50, 0x0, r4}, 0x50)
read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_IOCTL(r2, &(0x7f0000002140)={0x20, 0x0, r5}, 0x20)
syz_fuse_handle_req(r2, &(0x7f0000008380)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r2, &(0x7f0000002300)={0x2020, 0x0, <r6=>0x0}, 0x2020)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80086601, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002200)={0x1, &(0x7f0000002180)=[{0x40, 0x8, 0x4, 0x3}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002240))
write$FUSE_LK(r2, &(0x7f00000021c0)={0x28, 0x0, r6}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000880), 0x300, r8}, 0x38)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x6, r8}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

kernel console output (not intermixed with test programs):

003e syscall=202 compat=0 ip=0x7f5ea627cea9 code=0x7fc00000
[  267.985749][ T5579] loop0: detected capacity change from 0 to 256
[  268.019002][ T5575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.222225][ T3978] hsr_slave_0: left promiscuous mode
[  268.250430][ T5575] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set
[  268.282200][ T3978] hsr_slave_1: left promiscuous mode
[  268.321196][ T5575] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117
[  268.339536][ T5575] EXT4-fs (loop3): This should not happen!! Data will be lost
[  268.339536][ T5575] 
[  268.361139][ T5579] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  268.385844][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.394069][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.409214][ T5585] fuse: Unknown parameter 'user_i00000000000000000000'
[  268.504567][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.512484][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.563467][ T3978] veth1_macvtap: left promiscuous mode
[  268.569213][ T3978] veth0_macvtap: left promiscuous mode
[  268.575258][ T3978] veth1_vlan: left promiscuous mode
[  268.580883][ T3978] veth0_vlan: left promiscuous mode
[  268.591307][ T5077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  268.599092][   T50] Bluetooth: hci4: command tx timeout
[  268.609978][ T5077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  268.620540][ T5077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  269.053777][ T5077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  269.074956][ T5077] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  269.090028][ T5077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  269.239619][ T5575] syz-executor.3 (5575) used greatest stack depth: 4416 bytes left
[  269.745375][ T5091] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.790675][ T5147] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  269.886856][   T29] audit: type=1800 audit(1718281772.424:39): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048596 res=0 errno=0
[  270.097968][ T5147] usb 3-1: Using ep0 maxpacket: 16
[  270.261722][ T5147] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  270.272945][ T5147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  270.288260][ T5147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  270.298291][ T5147] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  270.308427][ T5147] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  270.477116][ T5147] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  270.489870][ T5147] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  270.511400][ T5147] usb 3-1: Manufacturer: syz
[  270.774110][ T3978] team0 (unregistering): Port device team_slave_1 removed
[  270.854308][ T3978] team0 (unregistering): Port device team_slave_0 removed
[  271.260995][ T5147] usb 3-1: config 0 descriptor??
[  271.268727][ T5596] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  271.312845][ T5081] Bluetooth: hci1: command tx timeout
[  272.252051][ T5130] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  272.412505][ T5626] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  272.531619][ T5147] rc_core: IR keymap rc-hauppauge not found
[  272.537846][ T5147] Registered IR keymap rc-empty
[  272.543729][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  273.078363][ T5628] loop3: detected capacity change from 0 to 32768
[  273.112381][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.123857][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.134563][ T5130] usb 1-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00
[  273.146408][ T5130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.166175][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  273.248947][ T5130] usb 1-1: config 0 descriptor??
[  273.285448][ T5147] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  273.303146][ T5147] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8
[  273.362682][   T29] audit: type=1800 audit(1718281775.804:40): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1939 res=0 errno=0
[  273.394810][ T5081] Bluetooth: hci1: command tx timeout
[  273.511014][ T5586] chnl_net:caif_netlink_parms(): no params data found
[  273.518710][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  273.545740][ T5628] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.656611][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  273.709807][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  273.741240][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  273.791063][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  273.829466][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  273.912774][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  274.003951][ T5615] loop0: detected capacity change from 0 to 256
[  274.043151][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  274.138001][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  274.263505][ T5147] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  274.294989][ T5628] XFS (loop3): Ending clean mount
[  274.311084][ T5628] XFS (loop3): Quotacheck needed: Please wait.
[  274.415844][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.419769][ T5147] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  274.425689][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.432711][ T5147] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  274.461147][ T5081] Bluetooth: hci2: command tx timeout
[  274.603352][ T5653] fuse: Unknown parameter 'user_i00000000000000000000'
[  274.630993][   T29] audit: type=1326 audit(1718281777.184:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea627cea9 code=0x7fc00000
[  274.694064][ T5147] usb 3-1: USB disconnect, device number 8
[  274.710152][ T5628] XFS (loop3): Quotacheck: Done.
[  275.471161][ T5081] Bluetooth: hci1: command tx timeout
[  275.500984][ T5091] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.656399][ T5663] loop1: detected capacity change from 0 to 256
[  275.686429][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.694365][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.708815][ T5586] bridge_slave_0: entered allmulticast mode
[  275.720758][ T5586] bridge_slave_0: entered promiscuous mode
[  275.780896][ T5130] usbhid 1-1:0.0: can't add hid device: -71
[  275.787541][ T5130] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  275.836318][ T5130] usb 1-1: USB disconnect, device number 4
[  275.886470][ T5663] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  275.963381][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.973308][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.981319][ T5586] bridge_slave_1: entered allmulticast mode
[  275.990366][ T5586] bridge_slave_1: entered promiscuous mode
[  276.610989][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.886507][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.552175][ T5081] Bluetooth: hci1: command tx timeout
[  277.560538][   T29] audit: type=1800 audit(1718281779.894:42): pid=5663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048601 res=0 errno=0
[  277.700072][ T5586] team0: Port device team_slave_0 added
[  277.741359][ T5586] team0: Port device team_slave_1 added
[  278.054921][ T5677] loop0: detected capacity change from 0 to 8
[  278.228644][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.237006][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.268903][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.654045][ T5675] loop2: detected capacity change from 0 to 32768
[  278.676007][ T5675] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5675)
[  278.722257][ T5675] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  278.732889][ T5675] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[  278.744333][ T5675] BTRFS info (device loop2): using free-space-tree
[  278.756134][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.764037][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.795444][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.167353][ T5675] BTRFS info (device loop2): checking UUID tree
[  279.223490][ T5586] hsr_slave_0: entered promiscuous mode
[  279.316609][ T5586] hsr_slave_1: entered promiscuous mode
[  279.431978][ T5586] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.439770][ T5586] Cannot create hsr debugfs directory
[  279.473056][   T29] audit: type=1800 audit(1718281781.974:43): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=264 res=0 errno=0
[  279.493806][    C1] vkms_vblank_simulate: vblank timer overrun
[  279.880538][ T5708] Bluetooth: MGMT ver 1.22
[  279.885303][ T5708] Bluetooth: hci3: invalid len left 7, exp >= 42
[  280.039220][ T5086] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  280.566074][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[  280.572906][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
[  281.142844][ T5722] fuse: Unknown parameter 'user_i00000000000000000000'
[  281.154082][ T5081] Bluetooth: hci0: command tx timeout
[  281.268746][ T5720] loop3: detected capacity change from 0 to 512
[  281.573882][ T5720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.821495][ T5720] process 'syz-executor.3' launched './file1' with NULL argv: empty string added
[  281.941350][ T5721] loop1: detected capacity change from 0 to 32768
[  281.997126][   T29] audit: type=1326 audit(1718281784.374:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73087cea9 code=0x7fc00000
[  282.186928][ T5721] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  282.296972][ T5091] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.697239][ T5745] pimreg: entered allmulticast mode
[  282.751596][ T5739] lo: entered allmulticast mode
[  282.786715][ T5739] netlink: 13752 bytes leftover after parsing attributes in process `syz-executor.2'.
[  282.818361][ T5739] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.2'.
[  282.822881][ T5721] XFS (loop1): Ending clean mount
[  282.850422][ T5586] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  282.877385][ T5721] XFS (loop1): Quotacheck needed: Please wait.
[  282.992558][ T5586] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  283.046358][ T5721] XFS (loop1): Quotacheck: Done.
[  283.173149][ T5586] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  283.332543][ T5586] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  283.734947][ T5083] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  283.903936][ T5753] loop2: detected capacity change from 0 to 256
[  284.264781][ T5753] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  284.383899][ T4729] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  284.717262][ T4729] usb 1-1: Using ep0 maxpacket: 16
[  284.872955][ T4729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.885073][ T4729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.895341][ T4729] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  284.908641][ T4729] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  284.922188][ T4729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.131383][ T4729] usb 1-1: config 0 descriptor??
[  285.568196][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.682659][ T4729] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  285.690083][ T5586] 8021q: adding VLAN 0 to HW filter on device team0
[  285.723495][  T779] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.731293][  T779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.794595][ T4729] microsoft 0003:045E:07DA.0002: No inputs registered, leaving
[  285.829418][  T779] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.837197][  T779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.883006][ T4729] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  285.897171][ T4729] microsoft 0003:045E:07DA.0002: no inputs found
[  285.903955][ T4729] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[  286.024458][   T29] audit: type=1800 audit(1718281788.484:45): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048606 res=0 errno=0
[  286.170135][ T4729] usb 1-1: USB disconnect, device number 5
[  286.191527][ T5081] Bluetooth: hci4: command tx timeout
[  287.339141][ T5777] vcan0: entered allmulticast mode
[  287.352369][ T5776] loop2: detected capacity change from 0 to 164
[  287.577072][ T5777] vcan0: left allmulticast mode
[  288.185526][ T5779] loop1: detected capacity change from 0 to 32768
[  288.228895][ T5779] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5779)
[  288.283937][ T5776] loop2: detected capacity change from 0 to 2048
[  288.290924][ T5782] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  288.325917][ T5779] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  288.338672][ T5779] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[  288.350046][ T5779] BTRFS info (device loop1): using free-space-tree
[  288.510022][ T5776]  loop2: p1 < > p2 < > p3 p4 < >
[  288.515930][ T5776] loop2: partition table partially beyond EOD, truncated
[  288.524479][ T5776] loop2: p1 start 2305 is beyond EOD, truncated
[  288.531142][ T5776] loop2: p2 start 4294902784 is beyond EOD, truncated
[  288.538172][ T5776] loop2: p3 start 4278191616 is beyond EOD, truncated
[  288.593796][ T5791] fuse: Unknown parameter 'user_id00000000000000000000'
[  288.856611][ T5779] BTRFS info (device loop1): checking UUID tree
[  288.933396][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.992347][ T4488]  loop2: p1 < > p2 < > p3 p4 < >
[  288.997739][ T4488] loop2: partition table partially beyond EOD, truncated
[  289.007375][ T4488] loop2: p1 start 2305 is beyond EOD, truncated
[  289.019417][ T4488] loop2: p2 start 4294902784 is beyond EOD, truncated
[  289.028641][ T4488] loop2: p3 start 4278191616 is beyond EOD, truncated
[  289.170374][   T29] audit: type=1800 audit(1718281791.644:46): pid=5779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=264 res=0 errno=0
[  289.260562][ T5263] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  289.669364][ T5083] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  290.042294][ T5263] udevd[5263]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  290.405199][   T29] audit: type=1326 audit(1718281792.924:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5811 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73087cea9 code=0x7fc00000
[  290.428756][   T29] audit: type=1326 audit(1718281792.954:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa96447cea9 code=0x0
[  290.429900][ T5263] udevd[5263]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  291.537500][ T5842] loop2: detected capacity change from 0 to 256
[  291.808394][ T5842] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  292.065595][ T5838] loop0: detected capacity change from 0 to 32768
[  292.259664][ T5849] loop1: detected capacity change from 0 to 1024
[  292.286326][ T5849] hfsplus: unable to parse mount options
[  293.234424][ T5081] Bluetooth: hci2: command tx timeout
[  293.504972][ T5586] veth0_vlan: entered promiscuous mode
[  293.544211][ T5838] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  293.740877][   T29] audit: type=1800 audit(1718281796.154:49): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048611 res=0 errno=0
[  293.806489][ T5586] veth1_vlan: entered promiscuous mode
[  294.469293][ T5586] veth0_macvtap: entered promiscuous mode
[  294.590439][ T5586] veth1_macvtap: entered promiscuous mode
[  294.599925][ T5838] XFS (loop0): Ending clean mount
[  294.755802][ T5838] XFS (loop0): Quotacheck needed: Please wait.
[  294.842178][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.856400][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.867397][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.878882][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.889041][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.899691][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.909840][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.920535][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.934031][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.215638][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.227605][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.237943][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.246560][ T5871] fuse: Unknown parameter 'user_id00000000000000000000'
[  295.248612][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.270916][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.283141][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.293276][ T5586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.304111][ T5586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.319222][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.406451][ T5586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.415832][ T5586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.425056][ T5586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.434188][ T5586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.491279][ T5877] loop3: detected capacity change from 0 to 16
[  295.531334][ T5838] XFS (loop0): Quotacheck: Done.
[  295.602289][ T5877] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock
[  295.725091][ T5074] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.612797][ T5882] loop1: detected capacity change from 0 to 32768
[  296.807361][ T5882] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.882723][   T29] audit: type=1326 audit(1718281799.294:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5880 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac7cea9 code=0x7fc00000
[  297.234388][ T5901] loop2: detected capacity change from 0 to 256
[  297.629685][ T5882] XFS (loop1): Ending clean mount
[  297.674402][ T5882] XFS (loop1): Quotacheck needed: Please wait.
[  297.881591][ T5263] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  297.930731][ T5882] XFS (loop1): Quotacheck: Done.
[  298.470880][ T5083] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  298.701652][ T5913] loop2: detected capacity change from 0 to 4096
[  298.751782][ T5913] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  298.878674][ T5913] ntfs3: loop2: $Secure::$SDH is corrupted.
[  298.885257][ T5913] ntfs3: loop2: Failed to initialize $Secure (-22).
[  298.930990][  T779] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  299.119300][ T5919] loop0: detected capacity change from 0 to 256
[  299.232764][  T779] usb 4-1: Using ep0 maxpacket: 8
[  299.432682][ T5919] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  299.567997][  T779] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  299.577447][  T779] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  299.586011][  T779] usb 4-1: Product: syz
[  299.590473][  T779] usb 4-1: Manufacturer: syz
[  299.595298][  T779] usb 4-1: SerialNumber: syz
[  299.769036][  T779] usb 4-1: config 0 descriptor??
[  299.837884][  T779] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  299.900667][ T5081] Bluetooth: hci4: command tx timeout
[  300.253773][  T779] gspca_zc3xx: reg_r err -71
[  300.259057][  T779] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  300.391610][  T779] usb 4-1: USB disconnect, device number 2
[  300.534649][ T5919] kexec: Could not allocate control_code_buffer
[  300.644372][ T5928] loop1: detected capacity change from 0 to 256
[  300.845860][ T5928] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  301.806680][ T5931] loop2: detected capacity change from 0 to 32768
[  302.163781][ T5931] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.236086][   T29] audit: type=1800 audit(1718281804.734:51): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048618 res=0 errno=0
[  302.261791][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  302.433587][ T5944] fuse: Unknown parameter 'user_id00000000000000000000'
[  303.158577][ T5931] XFS (loop2): Ending clean mount
[  303.214567][ T5931] XFS (loop2): Quotacheck needed: Please wait.
[  303.377124][ T5931] XFS (loop2): Quotacheck: Done.
[  303.579830][ T5954] loop3: detected capacity change from 0 to 4096
[  303.642166][ T5950] loop1: detected capacity change from 0 to 4096
[  303.688046][ T5950] ntfs3: loop1: ino=3, Correct links count -> 2.
[  303.801681][ T5954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.854909][   T29] audit: type=1326 audit(1718281806.344:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73087cea9 code=0x7fc00000
[  303.960500][    C1] vkms_vblank_simulate: vblank timer overrun
[  304.142504][ T5086] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  305.047832][ T5091] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.326511][ T5971] loop1: detected capacity change from 0 to 2048
[  305.426361][  T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.434604][  T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.579471][ T5971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.636584][  T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.644809][  T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.880675][ T5980] loop3: detected capacity change from 0 to 256
[  307.016663][ T5980] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  307.866661][ T5993] loop2: detected capacity change from 0 to 256
[  307.902429][ T5083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.968562][ T5993] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  308.199796][ T5996] loop0: detected capacity change from 0 to 64
[  309.361602][ T5081] Bluetooth: hci3: command tx timeout
[  309.398739][   T29] audit: type=1800 audit(1718281811.924:53): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048624 res=0 errno=0
[  309.468762][ T6008] fuse: Bad value for 'fd'
[  309.676215][ T6004] loop4: detected capacity change from 0 to 32768
[  309.696080][   T29] audit: type=1326 audit(1718281812.194:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96447cea9 code=0x7fc00000
[  309.851442][ T6004] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  310.127048][ T6023] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'.
[  310.439956][ T6027] syz-executor.3 (pid 6027) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  310.582138][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  310.753610][ T6004] XFS (loop4): Ending clean mount
[  310.804470][ T6004] XFS (loop4): Quotacheck needed: Please wait.
[  310.899797][ T6004] XFS (loop4): Quotacheck: Done.
[  311.065384][ T5586] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.080837][  T780] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  311.712155][  T780] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  311.721822][  T780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.730168][  T780] usb 3-1: Product: syz
[  311.734921][  T780] usb 3-1: Manufacturer: syz
[  311.739734][  T780] usb 3-1: SerialNumber: syz
[  311.815419][  T780] usb 3-1: config 0 descriptor??
[  311.903261][  T780] ch341 3-1:0.0: ch341-uart converter detected
[  311.963652][ T6046] loop0: detected capacity change from 0 to 128
[  312.000069][ T6043] loop3: detected capacity change from 0 to 2048
[  312.090766][ T6043] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  312.102070][ T5356] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  312.166701][  T780] usb 3-1: failed to receive control message: -121
[  312.174038][  T780] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  312.312136][ T4729] usb 3-1: USB disconnect, device number 9
[  312.320841][ T4729] ch341 3-1:0.0: device disconnected
[  312.332214][ T6044] loop1: detected capacity change from 0 to 4096
[  312.988172][ T6051] loop0: detected capacity change from 0 to 1024
[  313.230681][ T5081] Bluetooth: hci2: command tx timeout
[  313.314505][ T6054] fuse: Bad value for 'fd'
[  313.375118][ T6057] loop2: detected capacity change from 0 to 256
[  313.579868][ T6057] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  314.004437][   T29] audit: type=1800 audit(1718281816.504:55): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1957 res=0 errno=0
[  314.236587][   T29] audit: type=1326 audit(1718281816.684:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea627cea9 code=0x7fc00000
[  315.087833][   T29] audit: type=1800 audit(1718281817.544:57): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048626 res=0 errno=0
[  315.117991][ T6078] loop1: detected capacity change from 0 to 256
[  316.018182][ T6091] loop3: detected capacity change from 0 to 16
[  316.035137][ T6093] fuse: Bad value for 'fd'
[  316.041430][ T4729] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  316.136487][ T6094] loop4: detected capacity change from 0 to 1024
[  316.301221][ T4729] usb 3-1: device descriptor read/64, error -71
[  316.463620][   T29] audit: type=1804 audit(1718281818.964:58): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir793814770/syzkaller.lqGVny/4/file0/bus" dev="loop4" ino=26 res=1 errno=0
[  316.610711][ T4729] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  316.858481][ T4729] usb 3-1: device descriptor read/64, error -71
[  317.002080][ T4729] usb usb3-port1: attempt power cycle
[  317.444661][ T4729] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  317.506587][   T58] hfsplus: b-tree write err: -5, ino 4
[  317.609549][ T4729] usb 3-1: device descriptor read/8, error -71
[  317.769680][ T6113] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.1'.
[  317.940819][ T4729] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  317.952114][ T6109] loop0: detected capacity change from 0 to 512
[  318.006854][ T6109] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  318.020915][ T6109] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  318.051383][ T4729] usb 3-1: device descriptor read/8, error -71
[  318.061285][ T6109] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  318.080734][ T6109] EXT4-fs error (device loop0): __ext4_get_inode_loc:4364: comm syz-executor.0: Invalid inode table block 0 in block_group 0
[  318.115225][ T6109] EXT4-fs (loop0): get root inode failed
[  318.121493][ T6109] EXT4-fs (loop0): mount failed
[  318.181708][ T5263] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  318.204335][ T4729] usb usb3-port1: unable to enumerate USB device
[  318.257142][   T29] audit: type=1326 audit(1718281820.744:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96447cea9 code=0x7ffc0000
[  318.282037][   T29] audit: type=1326 audit(1718281820.744:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96447cea9 code=0x7ffc0000
[  318.460594][   T29] audit: type=1326 audit(1718281820.944:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b0a7cea9 code=0x7fc00000
[  318.493590][ T6124] loop1: detected capacity change from 0 to 256
[  318.678361][ T6124] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  318.877479][   T29] audit: type=1326 audit(1718281821.394:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79b0a7cea9 code=0x7fc00000
[  319.154232][ T6129] fuse: Bad value for 'fd'
[  319.447725][ T6133] loop1: detected capacity change from 0 to 16
[  319.561086][ T6133] erofs: (device loop1): mounted with root inode @ nid 36.
[  319.640575][ T6133] syz-executor.1: attempt to access beyond end of device
[  319.640575][ T6133] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  319.755156][ T6140] syz-executor.1: attempt to access beyond end of device
[  319.755156][ T6140] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  320.375838][ T6146] loop4: detected capacity change from 0 to 8
[  320.789397][ T6152] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.2'.
[  321.604270][   T29] audit: type=1800 audit(1718281824.074:63): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1966 res=0 errno=0
[  321.759729][ T6159] loop2: detected capacity change from 0 to 164
[  322.002342][ T6168] loop1: detected capacity change from 0 to 128
[  322.086142][ T6156] loop0: detected capacity change from 0 to 512
[  322.142360][ T6171] loop4: detected capacity change from 0 to 256
[  322.276872][ T6156] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  322.286676][   T29] audit: type=1800 audit(1718281824.774:64): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048628 res=0 errno=0
[  322.337218][ T6171] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  322.353258][ T6156] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  322.417162][ T6156] EXT4-fs error (device loop0): __ext4_get_inode_loc:4364: comm syz-executor.0: Invalid inode table block 0 in block_group 0
[  322.529185][ T6156] EXT4-fs (loop0): get root inode failed
[  322.536288][ T6156] EXT4-fs (loop0): mount failed
[  322.894536][ T6178] fuse: Bad value for 'fd'
[  323.376214][ T6188] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.2'.
[  323.388261][ T6185] loop4: detected capacity change from 0 to 128
[  323.397078][ T6184] loop3: detected capacity change from 0 to 1024
[  323.414170][ T6185] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  324.104961][ T6191] loop0: detected capacity change from 0 to 40427
[  324.145847][ T6191] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  324.154165][ T6191] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  324.300559][ T6191] F2FS-fs (loop0): Found nat_bits in checkpoint
[  325.242112][   T29] audit: type=1326 audit(1718281827.754:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa96447cea9 code=0x0
[  326.075115][ T6210] loop3: detected capacity change from 0 to 40427
[  326.115556][ T6210] F2FS-fs (loop3): invalid crc value
[  326.317187][ T6210] F2FS-fs (loop3): Found nat_bits in checkpoint
[  326.627438][ T6215] loop1: detected capacity change from 0 to 256
[  326.643689][ T6210] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  326.778768][   T29] audit: type=1800 audit(1718281829.234:66): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=10 res=0 errno=0
[  326.933642][ T6215] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  327.362099][ T5091] syz-executor.3: attempt to access beyond end of device
[  327.362099][ T5091] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  328.459728][ T6222] loop4: detected capacity change from 0 to 512
[  328.460634][ T6232] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.2'.
[  328.573467][ T5558] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  328.635009][ T6222] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  328.715642][ T6222] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  328.779498][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  328.789363][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  328.799132][ T6235] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'.
[  328.861597][ T6222] EXT4-fs error (device loop4): __ext4_get_inode_loc:4364: comm syz-executor.4: Invalid inode table block 0 in block_group 0
[  328.929155][ T6239] loop1: detected capacity change from 0 to 1024
[  328.941296][ T6222] EXT4-fs (loop4): get root inode failed
[  328.947167][ T6222] EXT4-fs (loop4): mount failed
[  329.013837][ T6239] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  329.241819][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.583994][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  329.734427][ T5083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.327525][ T6260] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  330.438907][ T4729] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  330.904570][ T4729] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.915124][ T4729] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  330.962606][ T6265] fuse: Bad value for 'fd'
[  331.071096][ T4729] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  331.081094][ T4729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  331.089346][ T4729] usb 3-1: SerialNumber: syz
[  331.114740][   T29] audit: type=1326 audit(1718281833.624:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79b0a7cea9 code=0x0
[  331.425242][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  331.527265][ T6274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.040004][ T6271] loop4: detected capacity change from 0 to 40427
[  332.083623][ T4729] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  332.103576][ T6271] F2FS-fs (loop4): invalid crc value
[  332.174660][ T6253] loop2: detected capacity change from 0 to 1764
[  332.185200][ T6271] F2FS-fs (loop4): Found nat_bits in checkpoint
[  332.480925][ T6271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  332.626731][   T29] audit: type=1800 audit(1718281835.164:68): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=10 res=0 errno=0
[  332.933683][ T6289] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  332.958980][ T6289] fuse: Bad value for 'fd'
[  332.983584][ T6289] Zero length message leads to an empty skb
[  333.011229][ T6253] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  333.068124][ T6291] loop0: detected capacity change from 0 to 128
[  333.083332][ T6291] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  333.202078][ T6291] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  333.264315][ T5586] syz-executor.4: attempt to access beyond end of device
[  333.264315][ T5586] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  333.424960][  T779] usb 3-1: USB disconnect, device number 14
[  333.666290][ T6287] loop1: detected capacity change from 0 to 512
[  333.698855][ T6287] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  333.727268][ T6298] loop3: detected capacity change from 0 to 2048
[  333.747521][ T6287] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  333.776626][ T6287] EXT4-fs error (device loop1): __ext4_get_inode_loc:4364: comm syz-executor.1: Invalid inode table block 0 in block_group 0
[  333.812099][ T6298]  loop3: p3 < > p4 < >
[  333.816509][ T6298] loop3: partition table partially beyond EOD, truncated
[  333.817469][ T6287] EXT4-fs (loop1): get root inode failed
[  333.824849][ T6298] loop3: p3 start 4284289 is beyond EOD, 
[  333.829759][ T6287] EXT4-fs (loop1): mount failed
[  333.841106][ T6298] truncated
[  334.138486][ T6296] vivid-006: disconnect
[  334.193139][ T6295] vivid-006: reconnect
[  334.242369][ T4488]  loop3: p3 < > p4 < >
[  334.246796][ T4488] loop3: partition table partially beyond EOD, truncated
[  334.255200][ T4488] loop3: p3 start 4284289 is beyond EOD, truncated
[  334.265993][ T5558] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  334.782470][ T6313] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  335.074724][ T6315] fuse: Unknown parameter '0x0000000000000003'
[  335.434920][ T6318] loop3: detected capacity change from 0 to 1024
[  335.509499][ T5263] udevd[5263]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  336.045664][ T6326] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.0'.
[  336.071221][   T85] hfsplus: b-tree write err: -5, ino 4
[  336.089531][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.459474][ T5263] udevd[5263]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  336.509118][ T6329] loop3: detected capacity change from 0 to 16
[  336.547866][ T6329] erofs: (device loop3): mounted with root inode @ nid 36.
[  336.575278][   T29] audit: type=1326 audit(1718281839.094:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ea627cea9 code=0x0
[  337.484291][ T6333] loop1: detected capacity change from 0 to 40427
[  337.509731][ T6333] F2FS-fs (loop1): invalid crc value
[  337.633205][ T6333] F2FS-fs (loop1): Found nat_bits in checkpoint
[  337.927402][ T6333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  338.136195][ T6337] loop4: detected capacity change from 0 to 32768
[  338.243413][   T29] audit: type=1800 audit(1718281840.614:70): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=10 res=0 errno=0
[  338.348461][ T6337] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  338.521609][  T779] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  338.707178][ T5083] syz-executor.1: attempt to access beyond end of device
[  338.707178][ T5083] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  338.931409][ T5077] Bluetooth: hci2: command 0x0406 tx timeout
[  338.939754][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  338.946454][ T5077] Bluetooth: hci4: command 0x0406 tx timeout
[  338.953148][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  338.979275][ T6361] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) !
[  339.330421][ T6337] XFS (loop4): Ending clean mount
[  339.363894][ T6337] XFS (loop4): Quotacheck needed: Please wait.
[  339.373410][  T779] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  339.380056][ T6347] loop0: detected capacity change from 0 to 512
[  339.384577][  T779] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  339.462514][ T6347] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  339.486248][  T779] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  339.497526][  T779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  339.506553][  T779] usb 3-1: SerialNumber: syz
[  339.538838][ T6347] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  339.589485][ T6337] XFS (loop4): Quotacheck: Done.
[  339.614472][  T779] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  339.651865][ T6347] EXT4-fs error (device loop0): __ext4_get_inode_loc:4364: comm syz-executor.0: Invalid inode table block 0 in block_group 0
[  339.692915][ T6347] EXT4-fs (loop0): get root inode failed
[  339.698799][ T6347] EXT4-fs (loop0): mount failed
[  339.894289][ T6371] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  340.115269][ T5586] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  340.382585][ T6349] loop2: detected capacity change from 0 to 1764
[  340.740896][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  340.814027][ T6346] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  340.876983][ T6374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  341.109729][ T4729] usb 3-1: USB disconnect, device number 15
[  341.270129][ T6379] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.3'.
[  341.505751][ T6381] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  341.515489][ T6381] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  341.524785][ T6381] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  341.534014][ T6381] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  341.993101][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[  341.999786][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
[  342.239005][ T6385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.959161][ T6390] loop0: detected capacity change from 0 to 32768
[  342.985821][ T6390] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6390)
[  343.039736][ T6390] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  343.050364][ T6390] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  343.061492][ T6390] BTRFS info (device loop0): using free-space-tree
[  343.742282][ T6415] loop2: detected capacity change from 0 to 1024
[  343.751297][ T6415] EXT4-fs: Ignoring removed nomblk_io_submit option
[  343.818053][ T6415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  343.887255][ T6415] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  343.951918][ T5074] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  344.093972][ T6415] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  344.211301][ T6415] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 11 (err -117)
[  344.281641][ T6415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.396324][ T6415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.652140][ T6436] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.4'.
[  344.697026][ T6421] loop3: detected capacity change from 0 to 512
[  344.852454][ T6421] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  344.927910][ T6421] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  344.951873][ T6442] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  344.993084][ T6421] EXT4-fs error (device loop3): __ext4_get_inode_loc:4364: comm syz-executor.3: Invalid inode table block 0 in block_group 0
[  345.072827][ T6421] EXT4-fs (loop3): get root inode failed
[  345.078714][ T6421] EXT4-fs (loop3): mount failed
[  346.000499][  T779] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  346.202162][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  346.290642][  T779] usb 5-1: Using ep0 maxpacket: 8
[  346.423576][  T779] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  346.434501][  T779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.604043][  T779] usb 5-1: config 0 descriptor??
[  346.860931][  T779] viperboard 5-1:0.0: version 0.00 found at bus 005 address 003
[  346.955882][ T6467] loop0: detected capacity change from 0 to 256
[  346.963317][  T779] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  346.974041][  T779] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  347.068112][ T6449] syzkaller0: entered promiscuous mode
[  347.126776][ T6449] syzkaller0: entered allmulticast mode
[  347.188734][ T6467] exfat: Unknown parameter 'Z×)]ïù'
[  347.277316][ T6472] loop3: detected capacity change from 0 to 256
[  347.421762][ T4432] Bluetooth: hci1: command 0x0405 tx timeout
[  347.812702][ T4729] usb 5-1: USB disconnect, device number 3
[  348.187214][ T6472] loop3: detected capacity change from 0 to 4096
[  348.243906][ T6472] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  348.604633][ T6481] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  349.516096][ T6493] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  349.841879][   T29] audit: type=1326 audit(1718281852.374:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4afac7cea9 code=0x0
[  349.987559][ T6484] loop1: detected capacity change from 0 to 512
[  350.164631][ T6484] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  350.252413][ T6484] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  350.311204][ T4432] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  350.327560][ T4432] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  350.337108][ T4432] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  350.355587][ T4432] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  350.374219][ T4432] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  350.390488][ T4432] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  350.481710][ T6484] EXT4-fs error (device loop1): __ext4_get_inode_loc:4364: comm syz-executor.1: Invalid inode table block 0 in block_group 0
[  350.730892][ T6500] loop2: detected capacity change from 0 to 40427
[  350.763995][ T6484] EXT4-fs (loop1): get root inode failed
[  350.769869][ T6484] EXT4-fs (loop1): mount failed
[  350.793498][ T6500] F2FS-fs (loop2): invalid crc value
[  350.845101][ T6500] F2FS-fs (loop2): Found nat_bits in checkpoint
[  351.174049][ T6500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  351.414081][   T29] audit: type=1800 audit(1718281853.814:72): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=10 res=0 errno=0
[  351.720470][ T6516] loop3: detected capacity change from 0 to 1024
[  351.793722][ T6516] hfsplus: unable to parse mount options
[  351.893298][   T29] audit: type=1800 audit(1718281854.394:73): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0
[  352.106866][   T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.117777][   T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  352.251601][ T5086] syz-executor.2: attempt to access beyond end of device
[  352.251601][ T5086] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  352.264351][ T6501] chnl_net:caif_netlink_parms(): no params data found
[  352.323230][ T4729] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  352.405152][   T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.416296][   T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  352.494001][ T4432] Bluetooth: hci5: command tx timeout
[  352.753501][   T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.764284][   T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  352.850675][ T4729] usb 2-1: Using ep0 maxpacket: 8
[  352.971689][ T4729] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  352.980362][ T4729] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  352.988691][ T4729] usb 2-1: config 0 has no interface number 0
[  352.995168][ T4729] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 183, setting to 64
[  353.006930][ T4729] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  353.020029][ T4729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.192249][   T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.203747][   T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  353.211897][ T4729] usb 2-1: config 0 descriptor??
[  353.519652][ T4729] usb 2-1: USB disconnect, device number 2
[  353.805911][   T58] bridge_slave_1: left allmulticast mode
[  353.811976][   T58] bridge_slave_1: left promiscuous mode
[  353.818643][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.964605][   T58] bridge_slave_0: left allmulticast mode
[  353.970643][   T58] bridge_slave_0: left promiscuous mode
[  353.977304][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.201912][ T6524] loop3: detected capacity change from 0 to 4096
[  354.394642][   T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  354.513503][ T4432] Bluetooth: hci5: command tx timeout
[  354.624220][ T6532] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  354.781870][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.875070][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.910913][   T58] bond0 (unregistering): Released all slaves
[  355.193134][ T6530] syzkaller0: entered promiscuous mode
[  355.198864][ T6530] syzkaller0: entered allmulticast mode
[  355.303988][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.345462][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.353608][ T6501] bridge_slave_0: entered allmulticast mode
[  355.362694][ T6501] bridge_slave_0: entered promiscuous mode
[  355.811617][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.819329][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.827272][ T6501] bridge_slave_1: entered allmulticast mode
[  355.836460][ T6501] bridge_slave_1: entered promiscuous mode
[  355.859674][ T6548] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  356.313935][   T58] hsr_slave_0: left promiscuous mode
[  356.353153][   T58] hsr_slave_1: left promiscuous mode
[  356.386288][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.396706][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.450813][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.458610][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.551657][   T58] veth1_macvtap: left promiscuous mode
[  356.557501][   T58] veth0_macvtap: left promiscuous mode
[  356.564335][   T58] veth1_vlan: left promiscuous mode
[  356.569855][   T58] veth0_vlan: left promiscuous mode
[  356.591095][ T4432] Bluetooth: hci5: command tx timeout
[  357.455344][   T58] team0 (unregistering): Port device team_slave_1 removed
[  357.548191][ T6554] loop1: detected capacity change from 0 to 512
[  357.588029][   T58] team0 (unregistering): Port device team_slave_0 removed
[  357.600662][ T6564] loop2: detected capacity change from 0 to 2048
[  357.638184][ T6564] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  357.666629][ T6554] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  357.712836][ T6564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  357.731123][ T6554] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  357.781736][ T6554] EXT4-fs error (device loop1): __ext4_get_inode_loc:4364: comm syz-executor.1: Invalid inode table block 0 in block_group 0
[  357.801369][ T6554] EXT4-fs (loop1): get root inode failed
[  357.807462][ T6554] EXT4-fs (loop1): mount failed
[  357.832237][ T6501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.863005][ T6501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.091384][ T6501] team0: Port device team_slave_0 added
[  358.115324][ T6501] team0: Port device team_slave_1 added
[  358.372913][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  358.380089][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  358.408408][ T6501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  358.510570][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  358.517743][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  358.547027][ T6501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  358.698433][ T4432] Bluetooth: hci5: command tx timeout
[  359.236579][ T6581] loop4: detected capacity change from 0 to 32768
[  359.303839][ T6583] loop3: detected capacity change from 0 to 4096
[  359.323558][ T6583] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  359.333958][ T6581] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  359.339693][ T6501] hsr_slave_0: entered promiscuous mode
[  359.431386][ T6501] hsr_slave_1: entered promiscuous mode
[  359.624421][ T6601] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  359.897425][ T6581] XFS (loop4): Ending clean mount
[  359.948644][ T6581] XFS (loop4): Quotacheck needed: Please wait.
[  360.100787][ T6581] XFS (loop4): Quotacheck: Done.
[  360.400821][ T5133] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  360.691507][ T5133] usb 2-1: Using ep0 maxpacket: 8
[  360.840761][ T5133] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  360.850105][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.982807][ T5133] usb 2-1: config 0 descriptor??
[  361.072850][ T6501] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  361.160860][ T5133] viperboard 2-1:0.0: version 0.00 found at bus 002 address 003
[  361.239057][ T6501] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  361.255308][ T5133] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  361.264493][ T5133] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  361.305172][ T5586] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  361.352933][ T6501] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  361.551248][ T6604] syzkaller0: entered promiscuous mode
[  361.557060][ T6604] syzkaller0: entered allmulticast mode
[  361.592876][ T6501] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  361.976848][ T5133] usb 2-1: USB disconnect, device number 3
[  362.266122][ T6624] loop3: detected capacity change from 0 to 512
[  362.348725][ T6624] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  362.405320][ T6624] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  362.476864][ T6624] EXT4-fs error (device loop3): __ext4_get_inode_loc:4364: comm syz-executor.3: Invalid inode table block 0 in block_group 0
[  362.531381][ T6624] EXT4-fs (loop3): get root inode failed
[  362.538411][ T6624] EXT4-fs (loop3): mount failed
[  362.806296][ T6501] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.036371][ T6501] 8021q: adding VLAN 0 to HW filter on device team0
[  363.105291][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.113142][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.136614][ T6633] loop1: detected capacity change from 0 to 256
[  363.214638][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.222466][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.553589][   T29] audit: type=1326 audit(1718281866.034:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa96447cea9 code=0x0
[  363.811842][ T6630] loop2: detected capacity change from 0 to 2048
[  364.098682][ T6630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  364.238398][ T6646] loop1: detected capacity change from 0 to 2048
[  364.383786][ T6646] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  364.432415][ T6646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  364.529854][ T6646] fuse: Bad value for 'fd'
[  364.722141][ T6659] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  365.163744][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.565712][ T6501] veth0_vlan: entered promiscuous mode
[  365.669697][ T6501] veth1_vlan: entered promiscuous mode
[  365.908426][ T6501] veth0_macvtap: entered promiscuous mode
[  365.984366][ T6501] veth1_macvtap: entered promiscuous mode
[  366.059149][ T6675] loop4: detected capacity change from 0 to 8
[  366.099457][ T6675] SQUASHFS error: zlib decompression failed, data probably corrupt
[  366.108123][ T6675] SQUASHFS error: Failed to read block 0x9b: -5
[  366.114981][ T6675] SQUASHFS error: Unable to read metadata cache entry [99]
[  366.125319][ T6675] SQUASHFS error: Unable to read inode 0x127
[  366.213968][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.226138][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.236856][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.247981][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.258303][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.269780][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.279933][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.291033][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.306052][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.408674][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.419947][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.433448][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.444207][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.454253][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.464912][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.475008][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.485701][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.500596][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.663392][ T6501] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.673688][ T6501] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.682841][ T6501] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.692025][ T6501] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.018126][ T6676] loop3: detected capacity change from 0 to 512
[  367.057759][ T6676] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  367.068041][ T6676] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  367.111499][ T6676] EXT4-fs error (device loop3): __ext4_get_inode_loc:4364: comm syz-executor.3: Invalid inode table block 0 in block_group 0
[  367.154981][ T6676] EXT4-fs (loop3): get root inode failed
[  367.161248][ T6676] EXT4-fs (loop3): mount failed
[  367.801656][ T6696] No control pipe specified
[  367.858973][ T6696] loop1: detected capacity change from 0 to 512
[  367.906090][ T6696] ext2: Unknown parameter 'obj_type'
[  367.920584][   T29] audit: type=1326 audit(1718281870.444:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79b0a7cea9 code=0x0
[  367.973385][ T6697] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  368.835097][ T6701] loop3: detected capacity change from 0 to 32768
[  368.869805][ T6711] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  368.995603][ T6701] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  369.527330][ T6701] XFS (loop3): Ending clean mount
[  369.546668][ T6701] XFS (loop3): Quotacheck needed: Please wait.
[  369.694987][ T6701] XFS (loop3): Quotacheck: Done.
[  369.885821][ T6729] loop4: detected capacity change from 0 to 1764
[  369.916622][ T5091] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  370.551852][ T5125] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  370.821149][ T5125] usb 2-1: Using ep0 maxpacket: 16
[  370.894150][ T6742] loop4: detected capacity change from 0 to 1024
[  370.953588][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.965265][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  370.975532][ T5125] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  370.988792][ T5125] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  370.998245][ T5125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.034266][ T5125] usb 2-1: config 0 descriptor??
[  371.554934][   T85] hfsplus: b-tree write err: -5, ino 4
[  371.714588][ T6733] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE.
[  372.024728][ T6756] loop2: detected capacity change from 0 to 512
[  372.103994][ T6756] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  372.149938][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.158559][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.169805][ T6756] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  372.231303][ T6756] EXT4-fs error (device loop2): __ext4_get_inode_loc:4364: comm syz-executor.2: Invalid inode table block 0 in block_group 0
[  372.249418][ T6756] EXT4-fs (loop2): get root inode failed
[  372.255680][ T6756] EXT4-fs (loop2): mount failed
[  372.315039][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.324046][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.618781][   T29] audit: type=1800 audit(1718281875.144:76): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1955 res=0 errno=0
[  372.823612][ T6774] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.0'.
[  373.132072][ T6780] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  373.656037][ T6776] loop3: detected capacity change from 0 to 32768
[  373.711350][ T5125] usbhid 2-1:0.0: can't add hid device: -71
[  373.718002][ T5125] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  373.733946][ T5125] usb 2-1: USB disconnect, device number 4
[  373.746835][ T6776] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  373.855887][ T6794] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  374.198773][ T6795] loop1: detected capacity change from 0 to 64
[  374.228888][ T6776] XFS (loop3): Ending clean mount
[  374.243711][ T6776] XFS (loop3): Quotacheck needed: Please wait.
[  374.309279][ T6776] XFS (loop3): Quotacheck: Done.
[  374.448449][ T6803] loop0: detected capacity change from 0 to 256
[  374.569532][ T5091] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  374.696681][ T6805] loop4: detected capacity change from 0 to 512
[  374.811946][ T6805] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  374.846351][ T6805] EXT4-fs (loop4): Remounting filesystem read-only
[  374.858294][ T6805] EXT4-fs (loop4): 1 truncate cleaned up
[  374.864396][ T6805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.614844][ T5586] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.928360][ T6812] loop1: detected capacity change from 0 to 512
[  376.058068][ T6812] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  376.086375][ T6829] input: syz1 as /devices/virtual/input/input9
[  376.096223][ T6812] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  376.192788][ T6829] loop4: detected capacity change from 0 to 256
[  376.216489][ T6812] EXT4-fs error (device loop1): __ext4_get_inode_loc:4364: comm syz-executor.1: Invalid inode table block 0 in block_group 0
[  376.301706][ T6829] loop4: detected capacity change from 0 to 64
[  376.320877][ T6812] EXT4-fs (loop1): get root inode failed
[  376.326773][ T6812] EXT4-fs (loop1): mount failed
[  376.746108][ T6841] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  376.985982][ T6840] loop3: detected capacity change from 0 to 2048
[  377.119598][ T6846] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  377.184721][ T6840] syz-executor.3: attempt to access beyond end of device
[  377.184721][ T6840] loop3: rw=0, sector=343245196361800, nr_sectors = 2 limit=2048
[  377.200037][ T6840] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1)
[  377.240418][ T6844] loop0: detected capacity change from 0 to 1024
[  377.290859][ T6846] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  377.297818][ T6844] hfsplus: invalid btree flag
[  377.302148][ T6846] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  377.307358][ T6844] hfsplus: failed to load catalog file
[  377.343758][ T6846] Remounting filesystem read-only
[  377.349332][ T3978] NILFS (loop3): discard dirty page: offset=0, ino=6
[  377.356681][ T3978] NILFS (loop3): discard dirty block: blocknr=35, size=1024
[  377.364362][ T3978] NILFS (loop3): discard dirty block: blocknr=171622598180900, size=1024
[  377.373153][ T3978] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  377.380868][ T3978] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  377.398502][ T3978] NILFS (loop3): discard dirty page: offset=0, ino=3
[  377.405689][ T3978] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[  377.413936][ T3978] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[  377.421635][ T3978] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[  377.429166][ T3978] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  377.438441][ T3978] NILFS (loop3): discard dirty page: offset=229376, ino=3
[  377.446387][ T3978] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  377.455998][ T3978] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  377.465248][ T3978] NILFS (loop3): discard dirty block: blocknr=50, size=1024
[  377.473032][ T3978] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  377.484957][ T6845] net_ratelimit: 44 callbacks suppressed
[  377.485029][ T6845] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  377.529924][ T6844] fuse: Unknown parameter '0x000000000000000900000000000000000000'
[  377.595966][ T6847] NILFS (loop3): mounting fs with errors
[  377.652840][ T6840] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  377.663125][ T6840] Remounting filesystem read-only
[  377.668349][ T6840] NILFS (loop3): error -5 reading inode: ino=2
[  377.674997][ T6840] NILFS (loop3): cannot mark inode dirty (ino=2): error -5 loading inode block
[  377.684518][ T6840] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  377.699031][ T6840] NILFS (loop3): error -5 reading inode: ino=6
[  377.706666][ T6840] NILFS (loop3): cannot mark inode dirty (ino=6): error -5 loading inode block
[  378.231804][ T5091] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  378.241239][ T5091] NILFS (loop3): discard dirty page: offset=0, ino=2
[  378.248153][ T5091] NILFS (loop3): discard dirty block: blocknr=18, size=1024
[  378.255871][ T5091] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  378.265094][ T5091] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  378.274387][ T5091] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  378.447027][ T6850] loop2: detected capacity change from 0 to 32768
[  378.480401][ T5091] NILFS (loop3): discard dirty page: offset=0, ino=5
[  378.487475][ T5091] NILFS (loop3): discard dirty block: blocknr=41, size=1024
[  378.495126][ T5091] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  378.504401][ T5091] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  378.518023][ T5091] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  378.532905][ T5091] NILFS (loop3): discard dirty page: offset=0, ino=4
[  378.539839][ T5091] NILFS (loop3): discard dirty block: blocknr=40, size=1024
[  378.547723][ T5091] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  378.556937][ T5091] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  378.566219][ T5091] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  378.631512][ T6850] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  379.041721][ T6850] XFS (loop2): Ending clean mount
[  379.064473][ T6850] XFS (loop2): Quotacheck needed: Please wait.
[  379.178904][ T6850] XFS (loop2): Quotacheck: Done.
[  379.306518][ T6869] loop3: detected capacity change from 0 to 256
[  379.532327][ T4432] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  379.541958][ T4432] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  379.554834][ T5086] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  380.313111][ T6878] loop0: detected capacity change from 0 to 4096
[  380.380845][ T6878] ntfs3: Unknown parameter 'dm'
[  380.669808][ T6895] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  380.913086][ T6896] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
[  381.064113][ T6885] loop3: detected capacity change from 0 to 512
[  381.118351][ T6885] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  381.141126][ T6885] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  381.185725][ T6885] EXT4-fs error (device loop3): __ext4_get_inode_loc:4364: comm syz-executor.3: Invalid inode table block 0 in block_group 0
[  381.221829][ T6885] EXT4-fs (loop3): get root inode failed
[  381.227708][ T6885] EXT4-fs (loop3): mount failed
[  381.574118][ T4432] Bluetooth: hci2: command 0x0406 tx timeout
[  381.655695][ T6911] loop2: detected capacity change from 0 to 164
[  381.677291][ T6911] Unable to read rock-ridge attributes
[  381.729951][ T6911] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.2'.
[  381.739912][ T6911] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  381.950937][ T6913] loop0: detected capacity change from 0 to 2048
[  382.003079][ T6913] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh
[  382.011781][ T6913] UDF-fs: Scanning with blocksize 512 failed
[  382.219383][ T6913] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  382.227822][ T6913] UDF-fs: Scanning with blocksize 1024 failed
[  382.355236][ T6913] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  382.365366][ T6913] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  382.373380][ T6913] UDF-fs: Scanning with blocksize 2048 failed
[  382.688582][ T6917] loop1: detected capacity change from 0 to 32768
[  382.721780][ T6913] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  382.778695][ T6917] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  382.845078][ T6913] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  382.855420][ T6913] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  382.863736][ T6913] UDF-fs: Scanning with blocksize 4096 failed
[  382.869993][ T6913] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  382.927070][ T6922] loop3: detected capacity change from 0 to 256
[  383.240777][   T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  383.332224][ T6917] XFS (loop1): Ending clean mount
[  383.369445][ T6917] XFS (loop1): Quotacheck needed: Please wait.
[  383.485668][ T6917] XFS (loop1): Quotacheck: Done.
[  383.531315][   T25] usb 3-1: Using ep0 maxpacket: 8
[  383.651843][ T5083] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  383.678301][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  383.691551][   T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  383.701163][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.781851][   T25] usb 3-1: config 0 descriptor??
[  383.847582][   T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  384.250487][   T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  384.651168][   T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  384.663214][   T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  384.673327][   T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  384.682687][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.760998][ T6943] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  385.370171][ T6947] loop3: detected capacity change from 0 to 40427
[  385.438214][ T6947] F2FS-fs (loop3): invalid crc value
[  385.489682][ T6947] F2FS-fs (loop3): Found nat_bits in checkpoint
[  385.829071][   T25] usb 1-1: USB disconnect, device number 6
[  385.999802][  T779] usb 3-1: USB disconnect, device number 16
[  386.476037][ T6965] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  386.898523][ T6956] loop2: detected capacity change from 0 to 512
[  387.017234][ T6956] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  387.041383][ T6956] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  387.074776][ T6956] EXT4-fs error (device loop2): __ext4_get_inode_loc:4364: comm syz-executor.2: Invalid inode table block 0 in block_group 0
[  387.128848][ T6956] EXT4-fs (loop2): get root inode failed
[  387.134959][ T6956] EXT4-fs (loop2): mount failed
[  387.719786][ T6981] loop4: detected capacity change from 0 to 256
[  387.745866][ T6982] loop1: detected capacity change from 0 to 8
[  387.807107][ T6982] SQUASHFS error: zlib decompression failed, data probably corrupt
[  387.810714][ T6986] loop3: detected capacity change from 0 to 512
[  387.815753][ T6982] SQUASHFS error: Failed to read block 0x9b: -5
[  387.828315][ T6982] SQUASHFS error: Unable to read metadata cache entry [99]
[  387.837537][ T6982] SQUASHFS error: Unable to read inode 0x127
[  388.311023][ T6986] EXT4-fs (loop3): Test dummy encryption mode enabled
[  388.380540][ T6986] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  388.407259][ T6986] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 2683928664 (level 1)
[  388.485607][ T6986] EXT4-fs (loop3): 1 truncate cleaned up
[  388.491846][ T6986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.573154][ T7000] loop2: detected capacity change from 0 to 1024
[  388.767695][ T7008] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  388.861619][  T780] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  388.899235][ T7012] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  389.101673][ T5091] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  389.145754][ T7004] loop0: detected capacity change from 0 to 4096
[  389.178001][ T7004] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  389.205830][ T5091] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz-executor.3: Invalid block bitmap block 3 in block_group 0
[  389.226619][ T7015] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  389.237794][ T7015] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  389.261165][ T5091] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6537: Corrupt filesystem
[  389.288863][ T5091] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.3: corrupted in-inode xattr: e_value out of bounds
[  389.325154][ T5091] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.3: corrupted in-inode xattr: e_value out of bounds
[  389.350577][  T780] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  389.362383][  T780] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  389.376709][  T780] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  389.387173][  T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.473839][ T7002] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  389.705420][  T780] usb 2-1: USB disconnect, device number 5
[  389.847379][ T3691] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.847739][ T5091] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.022480][ T3691] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.180096][ T3691] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.225604][ T7019] loop4: detected capacity change from 0 to 512
[  390.314832][ T7019] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  390.330136][ T3691] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.382080][ T7019] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  390.435383][ T7019] EXT4-fs error (device loop4): __ext4_get_inode_loc:4364: comm syz-executor.4: Invalid inode table block 0 in block_group 0
[  390.471296][ T7019] EXT4-fs (loop4): get root inode failed
[  390.477299][ T7019] EXT4-fs (loop4): mount failed
[  390.638382][ T7035] loop1: detected capacity change from 0 to 8
[  390.661133][ T3691] bridge_slave_1: left allmulticast mode
[  390.667015][ T3691] bridge_slave_1: left promiscuous mode
[  390.673877][ T3691] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.766536][ T7035] SQUASHFS error: zlib decompression failed, data probably corrupt
[  390.768724][ T3691] bridge_slave_0: left allmulticast mode
[  390.774891][ T7035] SQUASHFS error: Failed to read block 0x9b: -5
[  390.780569][ T3691] bridge_slave_0: left promiscuous mode
[  390.786834][ T7035] SQUASHFS error: Unable to read metadata cache entry [99]
[  390.793364][ T3691] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.803887][ T7035] SQUASHFS error: Unable to read inode 0x127
[  391.468775][ T3691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.523768][ T7042] loop0: detected capacity change from 0 to 256
[  391.553615][ T3691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.579553][ T3691] bond0 (unregistering): Released all slaves
[  392.435422][ T7044] loop4: detected capacity change from 0 to 32768
[  392.581162][ T7053] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  392.713207][ T7044] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  393.279240][ T5077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  393.299458][ T5077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  393.637982][ T5077] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  393.671896][ T7044] XFS (loop4): Ending clean mount
[  393.803342][ T5077] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  393.806078][ T7044] XFS (loop4): Quotacheck needed: Please wait.
[  393.824351][ T5077] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  393.834024][ T5077] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  393.963265][ T3691] hsr_slave_0: left promiscuous mode
[  394.046894][ T3691] hsr_slave_1: left promiscuous mode
[  394.055911][ T7044] XFS (loop4): Quotacheck: Done.
[  394.079585][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.088027][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.106719][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.115005][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.139631][ T3691] veth1_macvtap: left promiscuous mode
[  394.142456][ T7074] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  394.145808][ T3691] veth0_macvtap: left promiscuous mode
[  394.161513][ T3691] veth1_vlan: left promiscuous mode
[  394.167079][ T3691] veth0_vlan: left promiscuous mode
[  394.191008][ T6335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  394.239923][ T6335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  394.252722][ T6335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  394.381081][ T6335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  394.399156][  T780] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  394.418030][ T6335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  394.428599][ T6335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  394.806309][ T3691] team0 (unregistering): Port device team_slave_1 removed
[  394.847450][ T3691] team0 (unregistering): Port device team_slave_0 removed
[  394.880908][  T780] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  394.892548][  T780] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  394.906555][  T780] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  394.917215][  T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.972325][ T7073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  395.222982][   T10] usb 3-1: USB disconnect, device number 17
[  395.233091][ T6335] Bluetooth: hci1: command 0x0405 tx timeout
[  395.507880][ T5586] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  395.950659][ T4432] Bluetooth: hci0: command tx timeout
[  396.510581][ T4432] Bluetooth: hci4: command tx timeout
[  396.978198][ T7067] chnl_net:caif_netlink_parms(): no params data found
[  397.095752][ T7088] loop1: detected capacity change from 0 to 512
[  397.133012][ T7075] chnl_net:caif_netlink_parms(): no params data found
[  397.191263][ T7088] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  397.221075][ T7088] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  397.279214][ T7088] EXT4-fs error (device loop1): __ext4_get_inode_loc:4364: comm syz-executor.1: Invalid inode table block 0 in block_group 0
[  397.316423][ T7088] EXT4-fs (loop1): get root inode failed
[  397.322741][ T7088] EXT4-fs (loop1): mount failed
[  397.544125][ T7103] veth0_vlan: left promiscuous mode
[  397.555636][ T7103] veth0_vlan: entered promiscuous mode
[  398.040466][ T4432] Bluetooth: hci0: command tx timeout
[  398.383065][ T7118] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  398.403486][ T7067] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.412513][ T7067] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.420642][ T7067] bridge_slave_0: entered allmulticast mode
[  398.429807][ T7067] bridge_slave_0: entered promiscuous mode
[  398.545790][ T7067] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.555581][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.563572][ T7067] bridge_slave_1: entered allmulticast mode
[  398.572802][ T7067] bridge_slave_1: entered promiscuous mode
[  398.608019][ T4432] Bluetooth: hci4: command tx timeout
[  399.254809][ T7067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.279466][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.287488][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.295434][ T7075] bridge_slave_0: entered allmulticast mode
[  399.305266][ T7075] bridge_slave_0: entered promiscuous mode
[  399.417349][ T7067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.487619][ T7123] loop4: detected capacity change from 0 to 32768
[  399.537309][ T5130] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  399.603405][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.617596][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.625489][ T7075] bridge_slave_1: entered allmulticast mode
[  399.634646][ T7075] bridge_slave_1: entered promiscuous mode
[  399.660159][ T7067] team0: Port device team_slave_0 added
[  399.683229][ T7067] team0: Port device team_slave_1 added
[  399.730410][ T7123] 
[  399.730410][ T7123]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  399.730410][ T7123] 
[  399.956908][ T3561] 
[  399.956908][ T3561]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  399.956908][ T3561] 
[  399.968987][ T3561] 
[  399.968987][ T3561]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  399.968987][ T3561] 
[  399.981853][ T5130] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  399.982460][  T110] 
[  399.982460][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  399.982460][  T110] 
[  399.993204][ T5130] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  399.993421][ T5130] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  400.024378][ T5130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.043259][ T5586] 
[  400.043259][ T5586]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  400.043259][ T5586] 
[  400.054937][ T5586] 
[  400.054937][ T5586]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  400.054937][ T5586] 
[  400.061254][ T7067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.071788][ T7125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  400.073082][ T7067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.106560][ T7067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  400.133743][ T4432] Bluetooth: hci0: command tx timeout
[  400.180018][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.213572][ T7067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.222932][ T7067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.249325][ T7067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  400.277093][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.361327][ T3691] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.540343][ T5125] usb 3-1: USB disconnect, device number 18
[  400.587772][ T3691] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.681752][ T4432] Bluetooth: hci4: command tx timeout
[  400.736895][ T7075] team0: Port device team_slave_0 added
[  400.864326][ T7067] hsr_slave_0: entered promiscuous mode
[  400.877697][ T7067] hsr_slave_1: entered promiscuous mode
[  400.887048][ T7067] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  400.894985][ T7067] Cannot create hsr debugfs directory
[  400.965579][ T3691] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.006519][ T7075] team0: Port device team_slave_1 added
[  401.214431][ T3691] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.365058][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.373602][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.399671][    C0] vkms_vblank_simulate: vblank timer overrun
[  401.406994][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.480040][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.487585][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.513706][    C0] vkms_vblank_simulate: vblank timer overrun
[  401.516404][ T7135] loop1: detected capacity change from 0 to 512
[  401.520173][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.625137][ T7135] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  401.670977][ T7135] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  401.740659][ T5130] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  401.741387][ T7135] EXT4-fs error (device loop1): __ext4_get_inode_loc:4364: comm syz-executor.1: Invalid inode table block 0 in block_group 0
[  401.786734][ T3691] bridge_slave_1: left allmulticast mode
[  401.793028][ T3691] bridge_slave_1: left promiscuous mode
[  401.799659][ T3691] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.815508][ T7135] EXT4-fs (loop1): get root inode failed
[  401.821906][ T7135] EXT4-fs (loop1): mount failed
[  401.839634][ T3691] bridge_slave_0: left allmulticast mode
[  401.845904][ T3691] bridge_slave_0: left promiscuous mode
[  401.852772][ T3691] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.103481][ T5130] usb 3-1: config 0 has an invalid interface number: 18 but max is 0
[  402.112081][ T5130] usb 3-1: config 0 has no interface number 0
[  402.118421][ T5130] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.129871][ T5130] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  402.190746][ T4432] Bluetooth: hci0: command tx timeout
[  402.278859][ T7151] loop1: detected capacity change from 0 to 1024
[  402.329912][ T7151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  402.352438][ T5130] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  402.363051][ T5130] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  402.372729][ T5130] usb 3-1: Manufacturer: syz
[  402.419505][ T5130] usb 3-1: config 0 descriptor??
[  402.453017][ T3691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.497396][ T3691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.532784][ T3691] bond0 (unregistering): Released all slaves
[  402.750676][ T4432] Bluetooth: hci4: command tx timeout
[  402.996799][ T5130] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0003/input/input11
[  403.051629][ T7075] hsr_slave_0: entered promiscuous mode
[  403.057881][ T7153] loop4: detected capacity change from 0 to 1024
[  403.096497][ T7075] hsr_slave_1: entered promiscuous mode
[  403.115020][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  403.119963][ T5130] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18
[  403.123586][ T7075] Cannot create hsr debugfs directory
[  403.198018][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.207263][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.217310][ T7153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  403.445016][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[  403.450762][  T780] usb 3-1: USB disconnect, device number 19
[  403.451856][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
[  403.818989][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  403.844021][ T3691] hsr_slave_0: left promiscuous mode
[  403.876175][ T3691] hsr_slave_1: left promiscuous mode
[  403.910870][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.918875][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.969389][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.977322][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.087571][ T3691] veth1_macvtap: left promiscuous mode
[  404.101499][ T3691] veth0_macvtap: left promiscuous mode
[  404.107411][ T3691] veth1_vlan: left promiscuous mode
[  404.115709][ T3691] veth0_vlan: left promiscuous mode
[  405.340267][    C1] sched: RT throttling activated
[  405.582922][ T3691] team0 (unregistering): Port device team_slave_1 removed
[  405.651277][ T3691] team0 (unregistering): Port device team_slave_0 removed
[  406.213521][ T7162] loop2: detected capacity change from 0 to 32768
[  406.272359][ T7162] 
[  406.272359][ T7162]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  406.272359][ T7162] 
[  406.694220][ T3978] 
[  406.694220][ T3978]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  406.694220][ T3978] 
[  406.705625][ T3978] 
[  406.705625][ T3978]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  406.705625][ T3978] 
[  406.720759][  T111] 
[  406.720759][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  406.720759][  T111] 
[  406.777754][ T5086] 
[  406.777754][ T5086]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  406.777754][ T5086] 
[  406.814169][ T5086] 
[  406.814169][ T5086]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  406.814169][ T5086] 
[  406.847998][ T7067] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  406.935815][ T7067] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  406.989379][ T7067] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  407.069034][ T7067] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  407.363202][   T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  407.492287][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  407.784673][ T7075] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  407.851068][   T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  407.862582][   T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  407.872944][   T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  407.882409][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.930699][ T7075] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  407.982602][ T7075] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  407.993301][ T7171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  408.081657][ T7075] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  408.460842][ T7067] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.477185][   T25] usb 5-1: USB disconnect, device number 5
[  408.582859][ T7067] 8021q: adding VLAN 0 to HW filter on device team0
[  408.648187][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.656137][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.775038][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.782939][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.790179][ T7177] loop1: detected capacity change from 0 to 512
[  408.900968][ T7177] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  408.990462][ T7177] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  409.096555][ T7177] EXT4-fs error (device loop1): __ext4_get_inode_loc:4364: comm syz-executor.1: Invalid inode table block 0 in block_group 0
[  409.270893][ T7177] EXT4-fs (loop1): get root inode failed
[  409.276784][ T7177] EXT4-fs (loop1): mount failed
[  409.689719][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.729531][ T7192] loop4: detected capacity change from 0 to 256
[  409.913608][ T7075] 8021q: adding VLAN 0 to HW filter on device team0
[  410.016631][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.024421][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.091058][ T5128] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  410.144286][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.152108][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.580944][ T5128] usb 3-1: config 0 has an invalid interface number: 18 but max is 0
[  410.589402][ T5128] usb 3-1: config 0 has no interface number 0
[  410.595968][ T5128] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.607406][ T5128] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.757562][ T5128] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  410.767762][ T5128] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  410.776152][ T5128] usb 3-1: Manufacturer: syz
[  410.862511][ T5128] usb 3-1: config 0 descriptor??
[  411.164755][ T7067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.267670][ T7208] loop1: detected capacity change from 0 to 256
[  411.397328][ T5128] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0004/input/input12
[  411.509194][ T5128] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18
[  411.607700][ T7067] veth0_vlan: entered promiscuous mode
[  411.629316][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.638589][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.728089][ T7067] veth1_vlan: entered promiscuous mode
[  411.814606][   T10] usb 3-1: USB disconnect, device number 20
[  412.032017][ T7067] veth0_macvtap: entered promiscuous mode
[  412.123708][ T7067] veth1_macvtap: entered promiscuous mode
[  412.156066][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  412.204511][ T7215] loop4: detected capacity change from 0 to 128
[  412.296120][ T7067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.310424][ T7067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.319199][   T29] audit: type=1800 audit(1718281914.834:77): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048634 res=0 errno=0
[  412.321053][ T7067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.354435][ T7067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.365057][ T7067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.375787][ T7067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.390923][ T7067] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.632327][ T7067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  412.643161][ T7067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.653454][ T7067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  412.664170][ T7067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.674358][ T7067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  412.685097][ T7067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.700126][ T7067] batman_adv: batadv0: Interface activated: batadv_slave_1
[  412.774722][ T7220] loop2: detected capacity change from 0 to 1024
[  412.803578][ T7067] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.812791][ T7067] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.824718][ T7067] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.834622][ T7067] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.852811][ T7220] EXT4-fs: Ignoring removed nomblk_io_submit option
[  412.861382][ T7075] veth0_vlan: entered promiscuous mode
[  412.886292][ T7220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  412.897564][ T7075] veth1_vlan: entered promiscuous mode
[  412.933459][ T7220] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  413.122309][ T7220] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  413.192075][ T7075] veth0_macvtap: entered promiscuous mode
[  413.230989][ T7220] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 11 (err -117)
[  413.251704][ T7220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.292207][ T7075] veth1_macvtap: entered promiscuous mode
[  413.348492][ T7220] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz-executor.2: Invalid block bitmap block 0 in block_group 0
[  413.401914][ T7220] Quota error (device loop2): write_blk: dquota write failed
[  413.406061][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.409600][ T7220] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  413.421125][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.421190][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.421276][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.434193][ T7220] EXT4-fs error (device loop2): ext4_acquire_dquot:6882: comm syz-executor.2: Failed to acquire dquot type 0
[  413.443160][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.443251][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.443333][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.443421][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.448006][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.533635][ T5130] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  413.754377][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.765527][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.776360][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.787174][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.799529][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.810734][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.821054][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.831819][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.847333][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.849147][ T5086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.865102][ T3691] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8
[  413.876025][ T3691] EXT4-fs error (device loop2): ext4_release_dquot:6905: comm kworker/u8:17: Failed to release dquot type 0
[  414.051524][ T5130] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  414.063201][ T5130] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  414.073846][ T5130] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  414.083322][ T5130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.102508][ T7075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.112534][ T7075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.124202][ T7075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.133349][ T7075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.221941][ T7222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  414.655503][ T5125] usb 2-1: USB disconnect, device number 6
[  414.779093][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  414.982182][   T10] usb 5-1: device descriptor read/64, error -71
[  415.056474][ T7238] loop2: detected capacity change from 0 to 512
[  415.096596][ T7238] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  415.130918][ T7238] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  415.163037][ T7238] EXT4-fs error (device loop2): __ext4_get_inode_loc:4364: comm syz-executor.2: Invalid inode table block 0 in block_group 0
[  415.198016][ T7238] EXT4-fs (loop2): get root inode failed
[  415.204212][ T7238] EXT4-fs (loop2): mount failed
[  415.283317][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  415.530582][   T10] usb 5-1: device descriptor read/64, error -71
[  415.673930][   T10] usb usb5-port1: attempt power cycle
[  415.815092][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  416.128670][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  416.138978][ T5125] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  416.257078][   T10] usb 5-1: device descriptor read/8, error -71
[  416.411250][ T5125] usb 3-1: Using ep0 maxpacket: 32
[  416.552169][ T5125] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  416.563567][ T5125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.580690][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  416.618575][ T7275] loop1: detected capacity change from 0 to 256
[  416.638025][ T5125] usb 3-1: config 0 descriptor??
[  416.692388][ T5125] gspca_main: sunplus-2.14.0 probing 041e:400b
[  416.702200][   T10] usb 5-1: device descriptor read/8, error -71
[  416.842132][   T10] usb usb5-port1: unable to enumerate USB device
[  416.983836][ T3978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.992052][ T3978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.077307][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.086619][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.870771][ T5133] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  418.056760][   T29] audit: type=1804 audit(1718281920.594:78): pid=7294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir793814770/syzkaller.lqGVny/64/bus" dev="sda1" ino=1955 res=1 errno=0
[  418.149863][   T29] audit: type=1804 audit(1718281920.714:79): pid=7294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir793814770/syzkaller.lqGVny/64/bus" dev="sda1" ino=1955 res=1 errno=0
[  418.178312][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.186641][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.224973][ T5125] gspca_sunplus: reg_w_riv err -71
[  418.232189][ T5125] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  418.274406][ T5125] usb 3-1: USB disconnect, device number 21
[  418.362297][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.370773][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.390895][ T5133] usb 2-1: config 0 has an invalid interface number: 18 but max is 0
[  418.399257][ T5133] usb 2-1: config 0 has no interface number 0
[  418.406559][ T5133] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  418.419215][ T5133] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  418.531633][ T5133] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  418.542050][ T5133] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  418.555595][ T5133] usb 2-1: Manufacturer: syz
[  418.592579][ T5133] usb 2-1: config 0 descriptor??
[  419.122862][ T5133] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0005/input/input13
[  419.136265][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  419.308602][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.312739][ T5133] sony 0003:054C:03D5.0005: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18
[  419.317883][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.448490][ T7321] misc userio: Invalid payload size
[  419.458540][ T5133] usb 2-1: USB disconnect, device number 7
[  419.482827][ T7321] misc userio: No port type given on /dev/userio
[  419.493508][ T7305] loop4: detected capacity change from 0 to 512
[  419.501452][ T7321] misc userio: The device must be registered before sending interrupts
[  419.509210][ T7322] loop0: detected capacity change from 0 to 256
[  419.535719][ T7305] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  419.569118][ T7322] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  419.571829][   T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  419.599468][   T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  419.610666][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  419.619967][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.620007][ T7305] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  419.655089][ T7305] EXT4-fs error (device loop4): __ext4_get_inode_loc:4364: comm syz-executor.4: Invalid inode table block 0 in block_group 0
[  419.672604][ T7303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  419.697058][ T7305] EXT4-fs (loop4): get root inode failed
[  419.703964][ T7305] EXT4-fs (loop4): mount failed
[  419.897692][ T5130] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  420.151928][   T25] usb 4-1: USB disconnect, device number 3
[  420.189904][ T5130] usb 1-1: Using ep0 maxpacket: 8
[  420.268807][ T7329] loop4: detected capacity change from 0 to 1764
[  420.317853][ T7333] loop1: detected capacity change from 0 to 512
[  420.331254][ T5130] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  420.339875][ T5130] usb 1-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config
[  420.350562][ T5130] usb 1-1: config 0 has no interface number 0
[  420.356900][ T5130] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 16912, setting to 1024
[  420.368664][ T5130] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  420.382153][ T5130] usb 1-1: config 0 interface 52 has no altsetting 0
[  420.412684][ T7333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  420.461230][ T7333] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor.1: path /root/syzkaller-testdir4071629480/syzkaller.FESfgO/120/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=21, inode=14, rec_len=1, size=60 fake=0
[  420.534065][ T5130] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  420.543692][ T5130] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  420.552453][ T5130] usb 1-1: Product: syz
[  420.556860][ T5130] usb 1-1: SerialNumber: syz
[  420.586573][ T5083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.588202][ T5130] usb 1-1: config 0 descriptor??
[  420.812581][ T7337] loop4: detected capacity change from 0 to 256
[  420.866335][ T5130] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input14
[  421.129021][ T7337] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  421.139670][ T7337] FAT-fs (loop4): Filesystem has been set read-only
[  421.146650][ T7337] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  421.158137][ T7337] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  421.194660][ T7337] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  421.210659][   T29] audit: type=1800 audit(1718281923.734:80): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=1048643 res=0 errno=0
[  421.342419][ T5130] usb 1-1: USB disconnect, device number 7
[  421.586387][ T7337] syz-executor.4 (7337) used greatest stack depth: 4056 bytes left
[  421.643776][ T7350] loop1: detected capacity change from 0 to 512
[  421.689226][ T7354] misc userio: Invalid payload size
[  421.701006][ T7354] misc userio: No port type given on /dev/userio
[  421.744600][ T7354] misc userio: The device must be registered before sending interrupts
[  421.761224][ T7350] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 13
[  421.778853][ T7357] loop3: detected capacity change from 0 to 512
[  421.785973][ T7350] ext4_test_bit(bit=12, block=4) = 1
[  421.792428][ T7350] is_bad_inode(inode)=0
[  421.797291][ T7350] NEXT_ORPHAN(inode)=0
[  421.801661][ T7350] max_ino=32
[  421.805040][ T7350] i_nlink=1
[  421.807148][ T7357] EXT4-fs: Ignoring removed oldalloc option
[  421.808307][ T7350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.844044][ T7350] EXT4-fs warning (device loop1): dx_probe:832: inode #2: comm syz-executor.1: Unrecognised inode hash code 20
[  421.856429][ T7350] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended
[  421.875687][ T7350] EXT4-fs warning (device loop1): dx_probe:832: inode #2: comm syz-executor.1: Unrecognised inode hash code 20
[  421.888010][ T7350] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended
[  421.913141][ T7350] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  421.986237][ T7357] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz-executor.3: Parent and EA inode have the same ino 15
[  422.129678][ T7357] EXT4-fs (loop3): Remounting filesystem read-only
[  422.138838][ T7357] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  422.143535][ T5083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.152515][ T7357] EXT4-fs warning (device loop3): ext4_evict_inode:254: couldn't mark inode dirty (err -5)
[  422.172572][ T7357] EXT4-fs (loop3): 1 orphan inode deleted
[  422.178565][ T7357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.313703][ T7366] loop0: detected capacity change from 0 to 512
[  422.356682][ T7366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.374748][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  422.384698][ T7368] netlink: 'syz-executor.3': attribute type 25 has an invalid length.
[  422.407924][ T7368] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  422.417274][ T7368] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  422.421975][   T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  422.426382][ T7368] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  422.447015][ T7368] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  422.488698][ T7366] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1427293998/syzkaller.Udbl5v/4/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=21, inode=14, rec_len=1, size=60 fake=0
[  422.489215][ T7371] kernel profiling enabled (shift: 25)
[  422.560300][    C0] =====================================================
[  422.567513][    C0] BUG: KMSAN: uninit-value in profile_tick+0x1ae/0x1b0
[  422.574568][    C0]  profile_tick+0x1ae/0x1b0
[  422.579287][    C0]  tick_nohz_handler+0x588/0x690
[  422.584421][    C0]  __hrtimer_run_queues+0x56f/0xe40
[  422.589805][    C0]  hrtimer_interrupt+0x3ab/0x1490
[  422.595019][    C0]  __sysvec_apic_timer_interrupt+0xa6/0x3a0
[  422.601125][    C0]  sysvec_apic_timer_interrupt+0x7e/0x90
[  422.606959][    C0]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  422.613235][    C0]  _raw_spin_unlock_irq+0x25/0x50
[  422.618430][    C0]  shmem_add_to_page_cache+0xa09/0xd70
[  422.624086][    C0]  shmem_alloc_and_add_folio+0x8cf/0x1100
[  422.630001][    C0]  shmem_get_folio_gfp+0x9ae/0x21a0
[  422.635380][    C0]  shmem_write_begin+0x14f/0x490
[  422.640502][    C0]  generic_perform_write+0x400/0xc60
[  422.645998][    C0]  shmem_file_write_iter+0x2bd/0x2f0
[  422.651499][    C0]  vfs_write+0xb31/0x14d0
[  422.656014][    C0]  ksys_write+0x20f/0x4c0
[  422.660538][    C0]  __x64_sys_write+0x93/0xe0
[  422.665328][    C0]  x64_sys_call+0x3062/0x3b50
[  422.670210][    C0]  do_syscall_64+0xcf/0x1e0
[  422.674911][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.681009][    C0] 
[  422.683405][    C0] Local variable warn created at:
[  422.688508][    C0]  __dquot_alloc_space+0x4e/0x18c0
[  422.693795][    C0]  shmem_inode_acct_blocks+0x3c4/0x5c0
[  422.699412][    C0] 
[  422.701820][    C0] CPU: 0 PID: 7371 Comm: syz-executor.1 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0
[  422.711957][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  422.722136][    C0] =====================================================
[  422.729154][    C0] Disabling lock debugging due to kernel taint
[  422.735389][    C0] Kernel panic - not syncing: kmsan.panic set ...
[  422.741886][    C0] CPU: 0 PID: 7371 Comm: syz-executor.1 Tainted: G    B              6.9.0-syzkaller-02707-g614da38e2f7a #0
[  422.753461][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  422.763606][    C0] Call Trace:
[  422.766962][    C0]  <IRQ>
[  422.769867][    C0]  dump_stack_lvl+0x216/0x2d0
[  422.774692][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  422.780631][    C0]  dump_stack+0x1e/0x30
[  422.784917][    C0]  panic+0x4e2/0xcd0
[  422.788947][    C0]  ? kmsan_get_metadata+0xf1/0x1d0
[  422.794192][    C0]  kmsan_report+0x2d5/0x2e0
[  422.798814][    C0]  ? reweight_entity+0xfdf/0x1430
[  422.803958][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  422.809269][    C0]  ? __msan_warning+0x95/0x120
[  422.814134][    C0]  ? profile_tick+0x1ae/0x1b0
[  422.818940][    C0]  ? tick_nohz_handler+0x588/0x690
[  422.824186][    C0]  ? __hrtimer_run_queues+0x56f/0xe40
[  422.829687][    C0]  ? hrtimer_interrupt+0x3ab/0x1490
[  422.835015][    C0]  ? __sysvec_apic_timer_interrupt+0xa6/0x3a0
[  422.841225][    C0]  ? sysvec_apic_timer_interrupt+0x7e/0x90
[  422.847164][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  422.853467][    C0]  ? _raw_spin_unlock_irq+0x25/0x50
[  422.858787][    C0]  ? shmem_add_to_page_cache+0xa09/0xd70
[  422.864554][    C0]  ? shmem_alloc_and_add_folio+0x8cf/0x1100
[  422.870586][    C0]  ? shmem_get_folio_gfp+0x9ae/0x21a0
[  422.876083][    C0]  ? shmem_write_begin+0x14f/0x490
[  422.881323][    C0]  ? generic_perform_write+0x400/0xc60
[  422.886936][    C0]  ? shmem_file_write_iter+0x2bd/0x2f0
[  422.893566][    C0]  ? vfs_write+0xb31/0x14d0
[  422.898245][    C0]  ? ksys_write+0x20f/0x4c0
[  422.902900][    C0]  ? __x64_sys_write+0x93/0xe0
[  422.907835][    C0]  ? x64_sys_call+0x3062/0x3b50
[  422.912924][    C0]  ? do_syscall_64+0xcf/0x1e0
[  422.917754][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.923982][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  422.930047][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  422.935477][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  422.941448][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  422.946783][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  422.952718][    C0]  ? kmsan_get_metadata+0x146/0x1d0
[  422.958039][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  422.963986][    C0]  __msan_warning+0x95/0x120
[  422.968697][    C0]  profile_tick+0x1ae/0x1b0
[  422.973350][    C0]  ? shmem_add_to_page_cache+0xa09/0xd70
[  422.979132][    C0]  tick_nohz_handler+0x588/0x690
[  422.984220][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  422.989814][    C0]  __hrtimer_run_queues+0x56f/0xe40
[  422.995170][    C0]  hrtimer_interrupt+0x3ab/0x1490
[  423.000336][    C0]  ? __pfx_hrtimer_interrupt+0x10/0x10
[  423.005925][    C0]  ? __pfx_hrtimer_interrupt+0x10/0x10
[  423.011516][    C0]  __sysvec_apic_timer_interrupt+0xa6/0x3a0
[  423.017560][    C0]  sysvec_apic_timer_interrupt+0x7e/0x90
[  423.023333][    C0]  </IRQ>
[  423.026410][    C0]  <TASK>
[  423.029402][    C0]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  423.035540][    C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x50
[  423.041476][    C0] Code: 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 53 48 89 fb e8 5f 48 bf f2 48 89 df e8 67 3a bf f2 c6 00 00 c6 03 00 fb be 04 00 00 00 <48> c7 c7 08 5d 0a 00 e8 7f 3c bf f2 65 ff 0d 30 95 85 70 74 07 5b
[  423.061216][    C0] RSP: 0018:ffff8880350cb7f0 EFLAGS: 00000286
[  423.067387][    C0] RAX: ffff888048c0a158 RBX: ffff88804940a158 RCX: 000000004900a158
[  423.075459][    C0] RDX: ffff88804900a158 RSI: 0000000000000004 RDI: ffff88804940a158
[  423.083528][    C0] RBP: ffff8880350cb7f8 R08: ffffea000000000f R09: ffffea0001b23ad0
[  423.091601][    C0] R10: ffff8880348cb348 R11: 0000000000000004 R12: ffff88804940a158
[  423.099670][    C0] R13: ffff88811622ccc0 R14: 0000000000000cc0 R15: 0000000000000000
[  423.107756][    C0]  shmem_add_to_page_cache+0xa09/0xd70
[  423.113373][    C0]  shmem_alloc_and_add_folio+0x8cf/0x1100
[  423.119229][    C0]  ? filemap_get_entry+0x67d/0x6c0
[  423.124495][    C0]  shmem_get_folio_gfp+0x9ae/0x21a0
[  423.129839][    C0]  ? kmsan_get_metadata+0xf0/0x1d0
[  423.135081][    C0]  shmem_write_begin+0x14f/0x490
[  423.140159][    C0]  ? __pfx_shmem_write_begin+0x10/0x10
[  423.145752][    C0]  generic_perform_write+0x400/0xc60
[  423.151219][    C0]  shmem_file_write_iter+0x2bd/0x2f0
[  423.156665][    C0]  vfs_write+0xb31/0x14d0
[  423.161152][    C0]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  423.167126][    C0]  ksys_write+0x20f/0x4c0
[  423.171602][    C0]  __x64_sys_write+0x93/0xe0
[  423.176336][    C0]  x64_sys_call+0x3062/0x3b50
[  423.181239][    C0]  do_syscall_64+0xcf/0x1e0
[  423.185881][    C0]  ? clear_bhb_loop+0x25/0x80
[  423.190696][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.196727][    C0] RIP: 0033:0x7f5ea627bbef
[  423.201236][    C0] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48
[  423.220981][    C0] RSP: 002b:00007f5ea70c9e80 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  423.229515][    C0] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f5ea627bbef
[  423.237582][    C0] RDX: 0000000000040000 RSI: 00007f5e9c000000 RDI: 0000000000000005
[  423.245646][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000053a
[  423.253705][    C0] R10: 00000000000003cc R11: 0000000000000293 R12: 0000000000000005
[  423.261762][    C0] R13: 00007f5ea70c9f80 R14: 00007f5ea70c9f40 R15: 00007f5e9c000000
[  423.269867][    C0]  </TASK>
[  424.635510][    C0] Shutting down cpus with NMI
[  424.640646][    C0] Kernel Offset: disabled
[  424.645025][    C0] Rebooting in 86400 seconds..