last executing test programs:

1m14.340470028s ago: executing program 4 (id=30):
r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b8bf420b00e2090310c010203010902e200010002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00037c0000007c03"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1m12.271504621s ago: executing program 1 (id=50):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0)

1m11.96725548s ago: executing program 1 (id=53):
r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b8bf420b00e2090310c010203010902e200010002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)

1m11.152691096s ago: executing program 4 (id=62):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@mcast1, @mcast2, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0)

1m10.955482856s ago: executing program 4 (id=63):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0)

1m10.458545534s ago: executing program 4 (id=67):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f0000000380)="08d69fe50cd7a79471d8419b0bb9ae9b86ca44a80d0bd986922f24a62dd8eec5a0b561b310cdaa32d1cf3a8aa7e804b357ae5dd9eeb928195a18529d312903a94064febfa8ccfc631a0cded488fa8ca30ab8250663c2b424cf00c0ae599a053846d0c7bc4324a699599efa4247815768b265c64d7e507b199740ee2c5c866d45912ca4c7", 0x84}], 0x3}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21)

1m10.372297003s ago: executing program 4 (id=68):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m10.121825163s ago: executing program 4 (id=71):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103)

1m9.905614262s ago: executing program 1 (id=73):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sync()
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

1m9.232572009s ago: executing program 1 (id=79):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)}, {0x0}, {&(0x7f0000000380)="08d69fe50cd7a79471d8419b0bb9ae9b86ca44a80d0bd986922f24a62dd8eec5a0b561b310cdaa32d1cf3a8aa7e804b357ae5dd9eeb928195a18529d312903a94064febfa8ccfc631a0cded488fa8ca30ab8250663c2b424cf00c0ae599a053846d0c7bc4324a699599efa4247815768b265c64d7e507b199740ee2c5c866d45912ca4c7", 0x84}], 0x3}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21)

1m8.994748508s ago: executing program 1 (id=82):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m8.801039787s ago: executing program 1 (id=83):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x310, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x2fc, 0x1, [@m_nat={0xa0, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x678e, 0x20000000, 0x401, 0x7}, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, 0xff, 0x1}}]}, {0x4d, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3daaa6e95d0"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x1c0, 0x19, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xd, 0x0, 0x1, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x7, 0xbebe, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x6, 0xba, 0x2}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff3df, 0x6, 0xffffffffffffffff, 0x4, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x8, 0x4685, 0x7fffffff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a302503, 0x188e, 0x0, 0x800, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9fa, 0x0, 0xc299, 0x9}, 0x79a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x30, 0x4, 0xffffffffffffffff, 0x9, 0x8}, 0x10}}]}, {0xad, 0x6, "1912a7ff5173c61ad56261ff8e5053f871e9ba50e5a735a21267fd9351923540933e8897fb71e79f93d4face0f3af37027232b756357e47fb3b8832f48ce53aa627ac8270caf13967d9b8c9dd3a25cbdcd5a75e96125380a48539c6a170c19674871c343a6a1c2321437d3e995d60cab6c65dd44530d6d5ee60083c4ddc49fa467516b243cbd234e3f506f327f66ee855c4af64c166857ded7d62b3038c1f29ae174339786c22a0c27"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_sample={0x68, 0x1e, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x5, 0x20000000, 0x7, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x0, 0x3, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x30, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x310}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

55.005811026s ago: executing program 32 (id=71):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103)

53.647976651s ago: executing program 33 (id=83):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x310, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x2fc, 0x1, [@m_nat={0xa0, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x678e, 0x20000000, 0x401, 0x7}, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, 0xff, 0x1}}]}, {0x4d, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3daaa6e95d0"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x1c0, 0x19, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xd, 0x0, 0x1, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x7, 0xbebe, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x6, 0xba, 0x2}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff3df, 0x6, 0xffffffffffffffff, 0x4, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x8, 0x4685, 0x7fffffff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a302503, 0x188e, 0x0, 0x800, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9fa, 0x0, 0xc299, 0x9}, 0x79a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x30, 0x4, 0xffffffffffffffff, 0x9, 0x8}, 0x10}}]}, {0xad, 0x6, "1912a7ff5173c61ad56261ff8e5053f871e9ba50e5a735a21267fd9351923540933e8897fb71e79f93d4face0f3af37027232b756357e47fb3b8832f48ce53aa627ac8270caf13967d9b8c9dd3a25cbdcd5a75e96125380a48539c6a170c19674871c343a6a1c2321437d3e995d60cab6c65dd44530d6d5ee60083c4ddc49fa467516b243cbd234e3f506f327f66ee855c4af64c166857ded7d62b3038c1f29ae174339786c22a0c27"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_sample={0x68, 0x1e, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x5, 0x20000000, 0x7, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x0, 0x3, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x30, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x310}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

4.336377846s ago: executing program 3 (id=519):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0)
ftruncate(r1, 0x51a9497)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1})
readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0xe0}], 0x1)

3.682984093s ago: executing program 5 (id=524):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
readv(r0, &(0x7f0000000b40)=[{&(0x7f0000000300)=""/62, 0x3e}], 0x1)

3.378143402s ago: executing program 0 (id=527):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0)
fcntl$setpipe(r0, 0x407, 0x8001a0)
splice(r0, 0x0, r1, 0x0, 0x200002, 0x1000000000000000)

3.301405852s ago: executing program 3 (id=528):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})

2.74909296s ago: executing program 6 (id=532):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
capset(&(0x7f0000000040)={0x19980330}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.642412959s ago: executing program 5 (id=533):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x18, 0x1, 0x1, &(0x7f0000000200))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0))
r2 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x2}}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$sysctl(r4, &(0x7f0000000000)='1\x00', 0x2)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$FITRIM(r3, 0xc0185879, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)

2.376815899s ago: executing program 6 (id=535):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0)

2.342505878s ago: executing program 5 (id=536):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x7fff, 0x10}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0)

2.235517897s ago: executing program 0 (id=537):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x80000006}]}, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x100000000002, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

2.079259087s ago: executing program 5 (id=538):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0)
ftruncate(r1, 0x51a9497)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1})
readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0xe0}], 0x1)

1.989817837s ago: executing program 0 (id=540):
socket$pppl2tp(0x18, 0x1, 0x1)
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64])

1.964088347s ago: executing program 6 (id=541):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)

1.707508516s ago: executing program 6 (id=542):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x12, 0x100001, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xde3, 0x40, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

1.667090176s ago: executing program 0 (id=543):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
readv(r0, &(0x7f0000000b40)=[{&(0x7f0000000300)=""/62, 0x3e}], 0x1)

1.608294656s ago: executing program 3 (id=544):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1.465747115s ago: executing program 6 (id=545):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020d0000150000002bbd7000000000000800120000000200000000000000000006000000080000000000000000000000fe800000000000000000000000000000fe88000000000000000000000000000105000500000000000a004e200000000000000000000000000000000000000000000000000000000005000600002000000a0000000000000000000000000000000000ffffe00000010000000000000000010018"], 0xa8}}, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000004c0)={[{@utf8}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x96}}]}, 0x1, 0x14f7, &(0x7f0000001580)="$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")
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000005d80)=ANY=[@ANYBLOB='iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d63703933322c666d61736b3d30303030303030303030303030303030303030303030342c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030332c756d61736b3d30303030303030303030303030303030303030303030302c636f6465706167653d63703933322c0087c36ada509ad1217819ccb05e2c31c700a774505074a59028e5cccdd3"], 0x9, 0x1505, &(0x7f0000000180)="$eJzs3Au4jdX2MPAx5pwvm9BKcp9jjpeVXCZJEknIJUmSJMktIUmSJCS33JKQhNyT3ENyC8n9fss9SY4kSUJCwvweHefzndPp9P2/0/mc59nj9zzz2XPstcZY411jr9u7n72/azewUp3K5WsxM/xb8K9fugJACgD0AYBrASACgOKZi2e+dHk6jV3/vRsRf66Hp1ztDsTVJPNP3WT+qZvMP3WT+aduMv/UTeafusn8UzeZvxCp2ZapOa6TlXqXnP9PzeT1P3WT+aduMv/UTeafusn8UzOW+adyMv/UTeafusn8hUjN/pTzyGkvF/svOJ/9H1h/u6uudh9/sKL/p7yr95MnhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECI1ORuuMADwt/3V7ksIIYQQQgghhBB/npD2ancghBBCCCGEEEKI/zwEMBoMRJAG0kIKpIP0cA1kgIyQCa6FBFwHmeF6yAI3QFbIBtkhB+SEXJAbLBA4YIghD+SFJNwI+eAmyA8FoCAUAg+FoQjcDEXhFigGt0JxuA1KwO1QEkrBHVAa7oQycBeUhXJQHu6GClARKkFluAeqwL1QFe6DanA/VIcHoAY8CDXhIagFD0NteATqwKNQFx6DelAfGkBDaPTP8/W/zn8JOsHL0Bm66Ev3QHd4BXpAT+gFvaEPvAp94TXoB69DfxgAA+ENGARvwmB4C4bAUBgGb8NwGAEjYRSMhjEwFt6BcfAujIf3YAJMhEkwGabAVJgG78N0mAEz4QOYBR/CbJgDc2EezIePYAEshEXwMSyGT2AJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQt8ClthG2yHHbATdsFu+Az2wOewF76AffDl/zD/zD/kt0dAQIUKDRpMg2kwBVMwPabHDJgBM2EmTGACM2NmzIJZMCtmxeyYHXNiTsyNuZGQkJExD+bBJCYxH+bD/JgfC2JB9OixCBbBongLFsNiWByLYwksgSWxFJbC0lgay2AZLItlsfztcwCwAlbCSngP3oP3YlWsitWwGlbH6lgDa2BNrIm1sBbWxtpYB+tgXayL9bAeNsAG2AgbYWNsjE2wCTbDZtgcm2MLbIEtsSW2wlbYGltjG2yDbbEttsN22B47YAd8CV/Cl/Fl7IIVVDfsjt2xB/bAXtgbe+Or2Bdfw9fwdeyPA3AgvoFv4Js4GE/jEByKw3AYllEjcCSOQlZjcCyOxXE4DsfjeJyAE3EiTsYpOBWn4TScjjNwBn6As/BD/BDn4Bych/NxPi7AhbgIF+FiPINLcCkuw+W4AlfiClyNa3A1rlN/e2huxs34KX6K23Ab7sAduAt34Wf4GX6On2N/3If7cD/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOJ7Ak3gCT+EpPI1n8CyexXN4Ds/jCzm/qb2rwNr+oC4xyqg0Ko1KUSkqvUqvMqgMKpPKpBIqoTKrzCqLyqKyqqwqu8qucqqcKrfKrUiRYhWrPCqPSqqkyqfyAUBXVVAVVF55VUQVUUVVUVVMFVPF1W2qhLpdlVSlVFNfWpVWZVQzX1aVU+VVeVVBVVSVVGVVWVVRVVRVVVVVU9VUdVVd1VAPqpqqG/bCh9WlydRRA7CuGoj1VH3VQDVUb+LjqrEajE1UU9VMPamG4hBsoRr7luoZ1UqNxNbqOTUKn1dt1Rhsp15U7VUH1VG9pDqpJr6z6qImYDfVXU3GHqqn6qV6q+lYUV2aWCX1uuqvBqiB6g01D99Ug9Vbaogaqoapt9VwNUKNVKPUaDVGjVXvqHHqXTVevacmqIlqkpqspqipapp6X01XM9RM9YGapT5Us9UcNVfNU/PVR2qBWqgWqY/VYvWJWqKWqmVquVqhVqpVarVao9aqdWq92qA2qk1qs9qiPlVb1Ta1Xe1QO9UutVt9pvaoz9Ve9YXap75U+9Vf1AH1lTqovlaH1DfqsPpWHVHfqaPqe3VMdVHH1Ql1Uv2oTqmf1Gl1Rp1VP6tz6hd1Xl1QF1VQoFErrbXRkU6j0+oUnU6n19foDDqjzqSv1Ql9nc6sr9dZ9A06q86ms+scOqfOpXNrq0k7zTrWeXRendQ36nz6Jp1fF9AFdSHtdWFdRN+si+pbdDF9qy6ub9Ml9O26pC6l79Cl9Z26jL5Ll9XldHl9t66gK+pKurK+R1fR9+qq+j5dTd+vq+sHdA39oK6pH9K19MO6tn5E19GP6rr6MV1P19cNdEPdSD+uG+sndBPdVDfTT+rm+indQj+tW+pndCv9rG6tn9Nt9PO6rX5Bt9Mv6va6g+6oL+iLOujOuovuqrvp7voV3UP31L10b91Hv6r76td0P/267q8H6IH6DT1Iv6kH67f0ED1UD9Nv6+F6hB6pR+nReoweq9/R4/S7erx+T0/QE/UkPVlP0VN1r8uVZl7KN/Av89/9J/n9fr31zXqL/lRv1dv0dr1D79S79G69W+/Re/RevVfv0/v0fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qv+sf9Sn9E/6tD6jz+if9Tl9Tp+/fB+AQaOMNsZEJo1Ja1JMOpPeXGMymIwmk7nWJMx1JrO53mQxN5isJpvJbnKYnCaXyW2sIeMMm9jkMXlN0txo8pmbTH5TwBQ0hYw3hU0Rc/Pv5UeXn+H+MP93+ls+6XJ+I9PINDaNTRPTxDQzzUxz09y0MC1MS9PStDKtTGvT2rQxbUxb09a0M+1Me9PedDQdTSfTyXRGMF1NV9PdvGJ6mJ6ml+lt+phXTV/T1/Qz/Ux/098MNAPNIDPIDDaDzRAzxAwzw8xwM9yMNCPNaDPajDVjzTgzzow3480EM8FMMpPMFDPFXHphvWSmmWlmmVlmtplt5pq5Zr6ZbxaYBWaRWWQWm8VmiVlqlprlZrlZaVaa1Wa1WWvWmvVmvdloNpolZovZYraarWa72W52mp1mt9lt9pg9Zq/Za/aZfWa/2W8OmAPmoDloDplD5rA5bI6YI+aoOWqOmWPmuDluTpqT5pQ5ZU6b0+asOWvOmXPmvDlvLpqLl972RSpSkYlMlCZKE6VEKVH6KH2UIcoQZYoyRYkoEWWOMkdZohuirFG2KHuUI8oZ5YpyRzaiyEUcxVGeKG+UjG6M8kU3RfmjAlHBqFDko8JRkejmqGh0S1QsujUqHt0WlYhuj0pGpaI7otLRnVGZ6K6obFQuKh/dHVWIKkaVosrRPVGV6N6oanRfVC26P6oePRDViB6MakYPRbWih6Pa0SNRnejRqG70WFQvqh81iBpGjf7U+iGczvaE72y72LTQzXa3r9getqftZXvbPvZV29e+ZvvZ121/O8AOtG/YQfZNO9i+ZYfYoXaYfdsOtyPsSDvKjrZj7Fj7jh1n37Xj7Xt2gp1oJ9nJdoqdaqfZ9+10O8POtB/YWfZDO9vOsXPtPDvffmQX2IV2kf3YLraf2CV2qV1ml9sVdqVdZVfbNXatXWfX2w12o91kN9st9lO71W6z2+0Ou9PusrvtZ3aP/dzutV/YffZLu9/+xR6wX9mD9mt7yH5jD9tv7RH7nT1qv7fH7A/2uD1hT9of7Sn7kz1tz9iz9md7zv5iz9sL9qINl97cX3p5J0OG0lAaSqEUSk/pKQNloEyUiRKUoMyUmbJQFspKWSk7ZaeclJNyU266hIkpD+WhJCUpH+Wj/JSfClJB8uSpCBWholSUilExKk7FqQSVuPxoAbqT7qS76C4qR+XobrqbKlJFqkyVqQpVoapUlapRNapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqBE1osbUmJpQE2pGzag5NacW1IJaUktqRa2oNbWmNtSG2lJbakftqD21p47UkTpRJ+pMnakrdaXu1J16UA/qRb2oD/WhvtSX+lE/6k/9aSANpEE0iAbTYBpCQ2kYvU3DaQSNpFE0msbQWBpL42gcjafxNIEm0CSaRFNoCk2jaTSdptNMmkmzaBbNptk0l+bSfJpPC2gBLaJFtJgW0xJaQstoGa2gFbSKVtEaWkPraB1toA20iTbRFtpCW2krbafttJN20m7aTXtoD+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifpJJ2iU3SaTtNZOkvn6Bc6TxfoIgVKcelceneNy+AyukzuWvePcXaXw+V0uVxuZ11Wl+3vYnLO5XcFXEFXyHlX2BVxN/8mLulKuTtcaXenK+PucmV/E1dx97qq7j5Xzd3vKrt7/i6u7h5wNdyjrqZ7zNVy9V1t19DVcY+6uu4xV8/Vdw1cQ9fcPeVauKddS/eMa+We/U28wC10a9xat86td3vc5+6s+9kdcd+5c+4X19l1cX3cq66ve831c6+7/m7Ab+Jh7m033I1wI90oN9qN+U08yU12U9xUN82976a7Gb+J57uP3Cy3yM12c9xcN+/X+FJPi9zHbrH7xC1xS90yt9ytcCvdKrf6f/e63G10m9xmt9t95ra6bW672+F2ul2/xpeOY6/7wu1zX7rD7lt3wH3lDrqj7pD75tf40vEddd+7Y+4Hd9ydcCfdj+6U+8mddmd+Pf5Lx/6ju+AuuuCAkRVrNhxxGk7LKZyO0/M1nIEzcia+lhN8HWfm6zkL38BZORtn5xyck3NxbrZM7Jg55jycl5N8I+fjmzg/F+CCXIg9F+YifDMX5Vu4GN/Kxfk2LsG3c0kuxXdwab6Ty/BdXJbLcXm+mytwRa7ElfkersL3clW+j6vx/VydH+Aa/CDX5Ie4Fj/MtfkRrsOPcl1+jOtxfW7ADbkRP86N+Qluwk25GT/JzfkpbsFPc0t+hlvxs9yan+M2/Dy35Re4Hb/I7bkDd+SXuBO/zJ25C3flbtydX+Ee3JN7cW/uw69yX36N+/Hr3J8H8EB+gwfxmzyY3+IhPJSH8ds8nEfwSB7Fo3kMj+V3eBy/y+P5PZ7AE3kST+YpPJWn8fs8nWfwTP6AZ/GHPJvn8Fyex/P5I17AC3kRf8yL+RNewkt5GS/nFbySV/FqXsNreR2v5w28kTfxZt7Cn/JW3sbIO3gn7+Ld/Bnv4c95L3/B+/hL3s9/4QP8FR/kr/kQf8OH+Vs+wt/xUf6ej/EPfJxP8En+kU/xT3yaz/BZ/pnP8S98ni/wRQ4MMcYq1rGJozhNnDZOidPF6eNr4gxxxjhTfG2ciK+LM8fXx1niG+KscbY4e5wjzhnninPHNqbYxRzHcZ44b5yMb4zzxTfF+eMCccG4UOzjwnGR+Oa4aHxLXCy+NS4e3xaXiG+PS8al4kfvLx3fGZeJ74rLxuXi8vHdcYW4YlwprhzfE1eJ742rxvfF1eL742LxA3GN+MG4ZvxQXCt+OK4dPxLXiR+N68aPxfXi+nGDuGHcKH48bhw/ETeJm8bN4ifj5vFTcYv46bhl/EzcKn72Dy/vGneLu8evxK/EIdyn5ybnJecnP0ouSC5MLkp+nFyc/CS5JLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ORlC5bTg0SuvvfGRT+PT+hSfzqf31/gMPqPP5K/1CX+dz+yv91n8DT6rz+az+xw+p8/lc3vryTvPPvZ5fF6f9Df6fP4mn98X8AV9Ie99YV/EN/SNfCPf2D/hm/imvpl/0j/pn/JP+af90/4Z38o/61v753wb/7xv61/wL/gXfXvfwXf0L/lO/mXf2XfxXX1X39139z18D9/L9/J9fB/f1/f1/Xw/399f8AP9QD/ID/KD/WA/xA/xw/wwP9wP9yP9SD/aj/Zj/Vg/zo/z4/14PyFlgp/kJ/kpfoqf5qf56X66n+ln+ln5Z/nZfraf6+f6+X6+X+AX+EV+kV/sF/slfolf5pf5FX6FX+VX+TV+jV/n1/kNfoPf5Df5LX6L3+q3+u1+u9/pd/rdfrff4/f4vX6v3+dDCF32nw3+gD/ov/aH/Df+sP/WH/Hf+aP+e3/M/+CP+xP+pP/Rn/I/+dP+jD/rf/bn/C/+vL/gL/rgxybeSYxLvJsYn3gvMSExMTEpMTkxJTE1MS3xfmJ6YkZiZuKDxKzEh4nZiTmJuYl5ifmJjxILEgsTixIfJxYnPkksSSxNLEssT6xIrEyEkGtrHPKEvCEZbgz5wk0hfygQCoZCwYfCoUi4ORQNt4Ri4dZQPNwWSoTbQ8lQKtwRHgv1Qv3QIDQMjcLjoXF4IjQJTUOz8GRoHp4KLcLToWV4JrQKz4bW4bnQJjwf2oYXQrvwYmgfOoSO4aXQKbwcOocuoWvoFrqHV0KP0DP8EnqHPuHV0De8FvqF10P/MCAMDG+EQeHNMDi8FYaEoWFYeDsMDyPCyDAqjA5jwtjwThgX3g3jw3thQpgYJoXJYUqYGqaF98P0MCPMDB+EWeHDMDvMCXPDvDA/fBQWhIVhUfg4LA6fhCVhaVgWlgdIWRlWhdVhTVgb1oX1YUPYGDaFzWFL+DRsDdvC9rAj7Ay7wu7wWdgTPg97wxdhX/gy7A9/CQfCV+Fg+DocCt+Ew+HbcCR8F46G78Ox8EM4Hk6EkwHDqfBTOB3OhLPh53Au/BLOhwvhovzNmhBCCCHE/xX9B5d3+yffU5cX/Pq7c4CM23Ic+seaG7L+dd9T5WyeAIBnurR7+G+rQoWuXbtevu4SDVHeOQCQuJKfBq7ES6EZPAUtoSkU/af99VQdzvG/rv8bKQCQHv6x/i2/U3/ErD+oHyXnAOTPeyUnHVyJr9Qv9jv1szX+g/rpvhoL0OT/yMkAV+Ir9YvAE/AstPy7awohhBBCCCGEEH/VU93R5o8+3176fJ7TXMlJC1fiP/p8LoQQQgghhBBCiKvv+Q4dn368ZcumbWRzFTbtMv51Cv8t/fzOJs1/Rxt/3gYvn736b+nnP70pd/nR/j/JumpPSUIIIYQQQoj/kCtv+q92J0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghROr1/+OfkF3tYxRCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGutv8VAAD//zmwHF0=")
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
shutdown(r1, 0x0)
connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[@ANYBLOB="9feb01001800000000000000da000000da000000080000000a0000010000001203000000020000000a00000f02000000050000000104000001000000050000006e90405d000800000100000004000000020000000100000005000000400000000300000008000000010000000100000004000000ff7f00000200000006000000000000000300000300000000000400000100000008000000faffffff0400000001000000030000000ad90a000000030000060400000001000000000800000400000003000000020000002e020000020000000000000b050000000100000000000009030000000c0000000000000700000000000000610000613061001500b7513e65ecf9a95e2d28833ad874812aa2f0f3d7adc1172c83a037546116ae1c172fc9027d939f011f3f1337d416b25d0798bee7"], &(0x7f0000000280)=""/152, 0xfc, 0x98, 0x1, 0x8001, 0x10000, @value}, 0x28)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc61, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800008)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r8 = dup2(r7, r7)
r9 = gettid()
fcntl$lock(r8, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x9, 0xfffffffffffffffb, r9})
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf372, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x9, 0xe, 0x1, {0x22, 0xe15}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0xe2, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0xfd, 0x1}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x5, 0x2, 0x3, 0xdf, 0xc}, 0xcb, &(0x7f0000000100)=ANY=[@ANYBLOB="050fcb000620100a08252000000f0f787730c0000000c0ff00f03f0000c0c00000003fff000a100302060000fbff07071002186900000b100108380005030100807f100b8e5c5f69ee323ef6679ad211e0453c582b3c72e9db53d131e560fcf5326437f5ec32880bc69aa021080006418b3b5cae076d2e266c2d4d49a191e860f51b0abc93efe15f153deaaea63bcf21fadc73f1f447a02e4f665e012e6c3bcafec04ff94f76f696a7ff3de3558a571a5bcd25bb7517dd5111cf87a14f8274f50b1001041200ff07ffffb1"], 0x4, [{0x53, &(0x7f0000000200)=@string={0x53, 0x3, "07699dee4ed4818594cdddc98cfd1e0bcf0f14a427f597675de269c9cc94cad723de7be6a2be790bb764be54aa1cd0ce1a41a0975438e11da567054f96cbd013262a42368a5bea5aac3647a93e13a7bd95"}}, {0xe4, &(0x7f0000000600)=ANY=[@ANYBLOB="e4033bee18f606cd939020bc642849bb5d87341c5f98697ba38e2e58d765940909717978e6b4b736c85c6f3ff9dac21649f5069dbbb02aeb0f17842d0ef9bb9cfbe99186022d6d926097bcc3d2e398ee06d514cc3b2a00923752acd3a01e03c58e3da9b190bc13bcf7de17bcf2ef5391129e056d17f9f4d22f6ef4414bbe8c3c2e99414304f46123efc669335d4171916605a5d6bc21bb08e715ce7e000000367cd5ed02a85ff94e60985861829107d3a0e511d085b8734380a285b42e4f285669f34b84077410616aab031a1d25ff748d652c79850f7d570e91fd171cfeb35f1aadd663aa"]}, {0x61, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"]}, {0x0, 0x0}]})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000002a80)={<r10=>r0})
ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0xe)

1.460116725s ago: executing program 3 (id=546):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
capset(&(0x7f0000000040)={0x19980330}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.432351795s ago: executing program 2 (id=547):
r0 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001})
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(0xffffffffffffffff, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.132277514s ago: executing program 2 (id=548):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x7fff, 0x10}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0)

1.045470113s ago: executing program 5 (id=549):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x22}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

935.909283ms ago: executing program 3 (id=550):
r0 = openat$dsp(0xffffff9c, &(0x7f0000000280), 0x80000, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x21)
utimensat(r1, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

855.520813ms ago: executing program 2 (id=551):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0)

743.327212ms ago: executing program 5 (id=552):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

732.354582ms ago: executing program 3 (id=553):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000200)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@skip_balance}, {@enospc_debug}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000c40)={0x2, 0x0, {0xffffffffffffffff, @struct={0x1}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, @usage=0xffffffffffffffc4, 0x4001}, {0xfffffffffffffffe, @usage=0x80000001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x58a, @struct={0x0, 0x1}, 0x0, 0xfffffffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, {0x51, @struct={0x4c00000}, 0x0, 0x80000000004, 0x7, 0xfffffffffffffffe, 0x0, 0x0, 0x6a, @struct={0x2, 0x90000001}, 0x3, 0x4}})

704.885152ms ago: executing program 2 (id=554):
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

636.993122ms ago: executing program 0 (id=555):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x12, 0x100001, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xde3, 0x40, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

502.724651ms ago: executing program 2 (id=556):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

482.183741ms ago: executing program 0 (id=557):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000)
userfaultfd(0x80001)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

267.604171ms ago: executing program 6 (id=558):
r0 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001})
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
listen(0xffffffffffffffff, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=559):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000040)={{@my=0x1}})
syz_emit_vhci(0x0, 0x7)
syz_emit_vhci(0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xe}, @hci_rp_read_local_ext_features={{0x5}, {0x2, 0x8, 0x7f, "7cd3a5bb6764e8a9"}}}}, 0x11)
syz_read_part_table(0x5fd, &(0x7f0000001a40)="$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")
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x0, {{0x2, 0xce21, @local}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

DDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.105328][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.114462][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.129202][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.138576][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.150682][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.159972][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.175859][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.192482][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.209957][ T4259] device veth1_macvtap entered promiscuous mode
[   75.235620][ T4258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.246470][ T4258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.258125][ T4258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.272840][ T4258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.307535][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.321051][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.332558][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.342189][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.367272][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.379631][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.392367][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.402062][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.431658][ T4255] device veth0_macvtap entered promiscuous mode
[   75.475783][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.498106][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.507314][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.517719][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.531378][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.544420][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.575237][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.587825][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.599690][ T4259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.609724][ T4259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.625447][ T4259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.639293][ T4259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.658190][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.665346][ T4269] Bluetooth: hci2: command 0x040f tx timeout
[   75.671376][ T4269] Bluetooth: hci3: command 0x040f tx timeout
[   75.677798][   T48] Bluetooth: hci4: command 0x040f tx timeout
[   75.679153][ T4269] Bluetooth: hci1: command 0x040f tx timeout
[   75.684130][ T4267] Bluetooth: hci0: command 0x040f tx timeout
[   75.706025][ T4255] device veth1_macvtap entered promiscuous mode
[   75.832017][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.847260][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.861551][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.878711][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.890706][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.922930][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.935361][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.945676][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.955244][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.964693][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.000680][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.013846][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.021921][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.022680][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.041201][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.052549][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.065768][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.085278][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.099012][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.108058][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.117045][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.125756][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.135613][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.146884][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.157171][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.168171][ T4255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.181718][ T4255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.183388][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.191283][ T4255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.207093][ T4255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.239789][ T4261] device veth0_vlan entered promiscuous mode
[   76.252510][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.260714][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.272732][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.326269][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.347081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.355398][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.360442][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.380983][ T4261] device veth1_vlan entered promiscuous mode
[   76.398296][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.412535][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.422990][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.439301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.447661][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.455730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.465356][ T4270] device veth0_vlan entered promiscuous mode
[   76.531159][ T4270] device veth1_vlan entered promiscuous mode
[   76.569665][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.585628][ T4261] device veth0_macvtap entered promiscuous mode
[   76.599035][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.615661][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   76.626350][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.637327][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.648142][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.657653][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.671674][ T4261] device veth1_macvtap entered promiscuous mode
[   76.688450][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.734736][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.752021][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.785754][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.818191][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.839896][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.851326][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.869300][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.879443][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.898845][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.910939][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.930339][ T4270] device veth0_macvtap entered promiscuous mode
[   76.946489][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.961092][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.970788][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.980088][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.989759][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.010786][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.021497][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.032410][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.044503][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.054579][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.065546][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.078216][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.088735][ T4270] device veth1_macvtap entered promiscuous mode
[   77.098939][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.111965][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.120359][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.123639][ T4332] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.130295][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.150214][ T4261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.178475][ T4261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.191873][ T4261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.203909][ T4261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.214897][ T4302] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   77.248548][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.259814][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.271198][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.282132][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.292661][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.303343][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.313706][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.326067][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.349446][ T4332] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.354417][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.366955][ T4332] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   77.368481][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.389802][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.400171][ T4332] usb 3-1: config 0 descriptor??
[   77.406291][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.413949][ T4302] usb 2-1: Using ep0 maxpacket: 32
[   77.422368][ T4332] pwc: Askey VC010 type 2 USB webcam detected.
[   77.435418][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.449137][ T4302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.465257][ T4302] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   77.474438][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.490550][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.501347][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.512806][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.523363][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.533465][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.546114][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.557097][ T4302] usb 2-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31
[   77.567524][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.574898][ T4302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.582900][ T4302] usb 2-1: Product: syz
[   77.590542][ T4302] usb 2-1: Manufacturer: syz
[   77.595437][ T4302] usb 2-1: SerialNumber: syz
[   77.614196][ T4302] usb 2-1: config 0 descriptor??
[   77.630034][ T4332] pwc: send_video_command error -71
[   77.635722][ T4332] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   77.644262][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.655165][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.655679][ T4332] Philips webcam: probe of 3-1:0.0 failed with error -71
[   77.669296][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.680147][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.687108][ T4332] usb 3-1: USB disconnect, device number 2
[   77.723106][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.732035][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.743340][ T4267] Bluetooth: hci4: command 0x0419 tx timeout
[   77.749426][ T4267] Bluetooth: hci1: command 0x0419 tx timeout
[   77.756911][ T4260] Bluetooth: hci3: command 0x0419 tx timeout
[   77.756931][ T4269] Bluetooth: hci2: command 0x0419 tx timeout
[   77.762973][ T4260] Bluetooth: hci0: command 0x0419 tx timeout
[   77.798635][ T4345] autofs4:pid:4345:autofs_fill_super: called with bogus options
[   77.988699][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.004292][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.012503][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.028419][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.044706][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.052999][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.080466][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.097752][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.112166][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.139237][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.167052][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.186778][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.223852][ T4332] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   78.299082][ T4350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'.
[   78.360582][ T4350] device bond1 entered promiscuous mode
[   78.418184][ T4354] loop3: detected capacity change from 0 to 764
[   78.427342][ T4332] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.443099][ T4356] process 'syz.0.9' launched './file2' with NULL argv: empty string added
[   78.480708][ T4332] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   78.537521][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.577846][ T4332] usb 3-1: config 0 descriptor??
[   78.611598][ T4332] pwc: Askey VC010 type 2 USB webcam detected.
[   78.845367][ T4366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.998206][ T4332] pwc: recv_control_msg error -32 req 02 val 2b00
[   79.015792][ T4332] pwc: recv_control_msg error -32 req 02 val 2700
[   79.047926][ T4332] pwc: recv_control_msg error -32 req 02 val 2c00
[   79.062076][ T4369] capability: warning: `syz.3.13' uses 32-bit capabilities (legacy support in use)
[   79.065351][ T4332] pwc: recv_control_msg error -32 req 04 val 1000
[   79.126900][ T4332] pwc: recv_control_msg error -32 req 04 val 1300
[   79.144750][ T4332] pwc: recv_control_msg error -32 req 04 val 1400
[   79.154018][ T4332] pwc: recv_control_msg error -32 req 02 val 2000
[   79.195675][ T4332] pwc: recv_control_msg error -32 req 02 val 2100
[   79.210339][ T4332] pwc: recv_control_msg error -32 req 04 val 1500
[   79.236058][ T4332] pwc: recv_control_msg error -32 req 02 val 2500
[   79.450831][ T4332] pwc: recv_control_msg error -71 req 02 val 2600
[   79.462447][ T4332] pwc: recv_control_msg error -71 req 02 val 2900
[   79.483374][ T4332] pwc: recv_control_msg error -71 req 02 val 2800
[   79.513863][ T4332] pwc: recv_control_msg error -71 req 04 val 1100
[   79.535201][ T4332] pwc: recv_control_msg error -71 req 04 val 1200
[   79.569239][ T4332] pwc: Registered as video103.
[   79.584818][ T4332] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[   79.609128][ T4332] usb 3-1: USB disconnect, device number 3
[   80.085782][ T4332] usb 2-1: USB disconnect, device number 2
[   80.183317][ T4394] batman_adv: batadv0: Adding interface: ip6gretap1
[   80.189961][ T4394] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.337487][ T4394] batman_adv: batadv0: Interface activated: ip6gretap1
[   80.380444][ T4401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'.
[   80.488929][ T4407] loop3: detected capacity change from 0 to 764
[   80.525202][ T4401] device bond1 entered promiscuous mode
[   81.014819][ T4427] loop3: detected capacity change from 0 to 256
[   81.047930][ T4427] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   81.137392][ T4427] syz.3.29: attempt to access beyond end of device
[   81.137392][ T4427] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256
[   81.188129][ T4427] syz.3.29: attempt to access beyond end of device
[   81.188129][ T4427] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256
[   81.257628][ T4427] syz.3.29: attempt to access beyond end of device
[   81.257628][ T4427] loop3: rw=0, sector=280, nr_sectors = 8 limit=256
[   81.271921][ T4246] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   81.298781][   T26] audit: type=1800 audit(1738228696.842:2): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="file1" dev="loop3" ino=1048595 res=0 errno=0
[   81.463506][ T4246] usb 5-1: Using ep0 maxpacket: 32
[   81.471385][ T4246] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.543045][ T4246] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   81.594214][ T4246] usb 5-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31
[   81.653359][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.685797][ T4246] usb 5-1: Product: syz
[   81.690023][ T4246] usb 5-1: Manufacturer: syz
[   81.696614][ T4447] loop2: detected capacity change from 0 to 764
[   81.718553][ T4246] usb 5-1: SerialNumber: syz
[   81.734689][ T4450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'.
[   81.751732][ T4246] usb 5-1: config 0 descriptor??
[   81.804488][ T4450] device bond1 entered promiscuous mode
[   81.858028][ T4454] batman_adv: batadv0: Adding interface: ip6gretap1
[   81.866111][ T4454] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.892579][ T4454] batman_adv: batadv0: Interface activated: ip6gretap1
[   82.693879][ T4483] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   82.732013][ T4485] batman_adv: batadv0: Adding interface: ip6gretap1
[   82.749259][ T4483] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   82.772371][ T4485] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.889056][ T4485] batman_adv: batadv0: Interface activated: ip6gretap1
[   82.978024][ T4495] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   83.228579][ T4502] loop3: detected capacity change from 0 to 764
[   83.653378][ T4332] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   83.843410][ T4332] usb 2-1: Using ep0 maxpacket: 32
[   83.850706][ T4332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.887055][ T4332] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   83.914812][ T4332] usb 2-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31
[   83.943535][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.971391][ T4332] usb 2-1: Product: syz
[   83.996364][ T4332] usb 2-1: Manufacturer: syz
[   84.019471][ T4332] usb 2-1: SerialNumber: syz
[   84.049155][ T4332] usb 2-1: config 0 descriptor??
[   84.054554][    T7] usb 5-1: USB disconnect, device number 2
[   84.425411][ T4532] loop2: detected capacity change from 0 to 40427
[   84.444826][ T4532] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   84.452936][ T4532] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   84.510933][ T4541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.64'.
[   84.536641][ T4532] F2FS-fs (loop2): Found nat_bits in checkpoint
[   84.649727][ T4532] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   84.657388][ T4532] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   84.718135][ T4332] usb 2-1: USB disconnect, device number 3
[   84.837963][ T4556] loop3: detected capacity change from 0 to 764
[   85.584138][ T4576] loop1: detected capacity change from 0 to 256
[   85.650743][ T4576] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   85.697201][ T4570] syz.1.73: attempt to access beyond end of device
[   85.697201][ T4570] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256
[   85.769766][ T4570] syz.1.73: attempt to access beyond end of device
[   85.769766][ T4570] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256
[   85.801820][ T4574] loop0: detected capacity change from 0 to 8192
[   85.836816][ T4570] syz.1.73: attempt to access beyond end of device
[   85.836816][ T4570] loop1: rw=0, sector=280, nr_sectors = 8 limit=256
[   85.905931][   T26] audit: type=1800 audit(1738228701.452:3): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.73" name="file1" dev="loop1" ino=1048596 res=0 errno=0
[   86.708290][   T14] cfg80211: failed to load regulatory.db
[   86.724596][   T46] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[   86.877725][ T4610] loop2: detected capacity change from 0 to 256
[   86.963740][ T4610] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d)
[   87.677866][ T4303] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   87.864977][ T4303] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   87.913290][ T4303] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   87.948339][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.994558][ T4303] usb 4-1: config 0 descriptor??
[   88.012125][ T4303] pwc: Askey VC010 type 2 USB webcam detected.
[   88.151993][ T4640] loop2: detected capacity change from 0 to 40427
[   88.172885][ T4640] F2FS-fs (loop2): quotafile must be on filesystem root
[   88.205978][ T4303] pwc: send_video_command error -71
[   88.211238][ T4303] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   88.249997][ T4303] Philips webcam: probe of 4-1:0.0 failed with error -71
[   88.284283][ T4646] netlink: 'syz.2.98': attribute type 8 has an invalid length.
[   88.293482][ T4303] usb 4-1: USB disconnect, device number 2
[   88.900069][ T4656] loop2: detected capacity change from 0 to 40427
[   88.920716][ T4656] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   88.928646][ T4656] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   88.949452][ T4656] F2FS-fs (loop2): Found nat_bits in checkpoint
[   88.988059][ T4303] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   89.008122][ T4656] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   89.015315][ T4656] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   89.186206][ T4303] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.203948][ T4303] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   89.213044][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.232153][ T4303] usb 4-1: config 0 descriptor??
[   89.255406][ T4303] pwc: Askey VC010 type 2 USB webcam detected.
[   89.648900][ T4303] pwc: recv_control_msg error -32 req 02 val 2b00
[   89.666686][ T4303] pwc: recv_control_msg error -32 req 02 val 2700
[   89.680410][ T4303] pwc: recv_control_msg error -32 req 02 val 2c00
[   89.690490][ T4303] pwc: recv_control_msg error -32 req 04 val 1000
[   89.718097][ T4303] pwc: recv_control_msg error -32 req 04 val 1300
[   89.726081][ T4303] pwc: recv_control_msg error -32 req 04 val 1400
[   89.733598][ T4303] pwc: recv_control_msg error -32 req 02 val 2000
[   89.740887][ T4303] pwc: recv_control_msg error -32 req 02 val 2100
[   89.762137][ T4303] pwc: recv_control_msg error -32 req 04 val 1500
[   89.776866][ T4303] pwc: recv_control_msg error -32 req 02 val 2500
[   89.990713][ T4303] pwc: recv_control_msg error -71 req 02 val 2600
[   90.020817][ T4303] pwc: recv_control_msg error -71 req 02 val 2900
[   90.040141][ T4303] pwc: recv_control_msg error -71 req 02 val 2800
[   90.059871][ T4303] pwc: recv_control_msg error -71 req 04 val 1100
[   90.067633][ T4303] pwc: recv_control_msg error -71 req 04 val 1200
[   90.087206][ T4303] pwc: Registered as video103.
[   90.098186][ T4303] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[   90.125270][ T4303] usb 4-1: USB disconnect, device number 3
[   90.413971][ T4304] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   90.441410][ T4683] loop2: detected capacity change from 0 to 256
[   90.472338][ T4683] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   90.499662][ T4683] syz.2.112: attempt to access beyond end of device
[   90.499662][ T4683] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256
[   90.521809][ T4683] syz.2.112: attempt to access beyond end of device
[   90.521809][ T4683] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256
[   90.536214][ T4683] syz.2.112: attempt to access beyond end of device
[   90.536214][ T4683] loop2: rw=0, sector=280, nr_sectors = 8 limit=256
[   90.565224][   T26] audit: type=1800 audit(1738228706.112:4): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.112" name="file1" dev="loop2" ino=1048597 res=0 errno=0
[   90.624631][ T4304] usb 1-1: Using ep0 maxpacket: 32
[   90.632429][ T4304] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.643034][ T4304] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   90.685753][ T4304] usb 1-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31
[   90.695100][ T4304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.703587][ T4304] usb 1-1: Product: syz
[   90.707783][ T4304] usb 1-1: Manufacturer: syz
[   90.712403][ T4304] usb 1-1: SerialNumber: syz
[   90.731324][ T4304] usb 1-1: config 0 descriptor??
[   90.853244][ T4303] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   91.043218][ T4303] usb 4-1: Using ep0 maxpacket: 32
[   91.050172][ T4303] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.068299][ T4303] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   91.081851][ T4303] usb 4-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31
[   91.091129][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.099289][ T4303] usb 4-1: Product: syz
[   91.104777][ T4303] usb 4-1: Manufacturer: syz
[   91.109444][ T4303] usb 4-1: SerialNumber: syz
[   91.126592][ T4303] usb 4-1: config 0 descriptor??
[   91.146349][ T4304] usb 1-1: USB disconnect, device number 2
[   92.080935][ T4708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.123'.
[   92.497609][ T4713] loop2: detected capacity change from 0 to 256
[   92.534776][ T4713] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   92.570030][ T4713] syz.2.125: attempt to access beyond end of device
[   92.570030][ T4713] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256
[   92.603650][ T4713] syz.2.125: attempt to access beyond end of device
[   92.603650][ T4713] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256
[   92.617548][ T4713] syz.2.125: attempt to access beyond end of device
[   92.617548][ T4713] loop2: rw=0, sector=280, nr_sectors = 8 limit=256
[   92.654390][   T26] audit: type=1800 audit(1738228708.202:5): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.125" name="file1" dev="loop2" ino=1048598 res=0 errno=0
[   93.029317][ T4723] netlink: 'syz.0.130': attribute type 10 has an invalid length.
[   93.037322][ T4723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'.
[   93.080832][ T4723] team0: Failed to send port change of device geneve0 via netlink (err -105)
[   93.090054][ T4723] team0: Failed to send options change via netlink (err -105)
[   93.097577][ T4723] team0: Port device geneve0 added
[   93.667537][ T4304] usb 4-1: USB disconnect, device number 4
[   93.852415][ T4744] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[   94.612584][ T4758] loop3: detected capacity change from 0 to 512
[   94.632963][ T4758] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   94.663009][ T4758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   94.727300][ T4758] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   94.762692][ T4758] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   94.779797][ T4764] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   94.802888][ T4758] EXT4-fs (loop3): 1 truncate cleaned up
[   94.838947][ T4758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   94.919597][ T4758] EXT4-fs (loop3): unmounting filesystem.
[   94.978953][ T4768] netlink: 32 bytes leftover after parsing attributes in process `syz.0.149'.
[   95.880918][ T4792] netlink: 32 bytes leftover after parsing attributes in process `syz.0.160'.
[   95.984531][ T4794] netlink: 'syz.0.161': attribute type 10 has an invalid length.
[   95.999051][ T4794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.161'.
[   97.532390][ T4828] loop3: detected capacity change from 0 to 256
[   97.565228][ T4828] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   97.609265][ T4828] syz.3.174: attempt to access beyond end of device
[   97.609265][ T4828] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256
[   97.681124][ T4828] syz.3.174: attempt to access beyond end of device
[   97.681124][ T4828] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256
[   97.767959][ T4828] syz.3.174: attempt to access beyond end of device
[   97.767959][ T4828] loop3: rw=0, sector=280, nr_sectors = 8 limit=256
[   97.803899][   T26] audit: type=1800 audit(1738228713.352:6): pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.174" name="file1" dev="loop3" ino=1048599 res=0 errno=0
[   97.927329][ T4838] loop3: detected capacity change from 0 to 1764
[   98.173569][ T4249] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   98.412385][ T4844] loop0: detected capacity change from 0 to 2048
[   98.541470][ T4844]  loop0: p1 < > p4
[   98.557502][ T4844] loop0: p4 size 8388608 extends beyond EOD, truncated
[   98.695905][ T3623]  loop0: p1 < > p4
[   98.723649][ T3623] loop0: p4 size 8388608 extends beyond EOD, truncated
[   99.024886][ T4255] __loop_clr_fd: partition scan of loop0 failed (rc=-16)
[   99.033811][ T4249] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   99.043684][ T4343] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   99.093328][ T4249] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.102725][ T4249] Buffer I/O error on dev loop0p1, logical block 0, async page read
[   99.112856][ T4343] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.143772][ T4343] Buffer I/O error on dev loop0p4, logical block 1, async page read
[   99.163421][ T4249] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.182607][ T4249] Buffer I/O error on dev loop0p1, logical block 0, async page read
[   99.182796][ T4249] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.182827][ T4249] Buffer I/O error on dev loop0p1, logical block 0, async page read
[   99.182981][ T4249] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.183009][ T4249] Buffer I/O error on dev loop0p1, logical block 0, async page read
[   99.190045][ T4249] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.190843][ T4249] Buffer I/O error on dev loop0p1, logical block 0, async page read
[   99.287467][ T4343] udevd[4343]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   99.297251][ T4249] udevd[4249]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   99.370271][ T4260] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   99.584701][ T4870] loop3: detected capacity change from 0 to 256
[   99.611310][ T4870] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   99.629993][ T4870] syz.3.191: attempt to access beyond end of device
[   99.629993][ T4870] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256
[   99.663034][ T4870] syz.3.191: attempt to access beyond end of device
[   99.663034][ T4870] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256
[   99.677402][ T4870] syz.3.191: attempt to access beyond end of device
[   99.677402][ T4870] loop3: rw=0, sector=280, nr_sectors = 8 limit=256
[   99.691496][   T26] audit: type=1800 audit(1738228715.232:7): pid=4870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.191" name="file1" dev="loop3" ino=1048600 res=0 errno=0
[   99.750609][ T4872] fuse: Bad value for 'fd'
[   99.785032][ T4303] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  100.026012][ T4303] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.038083][ T4303] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping
[  100.049440][ T4303] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  100.073651][ T4303] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  100.088561][ T4303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  100.097353][ T4303] usb 3-1: Product: syz
[  100.101561][ T4303] usb 3-1: Manufacturer: syz
[  100.106608][ T4303] usb 3-1: SerialNumber: syz
[  100.154300][ T4303] usb 3-1: config 0 descriptor??
[  100.176411][ T4303] radio-si470x 3-1:0.0: could not find interrupt in endpoint
[  100.199652][ T4303] radio-si470x: probe of 3-1:0.0 failed with error -5
[  100.247030][ T4303] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  100.842633][ T4267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  100.852501][ T4267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  100.863839][ T4267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  100.872211][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  100.880252][ T4267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  100.888313][ T4267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  101.106255][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.182885][ T4891] chnl_net:caif_netlink_parms(): no params data found
[  101.193663][ T4897] loop3: detected capacity change from 0 to 256
[  101.302497][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.383755][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.479738][ T4907] fuse: Bad value for 'fd'
[  101.523854][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.702245][ T4891] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.743809][ T4891] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.780188][ T4891] device bridge_slave_0 entered promiscuous mode
[  101.837525][ T4891] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.876618][ T4891] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.929432][ T4891] device bridge_slave_1 entered promiscuous mode
[  102.170078][ T4920] loop3: detected capacity change from 0 to 32768
[  102.177100][ T4920] =======================================================
[  102.177100][ T4920] WARNING: The mand mount option has been deprecated and
[  102.177100][ T4920]          and is ignored by this kernel. Remove the mand
[  102.177100][ T4920]          option from the mount to silence this warning.
[  102.177100][ T4920] =======================================================
[  102.211986][    C1] vkms_vblank_simulate: vblank timer overrun
[  102.218293][ T4920] XFS: attr2 mount option is deprecated.
[  102.335642][ T4920] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  102.352243][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'.
[  102.457456][ T4920] XFS (loop3): Quotacheck needed: Please wait.
[  102.521632][ T4260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  102.526050][ T4891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.539975][ T4260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  102.550488][ T4260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  102.565053][ T4260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  102.582321][ T4260] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  102.589532][ T4920] XFS (loop3): Quotacheck: Done.
[  102.596847][ T4920] XFS (loop3): Unmounting Filesystem
[  102.607446][ T4260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  102.662922][    T7] usb 3-1: USB disconnect, device number 4
[  102.752484][ T4891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.897806][ T4258] syz-executor (4258) used greatest stack depth: 19480 bytes left
[  102.946616][ T4891] team0: Port device team_slave_0 added
[  102.953766][ T4267] Bluetooth: hci4: command 0x0409 tx timeout
[  102.986680][ T4891] team0: Port device team_slave_1 added
[  103.106492][ T4891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.130808][ T4891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.174242][ T4891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.237792][ T4944] netlink: 'syz.0.214': attribute type 10 has an invalid length.
[  103.246322][ T4944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.214'.
[  103.257052][ T4891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.264922][ T4891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.292111][ T4891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.514487][ T4891] device hsr_slave_0 entered promiscuous mode
[  103.545781][ T4891] device hsr_slave_1 entered promiscuous mode
[  103.566408][ T4891] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.588563][ T4891] Cannot create hsr debugfs directory
[  103.617566][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'.
[  103.683466][ T4932] chnl_net:caif_netlink_parms(): no params data found
[  103.700056][ T4959] loop2: detected capacity change from 0 to 2048
[  103.861314][ T4959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  104.086942][ T4959] EXT4-fs: Ignoring removed orlov option
[  104.099919][ T4959] EXT4-fs (loop2): can't enable nombcache during remount
[  104.198793][ T4259] EXT4-fs (loop2): unmounting filesystem.
[  104.502796][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.522373][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.545958][ T4932] device bridge_slave_0 entered promiscuous mode
[  104.610426][    T9] device hsr_slave_0 left promiscuous mode
[  104.629579][    T9] device hsr_slave_1 left promiscuous mode
[  104.672028][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.692443][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.703315][ T4267] Bluetooth: hci5: command 0x0409 tx timeout
[  104.723565][ T4302] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  104.737838][ T4985] autofs4:pid:4985:autofs_fill_super: called with bogus options
[  104.747564][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.763247][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.781490][    T9] device bridge_slave_1 left promiscuous mode
[  104.790045][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.807420][    T9] device bridge_slave_0 left promiscuous mode
[  104.818619][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.861252][    T9] device veth1_macvtap left promiscuous mode
[  104.873781][    T9] device veth0_macvtap left promiscuous mode
[  104.882831][    T9] device veth1_vlan left promiscuous mode
[  104.899429][    T9] device veth0_vlan left promiscuous mode
[  104.923454][ T4302] usb 3-1: Using ep0 maxpacket: 32
[  104.930811][ T4302] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.962893][ T4302] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  104.987377][ T4302] usb 3-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31
[  105.006868][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.022618][ T4302] usb 3-1: Product: syz
[  105.031639][ T4302] usb 3-1: Manufacturer: syz
[  105.033754][ T4267] Bluetooth: hci4: command 0x041b tx timeout
[  105.044946][ T4302] usb 3-1: SerialNumber: syz
[  105.071346][ T4302] usb 3-1: config 0 descriptor??
[  105.192131][    T9] bond1 (unregistering): Released all slaves
[  105.801122][    T9] team0 (unregistering): Port device team_slave_1 removed
[  105.851165][    T9] team0 (unregistering): Port device team_slave_0 removed
[  105.892751][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.941548][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.371906][    T9] bond0 (unregistering): Released all slaves
[  106.456838][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.464783][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.474348][ T4932] device bridge_slave_1 entered promiscuous mode
[  106.631755][ T4932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.674821][ T4932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.789434][ T4267] Bluetooth: hci5: command 0x041b tx timeout
[  106.792593][ T4932] team0: Port device team_slave_0 added
[  106.896069][ T4932] team0: Port device team_slave_1 added
[  106.999489][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4900000080
[  107.036027][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.048447][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x7a00004000
[  107.053393][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.075016][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xae00000080
[  107.103626][ T4267] Bluetooth: hci4: command 0x040f tx timeout
[  107.114582][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xda00004000
[  107.132956][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x18e00000000
[  107.156915][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x1f600000080
[  107.174623][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x28e00000000
[  107.190034][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x2f600000080
[  107.193713][ T4932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.218388][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x38e00000000
[  107.250127][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x3f600000080
[  107.289466][ T4891] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  107.307220][ T5014] kvm [5012]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x48e00000000
[  107.324453][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.331650][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.441130][ T4932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.467181][ T4300] usb 3-1: USB disconnect, device number 5
[  107.519364][ T4891] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  107.557435][ T5031] autofs4:pid:5031:autofs_fill_super: called with bogus options
[  107.570261][ T4891] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  107.672109][ T4891] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  107.727430][ T4932] device hsr_slave_0 entered promiscuous mode
[  107.781369][ T4932] device hsr_slave_1 entered promiscuous mode
[  107.794346][ T4932] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.823005][ T4932] Cannot create hsr debugfs directory
[  108.102163][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.251708][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.437589][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.454946][ T5055] autofs4:pid:5055:autofs_fill_super: called with bogus options
[  108.540951][ T4891] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.583987][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.631332][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  108.675916][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  108.699306][ T4891] 8021q: adding VLAN 0 to HW filter on device team0
[  108.762261][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  108.781823][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  108.801998][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.809204][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.831549][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'.
[  108.873284][ T4267] Bluetooth: hci5: command 0x040f tx timeout
[  108.884866][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  108.929346][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  108.974112][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  109.015543][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.022704][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.096809][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  109.124536][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  109.181236][ T4932] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  109.193503][ T4267] Bluetooth: hci4: command 0x0419 tx timeout
[  109.216693][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  109.245102][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  109.271475][ T4932] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  109.310926][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  109.322422][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  109.337931][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  109.361523][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  109.370893][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  109.380174][ T4932] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  109.427157][   T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  109.452157][ T4932] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  109.492492][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  109.501632][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  109.515793][    T9] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  109.625671][   T14] usb 3-1: Using ep0 maxpacket: 16
[  109.640770][   T14] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  109.661511][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.682867][    T9] batman_adv: batadv0: Removing interface: ip6gretap1
[  109.701958][   T14] usb 3-1: config 0 descriptor??
[  109.729212][   T14] gspca_main: sonixj-2.14.0 probing 0471:0327
[  109.744529][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  109.772412][ T5090] netlink: 'syz.0.249': attribute type 10 has an invalid length.
[  109.792346][ T5090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.249'.
[  110.053972][ T5102] autofs4:pid:5102:autofs_fill_super: called with bogus options
[  110.310620][ T4932] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.351465][ T5111] loop0: detected capacity change from 0 to 1024
[  110.413398][ T4246] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  110.430392][ T4932] 8021q: adding VLAN 0 to HW filter on device team0
[  110.456027][ T5111] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  110.470363][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  110.478880][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  110.488316][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  110.498076][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.507289][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.514453][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.514541][ T5111] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.254: directory missing '..'
[  110.523156][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.543802][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.552559][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.559747][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.567768][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  110.577098][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  110.586316][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  110.595848][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  110.603400][ T4246] usb 4-1: Using ep0 maxpacket: 32
[  110.604848][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  110.612140][ T4246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.618772][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  110.637876][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  110.648062][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  110.669115][ T4246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.708696][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.710255][ T4246] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  110.727925][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  110.734488][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.738198][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  110.747366][   T14] gspca_sonixj: reg_w1 err -71
[  110.753013][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  110.773600][ T4255] EXT4-fs (loop0): unmounting filesystem.
[  110.774260][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  110.791824][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  110.799507][   T14] sonixj: probe of 3-1:0.0 failed with error -71
[  110.808318][ T4246] usb 4-1: config 0 descriptor??
[  110.818102][   T14] usb 3-1: USB disconnect, device number 6
[  110.854042][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  110.943412][ T4267] Bluetooth: hci5: command 0x0419 tx timeout
[  110.972548][ T4891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.040899][ T5121] loop0: detected capacity change from 0 to 64
[  111.326481][ T4246] ft260 0003:0403:6030.0001: item fetching failed at offset 0/2
[  111.394178][ T4246] ft260 0003:0403:6030.0001: failed to parse HID
[  111.400693][ T4246] ft260: probe of 0003:0403:6030.0001 failed with error -22
[  111.779930][    T9] device hsr_slave_0 left promiscuous mode
[  111.813547][    T9] device hsr_slave_1 left promiscuous mode
[  111.835440][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.866576][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.891823][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.935686][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.955706][    T9] device bridge_slave_1 left promiscuous mode
[  111.965867][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.986564][    T9] device bridge_slave_0 left promiscuous mode
[  111.993724][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.048411][    T9] device veth1_macvtap left promiscuous mode
[  112.055184][    T9] device veth0_macvtap left promiscuous mode
[  112.061439][    T9] device veth1_vlan left promiscuous mode
[  112.069055][    T9] device veth0_vlan left promiscuous mode
[  112.092489][ T5150] loop2: detected capacity change from 0 to 4096
[  112.174268][ T5153] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.226999][   T26] audit: type=1800 audit(1738228727.772:8): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.261" name="bus" dev="loop2" ino=18 res=0 errno=0
[  112.454661][ T5156] autofs4:pid:5156:autofs_fill_super: called with bogus options
[  112.809050][    T9] team0 (unregistering): Port device team_slave_1 removed
[  112.852094][    T9] team0 (unregistering): Port device team_slave_0 removed
[  112.898546][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.946762][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.179905][ T4332] usb 4-1: USB disconnect, device number 5
[  113.836866][    T9] bond0 (unregistering): Released all slaves
[  113.973324][   T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  114.014689][ T5148] netlink: 'syz.0.260': attribute type 10 has an invalid length.
[  114.022496][ T5148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.260'.
[  114.059283][ T3582] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  114.063482][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  114.094718][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  114.108399][ T4932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.177932][   T14] usb 4-1: Using ep0 maxpacket: 16
[  114.185984][   T14] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  114.223901][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.264092][   T14] usb 4-1: config 0 descriptor??
[  114.273404][ T3582] usb 3-1: Using ep0 maxpacket: 16
[  114.280947][ T3582] usb 3-1: config 0 has an invalid interface number: 68 but max is 0
[  114.294806][   T14] gspca_main: sonixj-2.14.0 probing 0471:0327
[  114.311928][ T3582] usb 3-1: config 0 has no interface number 0
[  114.335676][ T3582] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.369935][ T3582] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  114.400896][ T3582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.433462][ T3582] usb 3-1: Product: syz
[  114.447943][ T3582] usb 3-1: Manufacturer: syz
[  114.452607][ T3582] usb 3-1: SerialNumber: syz
[  114.494057][ T3582] usb 3-1: config 0 descriptor??
[  114.514526][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  114.554741][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  114.602800][ T3582] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  114.651302][ T4891] device veth0_vlan entered promiscuous mode
[  114.682696][ T4891] device veth1_vlan entered promiscuous mode
[  114.716588][   T41] usb 3-1: Failed to submit usb control message: -71
[  114.744092][   T41] usb 3-1: unable to send the bmi data to the device: -71
[  114.751273][   T41] usb 3-1: unable to get target info from device
[  114.771318][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  114.779352][ T4304] usb 3-1: USB disconnect, device number 7
[  114.786911][ T4267] Bluetooth: hci5: command 0x0411 tx timeout
[  114.803011][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  114.835339][   T41] usb 3-1: could not get target info (-71)
[  114.842179][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  114.866794][   T41] usb 3-1: could not probe fw (-71)
[  114.903820][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  114.928029][   T33] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  114.945461][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  115.034020][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  115.052233][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  115.071248][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  115.096914][ T4891] device veth0_macvtap entered promiscuous mode
[  115.127275][ T4891] device veth1_macvtap entered promiscuous mode
[  115.133763][   T33] usb 1-1: Using ep0 maxpacket: 8
[  115.140601][   T33] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  115.171668][   T33] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice= 1.92
[  115.217305][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.246542][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.284384][   T33] cypress_m8 1-1:2.0: DeLorme Earthmate USB converter detected
[  115.315928][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.331554][   T33] earthmate ttyUSB0: required endpoint is missing
[  115.349197][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.446900][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.481978][   T14] gspca_sonixj: reg_w1 err -71
[  115.497982][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.513308][   T14] sonixj: probe of 4-1:0.0 failed with error -71
[  115.531464][   T14] usb 4-1: USB disconnect, device number 6
[  115.548347][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.561619][ T4332] usb 1-1: USB disconnect, device number 3
[  115.575968][ T4332] cypress_m8 1-1:2.0: device disconnected
[  115.607115][ T4891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.663964][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  115.692463][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  115.729425][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  115.758960][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.773937][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.802030][ T5204] loop2: detected capacity change from 0 to 2048
[  115.803239][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.844711][ T5204] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 101: 0x5e != 0x61
[  115.859111][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.880675][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.893459][ T5204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.911548][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.930136][ T4891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.990257][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  116.005354][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.030852][ T4891] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.070735][ T4891] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.110907][ T4891] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.129079][ T4891] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.189081][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  116.198409][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.234715][ T5207] autofs4:pid:5207:autofs_fill_super: called with bogus options
[  116.289065][ T4932] device veth0_vlan entered promiscuous mode
[  116.322717][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  116.343956][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  116.399848][ T4932] device veth1_vlan entered promiscuous mode
[  116.431188][ T5209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.273'.
[  116.450086][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  116.466652][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  116.495009][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  116.578836][ T5215] netlink: 'syz.3.274': attribute type 4 has an invalid length.
[  116.740964][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  116.759391][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  116.803057][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  116.882843][ T4932] device veth0_macvtap entered promiscuous mode
[  116.910223][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.911441][ T5221] netlink: 'syz.0.276': attribute type 10 has an invalid length.
[  116.947202][ T5221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.276'.
[  116.962031][ T5224] loop3: detected capacity change from 0 to 256
[  116.973815][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.987321][ T4932] device veth1_macvtap entered promiscuous mode
[  117.024823][ T5224] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0x1119abd0
[  117.040758][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  117.064071][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.072524][ T5224] exFAT-fs (loop3): Invalid exboot-signature(sector = 5): 0x1119abd0
[  117.080400][ T5226] loop2: detected capacity change from 0 to 256
[  117.113710][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  117.114214][ T5226] exfat: Deprecated parameter 'utf8'
[  117.130730][ T5224] exFAT-fs (loop3): Invalid exboot-signature(sector = 6): 0x00000000
[  117.153968][ T5224] exFAT-fs (loop3): Invalid exboot-signature(sector = 7): 0x00000000
[  117.163862][ T5224] exFAT-fs (loop3): Invalid exboot-signature(sector = 8): 0x00000000
[  117.187581][ T5226] exfat: Deprecated parameter 'utf8'
[  117.195740][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.203481][ T5224] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  117.227985][ T5226] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  117.229087][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.260272][ T5224] exFAT-fs (loop3): invalid boot region
[  117.273433][ T5224] exFAT-fs (loop3): failed to recognize exfat type
[  117.291109][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.320413][ T5226] mmap: syz.2.278 (5226) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  117.323402][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.357967][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.371163][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.381773][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.399354][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.428584][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.442685][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  117.452728][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.498040][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.519956][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.527837][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.562797][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.593021][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.633239][ T4302] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  117.640839][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.661234][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.681589][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.711289][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.733320][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.755665][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.767515][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  117.785384][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  117.812627][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.832081][ T4302] usb 1-1: Using ep0 maxpacket: 32
[  117.846181][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.865904][ T4932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.887612][ T4932] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.903318][ T4302] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  117.917991][ T4932] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.942645][ T4302] usb 1-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31
[  117.962124][ T4932] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.963671][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.029804][ T4302] usb 1-1: Product: syz
[  118.045016][ T4302] usb 1-1: Manufacturer: syz
[  118.060355][ T4302] usb 1-1: SerialNumber: syz
[  118.114005][ T4302] usb 1-1: config 0 descriptor??
[  118.257499][ T5069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.278676][ T5069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.374711][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.437304][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.455734][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.487448][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.758608][ T4302] usb 1-1: USB disconnect, device number 4
[  118.795394][ T5255] loop5: detected capacity change from 0 to 2048
[  118.919038][ T5260] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.981727][ T5260] NILFS (loop5): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  119.033978][ T5260] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=2)
[  119.087748][ T5260] Remounting filesystem read-only
[  119.102704][ T4318] NILFS (loop5): discard dirty page: offset=0, ino=6
[  119.130004][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.145902][ T5264] netlink: 28 bytes leftover after parsing attributes in process `syz.6.285'.
[  119.175516][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.203105][ T4318] NILFS (loop5): discard dirty block: blocknr=37, size=1024
[  119.233312][ T4318] NILFS (loop5): discard dirty block: blocknr=38, size=1024
[  119.240693][ T4318] NILFS (loop5): discard dirty page: offset=4096, ino=6
[  119.283261][ T4318] NILFS (loop5): discard dirty block: blocknr=39, size=1024
[  119.336773][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.397565][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.445374][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.492292][ T4318] NILFS (loop5): discard dirty page: offset=0, ino=5
[  119.506890][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'.
[  119.543053][ T4318] NILFS (loop5): discard dirty block: blocknr=41, size=1024
[  119.567732][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.612396][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.681675][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.740725][ T5261] NILFS (loop5): mounting fs with errors
[  119.850880][ T5260] NILFS (loop5): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  119.871515][ T5260] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=2)
[  119.893412][ T5260] Remounting filesystem read-only
[  119.898591][ T4318] NILFS (loop5): discard dirty page: offset=0, ino=6
[  119.933890][ T4318] NILFS (loop5): discard dirty block: blocknr=35, size=1024
[  119.963317][ T4318] NILFS (loop5): discard dirty block: blocknr=36, size=1024
[  119.970682][ T4318] NILFS (loop5): discard dirty block: blocknr=37, size=1024
[  119.997471][ T4318] NILFS (loop5): discard dirty block: blocknr=38, size=1024
[  120.011364][ T4318] NILFS (loop5): discard dirty page: offset=0, ino=5
[  120.023070][ T5292] loop2: detected capacity change from 0 to 256
[  120.029719][ T4318] NILFS (loop5): discard dirty block: blocknr=41, size=1024
[  120.051814][   T33] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  120.063212][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.089661][ T5292] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  120.102848][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.155759][ T5292] syz.2.296: attempt to access beyond end of device
[  120.155759][ T5292] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256
[  120.169996][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.199503][ T4318] NILFS (loop5): discard dirty page: offset=229376, ino=3
[  120.229523][ T5292] syz.2.296: attempt to access beyond end of device
[  120.229523][ T5292] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256
[  120.247309][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.253466][   T33] usb 1-1: Using ep0 maxpacket: 16
[  120.266662][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.269403][   T33] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  120.280922][ T5292] syz.2.296: attempt to access beyond end of device
[  120.280922][ T5292] loop2: rw=0, sector=280, nr_sectors = 8 limit=256
[  120.305977][ T4318] NILFS (loop5): discard dirty block: blocknr=50, size=1024
[  120.307082][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.322630][ T4318] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.342023][   T26] audit: type=1800 audit(1738228735.882:9): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.296" name="file1" dev="loop2" ino=1048608 res=0 errno=0
[  120.351238][   T33] usb 1-1: config 0 descriptor??
[  120.383909][ T4891] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  120.394008][ T4891] NILFS (loop5): discard dirty page: offset=0, ino=2
[  120.401198][   T33] gspca_main: sonixj-2.14.0 probing 0471:0327
[  120.415438][ T4891] NILFS (loop5): discard dirty block: blocknr=18, size=1024
[  120.435082][ T4891] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.459667][ T4891] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.517195][ T4891] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.643588][ T5336] loop5: detected capacity change from 0 to 16
[  121.708171][ T5336] erofs: (device loop5): mounted with root inode @ nid 36.
[  121.755350][ T5344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.312'.
[  121.787194][ T5336] syz.5.309: attempt to access beyond end of device
[  121.787194][ T5336] loop5: rw=0, sector=14546590680, nr_sectors = 16 limit=16
[  121.833787][   T33] gspca_sonixj: i2c_w8 err -71
[  121.873351][   T33] sonixj: probe of 1-1:0.0 failed with error -71
[  121.880993][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'.
[  121.902472][   T33] usb 1-1: USB disconnect, device number 5
[  121.981673][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36
[  122.044738][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36
[  122.096147][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36
[  122.155081][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 34 @ nid 36
[  122.179030][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 32 @ nid 36
[  122.213743][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 30 @ nid 36
[  122.243571][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 27 @ nid 36
[  122.262942][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 26 @ nid 36
[  122.323726][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36
[  122.358819][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36
[  122.416234][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 23 @ nid 36
[  122.451605][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36
[  122.513695][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36
[  122.522800][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36
[  122.595784][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36
[  122.654037][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36
[  122.682018][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 10 @ nid 36
[  122.731972][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 6 @ nid 36
[  122.783411][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 36
[  122.832935][ T5352] erofs: (device loop5): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  122.863099][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 36
[  122.902403][ T5352] syz.5.309: attempt to access beyond end of device
[  122.902403][ T5352] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16
[  122.941294][ T5352] syz.5.309: attempt to access beyond end of device
[  122.941294][ T5352] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  123.003219][   T33] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  123.017710][ T5352] syz.5.309: attempt to access beyond end of device
[  123.017710][ T5352] loop5: rw=524288, sector=6520, nr_sectors = 16 limit=16
[  123.042932][ T5352] syz.5.309: attempt to access beyond end of device
[  123.042932][ T5352] loop5: rw=524288, sector=34359736328, nr_sectors = 16 limit=16
[  123.093377][ T5352] syz.5.309: attempt to access beyond end of device
[  123.093377][ T5352] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16
[  123.160035][ T5352] syz.5.309: attempt to access beyond end of device
[  123.160035][ T5352] loop5: rw=524288, sector=536576856, nr_sectors = 16 limit=16
[  123.215930][   T33] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.216968][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 86 @ nid 36
[  123.261758][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 84 @ nid 36
[  123.261866][   T33] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  123.290597][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 80 @ nid 36
[  123.331228][   T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.361670][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 74 @ nid 36
[  123.380986][   T33] usb 3-1: config 0 descriptor??
[  123.402053][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 72 @ nid 36
[  123.423893][   T33] pwc: Askey VC010 type 2 USB webcam detected.
[  123.438212][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 70 @ nid 36
[  123.457834][ T5352] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  123.517492][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 63 @ nid 36
[  123.537466][ T5352] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  123.557260][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 62 @ nid 36
[  123.593656][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 58 @ nid 36
[  123.619990][   T33] pwc: send_video_command error -71
[  123.626184][   T33] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  123.633954][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 57 @ nid 36
[  123.660622][   T33] Philips webcam: probe of 3-1:0.0 failed with error -71
[  123.668917][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 54 @ nid 36
[  123.713404][   T33] usb 3-1: USB disconnect, device number 8
[  123.723740][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 53 @ nid 36
[  123.741955][ T5403] fuse: root generation should be zero
[  123.756797][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 52 @ nid 36
[  123.800371][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 51 @ nid 36
[  123.816187][ T5352] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  123.853282][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 50 @ nid 36
[  123.879042][ T5411] loop6: detected capacity change from 0 to 128
[  123.899205][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36
[  123.937700][ T5352] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36
[  124.036207][ T5411] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  124.059478][ T5411] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  124.180277][ T4932] EXT4-fs (loop6): unmounting filesystem.
[  124.193617][   T33] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  124.262748][ T5422] loop0: detected capacity change from 0 to 512
[  124.300060][ T5422] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  124.306384][ T5426] fuse: Bad value for 'group_id'
[  124.389335][ T5422] EXT4-fs (loop0): 1 truncate cleaned up
[  124.396398][ T5422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  124.405924][   T33] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.483283][   T33] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  124.514016][   T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.545490][   T33] usb 3-1: config 0 descriptor??
[  124.584421][ T4255] EXT4-fs (loop0): unmounting filesystem.
[  124.604836][   T33] pwc: Askey VC010 type 2 USB webcam detected.
[  124.964047][   T33] pwc: recv_control_msg error -32 req 02 val 2b00
[  124.977961][   T33] pwc: recv_control_msg error -32 req 02 val 2700
[  125.004008][   T33] pwc: recv_control_msg error -32 req 02 val 2c00
[  125.028883][   T33] pwc: recv_control_msg error -32 req 04 val 1000
[  125.057282][   T33] pwc: recv_control_msg error -32 req 04 val 1300
[  125.086941][   T33] pwc: recv_control_msg error -32 req 04 val 1400
[  125.109689][   T33] pwc: recv_control_msg error -32 req 02 val 2000
[  125.128288][   T33] pwc: recv_control_msg error -32 req 02 val 2100
[  125.167905][   T33] pwc: recv_control_msg error -32 req 04 val 1500
[  125.186542][   T33] pwc: recv_control_msg error -32 req 02 val 2500
[  125.286381][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.341'.
[  125.384943][ T5455] netlink: 'syz.0.342': attribute type 10 has an invalid length.
[  125.392770][ T5455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.342'.
[  125.403590][   T33] pwc: recv_control_msg error -71 req 02 val 2600
[  125.418411][   T33] pwc: recv_control_msg error -71 req 02 val 2900
[  125.433503][   T33] pwc: recv_control_msg error -71 req 02 val 2800
[  125.464452][   T33] pwc: recv_control_msg error -71 req 04 val 1100
[  125.515891][   T33] pwc: recv_control_msg error -71 req 04 val 1200
[  125.527141][   T33] pwc: Registered as video103.
[  125.545086][   T33] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[  125.610544][   T33] usb 3-1: USB disconnect, device number 9
[  126.543562][   T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  126.733317][   T22] usb 6-1: Using ep0 maxpacket: 32
[  126.742550][ T5505] loop3: detected capacity change from 0 to 512
[  126.760227][ T5505] EXT4-fs: Ignoring removed i_version option
[  126.762062][   T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.772943][ T5505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  126.814006][   T22] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  126.860247][ T5505] EXT4-fs (loop3): 1 truncate cleaned up
[  126.865743][   T22] usb 6-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31
[  126.875168][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.883339][   T22] usb 6-1: Product: syz
[  126.887539][   T22] usb 6-1: Manufacturer: syz
[  126.892173][   T22] usb 6-1: SerialNumber: syz
[  126.900321][ T5505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  126.908103][   T22] usb 6-1: config 0 descriptor??
[  126.967004][ T4303] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  127.153311][ T4303] usb 7-1: device descriptor read/64, error -71
[  127.217336][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  127.423266][ T4303] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  127.505966][ T5525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'.
[  127.531109][   T22] usb 6-1: USB disconnect, device number 2
[  127.553520][   T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  127.584062][ T4303] usb 7-1: device descriptor read/64, error -71
[  127.590949][ T5525] device ip6gretap0 entered promiscuous mode
[  127.612480][ T5525] device macvtap1 entered promiscuous mode
[  127.703772][ T4303] usb usb7-port1: attempt power cycle
[  127.755338][   T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.786270][   T14] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  127.816753][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.848428][   T14] usb 1-1: config 0 descriptor??
[  127.874652][   T14] pwc: Askey VC010 type 2 USB webcam detected.
[  128.072255][   T14] pwc: send_video_command error -71
[  128.087960][   T14] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  128.113337][   T14] Philips webcam: probe of 1-1:0.0 failed with error -71
[  128.123508][ T4303] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  128.153482][   T14] usb 1-1: USB disconnect, device number 6
[  128.174201][ T4303] usb 7-1: device descriptor read/8, error -71
[  128.454075][ T4303] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  128.523910][ T4303] usb 7-1: device descriptor read/8, error -71
[  128.579661][ T5552] netlink: 'syz.3.371': attribute type 10 has an invalid length.
[  128.587691][ T5552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.371'.
[  128.633189][   T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  128.653537][ T4303] usb usb7-port1: unable to enumerate USB device
[  128.665673][ T5552] team0: Port device geneve0 added
[  128.855043][   T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.893325][   T14] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  128.921872][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.962356][   T14] usb 1-1: config 0 descriptor??
[  128.990757][   T14] pwc: Askey VC010 type 2 USB webcam detected.
[  129.390282][   T14] pwc: recv_control_msg error -32 req 02 val 2b00
[  129.407882][   T14] pwc: recv_control_msg error -32 req 02 val 2700
[  129.428399][   T14] pwc: recv_control_msg error -32 req 02 val 2c00
[  129.448494][   T14] pwc: recv_control_msg error -32 req 04 val 1000
[  129.484116][   T14] pwc: recv_control_msg error -32 req 04 val 1300
[  129.536742][   T14] pwc: recv_control_msg error -32 req 04 val 1400
[  129.570422][   T14] pwc: recv_control_msg error -32 req 02 val 2000
[  129.598926][   T14] pwc: recv_control_msg error -32 req 02 val 2100
[  129.606592][ T5550] loop5: detected capacity change from 0 to 32768
[  129.636169][   T14] pwc: recv_control_msg error -32 req 04 val 1500
[  129.645460][ T5550] XFS: attr2 mount option is deprecated.
[  129.668495][   T14] pwc: recv_control_msg error -32 req 02 val 2500
[  129.737302][ T5550] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  129.878800][ T5550] XFS (loop5): Quotacheck needed: Please wait.
[  129.906899][   T14] pwc: recv_control_msg error -71 req 02 val 2600
[  129.920024][   T14] pwc: recv_control_msg error -71 req 02 val 2900
[  129.928058][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'.
[  129.938265][   T14] pwc: recv_control_msg error -71 req 02 val 2800
[  129.950590][   T14] pwc: recv_control_msg error -71 req 04 val 1100
[  129.963748][   T14] pwc: recv_control_msg error -71 req 04 val 1200
[  129.984439][   T14] pwc: Registered as video103.
[  130.004948][   T14] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8
[  130.059384][   T14] usb 1-1: USB disconnect, device number 7
[  130.096563][ T5550] XFS (loop5): Quotacheck: Done.
[  130.106246][ T5550] XFS (loop5): Unmounting Filesystem
[  131.126195][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'.
[  131.693319][ T4304] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  131.839258][ T5637] loop6: detected capacity change from 0 to 256
[  131.868583][ T4304] usb 4-1: device descriptor read/64, error -71
[  131.911381][ T5637] exFAT-fs (loop6): Invalid exboot-signature(sector = 2): 0x1119abd0
[  131.973514][ T5637] exFAT-fs (loop6): Invalid exboot-signature(sector = 5): 0x1119abd0
[  132.001736][ T5637] exFAT-fs (loop6): Invalid exboot-signature(sector = 6): 0x00000000
[  132.030817][ T5637] exFAT-fs (loop6): Invalid exboot-signature(sector = 7): 0x00000000
[  132.078615][ T5637] exFAT-fs (loop6): Invalid exboot-signature(sector = 8): 0x00000000
[  132.139128][ T5637] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  132.163286][ T4304] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  132.208670][ T5644] loop0: detected capacity change from 0 to 1024
[  132.215392][ T5637] exFAT-fs (loop6): invalid boot region
[  132.220974][ T5637] exFAT-fs (loop6): failed to recognize exfat type
[  132.275810][ T5644] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  132.323578][ T4304] usb 4-1: device descriptor read/64, error -71
[  132.453588][ T4304] usb usb4-port1: attempt power cycle
[  132.566846][ T4255] EXT4-fs (loop0): unmounting filesystem.
[  132.794130][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.800575][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.013880][ T4304] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  133.045262][ T4304] usb 4-1: device descriptor read/8, error -71
[  133.153388][ T5667] loop0: detected capacity change from 0 to 2048
[  133.207327][ T5667]  loop0: p1 < > p4
[  133.218421][ T5667] loop0: p4 size 8388608 extends beyond EOD, truncated
[  133.393236][ T4304] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  133.445244][ T4304] usb 4-1: device descriptor read/8, error -71
[  133.576204][ T4304] usb usb4-port1: unable to enumerate USB device
[  134.123439][ T4301] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  134.283241][ T5692] loop5: detected capacity change from 0 to 256
[  134.311094][ T5692] exFAT-fs (loop5): Invalid exboot-signature(sector = 2): 0x1119abd0
[  134.329798][ T4301] usb 7-1: Using ep0 maxpacket: 32
[  134.342598][ T4301] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.359425][ T5692] exFAT-fs (loop5): Invalid exboot-signature(sector = 5): 0x1119abd0
[  134.381420][ T5698] netlink: 'syz.0.408': attribute type 10 has an invalid length.
[  134.397357][ T4301] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  134.406618][ T5692] exFAT-fs (loop5): Invalid exboot-signature(sector = 6): 0x00000000
[  134.443471][ T5692] exFAT-fs (loop5): Invalid exboot-signature(sector = 7): 0x00000000
[  134.462811][ T4301] usb 7-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31
[  134.503068][ T5698] 8021q: adding VLAN 0 to HW filter on device team0
[  134.513199][ T5692] exFAT-fs (loop5): Invalid exboot-signature(sector = 8): 0x00000000
[  134.522152][ T5692] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  134.540280][ T4301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.563337][ T4301] usb 7-1: Product: syz
[  134.567585][ T4301] usb 7-1: Manufacturer: syz
[  134.572217][ T4301] usb 7-1: SerialNumber: syz
[  134.583563][ T5698] bond0: (slave team0): Enslaving as an active interface with an up link
[  134.592123][ T5700] netlink: 'syz.0.408': attribute type 4 has an invalid length.
[  134.601067][ T5692] exFAT-fs (loop5): invalid boot region
[  134.622657][ T5692] exFAT-fs (loop5): failed to recognize exfat type
[  134.644146][ T5700] netlink: 152 bytes leftover after parsing attributes in process `syz.0.408'.
[  134.669747][ T4301] usb 7-1: config 0 descriptor??
[  135.335236][ T4301] usb 7-1: USB disconnect, device number 6
[  135.435049][ T5720] loop3: detected capacity change from 0 to 16
[  135.473695][ T5720] erofs: (device loop3): mounted with root inode @ nid 36.
[  135.521630][ T5720] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36
[  135.564448][ T5720] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36
[  135.568685][ T5723] loop5: detected capacity change from 0 to 128
[  135.616717][ T5720] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36
[  135.623463][ T5723] befs: (loop5): invalid magic header
[  135.643279][ T4302] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  135.673493][ T5720] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36
[  135.726046][ T5720] bio_check_eod: 21 callbacks suppressed
[  135.726065][ T5720] syz.3.414: attempt to access beyond end of device
[  135.726065][ T5720] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[  135.804195][ T5720] syz.3.414: attempt to access beyond end of device
[  135.804195][ T5720] loop3: rw=524288, sector=720, nr_sectors = 8 limit=16
[  135.843315][ T4302] usb 1-1: Using ep0 maxpacket: 16
[  135.850415][ T4302] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  135.900433][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.934270][ T5727] loop5: detected capacity change from 0 to 1024
[  135.956412][ T4302] usb 1-1: config 0 descriptor??
[  135.970668][ T5696] loop2: detected capacity change from 0 to 32768
[  135.998788][ T5727] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.999238][ T4302] gspca_main: sonixj-2.14.0 probing 0471:0327
[  136.024078][ T5696] XFS: attr2 mount option is deprecated.
[  136.104147][ T5727] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  136.119467][ T5696] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  136.180519][ T5696] XFS (loop2): Quotacheck needed: Please wait.
[  136.236176][ T4891] EXT4-fs (loop5): unmounting filesystem.
[  136.241887][ T5696] XFS (loop2): Quotacheck: Done.
[  136.243263][ T5696] XFS (loop2): Unmounting Filesystem
[  137.173746][ T4302] gspca_sonixj: reg_w1 err -71
[  137.203289][ T4302] sonixj: probe of 1-1:0.0 failed with error -71
[  137.219826][ T4302] usb 1-1: USB disconnect, device number 8
[  137.457391][ T5767] loop5: detected capacity change from 0 to 4096
[  137.594919][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x1100004080
[  137.628334][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x1200004000
[  137.656270][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x1900000000
[  137.666781][ T5782] loop3: detected capacity change from 0 to 128
[  137.681239][ T5782] EXT4-fs: Ignoring removed nobh option
[  137.690737][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x1a00004080
[  137.732307][ T5773] kvm_set_msr_common: 10 callbacks suppressed
[  137.732325][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x9e00000000
[  137.744449][ T5782] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  137.760584][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x19e00000000
[  137.782347][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x29e00000000
[  137.803625][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x39e00000000
[  137.805832][ T5782] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  137.825807][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x49e00000000
[  137.847106][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x59e00000000
[  137.868913][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x69e00000000
[  137.890147][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x79e00000000
[  137.954843][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x89e00000000
[  138.023991][ T4891] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  138.038768][ T5773] kvm [5772]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x99e00000000
[  138.058345][ T4891] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  138.058648][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  138.486467][ T5797] loop0: detected capacity change from 0 to 512
[  138.563020][ T5797] EXT4-fs: Ignoring removed i_version option
[  138.614820][ T5797] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  138.712407][ T5797] EXT4-fs (loop0): 1 truncate cleaned up
[  138.754887][ T5797] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  138.822057][ T5797] overlayfs: failed to resolve './file2': -2
[  139.037837][ T4255] EXT4-fs (loop0): unmounting filesystem.
[  139.228176][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'.
[  139.365744][ T5829] loop0: detected capacity change from 0 to 1024
[  139.801949][ T5842] loop6: detected capacity change from 0 to 2048
[  140.114268][ T5842]  loop6: p1 < > p4
[  140.121400][ T5842] loop6: p4 size 8388608 extends beyond EOD, truncated
[  140.399997][ T5851] loop3: detected capacity change from 0 to 64
[  140.743266][ T5861] netlink: 'syz.6.448': attribute type 4 has an invalid length.
[  140.750982][ T5861] netlink: 152 bytes leftover after parsing attributes in process `syz.6.448'.
[  140.779235][ T1167] hfsplus: b-tree write err: -5, ino 4
[  140.827962][ T5856] kvm [5853]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800
[  140.875404][ T5856] kvm [5853]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800
[  140.891970][ T5856] kvm [5853]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xa600000000
[  140.915928][ T5856] kvm [5853]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xb200000000
[  140.935625][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'.
[  141.523285][ T4301] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  141.546959][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.456'.
[  141.601354][ T5889] loop0: detected capacity change from 0 to 256
[  141.633429][ T5889] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  141.699808][ T5889] syz.0.455: attempt to access beyond end of device
[  141.699808][ T5889] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256
[  141.723354][ T4301] usb 7-1: Using ep0 maxpacket: 32
[  141.731314][ T4301] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.770626][ T4301] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  141.775200][ T5889] syz.0.455: attempt to access beyond end of device
[  141.775200][ T5889] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256
[  141.782613][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'.
[  141.808668][ T5889] syz.0.455: attempt to access beyond end of device
[  141.808668][ T5889] loop0: rw=0, sector=280, nr_sectors = 8 limit=256
[  141.832771][ T4301] usb 7-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31
[  141.855674][ T4301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.870915][   T26] audit: type=1800 audit(1738228757.412:10): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.455" name="file1" dev="loop0" ino=1048609 res=0 errno=0
[  141.892202][ T4301] usb 7-1: Product: syz
[  141.902132][ T4301] usb 7-1: Manufacturer: syz
[  141.912576][ T4301] usb 7-1: SerialNumber: syz
[  141.938086][ T4301] usb 7-1: config 0 descriptor??
[  142.122034][ T5899] loop0: detected capacity change from 0 to 64
[  142.387499][ T4301] usb 7-1: USB disconnect, device number 7
[  142.646723][ T5909] loop3: detected capacity change from 0 to 512
[  142.704156][ T5909] EXT4-fs: Ignoring removed i_version option
[  142.736654][ T5909] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  142.856706][ T5909] EXT4-fs (loop3): 1 truncate cleaned up
[  142.925639][ T5909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  142.947870][ T5909] overlayfs: failed to resolve './file2': -2
[  143.078784][ T5926] loop6: detected capacity change from 0 to 256
[  143.172593][ T5926] exFAT-fs (loop6): Invalid exboot-signature(sector = 2): 0x1119abd0
[  143.214730][ T4261] EXT4-fs (loop3): unmounting filesystem.
[  143.222810][ T5926] exFAT-fs (loop6): Invalid exboot-signature(sector = 5): 0x1119abd0
[  143.293269][ T5926] exFAT-fs (loop6): Invalid exboot-signature(sector = 6): 0x00000000
[  143.337785][ T5926] exFAT-fs (loop6): Invalid exboot-signature(sector = 7): 0x00000000
[  143.390683][ T5926] exFAT-fs (loop6): Invalid exboot-signature(sector = 8): 0x00000000
[  143.427474][ T5926] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  143.481436][ T5926] exFAT-fs (loop6): invalid boot region
[  143.520055][ T5926] exFAT-fs (loop6): failed to recognize exfat type
[  143.668645][ T5938] loop2: detected capacity change from 0 to 1764
[  144.338693][ T5954] loop0: detected capacity change from 0 to 2048
[  144.483775][ T5959] netlink: 'syz.6.477': attribute type 10 has an invalid length.
[  144.584654][ T5954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  144.617328][ T5959] 8021q: adding VLAN 0 to HW filter on device team0
[  144.626296][ T5959] bond0: (slave team0): Enslaving as an active interface with an up link
[  144.635563][ T5962] netlink: 'syz.2.479': attribute type 10 has an invalid length.
[  144.643773][ T5962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.479'.
[  144.718223][ T5954] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  144.733800][ T5962] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  144.737488][ T5962] team0: Failed to send options change via netlink (err -105)
[  144.847624][ T5962] team0: Port device geneve0 added
[  144.865258][ T5954] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2049 with max blocks 1 with error 28
[  144.882199][ T5962] IPv6: ADDRCONF(NETDEV_CHANGE): geneve0: link becomes ready
[  144.944199][ T5972] loop5: detected capacity change from 0 to 256
[  144.957273][ T5954] EXT4-fs (loop0): This should not happen!! Data will be lost
[  144.957273][ T5954] 
[  144.999359][ T5972] exFAT-fs (loop5): Invalid exboot-signature(sector = 2): 0x1119abd0
[  145.018734][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'.
[  145.043090][ T5954] EXT4-fs (loop0): Total free blocks count 0
[  145.049940][ T5954] EXT4-fs (loop0): Free/Dirty block details
[  145.053870][ T5972] exFAT-fs (loop5): Invalid exboot-signature(sector = 5): 0x1119abd0
[  145.117855][ T5954] EXT4-fs (loop0): free_blocks=2415919104
[  145.136796][ T5954] EXT4-fs (loop0): dirty_blocks=32
[  145.143840][ T5972] exFAT-fs (loop5): Invalid exboot-signature(sector = 6): 0x00000000
[  145.172707][ T5954] EXT4-fs (loop0): Block reservation details
[  145.192507][ T5972] exFAT-fs (loop5): Invalid exboot-signature(sector = 7): 0x00000000
[  145.199503][ T5954] EXT4-fs (loop0): i_reserved_data_blocks=2
[  145.253223][ T5972] exFAT-fs (loop5): Invalid exboot-signature(sector = 8): 0x00000000
[  145.268847][ T5980] loop6: detected capacity change from 0 to 1764
[  145.305819][ T5972] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  145.356728][ T5972] exFAT-fs (loop5): invalid boot region
[  145.362334][ T5972] exFAT-fs (loop5): failed to recognize exfat type
[  145.403265][ T5110] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  145.491945][ T5069] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  145.759850][ T5989] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  145.827986][ T5989] kvm: pic: single mode not supported
[  145.828406][ T5989] kvm: pic: non byte read
[  145.855226][ T5998] loop0: detected capacity change from 0 to 512
[  145.857993][ T5989] kvm: pic: level sensitive irq not supported
[  145.862197][ T5998] EXT4-fs: Ignoring removed i_version option
[  145.876347][ T5989] kvm: pic: non byte read
[  145.889873][ T5989] kvm: pic: level sensitive irq not supported
[  145.889967][ T5989] kvm: pic: non byte read
[  145.912975][ T6001] netlink: 'syz.2.491': attribute type 10 has an invalid length.
[  145.971847][ T5998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  146.080781][ T5998] EXT4-fs (loop0): 1 truncate cleaned up
[  146.101839][ T6001] 8021q: adding VLAN 0 to HW filter on device team0
[  146.113402][ T5998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  146.145931][ T6001] bond0: (slave team0): Enslaving as an active interface with an up link
[  146.168950][ T5998] overlayfs: './file2' not a directory
[  146.393454][ T4255] EXT4-fs (loop0): unmounting filesystem.
[  146.773058][ T6028] loop6: detected capacity change from 0 to 256
[  146.836899][ T6028] exFAT-fs (loop6): Invalid exboot-signature(sector = 2): 0x1119abd0
[  146.846589][ T6028] exFAT-fs (loop6): Invalid exboot-signature(sector = 5): 0x1119abd0
[  146.855180][ T6028] exFAT-fs (loop6): Invalid exboot-signature(sector = 6): 0x00000000
[  146.873922][ T6028] exFAT-fs (loop6): Invalid exboot-signature(sector = 7): 0x00000000
[  146.890594][ T6028] exFAT-fs (loop6): Invalid exboot-signature(sector = 8): 0x00000000
[  147.040779][ T6031] loop0: detected capacity change from 0 to 2048
[  147.158332][ T6031]  loop0: p1 < > p4
[  147.175982][ T6031] loop0: p4 size 8388608 extends beyond EOD, truncated
[  147.590364][ T6028] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  147.613045][ T6028] exFAT-fs (loop6): invalid boot region
[  147.618778][ T6028] exFAT-fs (loop6): failed to recognize exfat type
[  147.753236][   T33] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  147.977888][ T5110] udevd[5110]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  147.992229][ T4249] udevd[4249]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  148.002892][   T33] usb 6-1: Using ep0 maxpacket: 32
[  148.033653][   T33] usb 6-1: config 1 has an invalid interface number: 236 but max is 0
[  148.096622][   T33] usb 6-1: config 1 has no interface number 0
[  148.103081][   T33] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[  148.221654][   T33] usb 6-1: config 1 interface 236 has no altsetting 0
[  148.260280][ T5110] udevd[5110]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  148.325593][   T33] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  148.374530][ T6044] loop2: detected capacity change from 0 to 32768
[  148.413222][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.418543][ T6044] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.502 (6044)
[  148.469617][   T33] usb 6-1: Product: syz
[  148.496289][   T33] usb 6-1: Manufacturer: syz
[  148.514615][   T33] usb 6-1: SerialNumber: syz
[  148.546727][ T6044] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.558470][ T6044] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  148.567258][ T6044] BTRFS info (device loop2): enabling auto defrag
[  148.569178][ T6027] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  148.573747][ T6044] BTRFS info (device loop2): doing ref verification
[  148.588166][ T6044] BTRFS info (device loop2): max_inline at 4096
[  148.594572][ T6044] BTRFS info (device loop2): enabling ssd optimizations
[  148.601547][ T6044] BTRFS info (device loop2): using spread ssd allocation scheme
[  148.609341][ T6044] BTRFS info (device loop2): using free space tree
[  148.629578][   T33] ti_usb_3410_5052 6-1:1.236: TI USB 5052 2 port adapter converter detected
[  148.845820][   T33] usb 6-1: USB disconnect, device number 3
[  148.855062][ T6076] netlink: 'syz.0.508': attribute type 10 has an invalid length.
[  148.967648][ T6032] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0x600fa3b1bb0a61280b917c5e63cfb6d5f3303add0c7f49b39e428b009781bffd found 0x70a248755b02d72ae272e0d320a1ec0013a3149dcf38416ab028e0a5cdcc127f level 0
[  149.003268][   T22] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  149.017656][ T6044] BTRFS error (device loop2): failed to load root extent
[  149.049007][ T6044] BTRFS error (device loop2): open_ctree failed
[  149.235102][   T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.264100][   T22] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  149.295495][   T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.379050][   T22] usb 7-1: config 0 descriptor??
[  149.400383][ T6096] loop3: detected capacity change from 0 to 256
[  149.416384][ T6096] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0x1119abd0
[  149.591480][ T6098] loop0: detected capacity change from 0 to 2048
[  149.663959][ T6096] exFAT-fs (loop3): Invalid exboot-signature(sector = 5): 0x1119abd0
[  149.677209][ T6096] exFAT-fs (loop3): Invalid exboot-signature(sector = 6): 0x00000000
[  150.156591][ T6098]  loop0: p1 < > p4
[  150.162851][ T6098] loop0: p4 size 8388608 extends beyond EOD, truncated
[  150.173715][   T22] pwc: Askey VC010 type 2 USB webcam detected.
[  150.193398][   T22] pwc: send_video_command error -71
[  150.204310][   T22] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  150.206200][ T6096] exFAT-fs (loop3): Invalid exboot-signature(sector = 7): 0x00000000
[  150.212190][   T22] Philips webcam: probe of 7-1:0.0 failed with error -71
[  150.250514][ T3623]  loop0: p1 < > p4
[  150.313418][ T6096] exFAT-fs (loop3): Invalid exboot-signature(sector = 8): 0x00000000
[  150.334226][ T6096] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  150.346997][ T3623] loop0: p4 size 8388608 extends beyond EOD, truncated
[  150.380801][   T22] usb 7-1: USB disconnect, device number 8
[  150.395126][ T6096] exFAT-fs (loop3): invalid boot region
[  150.401511][ T6096] exFAT-fs (loop3): failed to recognize exfat type
[  150.626419][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'.
[  150.671377][ T5110] udevd[5110]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  150.725241][ T4249] udevd[4249]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  150.753345][   T22] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  150.828943][ T4249] udevd[4249]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  150.837088][ T5110] udevd[5110]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  150.945688][   T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.963265][   T22] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  150.977379][   T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.993854][   T22] usb 7-1: config 0 descriptor??
[  151.025731][   T22] pwc: Askey VC010 type 2 USB webcam detected.
[  151.122165][ T6127] netlink: 'syz.2.520': attribute type 10 has an invalid length.
[  151.164507][ T6127] netlink: 'syz.2.520': attribute type 4 has an invalid length.
[  151.176810][ T6127] netlink: 152 bytes leftover after parsing attributes in process `syz.2.520'.
[  151.419785][   T22] pwc: recv_control_msg error -32 req 02 val 2b00
[  151.430955][   T22] pwc: recv_control_msg error -32 req 02 val 2700
[  151.460422][   T22] pwc: recv_control_msg error -32 req 02 val 2c00
[  151.483740][   T22] pwc: recv_control_msg error -32 req 04 val 1000
[  151.513562][   T22] pwc: recv_control_msg error -32 req 04 val 1300
[  151.553076][   T22] pwc: recv_control_msg error -32 req 04 val 1400
[  151.583663][   T22] pwc: recv_control_msg error -32 req 02 val 2000
[  151.607214][   T22] pwc: recv_control_msg error -32 req 02 val 2100
[  151.639676][   T22] pwc: recv_control_msg error -32 req 04 val 1500
[  151.672744][   T22] pwc: recv_control_msg error -32 req 02 val 2500
[  151.771896][ T6146] loop2: detected capacity change from 0 to 256
[  151.801496][ T6146] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  151.875837][ T6146] syz.2.525: attempt to access beyond end of device
[  151.875837][ T6146] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256
[  151.904094][   T22] pwc: recv_control_msg error -71 req 02 val 2600
[  151.915272][   T22] pwc: recv_control_msg error -71 req 02 val 2900
[  151.924675][   T22] pwc: recv_control_msg error -71 req 02 val 2800
[  151.941900][ T6146] syz.2.525: attempt to access beyond end of device
[  151.941900][ T6146] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256
[  151.955960][   T22] pwc: recv_control_msg error -71 req 04 val 1100
[  151.965697][   T22] pwc: recv_control_msg error -71 req 04 val 1200
[  151.973073][ T6146] syz.2.525: attempt to access beyond end of device
[  151.973073][ T6146] loop2: rw=0, sector=280, nr_sectors = 8 limit=256
[  151.994652][   T22] pwc: Registered as video103.
[  152.012880][   T26] audit: type=1800 audit(1738228767.552:11): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.525" name="file1" dev="loop2" ino=1048610 res=0 errno=0
[  152.032774][    C0] vkms_vblank_simulate: vblank timer overrun
[  152.044130][   T22] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9
[  152.070571][   T22] usb 7-1: USB disconnect, device number 9
[  152.264083][ T6095] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  152.443513][ T6095] usb 4-1: Using ep0 maxpacket: 8
[  152.450950][ T6095] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.505127][ T6095] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  152.533274][ T6095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.554595][ T6095] usb 4-1: config 0 descriptor??
[  152.592174][ T6095] gspca_main: vc032x-2.14.0 probing 046d:0892
[  152.766561][ T6163] Bluetooth: MGMT ver 1.22
[  152.987636][ T6095] gspca_vc032x: reg_w err -71
[  152.992597][ T6095] vc032x: probe of 4-1:0.0 failed with error -71
[  153.027645][ T6095] usb 4-1: USB disconnect, device number 11
[  153.067235][ T6178] netlink: 'syz.0.537': attribute type 10 has an invalid length.
[  153.086326][ T6178] netlink: 'syz.0.537': attribute type 4 has an invalid length.
[  153.113364][ T6178] netlink: 152 bytes leftover after parsing attributes in process `syz.0.537'.
[  153.327157][ T6187] loop6: detected capacity change from 0 to 64
[  153.408180][ T6188] loop2: detected capacity change from 0 to 256
[  153.450842][ T6188] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  153.512045][ T6184] syz.2.539: attempt to access beyond end of device
[  153.512045][ T6184] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256
[  153.564880][ T6184] syz.2.539: attempt to access beyond end of device
[  153.564880][ T6184] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256
[  153.611266][ T6184] syz.2.539: attempt to access beyond end of device
[  153.611266][ T6184] loop2: rw=0, sector=280, nr_sectors = 8 limit=256
[  153.661975][   T26] audit: type=1800 audit(1738228769.202:12): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.539" name="file1" dev="loop2" ino=1048611 res=0 errno=0
[  153.681920][    C0] vkms_vblank_simulate: vblank timer overrun
[  153.901308][ T6199] loop6: detected capacity change from 0 to 256
[  153.918134][ T6199] exfat: Deprecated parameter 'utf8'
[  153.942293][ T6199] exfat: Deprecated parameter 'utf8'
[  153.971165][ T6199] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  154.859113][ T6225] loop3: detected capacity change from 0 to 32768
[  154.868537][ T6225] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.553 (6225)
[  154.885107][ T6225] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  154.895385][ T6225] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  154.904791][ T6225] BTRFS info (device loop3): force zlib compression, level 3
[  154.912206][ T6225] BTRFS info (device loop3): force clearing of disk cache
[  154.919501][ T6225] BTRFS info (device loop3): setting nodatasum
[  154.925776][ T6225] BTRFS info (device loop3): enabling disk space caching
[  154.932847][ T6225] BTRFS info (device loop3): disk space caching is enabled
[  154.971631][ T6225] BTRFS info (device loop3): enabling ssd optimizations
[  155.016564][ T6225] BTRFS info (device loop3): rebuilding free space tree
[  155.026784][ T6235] netlink: 'syz.0.557': attribute type 10 has an invalid length.
[  155.074417][ T6225] BTRFS info (device loop3): disabling free space tree
[  155.082048][ T6225] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  155.092262][ T6225] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  155.107122][   T22] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  155.173259][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.182444][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.247068][ T6225] BTRFS info (device loop3): balance: start -susage=79691776,drange=8796093022212..7,limit=10376293545756590082,limit=2..2415919105
[  155.263307][ T6225] BTRFS info (device loop3): left=0, need=98304, flags=2
[  155.271096][ T6225] BTRFS info (device loop3): space_info SYSTEM has 0 free, is not full
[  155.281024][ T6225] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  155.294735][ T6225] BTRFS info (device loop3): global_block_rsv: size 1048576 reserved 1048576
[  155.304174][ T6225] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  155.311858][ T6225] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  155.319624][ T6225] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0
[  155.327533][ T6225] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0
[  155.340035][ T6225] BTRFS error (device loop3): allocation failed flags 12, wanted 4096 tree-log 0, relocation: 0
[  155.351180][ T6225] BTRFS info (device loop3): space_info DATA+METADATA has 2240512 free, is full
[  155.360665][ T6225] BTRFS info (device loop3): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0
[  155.374704][ T6225] BTRFS info (device loop3): global_block_rsv: size 983040 reserved 983040
[  155.383859][ T6225] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  155.391545][ T6225] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  155.399305][ T6225] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0
[  155.407210][ T6225] BTRFS info (device loop3): delayed_refs_rsv: size 196608 reserved 0
[  155.416483][ T6225] BTRFS info (device loop3): block group 5242880 has 1638400 bytes, 49152 used 0 pinned 0 reserved 0 zone_unusable 
[  155.429803][ T6225] BTRFS critical (device loop3): entry offset 5242880, bytes 12288, bitmap no
[  155.439658][ T6225] BTRFS critical (device loop3): entry offset 5259264, bytes 8192, bitmap no
[  155.442996][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.448686][ T6225] BTRFS critical (device loop3): entry offset 5271552, bytes 16384, bitmap no
[  155.455895][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.464707][ T6225] BTRFS critical (device loop3): entry offset 5316608, bytes 32768, bitmap no
[  155.464743][ T6225] BTRFS critical (device loop3): entry offset 5353472, bytes 12288, bitmap no
[  155.474087][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.481202][ T6225] BTRFS critical (device loop3): entry offset 5373952, bytes 1507328, bitmap no
[  155.490152][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.497176][ T6225] BTRFS info (device loop3): block group has cluster?: no
[  155.521427][ T6225] BTRFS info (device loop3): 6 blocks of free space at or bigger than bytes is
[  155.530494][ T6225] BTRFS info (device loop3): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 zone_unusable 
[  155.542415][ T6225] BTRFS critical (device loop3): entry offset 6881280, bytes 1638400, bitmap no
[  155.552630][ T6225] BTRFS info (device loop3): block group has cluster?: no
[  155.559909][ T6225] BTRFS info (device loop3): 1 blocks of free space at or bigger than bytes is
[  155.569173][ T6225] ------------[ cut here ]------------
[  155.576094][ T6225] WARNING: CPU: 1 PID: 6225 at fs/btrfs/block-group.c:2535 btrfs_create_pending_block_groups+0x1039/0x12b0
[  155.587809][ T6225] Modules linked in:
[  155.591772][ T6225] CPU: 1 PID: 6225 Comm: syz.3.553 Not tainted 6.1.127-syzkaller #0
[  155.599874][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  155.610040][ T6225] RIP: 0010:btrfs_create_pending_block_groups+0x1039/0x12b0
[  155.617507][ T6225] Code: ba ee 09 00 00 44 89 f9 e8 3b a3 f7 06 4c 8b 6c 24 10 e9 49 f5 ff ff e8 b5 5b d1 fd 48 c7 c7 c0 28 51 8b 89 de e8 c7 74 99 fd <0f> 0b e9 56 ff ff ff e8 9b 5b d1 fd 48 c7 c7 c0 28 51 8b 44 89 e6
[  155.637265][ T6225] RSP: 0018:ffffc9000d09f6c0 EFLAGS: 00010246
[  155.643411][ T6225] RAX: d27d9a6b3f9e2900 RBX: 00000000ffffffe4 RCX: 0000000000080000
[  155.651434][ T6225] RDX: ffffc9000e78a000 RSI: 000000000007ffff RDI: 0000000000080000
[  155.659513][ T6225] RBP: ffffc9000d09f950 R08: ffffffff8152b84e R09: ffffed10171e4f1c
[  155.667572][ T6225] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888073b0d058
[  155.676092][ T6225] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88805d4cc001
[  155.684169][ T6225] FS:  00007fe9bde146c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  155.693192][ T6225] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  155.699807][ T6225] CR2: 00007f07dbad56c0 CR3: 0000000062543000 CR4: 00000000003506e0
[  155.707850][ T6225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  155.715916][ T6225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  155.723949][ T6225] Call Trace:
[  155.727252][ T6225]  <TASK>
[  155.730205][ T6225]  ? __warn+0x15a/0x520
[  155.734465][ T6225]  ? btrfs_create_pending_block_groups+0x1039/0x12b0
[  155.741194][ T6225]  ? report_bug+0x2af/0x500
[  155.745801][ T6225]  ? btrfs_create_pending_block_groups+0x1039/0x12b0
[  155.752530][ T6225]  ? handle_bug+0x3d/0x70
[  155.756946][ T6225]  ? exc_invalid_op+0x16/0x40
[  155.761657][ T6225]  ? asm_exc_invalid_op+0x16/0x20
[  155.766763][ T6225]  ? __warn_printk+0x28e/0x350
[  155.771567][ T6225]  ? btrfs_create_pending_block_groups+0x1039/0x12b0
[  155.778734][ T6225]  ? fill_dummy_bgs+0x2a0/0x2a0
[  155.783667][ T6225]  ? __lock_acquire+0x1f80/0x1f80
[  155.788760][ T6225]  ? btrfs_block_rsv_add+0xad/0xc0
[  155.793987][ T6225]  ? mutex_unlock+0x10/0x10
[  155.798536][ T6225]  __btrfs_end_transaction+0x2be/0x7b0
[  155.804101][ T6225]  btrfs_inc_block_group_ro+0x644/0x6f0
[  155.809709][ T6225]  btrfs_relocate_block_group+0x439/0xd70
[  155.815542][ T6225]  btrfs_relocate_chunk+0x128/0x3b0
[  155.820803][ T6225]  __btrfs_balance+0x1c16/0x27d0
[  155.825923][ T6225]  ? describe_balance_start_or_resume+0x490/0x490
[  155.832408][ T6225]  ? __wait_for_common+0x690/0x6c0
[  155.837644][ T6225]  ? do_raw_spin_unlock+0x137/0x8a0
[  155.842907][ T6225]  ? validate_convert_profile+0x7d/0x2c0
[  155.848653][ T6225]  btrfs_balance+0xbd4/0x10c0
[  155.853467][ T6225]  btrfs_ioctl_balance+0x493/0x7c0
[  155.858634][ T6225]  ? btrfs_ioctl+0x6c3/0xc10
[  155.863322][ T6225]  ? btrfs_ioctl_get_supported_features+0x40/0x40
[  155.869790][ T6225]  __se_sys_ioctl+0xf1/0x160
[  155.874493][ T6225]  do_syscall_64+0x3b/0xb0
[  155.878951][ T6225]  ? clear_bhb_loop+0x45/0xa0
[  155.883992][ T6225]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.889944][ T6225] RIP: 0033:0x7fe9bcf8cda9
[  155.894541][ T6225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.914230][ T6225] RSP: 002b:00007fe9bde14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.922689][ T6225] RAX: ffffffffffffffda RBX: 00007fe9bd1a5fa0 RCX: 00007fe9bcf8cda9
[  155.930736][ T6225] RDX: 0000000020000c40 RSI: 00000000c4009420 RDI: 0000000000000003
[  155.938778][ T6225] RBP: 00007fe9bd00e2a0 R08: 0000000000000000 R09: 0000000000000000
[  155.946812][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.954843][ T6225] R13: 0000000000000000 R14: 00007fe9bd1a5fa0 R15: 00007ffd6c55d7b8
[  155.962861][ T6225]  </TASK>
[  155.965936][ T6225] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  155.973238][ T6225] CPU: 1 PID: 6225 Comm: syz.3.553 Not tainted 6.1.127-syzkaller #0
[  155.981237][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  155.991323][ T6225] Call Trace:
[  155.994621][ T6225]  <TASK>
[  155.997577][ T6225]  dump_stack_lvl+0x1e3/0x2cb
[  156.002301][ T6225]  ? nf_tcp_handle_invalid+0x642/0x642
[  156.007794][ T6225]  ? panic+0x764/0x764
[  156.011893][ T6225]  ? vscnprintf+0x59/0x80
[  156.016249][ T6225]  panic+0x318/0x764
[  156.020171][ T6225]  ? __warn+0x169/0x520
[  156.024351][ T6225]  ? memcpy_page_flushcache+0xfc/0xfc
[  156.029769][ T6225]  __warn+0x348/0x520
[  156.033775][ T6225]  ? btrfs_create_pending_block_groups+0x1039/0x12b0
[  156.040491][ T6225]  report_bug+0x2af/0x500
[  156.044846][ T6225]  ? btrfs_create_pending_block_groups+0x1039/0x12b0
[  156.051582][ T6225]  handle_bug+0x3d/0x70
[  156.055776][ T6225]  exc_invalid_op+0x16/0x40
[  156.060309][ T6225]  asm_exc_invalid_op+0x16/0x20
[  156.065196][ T6225] RIP: 0010:btrfs_create_pending_block_groups+0x1039/0x12b0
[  156.072523][ T6225] Code: ba ee 09 00 00 44 89 f9 e8 3b a3 f7 06 4c 8b 6c 24 10 e9 49 f5 ff ff e8 b5 5b d1 fd 48 c7 c7 c0 28 51 8b 89 de e8 c7 74 99 fd <0f> 0b e9 56 ff ff ff e8 9b 5b d1 fd 48 c7 c7 c0 28 51 8b 44 89 e6
[  156.092158][ T6225] RSP: 0018:ffffc9000d09f6c0 EFLAGS: 00010246
[  156.098252][ T6225] RAX: d27d9a6b3f9e2900 RBX: 00000000ffffffe4 RCX: 0000000000080000
[  156.106248][ T6225] RDX: ffffc9000e78a000 RSI: 000000000007ffff RDI: 0000000000080000
[  156.114241][ T6225] RBP: ffffc9000d09f950 R08: ffffffff8152b84e R09: ffffed10171e4f1c
[  156.122235][ T6225] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888073b0d058
[  156.130226][ T6225] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88805d4cc001
[  156.138226][ T6225]  ? __warn_printk+0x28e/0x350
[  156.143058][ T6225]  ? fill_dummy_bgs+0x2a0/0x2a0
[  156.147948][ T6225]  ? __lock_acquire+0x1f80/0x1f80
[  156.153013][ T6225]  ? btrfs_block_rsv_add+0xad/0xc0
[  156.158174][ T6225]  ? mutex_unlock+0x10/0x10
[  156.162708][ T6225]  __btrfs_end_transaction+0x2be/0x7b0
[  156.168203][ T6225]  btrfs_inc_block_group_ro+0x644/0x6f0
[  156.173791][ T6225]  btrfs_relocate_block_group+0x439/0xd70
[  156.179570][ T6225]  btrfs_relocate_chunk+0x128/0x3b0
[  156.184803][ T6225]  __btrfs_balance+0x1c16/0x27d0
[  156.189811][ T6225]  ? describe_balance_start_or_resume+0x490/0x490
[  156.196256][ T6225]  ? __wait_for_common+0x690/0x6c0
[  156.201402][ T6225]  ? do_raw_spin_unlock+0x137/0x8a0
[  156.206631][ T6225]  ? validate_convert_profile+0x7d/0x2c0
[  156.212295][ T6225]  btrfs_balance+0xbd4/0x10c0
[  156.217014][ T6225]  btrfs_ioctl_balance+0x493/0x7c0
[  156.222157][ T6225]  ? btrfs_ioctl+0x6c3/0xc10
[  156.226777][ T6225]  ? btrfs_ioctl_get_supported_features+0x40/0x40
[  156.233225][ T6225]  __se_sys_ioctl+0xf1/0x160
[  156.237844][ T6225]  do_syscall_64+0x3b/0xb0
[  156.242280][ T6225]  ? clear_bhb_loop+0x45/0xa0
[  156.246981][ T6225]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.252917][ T6225] RIP: 0033:0x7fe9bcf8cda9
[  156.257363][ T6225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.276993][ T6225] RSP: 002b:00007fe9bde14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  156.285433][ T6225] RAX: ffffffffffffffda RBX: 00007fe9bd1a5fa0 RCX: 00007fe9bcf8cda9
[  156.293430][ T6225] RDX: 0000000020000c40 RSI: 00000000c4009420 RDI: 0000000000000003
[  156.301421][ T6225] RBP: 00007fe9bd00e2a0 R08: 0000000000000000 R09: 0000000000000000
[  156.309455][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.317452][ T6225] R13: 0000000000000000 R14: 00007fe9bd1a5fa0 R15: 00007ffd6c55d7b8
[  156.325468][ T6225]  </TASK>
[  156.328842][ T6225] Kernel Offset: disabled
[  156.333247][ T6225] Rebooting in 86400 seconds..