last executing test programs:

1m49.646548732s ago: executing program 0 (id=45):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00fc"], 0x38}, 0x1, 0x0, 0x200000000000000}, 0x10)

1m49.504031333s ago: executing program 0 (id=47):
r0 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x40000000, 0x0, 0x20040890}, 0x200080c0)

1m49.248587794s ago: executing program 0 (id=48):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="6b0033008000de00ffffffffffff080211000000"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0)

1m49.025587842s ago: executing program 0 (id=49):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x150c, &(0x7f0000000780)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_clone(0x1004300, &(0x7f0000000000)="e6e5f00dc4b89af67a4e83a0e6eadcb005346d312538dac25743abe710a36937e98602d0e61df3fd998f5a607676843760b86ecf57fce5ae30c3f08b151ad225e320b2f31a580189b26e690c42182d319dddd7d2b1afe6a533b0cd51defd7f62d703bed5ac4ff703abbe346714b47543e33d661f5c969f", 0x77, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="3b038afebe5ba1205f6f2931b87fe33480a9c32ffdd344f9cc851274ca1aacf874493fa12021dd019ab68bfa6e44bc858e559163804facacb2bd429bd39c74e24e8c0a8eced82866715ec32d325fe6fd9d6ddd86fc59ff0cfdebe0ccff7f314a98c43e6708dc652a1256139ef0bf732dd2f4ff10d00b87c9b7caa93c920541ad0b92930a6971ccc2816f039609b1d274011c1ccce8f8dabc47cbadc1143d3c3af650307710561cc9016b00958d5e")
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x6)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x481, &(0x7f0000000700)=ANY=[@ANYBLOB='force,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f626172726965722c6e6f626172726965722c6e6f626172726965722c747970653de39c9acc2c6465636f6d706f73652c706172743d3078303030303030303030303030383030302c6e6c733d69736f383835392d31342c00b69f6576c3bd6f1f334994b8d88c3d2bdcaae5266df55c187a10950a229e6db086157253ebe66f0537b068bc5e5e404f9d0be6a896e0160d8c0c62ac0b83e044a03adad2c81a"], 0x1, 0x6f8, &(0x7f0000000940)="$eJzs3U9sW3cdAPDvc2wn7lDm/ek2EFKjVVSwQpvEjBYJiYIQymFClbjsatp0jeJkVeKhtELUYwyOcEI97FCEwmEntAPSEAfEOCMhcUW9V+JeccDoPT87tpM49po/Xfl8pJf3e+/9/nx/37z3Yj+3cgD/t5bejFIrklg6/8ZWuv1gu9Z4sF1b65YjYjoiChHFziqS9Yjkk4gr0Vni8+nOvLtsfX+PcV5/+PEH5+59WOtsFfMlq1/oaz9Cu2+EYa18ibmImMrXEyru19+1Pfq7O1HXSS/uNGFnu4mDk9bepTVJ8zGuW+BJdzdiqrTH/mrEqYiYyV8HRH53KBxzeIduorscAAAAPJmmDqrw7KN4FFsxezzhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNMh6XxnYJIvhW55LpLu9/+X832pcvmE4x3tqwccf//GMQUCAAAAAAAAAEfio/yD+zOP4lFsxWy+O2kl2Wf+r2ZbL2Y/n4l3YjOWYyMuxFbUoxnN2IiFiNJsX4flrXqzubGwu+VvIm3Zbrfv5i0XI6K6q+XiccwaAAAAAAAAAJ5aP4ulmD3pIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoF8SMdVZZcuL3XI1CsWImImIclqvFfHnbvmz7C8nHQAAAAAcvUq+nk3+2ym0k+w9/0vZ+/6ZeCfWoxkr0YxGLMf17FlA511/4R+tWuPBdm0tXXZ3/J1/TxRH1mNETMW7+4w8n9U43WuxFN+PH8b5mIursREr8eOoRzOWYy4q6SSiHklUK52nF9VunHvHe2Vg6+pwbGeGtl/JIqnEjVjJYrsQ18rReWySzSEd85W+0f5Yjhga8d00O8m3c2Pm6Hrf7+vX+XOZXPvZMfs4GtVs5qVeRubT3OfZeG507ic8T4ZHWohC7xnUizujpJvDI3Vz/qNJcn4qX6e5/sVgzg/bhI/ShjOxGIX87It4aTDnt7507/nBxl/551+v3iysr968sXn+CKd0pErdwnAman2ZeHn02ZdnopFmojV+JkrDO2YeYx6HqJxnI7sVjXm3/F5Wqserfafg23E9luNSzMdCXI75+GYsRm3gDDs9kNdibW0wJ9m1Vth9f6uMCP7sl/sq/fKAyscrzctzfXntv9NVs2P5niu/ivm+LD0/+uyb+K9AOv4X8nI6xnu9vzhPgoFMZPfm9z7XPfbC6Ez8tp3+3Gysr27crN8ac7xz+Tq9bN8fvDf/7hCm8xjS8yW94xazrSwnle75kh57oRftYL7K+ScunXaFXcdO945VYzZW4gf7Xqnl/DXc7p46x17uP/avnTtnOX990z028Con3o5G9ipkyNzxZBWAsZ167VS58rDy98r9ys8rNytvzHx3+vL0F8tR+lvxT1N/KPy+8K3ktbgfP43Zk44UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeBpu376zWG43ljV4hZob3PG6hvO9YowtROLDO9jPjdRjViNFjJXmhfLhzv31ntRiH3OFRFyoxduXud3WN1/NHETGiTvmxg08mPscmLqSzPZQOS/2pa09N0Lw4OuHF2JzZ7zc4vXMVRHW13vhPe6BOJfoumT1M+F2FwBPtYnPt1sXN23e+trJWf2v5reX1xcuXLl+qfWPh6xdvrDSW5zs/TzpK4Chs3r4zddIxAAAAAAAAAAAAAJPJ//V/81P/Z4biAXXKG5t7j3zmuKcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfEYtvRmlViSxMH9hPt1+sF1rpEu3vFOzGBGFiEh+EpF8EnElOktU+7pL9hvn9Ycff3Du3oe1nb6K3fqFUe3G08qXmIuIqXx9sOk9utnd37W+/lqfKrykN8M0YWe7iYOT9r8AAAD//4739gY=")
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x211008, 0x0)
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))

1m47.472036177s ago: executing program 0 (id=59):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000800), 0x0)
setresuid(0x0, r1, r1)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_CREATE(r3, 0x5501)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x444f, &(0x7f0000004480)="$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")
r5 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
r6 = open(0x0, 0x4008040, 0x0)
lseek(r6, 0xfffffffffffffffb, 0x3)

1m46.513664295s ago: executing program 0 (id=61):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000580)=""/4113, 0x1011)

1m46.374108636s ago: executing program 32 (id=61):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000580)=""/4113, 0x1011)

21.416408433s ago: executing program 4 (id=509):
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x800, 0x2, 0x800001b7}, &(0x7f0000000300)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x3000000, 0x0, 0x0, 0x0)

21.274784225s ago: executing program 4 (id=511):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e626", 0xc1}, {&(0x7f0000000480)="84", 0x1}], 0x3)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r2, &(0x7f0000000000), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00')
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x1204, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x5, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x11cc, 0x2, [@TCA_CGROUP_EMATCHES={0x11c8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x100, 0x2, 0x0, 0x1, [@TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_VAR='R', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="85c8974b5f02774d", @TCF_META_TYPE_VAR="ee403d2c93a3", @TCF_META_TYPE_VAR="862cc7914abbfb85", @TCF_META_TYPE_VAR='\t', @TCF_META_TYPE_VAR="a152c7646c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x8}, {0x8, 0x6, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x7, 0x0, 0x0, {{0x10, 0x1, 0xd13}, {0x4, 0x4ae6, 0x0, 0x0, 0x9, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0xf}, {0x0, 0x3, 0x1}}}, @TCF_EM_META={0x94, 0x1, 0x0, 0x0, {{0x8d, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="14f35eb18e47a89f6e", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2284, 0xa, 0x1}, {0x7, 0xa, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x9}, {0x5, 0x80, 0x2}}}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_VAR="c53adf", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='A', @TCF_META_TYPE_VAR="c057bca625", @TCF_META_TYPE_VAR="3b1853a3", @TCF_META_TYPE_VAR="7d79c9ff949d"]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="9bbd88dcfede16ccac"]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="79cb86", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="6abd5f5c25596df4aac2"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2000, 0x3, 0xe}, {0x6, 0x10, 0x4, 0x80000001}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x6, 0xac, 0x3, 0x8}}}]}, @TCA_EMATCH_TREE_LIST={0x1088, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8}, {{0x2, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9}, {{0x2}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x80}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1}}}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x9}, "59027d476f34a0e5983206e09c0c94a5d5e5650760c61c9645a9ac6f42abccd6136963aae4e99055dac7dc3df3be8ab651038a46996378a44867dbf62d256af44d894c80c19fae76d9a739c3f01b69ee378d53c499c4a40afa1aa2ac4beac915e6f3c5c25050565d2112651bea235281bc2ba599669d680ce1c96bf00be489bf3492443bfa95f2acd0cd63813a4e048d3b26132217d9bd7b721f14989825c15a90dc7fec567db81456a9c7197684d2835f462e547799f9b0d0fd4440dd76d0e3e557b6baef2476e59b50f7a4d8b8d294e95e0d9d142940502fa7a58bf489ceca0a02a9835ae6f362211adf6e141db2bc9073543c1f5f5ed3c7dff5651a9f973ae6b03729519e72dc34f48cd88d5a3800d3eaeadee3449e5d45f558604e91b756ec9c65bcad87a4c6f839af5081432bf488ef6fe47bed455cdaf26c62b1c6c1fcf415474d4464c496cc3c6f640a895445fc0eaadb0c8fc4b2deda3df52b6f75e866d321675cabb36defaa7eac57d42a121b8a4ec92ed81629dcad78dcfd02068465e3b053cbeeb1fe67b8cfaebcb07076508d57e0b0573afaf59c34aa6c0a74cd69cbd453afb58b6b52e063b88c45a2b058f6689820296c2d74730c054e0d7321f3fffff1a9234ebc71990857f80a64c9bd80c3cbddd611abca3bd5e0e817dbaee3d1978212691b60de92658fe9d67db67d2288af15ee289c4ef53a981fba810bd903aabe9ed7f89bc04b16452db7f48cb6874cb90da562a2565f0345158470a7b697f3d23a93376fd2d46ecf925a13de0192df7e0370dbc5753dbfda4939f8d5800893a723147bcb3a16e144129833a5acce5988ae74778c827e63bbb19768ae487a551910ac755ce5e5bada01bf154acecbda822d7942f9169c1ac15823aa3d7b7f3533b2bf2df1f1b9ea6b9a88b95888ef294ab64493fa6643affdd326a5beff9d0e187f5fcd13a12f5f24c6d5f8ab5abc906e1854c08685f58dafa2555a88a41db8b8e876878d40d98ff728a18f304c9998658e12303086dd89133c81c9985b02bcbd61d082e1782ebc0f2eeca416d4f6f3af5bcfe48d7ff22bfeb4ab310e92fc0fdf2dce027e46150fb11df13ee151085721589788c998058cf4bcfd9ad9e36c423cde838bfef24d03dbfee8185905c33407fc7be36616775f635861251de1aa163a64f6d2fce055acd3f7fcf68948d544b20681e743aa307bfbe4a9d21955e4f7ab272150ab810e57f016ea973b983359395daf0aba513d45086cb91602e633878809d1403a32c5ec9b048317332deb64b021f81c08e35d1b9c325c84ae6dd03c6eae7ada5f37d5a7ba86286ba2cdaa781aa84311aceddf248a943bbe5e7f7c24ec1accc2af3004a2e484cc677613f3e6e791fea0633bb9b68cf92f26f414fdec6353401198e8568b45c4adf71a26b2e26d159bca787eacd8281aa3b90de2a94aa364e73b376ee3aab743575c8a04fb952f0899fc77f2531b5ebe901232e051fa0045a754fa62a15c84fe21c7575aa7382012ef2e5539c82eebf2da96fb2a9d45477117dbc2f97c06493ad617a2406a592b288c9321f11aeecb8e7908d08cf393e289fe1da88fc176a9b2d83688a1a29e04518ac4a70a84546c7586914dd28c0593cc951edd8fc00cd8637f971894c6b18bf8e497b578f19f36d5fd58983bc09288c59dc3571ec4a22d346501317cc759ebe226065cde9a915951eed6b31c23c388c71da0f792a8b9264aaa868d2a59fe52665cc5d94b4ac5fa082e0ae3f5482699a7beef921c26245114b287aee43e47a2a8e73a77db98535f6c6a6cf7b834cb62cce2af6ba7ded19ffe134f14ca721863f8246dc02cfc924d0c9de000a7bdb37da690273d50814a43ff4ec15fcb79b6881276d8dbd7ebb49906c8b92359166599f095d1a783f6d75dd897f06bf21e4ca11656a55bb4247abbf56be4aa9f4f4986f92b0bda3700cb0bbccc5b5ad9e314ec7a12c8b5ad1bb532a74cb219f5e3de7c88dc89b6f40e5f53558ee097110793020eb0fb3454ef236539899d79c2aa001582cbe1780b24c59733cb86a16d7f739809ade06e8799bf86d7067f57157472800d33d1876b358ba743e8296fe7755c2137d2d8f234d7b126e061ac6cc0b1e10824a697f79f38e6c97d206237ce59f94891c3c6d3ef38c257ad9860f57e20acf61c8246714c8352da88d80c39a1304f73a6de8f9d4bcc6966dbbd72ce91ee5e322fbad49ec5cee0161a7413f3f48ea4457c47f363f6060e44732542d65cb8dc0ac9230ec03162317946fee2e0d63b837a35ba0d4f535c1ef20192a4d3143dc1b188528d143f5fdbbe1251f6e8a5347f5220f6a2fe2d525e8a9ccffe3cabd3e45a94ce0c2a560aa0b3536ea40cc02d03f06cb732c27f23fa522deb890a34574f051aea73f5b05b395d3b512cdde31cd629a215ecd292f9ef54113b9c12940162fd9726556f2ffd43725f0d8f21fab479c30ad1dadc0bc0a2002ed536fcfbec0929b656af68b241b015a578794033713ddaecbc5c0fe93f6ebbc6d6b89df861e1bee6551ae5979166f7bcaecaddbcd70c8f1c23df240cdedda3c85e8c285c64b9179146d5214505f2b310614a9c288f41c48ff4931fe98ac8e9452458093c1b274b036cd910891b5722f7fbd32614a45a84f1039bea5985c29de3b2f59a15a29d505ce426b52e25fb1d0550a76e452da0bad6f613ba10d1ade85cf3529da659b226e24733f38078965ed95e2fcab5625cf7d06ca9e3160ba4a77b0d92fe2325c7f4863d5eb5b95781d2e91e577c2880f8655bc04528192b172fc920fccb2d2ca2cf54adf023d35e05ac206c9675f5a9eddc0f5fdc038be430eabf11278404d830019f9388cfeb6b14f78e0e6d48048eef17dab28a0457d5a7ea9f43f13beb3387bfa5ce346734aed6a2874d77251d6bfaeb6bc7c3a17f57183efe3b06df512e5719c3eeab4a5a9785208cf2cd739eb985f1e969380af9f72bd315bcce0a4d0a97656b26ec3257d0544609a75c27633563b90fca3fc9494c7205bb58f05247c09a77073875e86dab5f4a75efec97cb6415442eec827181978bd7da771f385da45fcf74aa95d888f1e8c75c70e6462c4b9e2e6ed6aa29fa8ebd09841b348b82926c251bdf2ddb464785eaa55eee683aa79ffcae938db212d84982658df16cbaea3281b8e8d48487f5ea2980bf09a100ad7fc3c6f7ac1e7632e9a27c1fa84148da0482ab1b8a330d2c978359631ee8b108c99cb8d15607f3e5bd41e31819a19f539409024da73b609133e33bcb20d457c15d2ad592a0c7612403e7de245f0c2680689112c137f29ec2c9774c8d5c0193caf262eb9dcab70bfc98b4f6c2efc85fa7e23c4799d1eb4ba90dd14b8efd017c8be48421c736d571c68c1b1cc145548845f4490e29afd65bb0432eb38535ad2a5350b79be65d81c64a4f28a9011849fc857ca78a030ec876744b9c38251348c79e69efc308c97e6251db2eebb47a23615397a19a48e6344452b1b5045842482fdd165e29b6c9866008e4689d9af9030ad8f7fce1d448bcd70ef54ed30cfc37995aa40877cba2e55634dd471cd35daffbb2d3610bf9ea2c970c91c200abea5ea4a5d1d5ee55ffa03fb1d31391eb61410d79fc50da17870f5e74b8a6603a95412298b9efca4775c06777c0fd0337974e01fa91b2d8c6b6742567d12354749955b6145d77f1efc4c2d7ceac8988731161dac4cc91f5736db5221ff326c3630af3574fbfbdeed29d29c0f394ac143ccae935044a8952552f6b844868136894e762bf82306011d1cb2e2e73ee426aba6587db826d13a54631b7184c6bdb1a7674b70282766511c30d08bfa2476058072f61525f04d416b03a214eb797e4d647dcdd59c50ca66cd9113080b7576c0ef5aa8909ca541e969e9e3732c0535a588a31c468201c25e96345c95363e5d0c6f3445adbf92a19b20da32bd73ffc3ab7031a89fa99e04237b623e4bb551615de34376cf010caecb41b3045e7c49c787180549be9ad75abe368c999e7a8f61d3452a64f2c541971d89fccfdb652a141bc0cd997fb80bd57a984e42ca70f094d43fdb6e22fba9708937b22d2ef6f5205eca75cc36aa46085634c7b609be061d63fdc05aa46eb59c10a950efdbbf4d6cf77351022aa922e201bf31d918f87304738c8a10ee32714432148c469f0f8ea3bcfc7bbf951cee458b06ffe3cb4b000629e093fd45fe5bebefee2ae59b1cc7392ee5608acec36e4259b4c85ace7dbd2b4a61b9c64224d0f1bcf1bb06ce0c4e50af244a2d4dd5981ef04f420648281e8fc5b71d32e4ae4c8a629f72bbc3e9eff1ef5da3b0cf944e8ee217c8b067cb26ee8ef32277bdd913b7b8a1eea68366c0a1b6d207d6649076ff4a27ea2904ecc2d3a136a845f73e0aa577f2c24a0a7ddf6c92a318940aad05c913c7b8423329399bd141abbd549cee1c95194b07b3838d20af92d5b5a87018f855d921c6284c282e4f04ee86a3c67f43b9ceb5bdad45387c211d41d274200db2309805676757bf1d9070e83111c3c4506e6d26743f860ab84bbd21d5722409f0632e50b9b389c8172afe12995bd1e60dacc1e25215ba7d7c4c6a9fd97231ea3ac919c0c6f4d457887cfb83f3eb137c0377bcbb80af450ef3b498d7e5be753ad20ec9a49dfdfcf0650c557cb7e564a6c263635ac38b1ed5d0373d029d6b0c14ad96a37ffeb5e85fe5825253b8d6cfd18fe9e5c9ddabd14964430cb0f8041e937a7549b4e6a1f8dd9181018aa87319e25059241b5d450a12786c4452fec808f0693bac5f677048dadbdbd6f8c6439d4e90f9edfa65c632ece51c12ea4b56e2a10197f75786cd14f4db03f309a4b6b52ed44a18dd80427203bf46445e9d217b212d7a365844382cb71bc14b823497c5b71b3c2d67d0cc816bcaee5e1a67e91da93ee8acbfe0e5201aeef8172b44d11ba48338255b7fa0b8ba26d190ba594391ea3c326477ec001bd7e16a0cb5344837de0ad41a09ac7642315f0bcdfdaead1df58dc2a995c489124972703ea9b6183fc96ce68b10439d7ca0ad51881501d4c3ba21d96347260e9b250fb0db3a488bc6e7f49bc1990b1b8d118edaf2ed128c35123b44b240885b690c93d60cc3032cd500407c305082f2f0598cb5db3ec87e0b38e2afab2a63756399e82f798737ad148362f8be682341604aba297f87c85a922c30b8b2ae6230ed116be83e8aa8147aaa59b3769ddafd8db6abbd1bc97e453da4690c2441e26d1545b4e5ee8a45db2c2099203c8062c2079959bed9ef8ce1ad8edad2e47f9afa061d3d1c8a1b6ef4d73a3e5823b463747240ca71dddcd3c4ea13fa6c69eb73bbd8d6f93bc0275e2fb2d5a3faf82225314887f90eabef296445ea0e92d98160f4355fd1dfe3ff1f72616e63eae92dc54a93da953f92142bea22302c9b4734d3dd6583cb9b741170e3bad156f3bbc56ce08c17616a50a4ac8a75f1a11e6c889ddf73059e7a6ef6c826083889f7f032efdd5a5cb12cadf2717857b71f1a20ce4e8fe35565e22283243d24dd9c460a6eb5725b33c1153206f233b1c21a1668bd1e0ba145cd1c7d285e883c12062672905a338a51646899269eb6b7e52fa3686d4fd3db1f47bd37b43c88278e0d9d178186fc8f8da1f948ed524edb956c457f93f0abace36520a790332a304e88b8dd5a35cdd6eb395006d57251a5e8c235afba7178694d44bd7b729388f3be6e1349ea2df5cf881d4d8a5d58d940e05fda433c6a41e854593480e076ff1b61263bfaaa4df250004e3ffa4bd83d2ba04710aaca12e56572c2bc6ad6e"}}, @TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0xda91, 0x4, 0xfff8}, [@TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="4587", @TCF_META_TYPE_VAR="90", @TCF_META_TYPE_VAR="15c7"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x18d, 0x3, 0x3}, {0x7fffffff, 0x8b64, 0x0, 0x9}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x1204}}, 0x20004084)

20.972167979s ago: executing program 4 (id=513):
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@getneightbl={0x14, 0x42, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x48010)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0080c2000000aaaaaaaaaabb0800450000280000000000ffffff16009078e0000000000000000000000020000000"], 0x0)
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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")
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, &(0x7f0000001400)=""/4096, 0x1000)

19.821241462s ago: executing program 4 (id=519):
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioperm(0x0, 0x2, 0x7e)
set_mempolicy(0x0, &(0x7f0000000040)=0x8000000000000001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r3)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xe)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x1, 0x71, 0x200000009})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000300)={r6, 0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000002c0)={r4, 0x0, r7, 0x2, 0x3c, 0x92a, 0xd, 0xfffffffd, 0x401, 0x4, 0x4, 0x4})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

18.897500087s ago: executing program 4 (id=530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_80211_inject_frame(&(0x7f0000000700)=@broadcast, &(0x7f0000000740)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @random="cc16207dd50e", {0x5, 0x9}}, 0x9193, 0x61, @random=0x7f, @void, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x7ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x5, 0xa}}, [{0xdd, 0x7f, "76266dce82cb699307b2fb83da8acf18ae609a371512df7f896a6e9edd6810efd63e40f37fd85b2709fad3ec419797af519af12af0ee17246be913ced98a3c4b6aeaf7ad405cf307d451311cff443b3dfb9a82a36ef8e7b48ba2df3d5e9ad01225de36cbf7a0ec8c01d24cef7534fe88fcaaf634fc749653479d6b2691ea1d"}]}, 0xbb)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000098c294ccbd8256dab0a88110a010100000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000140000001100010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

18.446215653s ago: executing program 4 (id=532):
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x800, 0x2, 0x800001b7}, &(0x7f0000000300)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x3000000, 0x0, 0x0, 0x0)

18.337120711s ago: executing program 33 (id=532):
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x800, 0x2, 0x800001b7}, &(0x7f0000000300)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x3000000, 0x0, 0x0, 0x0)

8.580132948s ago: executing program 2 (id=568):
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c)
prlimit64(0x0, 0xe, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = socket(0x15, 0x5, 0xa)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000000101040000000000000000020000000c0018800800014000019b01240001801400018008000100e000000108000200e00000010c00028005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180"], 0x4c}}, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000074000000090a010400000000000000000100fffc08000a40000000002c001180090001006d617371000000001c00028008000340dfffff00080002400000000a08000340000000020900010073797a30000000000c000b4000000000000000090c000b4000000000000000090800034000000014140000001000010000000000000000000000000a"], 0xbc}}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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")
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184)
getdents(r5, &(0x7f0000000880)=""/223, 0xdf)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2a0000001800010025bd7000000000000a00a000000300000000000014000200ff020000000000000000000200000001"], 0x30}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000100)=0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

7.732775976s ago: executing program 2 (id=570):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_80211_inject_frame(&(0x7f0000000700)=@broadcast, &(0x7f0000000740)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @random="cc16207dd50e", {0x5, 0x9}}, 0x9193, 0x61, @random=0x7f, @void, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x7ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x5, 0xa}}, [{0xdd, 0x7f, "76266dce82cb699307b2fb83da8acf18ae609a371512df7f896a6e9edd6810efd63e40f37fd85b2709fad3ec419797af519af12af0ee17246be913ced98a3c4b6aeaf7ad405cf307d451311cff443b3dfb9a82a36ef8e7b48ba2df3d5e9ad01225de36cbf7a0ec8c01d24cef7534fe88fcaaf634fc749653479d6b2691ea1d"}]}, 0xbb)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000098c294ccbd8256dab0a88110a010100000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000140000001100010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7.232971427s ago: executing program 1 (id=573):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet(0xa, 0x801, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0xfdef)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}})
listen(0xffffffffffffffff, 0xfffffffd)
socket$inet(0xa, 0x801, 0x84)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xffffff81)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
creat(&(0x7f0000000380)='./file0\x00', 0x0)
syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r7, 0xc048aeca, &(0x7f0000000080))
syz_io_uring_submit(r3, r4, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="3626ff1ff20f2dfa0f01ca66baf80cb89a588f8eef66bafc0cb0c4ee66ba400066b8003066efc4e235368602c3000066ba2000edc4c2cd3f5c3300838d4c9e8fef7d660ff61500000000", 0x4a}], 0x1, 0x1, 0x0, 0x0)

7.077676959s ago: executing program 2 (id=575):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x1c, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffffb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x810)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000054}, 0x4000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r5, &(0x7f00000000c0), 0x10)
sendto$l2tp(r5, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000000)=0x9, 0x4)
recvfrom$l2tp(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000e00)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x48000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r9=>0x0)
openat(0xffffffffffffff9c, 0x0, 0x284000, 0x0)
timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
nanosleep(&(0x7f0000000200)={0x77359400}, &(0x7f00000002c0))
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x84dec66149ad2c5d}, 0x4000)

6.69212231s ago: executing program 3 (id=577):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
accept$alg(r0, 0x0, 0x0)
unshare(0x22020600)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x4, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x0, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x80006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0xc, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4016, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0xe, 0x0, 0x5, 0x7, 0x8, 0x8, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8004, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0xffff, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x91, 0x5, 0xb, 0x4, 0x9, 0xe7, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x1, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800023, 0x200, 0x7e, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12c, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0xfd, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x3, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff002, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0xb, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
write(r1, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@nobarrier}, {@barrier}, {@nls={'nls', 0x3d, 'macromanian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6be, &(0x7f0000001640)="$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")
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8f74c177cb5e687b, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000c40))
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
syz_open_dev$mouse(&(0x7f0000000240), 0x5, 0x441)
setrlimit(0x2, &(0x7f0000000040)={0x4848, 0x4})
r3 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0)

6.630002815s ago: executing program 2 (id=578):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x181001, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$tcp_congestion(r2, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e1d, @multicast1}}, 0x0, 0x0, 0x2b, 0x0, "b2f0a98893e964946272f294c09a15300fe974f98a52762eac285169db3c25acd4b3e3b806c7a2d03ce3fbd16ea3da2fef709042301b35939c9ab423b745e42c6cca1c44a387b443a8fe8a61e1f3f39e"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x4e22, 0x8, @private2}}, 0x0, 0x0, 0x0, 0x0, "97045e8ec254b1f623a7834fc983123bbf064efda734e0c3550af8e9cf9bc192cfe58d6792802e6673f3cf315d0214fceaf7704e2b095d40f0e80cf63f34db84a6af52011ecc24de0139ac016bc44e00"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001200)={@in6={{0xa, 0x4a21, 0x7, @private0, 0xe97}}, 0x0, 0x0, 0x0, 0x0, "2017c4415130a8586a605b90612fc411fd94fe6fe1a89386debe0d09ef2df84424407a38579f903710637a6a7a07ce5aa2c73a9caf2a927e479e97536510cae9a464b83e5caf532a0df34e702a4e4566"}, 0xd8)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, &(0x7f0000000580), 0x0, 0x4})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='freezer.self_freezing\x00', 0x0, 0x0)
preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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")
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)
r9 = syz_clone(0x1004000, &(0x7f0000000280)="6939aea63f8ba1d5765a6d888a84526eb3ef2e2f255ca7c20c450165c08e89c9f258d6520146150df75b1ef96b909d96aac64592f3d6ce6a53fe2f16eba8", 0x3e, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)="22673004bfb99caa2872a1fad7d15d8b6dd5bdab8d74ba58ffbe0cfec78adf95b276b3be6889ed764aea2b18446d331cbd9fee440ff5abb028252c4465077a80a400ff40064eb4a6ee4f142d6d9e04da1528192689218674660de6cb273da86aaaae330061671c0a5cb9b61e2fb48f714b")
sched_setscheduler(r9, 0x3, &(0x7f00000004c0)=0x8000)
listen(r7, 0xfff)
write$UHID_INPUT(r2, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006)
syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5014000c21780000"], 0x0)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r10, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04, 0x0, 0x0, 0xe55, 0x0, 0x0, 0x0, 0x5cf08b6], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)

6.192212061s ago: executing program 3 (id=579):
mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil)
r0 = socket(0x11, 0xa, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x989002, 0x0)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fchdir(0xffffffffffffffff)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r4, r5, 0x0, 0x8000fb00)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2040, 0x4)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file1\x00', 0xc00, &(0x7f0000001080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT=r0], 0x1, 0x6207, &(0x7f0000012500)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
syz_read_part_table(0x106f, &(0x7f0000000000)="$eJzs0D1OAzEQBtBvE9YhIkg03IaGnhNwmdBwCm5CQ8uVqAZ57TTUSGnekyzPj8YjOVzVsdavJHVuy5/O030qySHHke/f3l9ma/lMsptnK1yGHvI4o1qSpep53ZLKrqpqdIZzfzNpvXS62yevp+8kH23M/9QM+vqW9bLhpg79ut3i//8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiG3wAAAP//ytEctg==")
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020)

4.772138555s ago: executing program 2 (id=580):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r3, 0xc0104307, &(0x7f0000000080)=0x81)
close(r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2])
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050041000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) (fail_nth: 1)

4.535460274s ago: executing program 1 (id=581):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async)
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r1, &(0x7f00000000c0), 0x10) (async)
sendto$l2tp(r1, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) (async)
recvfrom$l2tp(r1, 0x0, 0x0, 0x10000, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x7) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x34, r3, 0x5, 0x70bd25, 0x8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac05, 0xfac01]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) (async)
r5 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
mkdir(&(0x7f0000000140)='./control\x00', 0x5) (async)
r6 = inotify_init1(0x800)
inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa400080a)
rmdir(&(0x7f0000000100)='./control\x00') (async)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) (async)
linkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file2\x00', r0, 0x0, 0x1400)

4.254528817s ago: executing program 1 (id=582):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}, 0x1, 0x0, 0x600000000000000}, 0x0)

3.884080876s ago: executing program 3 (id=583):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
creat(0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="1802000000200000000000000000000085000000070000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r6, 0x25, 0x2}, 0x14)
syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a324647ae3941d1747380b57bb23a78bd1175c15533631d10cd068c525e1cdf1", "6868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f24279510", "7d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b9f4", {"96775e3b6484c1851f6984768a7bb2fb", "412a7c8e5fffae9a88c46a3056c4319a"}}}}}}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1fb}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0xfe}]}}}]}, 0x5c}}, 0x40000)

3.880135957s ago: executing program 1 (id=592):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2a, 0x0, @fd_index=0x3})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x114, &(0x7f0000000140)=0x1, 0x0, 0x4)
ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000380)={{&(0x7f000024c000/0x1000)=nil, 0x1000}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r7, 0xae9a)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x5, 0x400000, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x200000000005, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x99e, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
io_uring_enter(r1, 0x1469, 0x0, 0x0, 0x0, 0x0)
r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r8, 0x4040942c, &(0x7f0000000240)={0x0, 0x5a, [0x80, 0x5f0e, 0x3, 0xfffffffffffffffe, 0xffff, 0x1]})

3.153641505s ago: executing program 1 (id=585):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x28, 0x4479, &(0x7f0000008980)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x3a, 0x30f, 0x0, 0x0, {0x3}, [@nested={0x4}, @nested={0x6, 0x1, 0x0, 0x1, [@generic="23b7753b0805ba5fbec0929bde4c277478db563341123243b24cbf85f144d78e002f48e59539742efa7d8050fa872cbf816f727faecf03e772dce2867120bff12ebf0d2ca5cb86022125d5ef88c6295077482ad62f60390e6cc1dc891d70220955"]}]}, 0x24}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}}, 0x10)
r3 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x2, 0x20000000, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090)

2.570872683s ago: executing program 3 (id=587):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
close(0x3)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000600)={0x84, r1, 0x1, 0x7, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x5]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x52, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x11b}, @broadcast, @device_a, @from_mac=@broadcast, {0x2}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0xa010, 0xe, {0x0, 0x6, @default_ibss_ssid}, @val, @val={0x2d, 0x1a, {0x1, 0x2, 0x3, 0x0, {0x1ff, 0x5, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x407, 0x8, 0x6}}, [{0xdd, 0x6, "62d1d9a16684"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x2400c0c0)

2.35040739s ago: executing program 5 (id=588):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
accept$alg(r0, 0x0, 0x0)
unshare(0x22020600)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x4, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x0, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x80006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0xc, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4016, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0xe, 0x0, 0x5, 0x7, 0x8, 0x8, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8004, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0xffff, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x91, 0x5, 0xb, 0x4, 0x9, 0xe7, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x1, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800023, 0x200, 0x7e, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12c, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0xfd, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x3, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff002, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0xb, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
write(r1, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@nobarrier}, {@barrier}, {@nls={'nls', 0x3d, 'macromanian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6be, &(0x7f0000001640)="$eJzs3U9sHFcZAPBv1pu1N0iu26ZpQKBajVRBIxLbq5IgITUghHyIUASXXq3Eaaxs0sp2kVshsgYKEidOqAcORcgcekIIIZUTopyRkLhw8j0SNw5GAhbNn12Pd7f2bmN7t+3vJ43nzb55733z7eyb/ZNoAvjUWn4lzrQiieVLN7bS7d2dRnN3p3G/U46I6YioRFTzVST1iOSDiOuRL/HZ9MGiu+TDxnnp0ftJ9Z33GvlWtViy/SuHteszcM9WxEx3Yyoi5vPif4butq+/bMn6ubXf30eUdONOE3axkzgYt3af1n5l5cjmw79ugYn1ML9u9pmLOBv51TV9HxDF7HD0zDB+h85NrdOLAwAAAE7KwM/yZU/sxV5sxezphAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfDEl+z8CkWCqd8nwknfv/10r31K+NOdzH9PadbPWdJ8YdCAAAAAAAAAAcafuQuuf2Yi+2Yraz3U6y3/yfzzbOZX8/E2/ERqzGelyOrViJzdiM9ViMiLlSR7Wtlc3N9cX+lr+ItGW73X5YtFwa2HLpYFyt3kAH/UuDvp0AAAAAAAAA4FPrh7G8//s/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMgiRiKl9ly7lOeS4q1YiYiYhaMt/dvTbWYI/Bn8YdAAAAAJy8erGeTf6XF9pJ9pn/fPa5fybeiAexGWuxGc1YjdvZdwH5p/7K31qN5u5O43669Hf89X+OFEfWY+TfPQweeSHb45lui+X4Vnw3LsV83Iz1WIvvxUpsxmrMxzez0kokMVd8ezG3u1OPTqz98V4/sHWzN7bnSuU0vgtZJPW4E2tZbJfjVq0TeqXY70JptD/UInpG3E6zk7xcGDJHt4t1ekQ/L9aTYS478jPdjCwUuU+z8WQ57/25H/E86R1pMSrd76DO7Y+SbvaONHzO/93ORcTZ4qE01z852ZyP+FXawUy0fpZudc6+84fnPOJLf//zzbuVB/fu3tm4NDmn0UfUe040Spl4dqhMNNNMtB4jEzOPE//xqRXZyGfR0WbL57O2s7EW347X4nasxtVYiMW4Fgvx1ViKRiyV8vrM4XnNXmuV0ea3i18sCuk16aela9OpmT64uX86pHl9spTX8kw3l9V1H9lrl7L01BBZSmoxOEv/GBhj9XNFIR3jR6Urzvj1ZCKbmzvRPX14Jn7133Sy3Wg+uLd+d+X1Icd7oVinz9PbB+fmXx/LAY2uONz0fHkqfbIiv2yUz5e07ulOXU++asUvLtWiswN1tchez3ndUa/UtKfz24N6yuueHThKI6u7UKo78C4nXotm910IABPs7Itna/VH9b/W363/uH63fmPmG9PXpj9fizN/qf5x6reV31S+lrwY78YPYnbckQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCfBxptv3VtpNlfXJ7AQlWPucHtgVScV+SO1yTj2j2th+rAz6ncRcUjz2odVfaF4ho4/5iS729hEpC6qpzDW9KAc3ug+Uo+odOOJiHsTcoM74CRc2bz/+pWNN9/68tr9lVdXX119sHTt6stXG19ZfHjlzlpzdSH/O+4ogZOw/zZg3JEAAAAAAAAAAAAAwzqN/94wYNikNYZjBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6ell+JM61IYnHh8kK6vbvTaKZLp7y/ZzUiKhGRfD8i+SDieuRLzJW6Sw723p7qlF569P4vX3jnvcZ+X9XO/pWedr//V7s94lG0iiXmI2KqWB9teqj+bpX6a40YWC7pHmGasIudxMG4/T8AAP//kWUO3A==")
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8f74c177cb5e687b, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000c40))
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
syz_open_dev$mouse(&(0x7f0000000240), 0x5, 0x441)
setrlimit(0x2, &(0x7f0000000040)={0x4848, 0x4})
r3 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0)

2.119417859s ago: executing program 5 (id=589):
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@getneightbl={0x14, 0x42, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x48010)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r5, 0x0)
read(r5, &(0x7f0000001400)=""/4096, 0x1000)

2.015896397s ago: executing program 2 (id=590):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2a, 0x0, @fd_index=0x3})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4)
io_uring_enter(r1, 0x1469, 0x0, 0x2000000, 0x0, 0x0)

1.397362997s ago: executing program 34 (id=590):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2a, 0x0, @fd_index=0x3})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4)
io_uring_enter(r1, 0x1469, 0x0, 0x2000000, 0x0, 0x0)

1.36740056s ago: executing program 5 (id=593):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
r2 = socket$inet(0x2, 0x80001, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
listen(r3, 0x3)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r2, 0x3)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x700, 0x0, 0x0)

1.366756869s ago: executing program 3 (id=594):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48010)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==")
read(0xffffffffffffffff, 0x0, 0x0)

1.256002868s ago: executing program 6 (id=533):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48)

936.142004ms ago: executing program 6 (id=595):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a00000000000061119c0000000000180000000000000000000020000000009500000000010000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

877.473749ms ago: executing program 5 (id=596):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_80211_inject_frame(&(0x7f0000000700)=@broadcast, &(0x7f0000000740)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @random="cc16207dd50e", {0x5, 0x9}}, 0x9193, 0x61, @random=0x7f, @void, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x7ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x5, 0xa}}, [{0xdd, 0x7f, "76266dce82cb699307b2fb83da8acf18ae609a371512df7f896a6e9edd6810efd63e40f37fd85b2709fad3ec419797af519af12af0ee17246be913ced98a3c4b6aeaf7ad405cf307d451311cff443b3dfb9a82a36ef8e7b48ba2df3d5e9ad01225de36cbf7a0ec8c01d24cef7534fe88fcaaf634fc749653479d6b2691ea1d"}]}, 0xbb)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000098c294ccbd8256dab0a88110a010100000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000140000001100010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

762.311678ms ago: executing program 6 (id=597):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioprio_get$uid(0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]})
syz_usb_connect(0x2, 0x71, &(0x7f0000000100)=ANY=[@ANYBLOB="120100034ca0b5203360084113cc0102030109025f000107a1407509048002060103ec010905170220009100060725018008ff0009058703ff03d101070201090010000000000000072501"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb, 0xb}}, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10)

652.167377ms ago: executing program 1 (id=598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x810)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x200}}, './file0\x00'})
ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000200)=0x3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r2, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
writev(r2, &(0x7f0000001940)=[{&(0x7f0000000140)="5ed8b7", 0x3}], 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x80, 0xfe, 0x5, 0x5, 0x0, 0x0, 0x0, 0xfd, 0x2, 0x0, 0x0, 0xcc}, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x38, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa014101}]}, 0x40}}, 0x4000004)

187.009085ms ago: executing program 3 (id=599):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
accept$alg(r0, 0x0, 0x0)
unshare(0x22020600)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x4, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x0, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x80006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0xc, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4016, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0xe, 0x0, 0x5, 0x7, 0x8, 0x8, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8004, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0xffff, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x91, 0x5, 0xb, 0x4, 0x9, 0xe7, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x1, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800023, 0x200, 0x7e, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12c, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0xfd, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x3, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff002, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0xb, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
write(r1, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@nobarrier}, {@barrier}, {@nls={'nls', 0x3d, 'macromanian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6be, &(0x7f0000001640)="$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")
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8f74c177cb5e687b, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000c40))
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
syz_open_dev$mouse(&(0x7f0000000240), 0x5, 0x441)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r3 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0)

151.933957ms ago: executing program 5 (id=600):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x300, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0)

0s ago: executing program 5 (id=601):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000888f30761bd944696d5d7401afea158b6095c0ad344bf94a12112850a90cadd09060de2cc03dc747c7a46c0abfa8e69f5b085c8dc6df4b3d76048d7931dc3fa9b18e34e8c5985947d1d6da89fb1b534ccfde0bf3513fcf200b4b8165446564"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8800, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x120, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xe8, 0x2, [@TCA_BASIC_ACT={0xe4, 0x3, [@m_ct={0xe0, 0xe, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0x3, 0x8, 0x1, 0x9}}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x2, 0x0, 0xfffffffe, 0xb}}]}, {0x6f, 0x6, "f18787688d1b5fe446639201a76858a97aa8d77ea2d928525246cfa78b4ec507e4daa8ef139cc60c6483ac9365ffd9c56f5db2d138788978ec7e01f76e7b623f46ce4eec9b758b9db012d693f3592df4c2c7243cab0cb6796305ce351f836e3e08aec5293c697a148803c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r10 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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")
r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x3e)
ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141)
pwrite64(r10, &(0x7f0000000080)="9b02d2705f", 0x5, 0x8002c5f)
ioctl$EXT4_IOC_MIGRATE(r11, 0x6609)
mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
lseek(r0, 0x7, 0x4)
io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0)

kernel console output (not intermixed with test programs):

.935213][ T4520] appletouch: probe of 5-1:0.85 failed with error -5
[   80.972208][ T4575] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.009210][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.028656][ T4520] usb 5-1: USB disconnect, device number 2
[   81.047663][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.080199][ T4575] 8021q: adding VLAN 0 to HW filter on device team0
[   81.112421][ T4741] loop2: detected capacity change from 0 to 32768
[   81.141689][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.151180][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.185642][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[   81.192974][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.200126][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.234713][ T4741] XFS: ikeep mount option is deprecated.
[   81.253634][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.262912][ T4741] XFS: ikeep mount option is deprecated.
[   81.295327][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.305552][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.314236][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.321361][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.373460][ T4741] XFS (loop2): Mounting V5 Filesystem
[   81.410370][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.445947][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.491917][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.536433][ T4519] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   81.552347][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.565141][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.594205][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.608218][ T4741] XFS (loop2): Ending clean mount
[   81.619987][ T4575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.628910][ T4741] XFS (loop2): Quotacheck needed: Please wait.
[   81.634617][ T4575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.673606][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.695619][ T4520] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   81.707246][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.739803][ T4741] XFS (loop2): Quotacheck: Done.
[   81.742655][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.760889][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.790232][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.813203][ T4184] XFS (loop2): Unmounting Filesystem
[   81.816475][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.834517][ T4784] netlink: 'syz.1.100': attribute type 10 has an invalid length.
[   81.842747][ T4519] usb 4-1: Using ep0 maxpacket: 8
[   82.083018][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.092325][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.105664][ T4520] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[   82.116946][ T4520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.145848][ T4519] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   82.170931][ T4519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.205077][ T4575] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.213146][ T4520] usb 5-1: config 0 descriptor??
[   82.222174][ T4519] usb 4-1: Product: syz
[   82.240325][ T4798] 9pnet: Insufficient options for proto=fd
[   82.242366][ T4519] usb 4-1: Manufacturer: syz
[   82.252723][ T4519] usb 4-1: SerialNumber: syz
[   82.281884][ T4519] usb 4-1: config 0 descriptor??
[   82.357499][ T4519] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   82.370424][ T4519] usb 4-1: setting power ON
[   82.380655][ T4519] dvb-usb: bulk message failed: -22 (2/0)
[   82.388712][ T4798] device veth0_to_team entered promiscuous mode
[   82.402929][ T4519] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   82.446371][ T4519] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   82.467968][ T4519] usb 4-1: media controller created
[   82.490217][ T4519] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   82.639660][ T4798] loop1: detected capacity change from 0 to 4096
[   82.651472][ T4765] loop3: detected capacity change from 0 to 512
[   82.721636][ T4768] loop4: detected capacity change from 0 to 32768
[   82.745811][ T4519] usb 4-1: selecting invalid altsetting 6
[   82.751683][ T4519] usb 4-1: digital interface selection failed (-22)
[   82.766146][ T4768] XFS: attr2 mount option is deprecated.
[   82.774016][ T4519] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   82.799213][ T4798] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[   82.826778][ T4765] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   82.846319][ T4519] usb 4-1: setting power OFF
[   82.851195][ T4519] dvb-usb: bulk message failed: -22 (2/0)
[   82.876521][ T4765] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[   82.908050][ T4519] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   82.917695][ T4765] FAT-fs (loop3): Filesystem has been set read-only
[   82.933678][ T4519] (NULL device *): no alternate interface
[   82.953350][ T4798] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   82.981106][ T4798] ntfs3: loop1: Failed to load $MFT.
[   83.014679][ T4768] XFS (loop4): Mounting V5 Filesystem
[   83.165853][ T4765] dvb-usb: bulk message failed: -22 (3/0)
[   83.171794][ T4765] dvb-usb: bulk message failed: -22 (4/0)
[   83.197974][ T4765] cxusb: i2c read failed
[   83.236637][ T4825] dvb-usb: bulk message failed: -22 (3/0)
[   83.277818][ T4519] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   83.283764][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.334720][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.350124][ T4519] usb 4-1: USB disconnect, device number 3
[   83.412341][ T4575] device veth0_vlan entered promiscuous mode
[   83.417666][ T4768] XFS (loop4): Ending clean mount
[   83.443294][ T4768] XFS (loop4): Quotacheck needed: Please wait.
[   83.452680][ T4520] pegasus: probe of 5-1:0.0 failed with error -32
[   83.485082][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.502767][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.556757][ T4575] device veth1_vlan entered promiscuous mode
[   83.573842][ T4768] XFS (loop4): Quotacheck: Done.
[   83.586511][  T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.594517][  T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.612593][ T4768] udc-core: couldn't find an available UDC or it's busy
[   83.619818][ T4768] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   83.659902][  T382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.109861][ T4823] loop2: detected capacity change from 0 to 32768
[   84.379880][ T4838] loop3: detected capacity change from 0 to 512
[   84.421046][ T4823] XFS (loop2): Mounting V5 Filesystem
[   84.597799][ T4575] device veth0_macvtap entered promiscuous mode
[   84.645346][ T4823] XFS (loop2): Ending clean mount
[   84.670554][ T4849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.712279][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.715732][ T4514] usb 5-1: USB disconnect, device number 3
[   84.728288][ T4187] XFS (loop4): Unmounting Filesystem
[   84.783944][ T4838] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   84.813646][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.889389][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.906638][ T4838] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.995724][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'.
[   85.058207][ T4575] device veth1_macvtap entered promiscuous mode
[   85.085649][ T4857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'.
[   85.168035][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.207904][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.232329][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.243016][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.262165][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.272889][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.290330][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.301809][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.316543][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.333304][ T4184] XFS (loop2): Unmounting Filesystem
[   85.348745][ T4575] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.373544][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.407466][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.444932][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.486862][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.497965][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.511807][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.523335][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.534469][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.544696][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.555712][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.577609][ T4575] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.602242][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.622257][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.639392][ T4575] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.649013][ T4575] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.658337][ T4575] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.684482][ T4575] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.753005][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.820702][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.840215][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.881020][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.907650][ T4889] nbd: must specify at least one socket
[   86.924923][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.954373][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.002729][ T4897] fuse: Unknown parameter '0x0000000000000005'
[   87.296991][ T4911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.298361][ T4909] loop5: detected capacity change from 0 to 256
[   87.377067][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.118'.
[   87.639400][ T4888] loop4: detected capacity change from 0 to 32768
[   87.773838][ T4924] loop5: detected capacity change from 0 to 128
[   87.808549][ T4888] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[   87.894164][ T4889] loop3: detected capacity change from 0 to 32768
[   88.020829][ T4889] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   88.064102][   T26] audit: type=1804 audit(1756700987.147:8): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.120" name="/newroot/2/bus/bus" dev="loop5" ino=1048593 res=1 errno=0
[   88.068948][ T4935] loop2: detected capacity change from 0 to 512
[   88.091624][ T4889] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   88.139979][ T4889] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   88.183301][   T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   88.192714][   T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   88.250848][ T4187] ocfs2: Unmounting device (7,4) on (node local)
[   88.335877][   T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 143ms
[   88.337247][ T4935] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   88.345327][   T21] gfs2: fsid=syz:syz.0: jid=0: Done
[   88.362101][ T4889] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   88.437911][ T4889] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[   88.454656][ T4935] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.531574][ T4889] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[   88.531574][ T4889]   inode = 12 2341
[   88.531574][ T4889]   function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602
[   88.690073][ T4889] gfs2: fsid=syz:syz.0: about to withdraw this file system
[   88.736300][ T4889] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[   88.745386][ T4889] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[   88.842822][ T4889] gfs2: fsid=syz:syz.0: File system withdrawn
[   88.896742][ T4889] CPU: 1 PID: 4889 Comm: syz.3.112 Not tainted syzkaller #0
[   88.904267][ T4889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   88.914595][ T4889] Call Trace:
[   88.917999][ T4889]  <TASK>
[   88.920942][ T4889]  dump_stack_lvl+0x168/0x230
[   88.925909][ T4889]  ? kobject_uevent_env+0x371/0x890
[   88.931135][ T4889]  ? show_regs_print_info+0x20/0x20
[   88.936361][ T4889]  ? load_image+0x3b0/0x3b0
[   88.940888][ T4889]  ? kobject_uevent_env+0x371/0x890
[   88.946299][ T4889]  gfs2_withdraw+0x111b/0x1460
[   88.951112][ T4889]  ? gfs2_lm+0x220/0x220
[   88.955464][ T4889]  ? load_image+0x3b0/0x3b0
[   88.959991][ T4889]  ? gfs2_consist_inode_i+0xc0/0xe0
[   88.965221][ T4889]  gfs2_dirent_scan+0x525/0x650
[   88.970355][ T4889]  ? gfs2_dirent_search+0x7e0/0x7e0
[   88.975590][ T4889]  ? gfs2_dirent_search+0x7e0/0x7e0
[   88.980903][ T4889]  gfs2_dirent_search+0x2dd/0x7e0
[   88.985995][ T4889]  ? gfs2_permission+0x3ed/0x4b0
[   88.991131][ T4889]  ? gfs2_dir_search+0x220/0x220
[   88.996407][ T4889]  ? gfs2_lookupi+0x5e0/0x5e0
[   89.001116][ T4889]  ? gfs2_glock_nq+0xcb0/0x1550
[   89.006860][ T4889]  gfs2_dir_search+0x49/0x220
[   89.011912][ T4889]  gfs2_lookupi+0x45c/0x5e0
[   89.016792][ T4889]  ? gfs2_lookup_simple+0xf0/0xf0
[   89.022197][ T4889]  ? gfs2_lookupi+0x3fe/0x5e0
[   89.026900][ T4889]  ? __d_lookup_rcu+0x68a/0x760
[   89.031775][ T4889]  ? __lock_acquire+0x7c60/0x7c60
[   89.036918][ T4889]  __gfs2_lookup+0x8c/0x260
[   89.039225][ T4969] loop5: detected capacity change from 0 to 1024
[   89.041524][ T4889]  ? gfs2_atomic_open+0x210/0x210
[   89.041551][ T4889]  ? d_alloc_parallel+0x1203/0x12d0
[   89.041580][ T4889]  gfs2_atomic_open+0x8e/0x210
[   89.063215][ T4889]  ? gfs2_rename2+0x1cf0/0x1cf0
[   89.068102][ T4889]  path_openat+0xe6d/0x2f30
[   89.072809][ T4889]  ? verify_lock_unused+0x140/0x140
[   89.078038][ T4889]  ? do_filp_open+0x3e0/0x3e0
[   89.082803][ T4889]  do_filp_open+0x1b3/0x3e0
[   89.087731][ T4889]  ? vfs_tmpfile+0x300/0x300
[   89.092373][ T4889]  ? _raw_spin_unlock+0x24/0x40
[   89.097711][ T4889]  ? alloc_fd+0x598/0x630
[   89.102384][ T4889]  do_sys_openat2+0x142/0x4a0
[   89.107256][ T4889]  ? __lock_acquire+0x7c60/0x7c60
[   89.112659][ T4889]  ? do_sys_open+0xe0/0xe0
[   89.117281][ T4889]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[   89.123276][ T4889]  ? lock_chain_count+0x20/0x20
[   89.128243][ T4889]  ? vtime_user_exit+0x2dc/0x400
[   89.133262][ T4889]  __x64_sys_openat+0x135/0x160
[   89.138238][ T4889]  do_syscall_64+0x4c/0xa0
[   89.142753][ T4889]  ? clear_bhb_loop+0x30/0x80
[   89.147431][ T4889]  ? clear_bhb_loop+0x30/0x80
[   89.152101][ T4889]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   89.158088][ T4889] RIP: 0033:0x7f057ecb0be9
[   89.162527][ T4889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.182424][ T4889] RSP: 002b:00007f057cf18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   89.190830][ T4889] RAX: ffffffffffffffda RBX: 00007f057eee7fa0 RCX: 00007f057ecb0be9
[   89.199206][ T4889] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c
[   89.207177][ T4889] RBP: 00007f057ed33e19 R08: 0000000000000000 R09: 0000000000000000
[   89.215533][ T4889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.223519][ T4889] R13: 00007f057eee8038 R14: 00007f057eee7fa0 R15: 00007fff1c065018
[   89.231535][ T4889]  </TASK>
[   89.234572][    C1] vkms_vblank_simulate: vblank timer overrun
[   89.255409][ T4969] EXT4-fs (loop5): Ignoring removed nobh option
[   89.283498][ T4969] EXT4-fs (loop5): Ignoring removed bh option
[   89.375404][ T4931] loop1: detected capacity change from 0 to 40427
[   89.382264][ T4969] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   89.494276][ T4931] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   89.547943][ T4931] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   89.577331][ T4969] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[   89.603792][    C1] vkms_vblank_simulate: vblank timer overrun
[   89.675135][ T4931] F2FS-fs (loop1): invalid crc value
[   89.753019][ T4931] F2FS-fs (loop1): Found nat_bits in checkpoint
[   89.846667][ T4966] netlink: 28 bytes leftover after parsing attributes in process `syz.5.128'.
[   89.936868][ T4931] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   90.021687][ T4987] fuse: Unknown parameter '0x0000000000000005'
[   90.079014][ T4931] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   90.107711][ T4990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.123360][ T4931] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   90.135690][    T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   90.528105][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   90.540547][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.550819][    T7] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[   90.560774][ T4514] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   90.569059][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.584342][    T7] usb 3-1: config 0 descriptor??
[   90.815081][ T5009] Zero length message leads to an empty skb
[   90.849956][ T4514] usb 4-1: device descriptor read/64, error -71
[   90.990467][ T5018] rtc_cmos 00:00: Alarms can be up to one day in the future
[   91.632419][ T4514] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   91.685896][    T7] usbhid 3-1:0.0: can't add hid device: -71
[   91.695867][    T7] usbhid: probe of 3-1:0.0 failed with error -71
[   91.714895][    T7] usb 3-1: USB disconnect, device number 3
[   91.837910][ T4514] usb 4-1: device descriptor read/64, error -71
[   91.855317][ T5031] loop4: detected capacity change from 0 to 8
[   91.881309][ T5031] squashfs image failed sanity check
[   91.893326][ T5031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   91.972508][ T5035] loop5: detected capacity change from 0 to 64
[   91.975741][ T4514] usb usb4-port1: attempt power cycle
[   92.058174][ T5041] fuse: Unknown parameter '0x0000000000000005'
[   92.068026][ T5041] netlink: 136 bytes leftover after parsing attributes in process `syz.1.148'.
[   92.077632][ T5041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'.
[   92.146906][ T5035] hfs: unable to locate alternate MDB
[   92.195026][ T5035] hfs: continuing without an alternate MDB
[   92.328251][ T5049] fuse: Unknown parameter '0x0000000000000005'
[   92.415915][ T4514] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   92.596011][ T4514] usb 4-1: device descriptor read/8, error -71
[   92.688493][ T5057] rtc_cmos 00:00: Alarms can be up to one day in the future
[   94.046853][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #41!!!
[   94.138702][ T4514] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   94.157696][ T5088] loop2: detected capacity change from 0 to 7
[   94.202965][ T5088] Dev loop2: unable to read RDB block 7
[   94.214973][ T5088]  loop2: unable to read partition table
[   94.231890][ T5088] loop2: partition table beyond EOD, truncated
[   94.232150][ T5066] loop1: detected capacity change from 0 to 2048
[   94.280492][ T5088] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[   94.305266][ T5066] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   94.316508][ T4829] udevd[4829]: incorrect nilfs2 checksum on /dev/loop1
[   94.325974][ T5093] fuse: Unknown parameter '0x0000000000000005'
[   94.335052][ T5066] NILFS (loop1): mounting unchecked fs
[   94.355651][ T4514] usb 4-1: config 131 has no interfaces?
[   94.361408][ T4514] usb 4-1: New USB device found, idVendor=04bb, idProduct=093d, bcdDevice=6c.fc
[   94.408719][ T4514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.424638][ T5066] NILFS (loop1): recovery complete
[   94.476570][ T5095] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.496594][   T26] audit: type=1800 audit(1756700993.587:9): pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.152" name="file1" dev="loop1" ino=15 res=0 errno=0
[   94.835757][ T1107] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   95.195682][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.275125][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.360233][ T5114] rtc_cmos 00:00: Alarms can be up to one day in the future
[   96.106166][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.120137][ T1107] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.129851][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.176967][ T1107] usb 5-1: config 0 descriptor??
[   96.303695][ T5083] loop3: detected capacity change from 0 to 32768
[   96.335665][ T4514] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   96.352518][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'.
[   96.383270][ T5083] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.159 (5083)
[   96.503507][ T5083] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   96.586815][ T4514] usb 3-1: Using ep0 maxpacket: 8
[   96.592289][ T5083] BTRFS info (device loop3): enabling auto defrag
[   96.607151][ T5083] BTRFS info (device loop3): doing ref verification
[   96.640247][ T5083] BTRFS info (device loop3): max_inline at 0
[   96.671101][ T5083] BTRFS info (device loop3): force clearing of disk cache
[   96.690153][ T1107] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x6
[   96.706064][ T1107] plantronics 0003:047F:FFFF.0001: item 0 0 0 11 parsing failed
[   96.714188][ T1107] plantronics 0003:047F:FFFF.0001: parse failed
[   96.720547][ T1107] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22
[   96.748534][ T5136] loop5: detected capacity change from 0 to 4096
[   96.755343][ T5083] BTRFS info (device loop3): turning on sync discard
[   96.771849][ T4514] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   96.779879][ T5083] BTRFS info (device loop3): disabling free space tree
[   96.783284][ T4514] usb 3-1: config 179 has no interface number 0
[   96.798201][ T4514] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   96.803849][ T5083] BTRFS info (device loop3): has skinny extents
[   96.811951][ T4514] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   96.834475][ T5146] loop1: detected capacity change from 0 to 64
[   96.835989][ T5136] ntfs3: Unknown parameter 'syztnl2'
[   96.841725][ T4514] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[   96.864329][ T4514] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[   96.878100][ T4514] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   96.918559][ T5083] BTRFS error (device loop3): open_ctree failed: -12
[   96.925426][ T4514] usb 3-1: config 179 interface 65 has no altsetting 0
[   96.942499][ T4514] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   96.991842][ T4514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.090603][ T4514] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6
[   97.280810][ T4829] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4829)
[   97.386102][ T4318] usb 5-1: USB disconnect, device number 4
[   97.459362][ T4238] usb 4-1: USB disconnect, device number 7
[   97.581392][ T5177] fuse: Unknown parameter '0x0000000000000005'
[   98.410395][ T1107] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   98.510778][ T5176] loop3: detected capacity change from 0 to 4096
[   98.570125][ T5186] loop1: detected capacity change from 0 to 64
[   98.578423][ T5187] netlink: 'syz.4.179': attribute type 1 has an invalid length.
[   98.598605][ T5176] ntfs: (device loop3): parse_options(): Unrecognized mount option /dev/vhost-net.
[   98.609592][ T5187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.179'.
[   98.641521][ T5186] hfs: unable to locate alternate MDB
[   98.655614][ T5186] hfs: continuing without an alternate MDB
[   98.911760][ T1107] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   98.938231][ T1107] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   99.870408][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!!
[   99.879654][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[   99.889063][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   99.898141][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   99.907390][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   99.916369][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   99.925522][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   99.950957][ T1107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   99.963153][ T1107] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   99.975696][ T1107] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  100.258936][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!!
[  100.268224][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!!
[  100.895648][ T1107] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  100.915270][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  100.930251][ T1107] usb 6-1: Product: syz
[  100.966613][ T1107] usb 6-1: can't set config #1, error -71
[  100.969088][ T4318] usb 3-1: USB disconnect, device number 4
[  100.983389][ T1107] usb 6-1: USB disconnect, device number 2
[  100.985685][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  101.015015][ T4318] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  101.121158][ T5221] fuse: Unknown parameter '0x0000000000000005'
[  101.212726][ T5225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.924412][ T5236] netlink: 80 bytes leftover after parsing attributes in process `syz.2.192'.
[  101.933436][ T5236] netlink: 80 bytes leftover after parsing attributes in process `syz.2.192'.
[  102.155534][ T5239] netlink: 'syz.2.192': attribute type 3 has an invalid length.
[  102.163255][ T5239] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.192'.
[  102.830372][ T5219] loop5: detected capacity change from 0 to 32768
[  102.889319][ T5216] loop4: detected capacity change from 0 to 32768
[  102.934074][ T5245] netlink: 'syz.3.195': attribute type 4 has an invalid length.
[  103.131802][  T277] ERROR: (device loop5): diUpdatePMap: the inode is not allocated in the working map
[  103.131802][  T277] 
[  103.221285][  T277] ERROR: (device loop5): remounting filesystem as read-only
[  103.245837][ T5216] XFS (loop4): Mounting V5 Filesystem
[  103.444388][ T5263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'.
[  103.557477][ T5216] XFS (loop4): Ending clean mount
[  104.210021][ T5216] XFS (loop4): Quotacheck needed: Please wait.
[  104.376228][ T5216] XFS (loop4): Quotacheck: Done.
[  104.461247][ T4187] XFS (loop4): Unmounting Filesystem
[  104.603501][ T5278] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  104.611315][ T5281] capability: warning: `syz.2.204' uses deprecated v2 capabilities in a way that may be insecure
[  104.684567][ T5287] capability: warning: `syz.2.204' uses 32-bit capabilities (legacy support in use)
[  105.685665][ T5310] loop1: detected capacity change from 0 to 1764
[  106.042916][ T5320] loop5: detected capacity change from 0 to 256
[  106.145625][ T5320] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  106.338238][ T5328] fuse: Unknown parameter '0x0000000000000005'
[  106.353607][ T5315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.212'.
[  106.454942][ T5334] loop1: detected capacity change from 0 to 256
[  106.564995][ T5340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.653025][ T5307] loop2: detected capacity change from 0 to 2048
[  106.703157][ T5307] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  106.729462][ T5307] NILFS (loop2): mounting unchecked fs
[  106.769915][ T5307] NILFS (loop2): recovery complete
[  106.814710][   T26] audit: type=1800 audit(1756701005.897:10): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.210" name="file1" dev="loop2" ino=15 res=0 errno=0
[  106.816634][ T5348] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.915826][ T5170] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  107.316080][ T5170] usb 2-1: unable to get BOS descriptor or descriptor too short
[  107.325115][ T5365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.396338][ T5170] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  107.403899][ T5363] loop3: detected capacity change from 0 to 8192
[  107.812618][ T5363] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  108.046978][ T5170] usb 2-1: config 63 has 0 interfaces, different from the descriptor's value: 1
[  108.059225][ T5363] REISERFS (device loop3): using ordered data mode
[  108.066748][ T5363] reiserfs: using flush barriers
[  108.073646][ T5363] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  108.106155][ T5363] REISERFS (device loop3): checking transaction log (loop3)
[  108.226646][ T5170] usb 2-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  108.243778][ T5170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.302700][ T5170] usb 2-1: Product: syz
[  108.317443][ T5170] usb 2-1: Manufacturer: syz
[  108.332353][ T5170] usb 2-1: SerialNumber: syz
[  108.410489][ T5351] loop5: detected capacity change from 0 to 32768
[  108.422378][ T5363] REISERFS (device loop3): Using tea hash to sort names
[  108.436823][ T5363] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  108.496179][ T5351] (syz.5.218,5351,1):ocfs2_find_slot:468 ERROR: no free slots available!
[  108.505580][ T4318] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  108.525923][ T5351] (syz.5.218,5351,0):ocfs2_mount_volume:1811 ERROR: status = -22
[  108.551849][ T5351] (syz.5.218,5351,0):ocfs2_fill_super:1177 ERROR: status = -22
[  108.692711][ T5363] REISERFS warning (device loop3): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=81, len=8 - odd
[  108.855613][ T4318] usb 3-1: Using ep0 maxpacket: 32
[  108.996019][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.276796][ T4318] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  109.390136][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.588689][ T4318] usb 3-1: Product: syz
[  109.592890][ T4318] usb 3-1: Manufacturer: syz
[  109.598012][ T4318] usb 3-1: SerialNumber: syz
[  109.612783][ T4318] usb 3-1: config 0 descriptor??
[  109.656850][ T4318] usb 3-1: bad CDC descriptors
[  109.689239][ T4318] usb 3-1: unsupported MDLM descriptors
[  109.821213][ T4252] usb 2-1: USB disconnect, device number 2
[  109.876668][   T21] usb 3-1: USB disconnect, device number 5
[  110.001000][ T1107] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  110.258807][ T1107] usb 5-1: Using ep0 maxpacket: 16
[  110.454840][ T5436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.516203][ T5423] loop1: detected capacity change from 0 to 2048
[  110.574038][ T5423] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  110.584549][ T1107] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  110.613021][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.625246][ T5423] NILFS (loop1): mounting unchecked fs
[  110.633240][ T4829] udevd[4829]: incorrect nilfs2 checksum on /dev/loop1
[  110.647368][ T5441] fuse: Unknown parameter '0x0000000000000005'
[  110.647892][ T1107] usb 5-1: Product: syz
[  110.659144][ T5423] NILFS (loop1): recovery complete
[  110.664989][ T1107] usb 5-1: Manufacturer: syz
[  110.670869][ T5443] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.691092][   T26] audit: type=1800 audit(1756701009.777:11): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.229" name="file1" dev="loop1" ino=15 res=0 errno=0
[  110.722266][ T1107] usb 5-1: SerialNumber: syz
[  110.745644][ T1107] r8152-cfgselector 5-1: config 0 descriptor??
[  110.812295][ T5449] netlink: 20 bytes leftover after parsing attributes in process `syz.5.232'.
[  111.012944][ T5458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.122786][ T5467] loop2: detected capacity change from 0 to 512
[  111.356888][ T5401] loop4: detected capacity change from 0 to 2048
[  111.370757][ T5467] tipc: Started in network mode
[  111.376510][ T5467] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  111.390039][ T5467] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  111.404326][ T5467] tipc: Enabled bearer <udp:syz0>, priority 10
[  111.504996][ T5401] UDF-fs: bad mount option "umask=00000000000000000000010unhide" or missing value
[  111.512202][ T5478] netlink: 25 bytes leftover after parsing attributes in process `syz.1.239'.
[  111.555805][ T1107] r8152-cfgselector 5-1: Unknown version 0x0000
[  111.606411][ T1107] r8152-cfgselector 5-1: USB disconnect, device number 5
[  111.623806][ T5482] netlink: 'syz.1.239': attribute type 4 has an invalid length.
[  111.739365][ T5480] loop2: detected capacity change from 0 to 8192
[  111.786636][ T5492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.243'.
[  111.817776][ T5480] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  111.843812][ T5480] REISERFS (device loop2): using ordered data mode
[  111.860999][ T5480] reiserfs: using flush barriers
[  111.891042][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.911896][ T5480] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  111.977449][ T5480] REISERFS (device loop2): checking transaction log (loop2)
[  112.161602][ T5495] loop3: detected capacity change from 0 to 2048
[  112.302743][ T5495] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  112.327810][ T5480] REISERFS (device loop2): Using tea hash to sort names
[  112.358818][ T5495] NILFS (loop3): mounting unchecked fs
[  112.361177][ T4824] udevd[4824]: incorrect nilfs2 checksum on /dev/loop3
[  112.402294][ T5480] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  112.408028][ T1107] tipc: Node number set to 1
[  112.435612][ T5495] NILFS (loop3): recovery complete
[  112.470711][ T5507] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.495969][   T26] audit: type=1800 audit(1756701011.587:12): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.245" name="file1" dev="loop3" ino=15 res=0 errno=0
[  112.594791][ T5480] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=81, len=8 - odd
[  112.957085][ T5519] fuse: Unknown parameter '0x0000000000000005'
[  112.983312][ T5522] loop1: detected capacity change from 0 to 256
[  112.987219][ T5523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.058759][ T5522] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  113.191412][ T5530] loop3: detected capacity change from 0 to 2048
[  113.207383][ T5530] UDF-fs: bad mount option "umask=0+000000000000000000010" or missing value
[  114.029954][ T5534] netlink: 'syz.3.258': attribute type 1 has an invalid length.
[  114.446735][ T5542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'.
[  115.189773][ T5546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.218945][ T5549] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  115.899504][ T5557] loop4: detected capacity change from 0 to 32768
[  115.907859][ T5575] loop2: detected capacity change from 0 to 128
[  115.925660][ T5577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.999823][ T5557] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  116.046179][ T5575] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  116.085153][ T5562] loop3: detected capacity change from 0 to 32768
[  116.111910][ T5557] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  116.190331][ T5562] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  116.235664][ T5562] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  116.327386][ T5562] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  116.349719][ T5562] FAULT_INJECTION: forcing a failure.
[  116.349719][ T5562] name failslab, interval 1, probability 0, space 0, times 1
[  116.363729][ T5562] CPU: 1 PID: 5562 Comm: syz.3.265 Not tainted syzkaller #0
[  116.371144][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  116.381645][ T5562] Call Trace:
[  116.384942][ T5562]  <TASK>
[  116.387972][ T5562]  dump_stack_lvl+0x168/0x230
[  116.392696][ T5562]  ? show_regs_print_info+0x20/0x20
[  116.398058][ T5562]  ? load_image+0x3b0/0x3b0
[  116.402832][ T5562]  ? __might_sleep+0xf0/0xf0
[  116.407437][ T5562]  ? __lock_acquire+0x7c60/0x7c60
[  116.412572][ T5562]  should_fail+0x38c/0x4c0
[  116.417015][ T5562]  should_failslab+0x5/0x20
[  116.421747][ T5562]  slab_pre_alloc_hook+0x51/0xc0
[  116.426795][ T5562]  ? getname_flags+0xb5/0x500
[  116.431861][ T5562]  kmem_cache_alloc+0x3d/0x290
[  116.436762][ T5562]  getname_flags+0xb5/0x500
[  116.441376][ T5562]  do_sys_openat2+0xcf/0x4a0
[  116.446456][ T5562]  ? do_sys_open+0xe0/0xe0
[  116.450901][ T5562]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  116.455822][ T5566] loop1: detected capacity change from 0 to 2048
[  116.457014][ T5562]  ? lock_chain_count+0x20/0x20
[  116.457041][ T5562]  ? vtime_user_exit+0x2dc/0x400
[  116.473563][ T5562]  __x64_sys_open+0x11b/0x140
[  116.478263][ T5562]  do_syscall_64+0x4c/0xa0
[  116.482702][ T5562]  ? clear_bhb_loop+0x30/0x80
[  116.487391][ T5562]  ? clear_bhb_loop+0x30/0x80
[  116.492080][ T5562]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  116.498479][ T5562] RIP: 0033:0x7f057ecb0be9
[  116.503414][ T5562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.523290][ T5562] RSP: 002b:00007f057cf18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  116.532073][ T5562] RAX: ffffffffffffffda RBX: 00007f057eee7fa0 RCX: 00007f057ecb0be9
[  116.540045][ T5562] RDX: 0000000000000000 RSI: 0000000004008040 RDI: 0000200000000200
[  116.548225][ T5562] RBP: 00007f057cf18090 R08: 0000000000000000 R09: 0000000000000000
[  116.556199][ T5562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.564296][ T5562] R13: 00007f057eee8038 R14: 00007f057eee7fa0 R15: 00007fff1c065018
[  116.572358][ T5562]  </TASK>
[  116.615967][ T4829] udevd[4829]: incorrect nilfs2 checksum on /dev/loop1
[  116.655425][ T5566] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  116.681042][ T4187] ocfs2: Unmounting device (7,4) on (node local)
[  116.690571][ T5593] netlink: 'syz.5.274': attribute type 10 has an invalid length.
[  116.694766][ T5566] NILFS (loop1): mounting unchecked fs
[  116.782732][ T5566] NILFS (loop1): recovery complete
[  116.832182][ T5597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.877864][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  116.904225][   T26] audit: type=1800 audit(1756701015.987:13): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="file1" dev="loop1" ino=15 res=0 errno=0
[  117.119710][ T5605] loop4: detected capacity change from 0 to 128
[  117.299951][ T5612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.327128][ T5605] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  117.491180][ T5618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.642507][ T5624] loop2: detected capacity change from 0 to 1024
[  117.718843][ T5603] loop5: detected capacity change from 0 to 32768
[  117.753223][ T5628] fuse: Unknown parameter '0x0000000000000005'
[  117.775178][   T26] audit: type=1800 audit(1756701016.857:14): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.285" name="file1" dev="loop2" ino=20 res=0 errno=0
[  117.863443][ T5603] XFS (loop5): Mounting V5 Filesystem
[  117.869715][ T5635] netlink: 'syz.2.285': attribute type 1 has an invalid length.
[  117.884027][ T5635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'.
[  117.952986][ T5603] XFS (loop5): Ending clean mount
[  117.962709][ T5603] XFS (loop5): Quotacheck needed: Please wait.
[  118.089154][ T5603] XFS (loop5): Quotacheck: Done.
[  118.177175][ T5640] loop2: detected capacity change from 0 to 4096
[  118.232318][ T4575] XFS (loop5): Unmounting Filesystem
[  118.262422][ T5640] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  118.278078][ T5640] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  118.295103][ T5640] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  118.305263][ T5640] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  118.327277][ T5640] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  118.341567][ T5640] ntfs: volume version 3.1.
[  118.354312][ T5642] loop1: detected capacity change from 0 to 256
[  118.356934][ T5640] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use!
[  118.386348][ T5640] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  118.416811][ T5640] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  118.449147][ T5642] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.508681][   T26] audit: type=1800 audit(1756701017.597:15): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.289" name="file2" dev="loop1" ino=1048597 res=0 errno=0
[  118.530435][ T5642] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  118.602028][ T5642] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  118.643573][ T5643] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  118.721538][ T5643] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  118.797423][ T5647] loop3: detected capacity change from 0 to 2048
[  118.934439][ T5654] loop5: detected capacity change from 0 to 1024
[  118.955988][ T5647] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  118.992876][ T4824] udevd[4824]: incorrect nilfs2 checksum on /dev/loop3
[  119.002726][ T5647] NILFS (loop3): mounting unchecked fs
[  119.040125][ T5647] NILFS (loop3): recovery complete
[  119.062867][ T5658] loop4: detected capacity change from 0 to 512
[  119.094526][ T5661] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.280778][ T5666] netlink: 256 bytes leftover after parsing attributes in process `syz.5.296'.
[  119.299159][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.296'.
[  119.423890][ T5670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.485664][ T5677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.674490][ T5682] fuse: Unknown parameter '0x0000000000000005'
[  119.855711][ T4289] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  120.286513][ T4289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  120.366938][ T4289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  120.459018][ T4289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  120.536764][ T4289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  120.724425][ T5707] loop5: detected capacity change from 0 to 512
[  120.743685][ T5703] loop3: detected capacity change from 0 to 256
[  120.820136][ T5703] exfat: Unknown parameter '��00000000000000000000005'
[  120.846978][ T5711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.857749][ T5713] loop5: detected capacity change from 0 to 1024
[  120.885799][ T4289] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  120.905304][ T4289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.917764][ T4289] usb 3-1: Product: syz
[  120.922052][ T4289] usb 3-1: Manufacturer: syz
[  120.935775][ T4289] usb 3-1: SerialNumber: syz
[  120.941740][ T5713] EXT4-fs (loop5): Ignoring removed nobh option
[  120.964299][ T5713] EXT4-fs (loop5): Ignoring removed bh option
[  120.977080][ T4289] usb 3-1: config 0 descriptor??
[  120.983261][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'.
[  121.013084][ T5713] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,nobh,bh,init_itable,. Quota mode: none.
[  121.074448][ T5712] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  121.123600][ T4289] adutux 3-1:0.0: ADU208  now attached to /dev/usb/adutux0
[  121.171140][ T4289] usb 3-1: USB disconnect, device number 6
[  121.234047][ T5706] loop1: detected capacity change from 0 to 2048
[  121.237063][ T5722] process 'syz.2.314' launched './file1' with NULL argv: empty string added
[  121.248092][ T5723] loop3: detected capacity change from 0 to 1024
[  121.421247][ T5706] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  121.467966][ T5706] NILFS (loop1): mounting unchecked fs
[  121.493233][ T5706] NILFS (loop1): recovery complete
[  121.516551][ T5725] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.572111][ T5731] fuse: Unknown parameter '0x0000000000000005'
[  121.725443][ T5736] loop4: detected capacity change from 0 to 2048
[  121.797477][ T5736] UDF-fs: bad mount option "����Y�
���<�jPo��S���=��
ؤWa7�p;��ؤ�w&�~!a�h`l�q�dh�ڡe�n�q��0 h_e!�B��o�l0�$K��|�i�lB����Gk�!B.��]�8�߂Bonq�D�v!�"��fy1zer�U�ᶠ�X�mC5��h�]Z���Vou�V�����3�V�d�89�-���<LJ
[  121.797477][ T5736] �Z�3}Vw��ϴ�
[  121.797477][ T5736] s����Q " or missing value
[  122.158092][  T382] hfsplus: b-tree write err: -5, ino 4
[  122.256492][ T5739] loop5: detected capacity change from 0 to 40427
[  122.331631][ T5739] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[  122.385742][ T5739] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  122.581410][ T5754] rtc_cmos 00:00: Alarms can be up to one day in the future
[  123.345860][   T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  123.393385][ T5763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.401561][ T5739] F2FS-fs (loop5): Found nat_bits in checkpoint
[  123.446415][ T5768] loop1: detected capacity change from 0 to 128
[  123.481736][ T5739] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  123.505821][ T5739] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  123.557571][ T5768] EXT4-fs (loop1): Ignoring removed nobh option
[  123.613770][ T5768] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[  123.632160][ T5768] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  123.634831][ T4300] attempt to access beyond end of device
[  123.634831][ T4300] loop5: rw=2049, want=40976, limit=40427
[  123.757491][ T4197] Bluetooth: hci1: link tx timeout
[  123.763070][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  123.771370][   T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  123.783917][ T4197] Bluetooth: hci1: link tx timeout
[  123.790304][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  123.798942][ T4197] Bluetooth: hci1: link tx timeout
[  123.804122][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  123.826682][ T4197] Bluetooth: hci1: link tx timeout
[  123.833641][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  123.844023][ T4197] Bluetooth: hci1: link tx timeout
[  123.851274][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  123.860495][ T4197] Bluetooth: hci1: link tx timeout
[  123.869630][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  123.879134][ T4197] Bluetooth: hci1: link tx timeout
[  123.884682][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.002395][   T21] usb 5-1: config 1 has no interface number 0
[  124.009115][   T21] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.025676][   T21] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  124.035223][   T21] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  124.046815][   T21] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 9223, setting to 1024
[  124.061850][ T4197] Bluetooth: hci1: link tx timeout
[  124.067312][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.076769][ T4197] Bluetooth: hci1: link tx timeout
[  124.082553][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.096140][ T4197] Bluetooth: hci1: link tx timeout
[  124.101850][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.110322][ T4197] Bluetooth: hci1: link tx timeout
[  124.115860][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.124866][ T4197] Bluetooth: hci1: link tx timeout
[  124.130559][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.138920][ T4197] Bluetooth: hci1: link tx timeout
[  124.144730][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.152677][ T4197] Bluetooth: hci1: link tx timeout
[  124.158146][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.166206][ T4197] Bluetooth: hci1: link tx timeout
[  124.171429][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.179294][ T4197] Bluetooth: hci1: link tx timeout
[  124.184517][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.192407][ T4197] Bluetooth: hci1: link tx timeout
[  124.197660][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.205909][ T4197] Bluetooth: hci1: link tx timeout
[  124.211132][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.219319][ T4197] Bluetooth: hci1: link tx timeout
[  124.224439][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.232478][ T4197] Bluetooth: hci1: link tx timeout
[  124.235691][   T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  124.237667][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.254802][ T4197] Bluetooth: hci1: link tx timeout
[  124.260004][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.268067][ T4197] Bluetooth: hci1: link tx timeout
[  124.273356][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.281210][ T4197] Bluetooth: hci1: link tx timeout
[  124.286397][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.294526][ T4197] Bluetooth: hci1: link tx timeout
[  124.299760][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.308311][ T4197] Bluetooth: hci1: link tx timeout
[  124.313480][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.321405][ T4197] Bluetooth: hci1: link tx timeout
[  124.326726][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.334897][ T4197] Bluetooth: hci1: link tx timeout
[  124.340069][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.347936][ T4197] Bluetooth: hci1: link tx timeout
[  124.353183][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.361045][ T4197] Bluetooth: hci1: link tx timeout
[  124.366299][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.374112][ T4197] Bluetooth: hci1: link tx timeout
[  124.379504][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.387439][ T4197] Bluetooth: hci1: link tx timeout
[  124.392647][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.400652][ T4197] Bluetooth: hci1: link tx timeout
[  124.405817][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.413719][ T4197] Bluetooth: hci1: link tx timeout
[  124.418889][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.426813][ T4197] Bluetooth: hci1: link tx timeout
[  124.431925][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.439770][ T4197] Bluetooth: hci1: link tx timeout
[  124.444929][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.453059][ T4197] Bluetooth: hci1: link tx timeout
[  124.458212][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.466069][ T4197] Bluetooth: hci1: link tx timeout
[  124.471201][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.479175][ T4197] Bluetooth: hci1: link tx timeout
[  124.484403][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.492615][ T4197] Bluetooth: hci1: link tx timeout
[  124.497862][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.506137][ T4197] Bluetooth: hci1: link tx timeout
[  124.511780][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.519652][ T4197] Bluetooth: hci1: link tx timeout
[  124.526492][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.544381][ T4197] Bluetooth: hci1: link tx timeout
[  124.550112][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.558912][ T4197] Bluetooth: hci1: link tx timeout
[  124.564355][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.572652][ T4197] Bluetooth: hci1: link tx timeout
[  124.578008][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.586164][ T4197] Bluetooth: hci1: link tx timeout
[  124.591937][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.600866][ T4197] Bluetooth: hci1: link tx timeout
[  124.606143][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.629067][ T4197] Bluetooth: hci1: link tx timeout
[  124.634264][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.642450][ T4197] Bluetooth: hci1: link tx timeout
[  124.647972][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.657078][ T4197] Bluetooth: hci1: link tx timeout
[  124.662310][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.670566][ T4197] Bluetooth: hci1: link tx timeout
[  124.676031][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.685017][ T4197] Bluetooth: hci1: link tx timeout
[  124.690456][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.698314][ T4197] Bluetooth: hci1: link tx timeout
[  124.703524][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.711828][ T4197] Bluetooth: hci1: link tx timeout
[  124.717085][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.731321][ T4197] Bluetooth: hci1: link tx timeout
[  124.736716][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.744875][ T4197] Bluetooth: hci1: link tx timeout
[  124.750095][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.759520][ T4197] Bluetooth: hci1: link tx timeout
[  124.764658][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.773366][ T4197] Bluetooth: hci1: link tx timeout
[  124.778557][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.789352][ T4197] Bluetooth: hci1: link tx timeout
[  124.794517][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.802466][ T4197] Bluetooth: hci1: link tx timeout
[  124.807633][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.816076][ T4197] Bluetooth: hci1: link tx timeout
[  124.821208][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.829503][ T4197] Bluetooth: hci1: link tx timeout
[  124.834762][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.842933][ T4197] Bluetooth: hci1: link tx timeout
[  124.848578][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.857083][ T4197] Bluetooth: hci1: link tx timeout
[  124.862535][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.871200][ T4197] Bluetooth: hci1: link tx timeout
[  124.876396][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.885453][ T4197] Bluetooth: hci1: link tx timeout
[  124.890723][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.906532][ T4197] Bluetooth: hci1: link tx timeout
[  124.911846][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.920425][ T4197] Bluetooth: hci1: link tx timeout
[  124.925871][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.933940][ T4197] Bluetooth: hci1: link tx timeout
[  124.939387][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.947543][ T4197] Bluetooth: hci1: link tx timeout
[  124.952748][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.981164][ T4197] Bluetooth: hci1: link tx timeout
[  124.981510][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.986533][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.004242][ T4197] Bluetooth: hci1: link tx timeout
[  125.009835][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.024780][ T4197] Bluetooth: hci1: link tx timeout
[  125.030073][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.038511][ T4197] Bluetooth: hci1: link tx timeout
[  125.043913][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.051898][ T4197] Bluetooth: hci1: link tx timeout
[  125.057361][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.066113][ T4197] Bluetooth: hci1: link tx timeout
[  125.072146][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.080552][ T4197] Bluetooth: hci1: link tx timeout
[  125.085844][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.105790][ T4197] Bluetooth: hci1: link tx timeout
[  125.111121][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.120453][ T4197] Bluetooth: hci1: link tx timeout
[  125.126669][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.135009][ T4197] Bluetooth: hci1: link tx timeout
[  125.140892][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.150852][   T21] usb 5-1: Product: syz
[  125.156230][   T21] usb 5-1: Manufacturer: syz
[  125.168412][   T21] usb 5-1: SerialNumber: syz
[  125.180589][ T4197] Bluetooth: hci1: link tx timeout
[  125.186552][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.194592][ T4197] Bluetooth: hci1: link tx timeout
[  125.199933][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.207879][ T4197] Bluetooth: hci1: link tx timeout
[  125.213015][ T4197] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.221185][   T21] usb 5-1: can't set config #1, error -71
[  125.273366][   T21] usb 5-1: USB disconnect, device number 6
[  125.303332][ T5787] fuse: Unknown parameter '0x0000000000000005'
[  125.342036][ T5791] loop4: detected capacity change from 0 to 512
[  125.592785][ T5803] loop1: detected capacity change from 0 to 512
[  125.810844][ T5803] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  125.836292][ T4252] Bluetooth: hci1: command 0x0406 tx timeout
[  125.874173][ T5803] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.918261][ T5812] loop2: detected capacity change from 0 to 7
[  126.007902][ T5812] Dev loop2: unable to read RDB block 7
[  126.013692][ T5812]  loop2: unable to read partition table
[  126.019758][ T5812] loop2: partition table beyond EOD, truncated
[  126.026381][ T5812] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  126.481423][ T5829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.728560][ T5813] loop5: detected capacity change from 0 to 32768
[  126.991197][ T5813] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.332 (5813)
[  127.536147][ T5813] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  127.591199][ T5813] BTRFS info (device loop5): force zlib compression, level 3
[  127.635659][ T5813] BTRFS info (device loop5): force clearing of disk cache
[  127.653471][ T5813] BTRFS info (device loop5): setting nodatasum
[  127.670686][ T5813] BTRFS info (device loop5): doing ref verification
[  127.698481][ T5813] BTRFS info (device loop5): allowing degraded mounts
[  127.715608][ T5813] BTRFS info (device loop5): enabling disk space caching
[  127.755669][ T5813] BTRFS info (device loop5): disk space caching is enabled
[  127.762920][ T5813] BTRFS info (device loop5): has skinny extents
[  127.775992][ T1107] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  127.795329][ T5851] loop2: detected capacity change from 0 to 7
[  127.953563][ T4829] Dev loop2: unable to read RDB block 7
[  127.983382][ T4829]  loop2: unable to read partition table
[  128.221202][ T4829] loop2: partition table beyond EOD, truncated
[  128.422628][ T5851] Dev loop2: unable to read RDB block 7
[  128.461119][ T5851]  loop2: unable to read partition table
[  128.502414][ T5870] fuse: Unknown parameter '0x0000000000000005'
[  128.512630][ T5851] loop2: partition table beyond EOD, truncated
[  128.530057][ T5851] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  128.573566][ T5813] BTRFS info (device loop5): enabling ssd optimizations
[  128.582474][ T5813] BTRFS info (device loop5): clearing free space tree
[  128.594584][ T5813] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  128.607010][ T5813] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  128.636533][ T5879] loop2: detected capacity change from 0 to 512
[  128.734662][ T5879] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  128.751038][ T5879] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  128.799555][ T1107] usb 4-1: config 9 interface 0 altsetting 10 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  128.819216][ T1107] usb 4-1: config 9 interface 0 has no altsetting 0
[  128.906228][ T5890] sctp: failed to load transform for md5: -2
[  129.006685][ T1107] usb 4-1: New USB device found, idVendor=147a, idProduct=e03e, bcdDevice= 8.f4
[  129.040940][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.067991][ T1107] usb 4-1: Product: syz
[  129.077357][ T1107] usb 4-1: Manufacturer: syz
[  129.093186][ T1107] usb 4-1: SerialNumber: syz
[  129.137610][ T5900] usb usb9: usbfs: process 5900 (syz.1.363) did not claim interface 0 before use
[  129.145998][ T5822] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  129.330537][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.483602][ T1107] usb 4-1: USB disconnect, device number 8
[  129.495359][ T5911] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.366'.
[  129.544431][ T5911] openvswitch: netlink: Key 0 has unexpected len 3060 expected 0
[  129.824283][ T5911] loop2: detected capacity change from 0 to 4096
[  130.212972][ T5934] loop4: detected capacity change from 0 to 1024
[  130.217897][ T5937] fuse: Unknown parameter '0x0000000000000005'
[  130.286216][ T1107] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  130.457905][ T4327] hfsplus: b-tree write err: -5, ino 4
[  130.612227][ T5949] loop4: detected capacity change from 0 to 256
[  130.633367][ T5949] FAT-fs (loop4): Unrecognized mount option "shortname��Ł95" or missing value
[  130.896573][ T5956] 9pnet: Insufficient options for proto=fd
[  131.018080][ T1107] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  131.027924][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.037175][ T1107] usb 3-1: Product: syz
[  131.050152][ T1107] usb 3-1: Manufacturer: syz
[  131.064076][ T1107] usb 3-1: SerialNumber: syz
[  131.073577][ T5961] netlink: 148 bytes leftover after parsing attributes in process `syz.3.384'.
[  131.107755][ T1107] usb 3-1: config 0 descriptor??
[  131.115917][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.384'.
[  131.132452][ T5961] netlink: 5 bytes leftover after parsing attributes in process `syz.3.384'.
[  131.153690][ T5964] netlink: 'syz.3.384': attribute type 11 has an invalid length.
[  131.162120][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'.
[  131.175457][ T5968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.376576][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.391'.
[  131.410209][ T1107] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  132.369746][ T5987] raw_sendmsg: syz.5.395 forgot to set AF_INET. Fix it!
[  132.429931][ T5991] fuse: Unknown parameter '0x0000000000000005'
[  132.763702][ T5995] loop3: detected capacity change from 0 to 32768
[  132.775106][ T6002] loop5: detected capacity change from 0 to 4096
[  132.811567][ T6002] ntfs3: loop5: mft corrupted
[  132.816424][ T6002] ntfs3: loop5: Failed to load $MFT.
[  132.871068][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  132.952607][ T6003] ������: renamed from vlan1
[  132.964533][ T5995] No such timeout policy "syz1"
[  133.061084][ T5995] input: syz1 as /devices/virtual/input/input9
[  133.218162][ T6005] netlink: 'syz.3.403': attribute type 1 has an invalid length.
[  133.226405][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.3.403'.
[  133.596403][ T6002] loop5: detected capacity change from 0 to 32768
[  133.766353][ T1107] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  133.933320][ T1107] usb 3-1: USB disconnect, device number 7
[  134.499944][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  134.499961][   T26] audit: type=1800 audit(1756701033.587:18): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.402" name="file1" dev="loop5" ino=7 res=0 errno=0
[  135.453901][ T6017] loop3: detected capacity change from 0 to 32768
[  135.539284][ T6017] XFS (loop3): Mounting V5 Filesystem
[  135.752763][ T6017] XFS (loop3): Ending clean mount
[  135.787494][   T26] audit: type=1800 audit(1756701034.877:19): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.402" name="file1" dev="loop5" ino=7 res=0 errno=0
[  135.826526][ T4515] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  135.843985][ T6055] loop2: detected capacity change from 0 to 256
[  135.996875][ T4190] XFS (loop3): Unmounting Filesystem
[  136.123904][ T6060] loop1: detected capacity change from 0 to 1024
[  136.205856][ T4515] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  136.216702][ T4515] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.225370][ T6060] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  136.241472][ T4515] usb 5-1: config 0 descriptor??
[  136.432599][ T6064] netlink: 256 bytes leftover after parsing attributes in process `syz.5.420'.
[  136.445710][ T4517] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  136.461720][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.420'.
[  136.685809][ T4515] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  137.382293][ T4515] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  137.415732][ T4515] [drm:udl_init] *ERROR* Selecting channel failed
[  137.505902][ T4517] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.552943][ T4517] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  137.598994][ T6087] loop4: detected capacity change from 0 to 256
[  137.605880][ T4515] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  137.613368][ T4515] [drm] Initialized udl on minor 2
[  137.625623][ T4517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.662767][ T4517] usb 3-1: config 0 descriptor??
[  137.684641][ T6089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.686681][ T4515] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  137.710846][ T4517] pwc: Askey VC010 type 2 USB webcam detected.
[  137.718416][ T6087] exfat: Unknown parameter '��00000000000000000000003'
[  137.737509][ T4515] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  137.761429][ T4515] usb 5-1: USB disconnect, device number 7
[  137.777403][ T4516] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  137.803046][ T4516] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  137.818488][ T4516] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  137.842620][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'.
[  137.958062][ T6074] loop5: detected capacity change from 0 to 32768
[  138.017869][ T6085] loop1: detected capacity change from 0 to 32768
[  138.041636][ T6091] XFS (nullb0): Invalid superblock magic number
[  138.155825][ T4517] pwc: recv_control_msg error -32 req 02 val 2b00
[  138.195876][ T4517] pwc: recv_control_msg error -32 req 02 val 2700
[  138.245714][ T4517] pwc: recv_control_msg error -32 req 02 val 2c00
[  138.259622][ T6085] XFS (loop1): Mounting V5 Filesystem
[  138.274022][ T6062] bridge0: port 3(vlan2) entered blocking state
[  138.285626][ T4517] pwc: recv_control_msg error -32 req 04 val 1000
[  138.326407][ T6062] bridge0: port 3(vlan2) entered disabled state
[  138.345640][ T4517] pwc: recv_control_msg error -32 req 04 val 1300
[  138.385045][ T6062] device vlan2 entered promiscuous mode
[  138.386020][ T4517] pwc: recv_control_msg error -32 req 04 val 1400
[  138.400945][ T6085] XFS (loop1): Ending clean mount
[  138.425973][ T6062] device bond0 entered promiscuous mode
[  138.431554][ T6062] device bond_slave_0 entered promiscuous mode
[  138.435705][ T4517] pwc: recv_control_msg error -32 req 02 val 2000
[  138.475774][ T4517] pwc: recv_control_msg error -32 req 02 val 2100
[  138.505750][ T6062] device bond_slave_1 entered promiscuous mode
[  138.566701][ T6085] XFS (loop1): Quotacheck needed: Please wait.
[  138.595698][ T4517] pwc: recv_control_msg error -71 req 04 val 1500
[  138.777235][ T4517] pwc: recv_control_msg error -71 req 02 val 2500
[  138.807323][ T4517] pwc: recv_control_msg error -71 req 02 val 2400
[  138.881074][ T6085] XFS (loop1): Quotacheck: Done.
[  138.907389][ T4517] pwc: recv_control_msg error -71 req 02 val 2600
[  138.925823][ T4517] pwc: recv_control_msg error -71 req 02 val 2900
[  138.953206][ T4517] pwc: recv_control_msg error -71 req 02 val 2800
[  138.970941][ T6120] loop5: detected capacity change from 0 to 2048
[  138.995830][ T4517] pwc: recv_control_msg error -71 req 04 val 1100
[  139.015648][ T4517] pwc: recv_control_msg error -71 req 04 val 1200
[  139.051103][ T4517] pwc: Registered as video103.
[  139.092589][ T4517] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10
[  139.140176][ T4517] usb 3-1: USB disconnect, device number 8
[  139.242820][ T6120] NILFS (loop5): invalid segment: Inconsistency found
[  139.257653][ T6120] NILFS (loop5): trying rollback from an earlier position
[  139.287411][ T6120] NILFS (loop5): recovery complete
[  139.585413][ T6132] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.375275][ T6141] rtc_cmos 00:00: Alarms can be up to one day in the future
[  140.860215][ T4181] XFS (loop1): Unmounting Filesystem
[  141.065312][ T6145] loop4: detected capacity change from 0 to 8192
[  141.164161][ T6145] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  141.196052][ T6145] REISERFS (device loop4): using ordered data mode
[  141.224752][ T6145] reiserfs: using flush barriers
[  141.245747][ T6145] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  141.281049][ T6145] REISERFS (device loop4): checking transaction log (loop4)
[  141.321660][ T6145] REISERFS (device loop4): Using rupasov hash to sort names
[  141.342733][ T6145] REISERFS (device loop4): using 3.5.x disk format
[  141.364444][ T6145] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  141.415647][ T4289] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  141.445158][ T6145] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  141.458880][ T4517] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  141.466136][ T6145] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  141.467253][ T4238] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  141.510920][ T6145] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  141.584149][ T6145] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  141.631040][ T6145] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  141.745699][ T4238] usb 3-1: Using ep0 maxpacket: 16
[  141.760691][ T6159] loop1: detected capacity change from 0 to 512
[  141.839604][ T4289] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.849862][ T6159] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  141.865996][ T4517] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  141.876701][ T4238] usb 3-1: config 0 interface 0 has no altsetting 0
[  141.883340][ T4238] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  141.883565][ T4289] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.904613][ T6159] EXT4-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value
[  141.936551][ T4238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.957151][ T6159] overlayfs: missing 'lowerdir'
[  141.973245][ T4238] usb 3-1: config 0 descriptor??
[  142.025886][ T6159] loop1: detected capacity change from 0 to 128
[  142.035653][ T6161] loop4: detected capacity change from 0 to 4096
[  142.066254][ T4517] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04
[  142.083612][ T4517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.087635][ T6159] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  142.103345][ T4517] usb 4-1: Product: syz
[  142.113546][ T4517] usb 4-1: Manufacturer: syz
[  142.118541][ T4517] usb 4-1: SerialNumber: syz
[  142.127168][ T4289] usb 6-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00
[  142.136464][ T6159] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  142.168211][ T4517] go7007: probe of 4-1:7.0 failed with error -12
[  142.168686][ T4289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.224074][ T6161] ntfs: volume version 3.1.
[  142.231239][ T6155] loop2: detected capacity change from 0 to 574
[  142.265163][ T4289] usb 6-1: Product: syz
[  142.300404][ T4289] usb 6-1: Manufacturer: syz
[  142.308479][ T4289] usb 6-1: SerialNumber: syz
[  142.405005][ T6155] EXT4-fs error (device loop2): ext4_fill_super:4841: inode #2: comm syz.2.445: iget: special inode unallocated
[  142.426858][ T4289] cdc_mbim 6-1:1.0: MBIM functional descriptor missing
[  142.445848][ T4289] cdc_mbim 6-1:1.0: bind() failure
[  142.485729][ T6155] EXT4-fs (loop2): Remounting filesystem read-only
[  142.526298][ T6155] EXT4-fs (loop2): get root inode failed
[  142.532807][ T6155] EXT4-fs (loop2): mount failed
[  142.610802][ T4230] usb 4-1: USB disconnect, device number 9
[  142.675976][ T4238] usbhid 3-1:0.0: can't add hid device: -71
[  142.682323][ T4238] usbhid: probe of 3-1:0.0 failed with error -71
[  142.718911][ T4238] usb 3-1: USB disconnect, device number 9
[  142.982181][ T4230] usb 6-1: USB disconnect, device number 3
[  143.375373][ T6185] loop2: detected capacity change from 0 to 2048
[  143.533909][ T6185] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  143.544183][ T6185] NILFS (loop2): mounting unchecked fs
[  143.623970][ T6185] NILFS (loop2): recovery complete
[  143.632921][ T6192] rtc_cmos 00:00: Alarms can be up to one day in the future
[  143.644015][ T6192] overlayfs: failed to resolve './file1': -2
[  143.889555][   T26] audit: type=1800 audit(1756701042.967:20): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.451" name="file1" dev="loop2" ino=15 res=0 errno=0
[  143.995556][ T6193] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.050126][ T6190] loop3: detected capacity change from 0 to 2048
[  144.326695][ T6190] UDF-fs: bad mount option "umask=000000000000000000+0010" or missing value
[  144.782256][ T4230] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  145.035768][ T4230] usb 5-1: device descriptor read/64, error -71
[  145.465199][ T6213] loop3: detected capacity change from 0 to 1024
[  146.208706][ T4230] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  146.421772][ T6217] netlink: 'syz.1.460': attribute type 1 has an invalid length.
[  146.466595][ T4264] hfsplus: b-tree write err: -5, ino 4
[  146.495702][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'.
[  146.515776][ T4230] usb 5-1: device descriptor read/64, error -71
[  146.611885][ T6196] loop5: detected capacity change from 0 to 40427
[  146.635778][ T4230] usb usb5-port1: attempt power cycle
[  146.677070][ T6196] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  146.697858][ T6196] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  146.715767][ T6196] F2FS-fs (loop5): invalid crc value
[  146.743573][ T6196] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-12)
[  146.964706][ T6229] loop3: detected capacity change from 0 to 2048
[  147.041131][ T6229] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  147.051202][ T6229] NILFS (loop3): mounting unchecked fs
[  147.065678][ T4230] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  147.092024][ T6229] NILFS (loop3): recovery complete
[  147.114642][ T6237] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  147.128649][   T26] audit: type=1800 audit(1756701046.217:21): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.464" name="file1" dev="loop3" ino=15 res=0 errno=0
[  147.255790][ T4230] usb 5-1: device descriptor read/8, error -71
[  147.553298][ T6244] netlink: 'syz.4.468': attribute type 12 has an invalid length.
[  147.643489][ T6246] netlink: 68 bytes leftover after parsing attributes in process `syz.3.467'.
[  148.414759][   T26] audit: type=1326 audit(1756701047.497:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f057ecb0be9 code=0x0
[  148.462690][ T6231] loop1: detected capacity change from 0 to 32768
[  148.506336][ T6231] XFS: noikeep mount option is deprecated.
[  148.543232][ T6219] loop2: detected capacity change from 0 to 32768
[  148.605468][ T6231] XFS (loop1): Mounting V5 Filesystem
[  148.623574][ T6219] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  148.684437][ T6219] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  148.699832][ T6219] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  148.730701][ T6219] gfs2: fsid=syz:syz.0: can't read in statfs inode: -2
[  148.897555][ T6231] XFS (loop1): Torn write (CRC failure) detected at log block 0x20. Truncating head block from 0x51.
[  149.012509][ T6231] XFS (loop1): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:32). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  149.084036][ T6231] XFS (loop1): log mount/recovery failed: error -22
[  149.139725][ T6231] XFS (loop1): log mount failed
[  149.176810][ T6260] loop5: detected capacity change from 0 to 2048
[  149.198775][ T6270] loop4: detected capacity change from 0 to 128
[  149.294015][ T6260] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  149.314307][ T6272] loop2: detected capacity change from 0 to 1024
[  149.344247][ T6270] affs: No valid root block on device loop4
[  149.364499][ T4829] udevd[4829]: incorrect nilfs2 checksum on /dev/loop5
[  149.371663][ T6260] NILFS (loop5): mounting unchecked fs
[  149.378873][ T6270] netlink: 'syz.4.474': attribute type 33 has an invalid length.
[  149.424803][ T6260] NILFS (loop5): recovery complete
[  149.466898][ T6270] netlink: 88 bytes leftover after parsing attributes in process `syz.4.474'.
[  149.531189][ T6278] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.556076][   T26] audit: type=1800 audit(1756701048.647:23): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.472" name="file1" dev="loop5" ino=15 res=0 errno=0
[  149.583867][ T4326] hfsplus: b-tree write err: -5, ino 4
[  149.604295][ T6280] loop3: detected capacity change from 0 to 2048
[  149.711812][ T6280] UDF-fs: bad mount option "umask=0+000000000000000000010" or missing value
[  150.070403][ T6288] netlink: 25 bytes leftover after parsing attributes in process `syz.1.481'.
[  150.086276][ T6288] netlink: 'syz.1.481': attribute type 4 has an invalid length.
[  150.802006][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.480'.
[  150.850261][ T6294] netlink: 'syz.5.480': attribute type 25 has an invalid length.
[  150.859961][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.480'.
[  150.869806][ T6294] netlink: 'syz.5.480': attribute type 25 has an invalid length.
[  150.887459][ T6294] loop5: detected capacity change from 0 to 256
[  150.908478][ T6292] loop3: detected capacity change from 0 to 4096
[  150.916503][ T6298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.970464][ T6292] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  151.014999][ T6294] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x20261ffc, utbl_chksum : 0xe619d30d)
[  151.227201][ T6309] loop5: detected capacity change from 0 to 1024
[  151.312541][ T4327] hfsplus: b-tree write err: -5, ino 4
[  151.336304][ T5172] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  151.507507][ T6315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.643515][ T6319] loop3: detected capacity change from 0 to 128
[  151.676585][ T6319] UDF-fs: bad mount option "
" or missing value
[  151.864204][ T6318] loop4: detected capacity change from 0 to 2048
[  151.894513][ T4516] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  151.944430][ T6318] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  151.965650][ T6318] NILFS (loop4): mounting unchecked fs
[  151.988431][ T4829] udevd[4829]: incorrect nilfs2 checksum on /dev/loop4
[  152.005443][ T6318] NILFS (loop4): recovery complete
[  152.024564][ T6321] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.052629][   T26] audit: type=1800 audit(1756701051.137:24): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.490" name="file1" dev="loop4" ino=15 res=0 errno=0
[  152.055815][ T5172] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  152.151140][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.170597][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.193764][ T5172] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  152.265926][ T4516] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.290821][ T5172] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  152.324232][ T4516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.334698][ T6325] netlink: 'syz.3.492': attribute type 21 has an invalid length.
[  152.343215][ T5172] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  152.356063][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'.
[  152.362243][ T5172] usb 2-1: Manufacturer: syz
[  152.385216][ T5172] usb 2-1: config 0 descriptor??
[  152.387581][ T6325] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.399362][ T6325] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.408703][ T6325] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.418191][ T6325] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.448601][ T6325] netlink: 'syz.3.492': attribute type 21 has an invalid length.
[  152.465156][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'.
[  152.546045][ T4516] usb 3-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00
[  152.581200][ T4516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.613961][ T4516] usb 3-1: Product: syz
[  152.618295][ T4516] usb 3-1: Manufacturer: syz
[  152.623053][ T4516] usb 3-1: SerialNumber: syz
[  152.677063][ T4516] cdc_mbim 3-1:1.0: MBIM functional descriptor missing
[  152.695198][ T4516] cdc_mbim 3-1:1.0: bind() failure
[  152.744731][ T6323] loop5: detected capacity change from 0 to 32768
[  152.784510][ T6323] XFS: noikeep mount option is deprecated.
[  152.868192][ T5172] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  152.907158][ T5172] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[  152.918835][ T6328] loop4: detected capacity change from 0 to 32768
[  152.921948][ T4289] usb 3-1: USB disconnect, device number 10
[  153.000919][ T6328] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  153.047668][ T6323] XFS (loop5): Mounting V5 Filesystem
[  153.061216][ T5172] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  153.104861][ T6328] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  153.198855][ T6323] XFS (loop5): Torn write (CRC failure) detected at log block 0x20. Truncating head block from 0x51.
[  153.291573][ T6323] XFS (loop5): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:32). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  153.331805][ T6323] XFS (loop5): log mount/recovery failed: error -22
[  153.345035][ T4187] ocfs2: Unmounting device (7,4) on (node local)
[  153.403530][ T6323] XFS (loop5): log mount failed
[  153.669539][ T4230] usb 2-1: USB disconnect, device number 3
[  153.957287][ T6358] loop1: detected capacity change from 0 to 2048
[  154.737733][ T6358] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  154.747523][ T6358] NILFS (loop1): mounting unchecked fs
[  154.763894][ T6358] NILFS (loop1): recovery complete
[  154.834677][ T6323] loop5: detected capacity change from 0 to 8
[  154.836480][ T6365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.852454][ T6366] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.951145][ T6323] SQUASHFS error: lzo decompression failed, data probably corrupt
[  154.985646][ T4230] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  155.005695][ T6323] SQUASHFS error: Failed to read block 0x91: -5
[  155.012352][ T6323] SQUASHFS error: Unable to read metadata cache entry [8f]
[  155.051341][ T6323] SQUASHFS error: Unable to read inode 0x11f
[  155.972604][ T6374] openvswitch: netlink: Missing key (keys=40, expected=80)
[  156.035560][ T4230] usb 3-1: Using ep0 maxpacket: 32
[  156.041430][ T6380] loop1: detected capacity change from 0 to 256
[  156.139850][ T6384] device syzkaller1 entered promiscuous mode
[  156.198709][ T4230] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 81, changing to 10
[  156.233487][ T4230] usb 3-1: config 0 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  156.575006][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0
[  156.602814][ T4230] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00
[  156.647182][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.687933][ T4230] usb 3-1: config 0 descriptor??
[  156.896934][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'.
[  156.916683][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'.
[  156.932062][ T6395] netlink: 'syz.3.512': attribute type 13 has an invalid length.
[  157.080752][ T6410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.196015][ T6404] loop4: detected capacity change from 0 to 2048
[  157.245816][ T4230] usbhid 3-1:0.0: can't add hid device: -71
[  157.264697][ T4230] usbhid: probe of 3-1:0.0 failed with error -71
[  157.312481][ T4230] usb 3-1: USB disconnect, device number 11
[  157.327125][ T6404] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  157.337312][ T6404] NILFS (loop4): mounting unchecked fs
[  157.707178][ T6404] NILFS (loop4): recovery complete
[  158.137422][ T6418] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.445594][ T5172] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  158.845672][ T5172] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  158.860442][ T5172] usb 4-1: config 0 has no interface number 0
[  158.867345][ T5172] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  158.881545][ T5172] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  158.893979][ T5172] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  158.904023][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.946242][ T4230] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  159.046384][ T6452] loop2: detected capacity change from 0 to 2048
[  159.054373][ T5172] usb 4-1: config 0 descriptor??
[  159.075898][ T6422] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  159.106352][ T5172] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  159.149743][ T6452] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  159.159910][ T6452] NILFS (loop2): mounting unchecked fs
[  159.206237][ T4230] usb 6-1: Using ep0 maxpacket: 16
[  159.212514][ T6452] NILFS (loop2): recovery complete
[  159.229715][ T6455] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.375751][ T4230] usb 6-1: config 1 descriptor has 1 excess byte, ignoring
[  159.383522][ T4230] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  159.392252][ T4516] usb 4-1: USB disconnect, device number 10
[  159.399417][ T4230] usb 6-1: config 1 has no interface number 1
[  159.405696][    C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  159.411396][ T4230] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  159.444266][ T4230] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0
[  159.523120][ T4327] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.591253][ T4327] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.642327][ T6466] loop2: detected capacity change from 0 to 256
[  159.649094][ T4230] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  159.664307][ T4327] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.665538][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.705556][ T4230] usb 6-1: Product: syz
[  159.709762][ T4230] usb 6-1: Manufacturer: syz
[  159.714864][ T4230] usb 6-1: SerialNumber: syz
[  159.780511][ T6466] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  159.816562][ T6466] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  159.820229][ T4327] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.022648][ T6472] fuse: Unknown parameter '0x0000000000000005'
[  160.074970][ T6472] netlink: 136 bytes leftover after parsing attributes in process `syz.2.535'.
[  160.145989][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'.
[  160.439965][ T4230] usb 6-1: USB disconnect, device number 4
[  160.483236][ T6467] chnl_net:caif_netlink_parms(): no params data found
[  160.772515][ T6490] rtc_cmos 00:00: Alarms can be up to one day in the future
[  160.849376][ T4824] udevd[4824]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.545693][ T6501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.569910][ T6484] loop3: detected capacity change from 0 to 2048
[  161.752043][ T6484] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  161.763226][ T6516] loop2: detected capacity change from 0 to 256
[  161.770246][ T6510] loop5: detected capacity change from 0 to 512
[  161.777483][ T6484] NILFS (loop3): mounting unchecked fs
[  161.827123][ T6484] NILFS (loop3): recovery complete
[  161.827558][ T6516] FAT-fs (loop2): Unrecognized mount option "utf8=0�errors=continue" or missing value
[  161.842750][ T4318] Bluetooth: hci2: command 0x0409 tx timeout
[  161.849076][ T6510] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  161.922836][ T6518] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.936960][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.949784][ T6516] 9pnet: Insufficient options for proto=fd
[  161.957357][   T26] audit: type=1800 audit(1756701061.037:25): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.539" name="file1" dev="loop3" ino=15 res=0 errno=0
[  161.963452][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.990862][ T6510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002]
[  162.014445][ T6467] device bridge_slave_0 entered promiscuous mode
[  162.022996][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.030251][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.038750][ T6467] device bridge_slave_1 entered promiscuous mode
[  162.057751][ T6510] EXT4-fs (loop5): orphan cleanup on readonly fs
[  162.066456][ T6510] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.544: bg 0: block 361: padding at end of block bitmap is not set
[  162.094247][ T6510] EXT4-fs (loop5): Remounting filesystem read-only
[  162.176955][ T6510] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  162.202857][ T6467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.243596][ T6510] EXT4-fs (loop5): Remounting filesystem read-only
[  162.257236][ T6510] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.544: attempt to clear invalid blocks 33619980 len 1
[  162.268106][ T6467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.346200][ T6510] EXT4-fs (loop5): Remounting filesystem read-only
[  162.404692][ T6510] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.544: invalid indirect mapped block 1811939328 (level 0)
[  162.448766][ T6510] EXT4-fs (loop5): Remounting filesystem read-only
[  162.475813][ T6510] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.544: invalid indirect mapped block 2185560079 (level 1)
[  162.837607][ T6510] EXT4-fs (loop5): Remounting filesystem read-only
[  163.017512][ T6467] team0: Port device team_slave_0 added
[  163.034584][ T6510] EXT4-fs (loop5): 1 truncate cleaned up
[  163.040544][ T6510] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,mb_optimize_scan=0x0000000000000001. Quota mode: none.
[  163.221099][ T6467] team0: Port device team_slave_1 added
[  163.249418][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.297148][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.055569][ T6467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.065045][ T5172] Bluetooth: hci2: command 0x041b tx timeout
[  164.237563][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.275622][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.598125][ T6467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.674348][ T6552] netlink: 84 bytes leftover after parsing attributes in process `syz.1.553'.
[  164.702243][ T6554] netlink: 'syz.2.555': attribute type 4 has an invalid length.
[  164.832368][ T6552] netlink: 92 bytes leftover after parsing attributes in process `syz.1.553'.
[  164.848967][ T6564] comedi comedi0: comedi_config --init_data is deprecated
[  164.891406][ T6562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.915244][ T6565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.934035][ T6467] device hsr_slave_0 entered promiscuous mode
[  164.967032][ T6467] device hsr_slave_1 entered promiscuous mode
[  164.987735][ T6467] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.008187][ T6467] Cannot create hsr debugfs directory
[  166.705909][ T4318] Bluetooth: hci2: command 0x040f tx timeout
[  166.835724][ T6560] loop5: detected capacity change from 0 to 2048
[  166.891998][ T6560] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  166.962787][ T4824] udevd[4824]: incorrect nilfs2 checksum on /dev/loop5
[  166.963990][ T6560] NILFS (loop5): mounting unchecked fs
[  166.986574][ T6585] loop3: detected capacity change from 0 to 64
[  167.022034][ T6467] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  167.115626][ T6467] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  167.204418][ T6560] NILFS (loop5): recovery complete
[  167.211963][ T6467] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  168.076437][ T6560] NILFS (loop5): error -4 creating segctord thread
[  168.260692][ T6467] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  168.448972][ T4327] device hsr_slave_0 left promiscuous mode
[  168.486253][ T4327] device hsr_slave_1 left promiscuous mode
[  168.502556][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.526128][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.544280][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.567092][ T6577] loop1: detected capacity change from 0 to 40427
[  168.567682][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.597981][ T4327] device bridge_slave_1 left promiscuous mode
[  168.607156][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.610814][ T4230] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  168.631696][ T4327] device bridge_slave_0 left promiscuous mode
[  168.644507][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.673556][ T6621] loop5: detected capacity change from 0 to 64
[  168.673863][ T6577] F2FS-fs (loop1): build fault injection attr: rate: 4, type: 0x1ffff
[  168.742346][ T4327] device veth1_macvtap left promiscuous mode
[  168.764793][ T6577] F2FS-fs (loop1): Unrecognized mount option "fault_type=0000000000000000004" or missing value
[  168.785714][ T4318] Bluetooth: hci2: command 0x0419 tx timeout
[  168.786534][ T4327] device veth0_macvtap left promiscuous mode
[  168.813793][ T4327] device veth1_vlan left promiscuous mode
[  168.837265][ T4327] device veth0_vlan left promiscuous mode
[  168.875603][ T4230] usb 4-1: Using ep0 maxpacket: 32
[  169.025789][ T4230] usb 4-1: config 1 has an invalid interface number: 137 but max is 0
[  169.038847][ T4230] usb 4-1: config 1 has no interface number 0
[  169.050433][ T4238] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  169.051741][ T4230] usb 4-1: config 1 interface 137 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 545
[  169.085736][ T4230] usb 4-1: config 1 interface 137 has no altsetting 0
[  169.193640][ T6617] loop2: detected capacity change from 0 to 40427
[  169.261639][ T4327] team0 (unregistering): Port device team_slave_1 removed
[  169.273839][ T4327] team0 (unregistering): Port device team_slave_0 removed
[  169.276045][ T4230] usb 4-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a
[  169.302368][ T6617] F2FS-fs (loop2): Unrecognized mount option "noinline_xattp" or missing value
[  169.302993][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.320146][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.327500][ T4230] usb 4-1: Product: syz
[  169.347815][ T4230] usb 4-1: Manufacturer: syz
[  169.348413][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.354370][ T4230] usb 4-1: SerialNumber: syz
[  169.407325][ T6606] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  169.425801][ T4238] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping
[  169.486178][ T6627] loop2: detected capacity change from 0 to 16
[  169.488188][ T4327] bond0 (unregistering): Released all slaves
[  169.576344][ T6627] erofs: Unknown parameter '������'
[  169.606119][ T4238] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  169.624052][ T4238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.624504][ T6627] netlink: 14 bytes leftover after parsing attributes in process `syz.2.568'.
[  169.632701][ T4238] usb 6-1: Product: syz
[  169.648154][ T4238] usb 6-1: Manufacturer: syz
[  169.653126][ T4238] usb 6-1: SerialNumber: syz
[  169.684087][ T4238] usb 6-1: config 0 descriptor??
[  169.684488][ T4230] pl2303 4-1:1.137: required interrupt-in endpoint missing
[  169.747544][ T4238] powermate: probe of 6-1:0.0 failed with error -22
[  169.782460][ T4230] usb 4-1: USB disconnect, device number 11
[  169.853237][ T6467] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.885750][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.894332][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.906927][ T6467] 8021q: adding VLAN 0 to HW filter on device team0
[  169.921909][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.931018][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.944247][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.951682][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.983879][ T4318] usb 6-1: USB disconnect, device number 5
[  169.999797][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  170.018231][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.031128][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.038505][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.053257][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  170.101274][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  170.116687][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  170.135526][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079031c00: rx timeout, send abort
[  170.151010][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079031c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  170.165864][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  170.263558][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  170.283740][ T6647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.311751][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  170.327297][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  170.366552][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  170.402223][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.416337][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.425040][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  170.435022][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.469870][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  170.482827][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.523125][ T6645] Illegal XDP return value 298058544, expect packet loss!
[  170.574526][ T6645] bridge1: the hash_elasticity option has been deprecated and is always 16
[  170.842788][  T382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  170.854019][  T382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  170.892004][ T6467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.371163][ T6688] loop3: detected capacity change from 0 to 1024
[  171.465723][ T6691] loop2: detected capacity change from 0 to 128
[  171.599102][ T6691] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  171.711838][ T6691] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.729078][ T4300] hfsplus: b-tree write err: -5, ino 4
[  171.785144][ T6676] loop5: detected capacity change from 0 to 2048
[  173.016545][ T6706] loop3: detected capacity change from 0 to 32768
[  173.035500][    C0] sched: RT throttling activated
[  173.049240][ T6706] jfs: Unrecognized mount option "" or missing value
[  173.078990][ T6676] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  173.135661][ T6676] NILFS (loop5): mounting unchecked fs
[  173.138755][ T4184] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  173.186743][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.216611][ T4824] udevd[4824]: incorrect nilfs2 checksum on /dev/loop5
[  173.233945][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /128/file1/lost+found: directory fails checksum at offset 0
[  173.242830][ T6676] NILFS (loop5): recovery complete
[  173.344902][ T6706] loop3: detected capacity change from 0 to 8192
[  173.356354][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.389155][ T6711] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.431412][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /128/file1/lost+found: directory fails checksum at offset 1024
[  173.483401][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /128/file1/lost+found: directory fails checksum at offset 6144
[  173.502202][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.529400][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.594101][ T6467] device veth0_vlan entered promiscuous mode
[  173.606206][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /128/file1/lost+found: directory fails checksum at offset 11264
[  173.656355][ T6467] device veth1_vlan entered promiscuous mode
[  173.724406][ T4184] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  173.885058][ T6467] device veth0_macvtap entered promiscuous mode
[  173.922206][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[  174.080449][ T4184] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  174.107305][ T6467] device veth1_macvtap entered promiscuous mode
[  174.142858][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /128/file1/lost+found: directory fails checksum at offset 0
[  174.176627][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  174.205982][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  174.214124][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  174.256089][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /128/file1/lost+found: directory fails checksum at offset 1024
[  174.280392][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  174.288990][ T6729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.304459][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  174.321206][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /128/file1/lost+found: directory fails checksum at offset 6144
[  174.372910][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  174.382434][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  174.397360][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  174.419655][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.483643][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.495774][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /128/file1/lost+found: directory fails checksum at offset 11264
[  174.533839][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.577379][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.610379][ T4184] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  174.627899][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.660794][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.675689][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[  174.694691][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.696366][ T4184] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  174.732272][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.738223][ T4184] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  174.780231][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.781349][ T4184] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  174.818361][ T6742] dccp_invalid_packet: pskb_may_pull failed
[  174.821875][ T4184] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  174.838797][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.859047][ T4184] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  174.875663][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.883541][ T4184] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  174.910080][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.945708][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.985248][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.032026][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.042985][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.054091][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.067740][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.086651][ T6735] bridge1: the hash_elasticity option has been deprecated and is always 16
[  175.101419][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  175.130047][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  175.172872][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  175.199496][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  175.211149][ T6467] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.248750][ T6467] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.273418][ T6467] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.341445][ T6467] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.617930][ T6752] loop5: detected capacity change from 0 to 1024
[  175.794549][ T4350] hfsplus: b-tree write err: -5, ino 4
[  175.799821][ T6742] loop1: detected capacity change from 0 to 32768
[  175.859109][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.875852][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.965600][ T4231] Bluetooth: hci0: command 0x0406 tx timeout
[  175.972495][ T4231] Bluetooth: hci4: command 0x0406 tx timeout
[  175.978732][ T1987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  176.065928][ T6742] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  176.155392][  T382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.179509][ T6759] loop5: detected capacity change from 0 to 2048
[  176.191481][ T6759] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  176.202664][ T6759] NILFS (loop5): mounting unchecked fs
[  176.219173][ T6742] JBD2: Ignoring recovery information on journal
[  176.278549][ T6759] NILFS (loop5): recovery complete
[  176.285144][  T382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.313265][ T6766] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.338953][   T26] audit: type=1800 audit(1756701075.427:26): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.589" name="file1" dev="loop5" ino=15 res=0 errno=0
[  176.347357][  T382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  176.374068][ T6742] (syz.1.585,6742,1):ocfs2_read_journal_inode:1600 ERROR: status = -13
[  176.466181][ T6742] (syz.1.585,6742,0):ocfs2_mark_dead_nodes:1885 ERROR: status = -13
[  176.494239][ T6742] (syz.1.585,6742,0):ocfs2_check_volume:2481 ERROR: status = -13
[  176.518922][ T6742] (syz.1.585,6742,0):ocfs2_check_volume:2493 ERROR: status = -13
[  176.549331][ T6742] (syz.1.585,6742,0):ocfs2_mount_volume:1824 ERROR: status = -13
[  176.565877][ T4327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.605741][ T4327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.779462][ T6742] (syz.1.585,6742,1):ocfs2_fill_super:1177 ERROR: status = -13
[  176.792293][ T4327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.833862][ T4327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.929480][ T6778] sctp: failed to load transform for md5: -4
[  176.975575][ T6781] sctp: failed to load transform for md5: -4
[  177.020601][ T4327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.085796][ T4327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.175326][ T6796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.213094][   T26] audit: type=1326 audit(1756701076.297:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.6.597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef95f7cbe9 code=0x0
[  177.293623][ T4327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.319172][ T4327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.454193][ T6773] loop3: detected capacity change from 0 to 2048
[  177.546415][ T6773] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  177.564284][ T6773] NILFS (loop3): mounting unchecked fs
[  177.590149][ T6791] chnl_net:caif_netlink_parms(): no params data found
[  177.601698][ T6773] NILFS (loop3): recovery complete
[  177.626626][ T6813] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.684710][ T4327] tipc: Disabling bearer <udp:syz0>
[  177.719166][ T4327] tipc: Left network mode
[  177.935375][ T6791] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.950784][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.960651][ T6791] device bridge_slave_0 entered promiscuous mode
[  177.961218][ T6824] loop3: detected capacity change from 0 to 1024
[  177.971168][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.981514][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.993904][ T6791] device bridge_slave_1 entered promiscuous mode
[  178.061462][ T6791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.076860][ T6826] ------------[ cut here ]------------
[  178.089632][ T4350] hfsplus: b-tree write err: -5, ino 4
[  178.095921][ T6826] WARNING: CPU: 0 PID: 6826 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  178.106883][ T6791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.126141][ T6826] Modules linked in:
[  178.135343][ T6826] CPU: 0 PID: 6826 Comm: syz.5.601 Not tainted syzkaller #0
[  178.178118][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  178.285852][ T6826] RIP: 0010:hugetlb_split+0x237/0x2a0
[  178.291481][ T6826] Code: c0 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 35 48 c0 ff 0f 0b e9 62 fe ff ff e8 29 48 c0 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 44 c0 69 8d 80 e1 07 80 c1 03 38 c1
[  178.332111][ T6826] RSP: 0018:ffffc9000321fac8 EFLAGS: 00010287
[  178.346779][ T6826] RAX: ffffffff81b78287 RBX: 0000200000000000 RCX: 0000000000080000
[  178.354817][ T6826] RDX: ffffc90014b5c000 RSI: 000000000000005b RDI: 000000000000005c
[  178.374531][ T6826] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10045f5018
[  178.389885][ T6826] R10: ffffed10045f5018 R11: 1ffff110045f5017 R12: ffff88807d014e08
[  178.419807][ T6826] R13: dffffc0000000000 R14: ffff88807d014d68 R15: ffff88807a9fcbc0
[  178.452142][ T6826] FS:  00007fd9416806c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  178.478837][ T6826] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.505573][ T6826] CR2: 000055bc23c6e000 CR3: 0000000061115000 CR4: 00000000003506e0
[  178.538150][ T6826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  178.553032][ T6826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  178.595569][ T6826] Call Trace:
[  178.598900][ T6826]  <TASK>
[  178.601861][ T6826]  __vma_adjust+0x6a9/0x1c20
[  178.625865][ T6826]  ? preempt_count_add+0x8d/0x190
[  178.630964][ T6826]  ? up_write+0x1bb/0x420
[  178.635435][ T6826]  __split_vma+0x34b/0x410
[  178.676852][ T6826]  __do_munmap+0x375/0xdc0
[  178.684892][ T6826]  mremap_to+0x306/0x6b0
[  178.717032][ T6826]  __se_sys_mremap+0x418/0x990
[  178.730820][ T6826]  ? __x64_sys_mremap+0xc0/0xc0
[  178.752476][ T6826]  ? lock_chain_count+0x20/0x20
[  178.790851][ T6826]  ? lockdep_hardirqs_on+0x94/0x140
[  178.819915][ T6826]  ? __x64_sys_mremap+0x1c/0xc0
[  178.845677][ T6826]  do_syscall_64+0x4c/0xa0
[  178.878295][ T6826]  ? clear_bhb_loop+0x30/0x80
[  178.885417][ T6826]  ? clear_bhb_loop+0x30/0x80
[  178.890653][ T6826]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  178.897082][ T6826] RIP: 0033:0x7fd943418be9
[  178.901693][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.922089][ T6826] RSP: 002b:00007fd941680038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  178.933524][ T6826] RAX: ffffffffffffffda RBX: 00007fd94364ffa0 RCX: 00007fd943418be9
[  178.948235][ T6826] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000
[  178.975058][ T6826] RBP: 00007fd94349be19 R08: 0000200000a00000 R09: 0000000000000000
[  178.990725][ T6826] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  179.003245][ T6826] R13: 00007fd943650038 R14: 00007fd94364ffa0 R15: 00007fffb38110e8
[  179.016468][ T6826]  </TASK>
[  179.019541][ T6826] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  179.026913][ T6826] CPU: 1 PID: 6826 Comm: syz.5.601 Not tainted syzkaller #0
[  179.034212][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  179.044394][ T6826] Call Trace:
[  179.047711][ T6826]  <TASK>
[  179.050750][ T6826]  dump_stack_lvl+0x168/0x230
[  179.055448][ T6826]  ? show_regs_print_info+0x20/0x20
[  179.060668][ T6826]  ? load_image+0x3b0/0x3b0
[  179.065207][ T6826]  panic+0x2c9/0x7f0
[  179.069215][ T6826]  ? bpf_jit_dump+0xd0/0xd0
[  179.073760][ T6826]  ? hugetlb_split+0x237/0x2a0
[  179.078538][ T6826]  __warn+0x248/0x2b0
[  179.082556][ T6826]  ? hugetlb_split+0x237/0x2a0
[  179.087341][ T6826]  report_bug+0x1b7/0x2e0
[  179.091707][ T6826]  handle_bug+0x3a/0x70
[  179.095981][ T6826]  exc_invalid_op+0x16/0x40
[  179.100569][ T6826]  asm_exc_invalid_op+0x16/0x20
[  179.105632][ T6826] RIP: 0010:hugetlb_split+0x237/0x2a0
[  179.111184][ T6826] Code: c0 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 35 48 c0 ff 0f 0b e9 62 fe ff ff e8 29 48 c0 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 44 c0 69 8d 80 e1 07 80 c1 03 38 c1
[  179.131338][ T6826] RSP: 0018:ffffc9000321fac8 EFLAGS: 00010287
[  179.138463][ T6826] RAX: ffffffff81b78287 RBX: 0000200000000000 RCX: 0000000000080000
[  179.146681][ T6826] RDX: ffffc90014b5c000 RSI: 000000000000005b RDI: 000000000000005c
[  179.155109][ T6826] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10045f5018
[  179.163183][ T6826] R10: ffffed10045f5018 R11: 1ffff110045f5017 R12: ffff88807d014e08
[  179.171338][ T6826] R13: dffffc0000000000 R14: ffff88807d014d68 R15: ffff88807a9fcbc0
[  179.179394][ T6826]  ? hugetlb_split+0x237/0x2a0
[  179.184251][ T6826]  ? hugetlb_split+0x237/0x2a0
[  179.189168][ T6826]  __vma_adjust+0x6a9/0x1c20
[  179.193887][ T6826]  ? preempt_count_add+0x8d/0x190
[  179.199096][ T6826]  ? up_write+0x1bb/0x420
[  179.203440][ T6826]  __split_vma+0x34b/0x410
[  179.207881][ T6826]  __do_munmap+0x375/0xdc0
[  179.212467][ T6826]  mremap_to+0x306/0x6b0
[  179.216721][ T6826]  __se_sys_mremap+0x418/0x990
[  179.221498][ T6826]  ? __x64_sys_mremap+0xc0/0xc0
[  179.226534][ T6826]  ? lock_chain_count+0x20/0x20
[  179.231415][ T6826]  ? lockdep_hardirqs_on+0x94/0x140
[  179.236757][ T6826]  ? __x64_sys_mremap+0x1c/0xc0
[  179.241690][ T6826]  do_syscall_64+0x4c/0xa0
[  179.246090][ T6826]  ? clear_bhb_loop+0x30/0x80
[  179.250906][ T6826]  ? clear_bhb_loop+0x30/0x80
[  179.255579][ T6826]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.261604][ T6826] RIP: 0033:0x7fd943418be9
[  179.266006][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.285874][ T6826] RSP: 002b:00007fd941680038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  179.294289][ T6826] RAX: ffffffffffffffda RBX: 00007fd94364ffa0 RCX: 00007fd943418be9
[  179.302540][ T6826] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000
[  179.310701][ T6826] RBP: 00007fd94349be19 R08: 0000200000a00000 R09: 0000000000000000
[  179.318674][ T6826] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  179.326868][ T6826] R13: 00007fd943650038 R14: 00007fd94364ffa0 R15: 00007fffb38110e8
[  179.335030][ T6826]  </TASK>
[  179.338336][ T6826] Kernel Offset: disabled
[  179.342986][ T6826] Rebooting in 86400 seconds..