last executing test programs:

7.186873121s ago: executing program 2:
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
semget(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getpeername(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000008540)=0x80)
close(r3)
rt_sigreturn()
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
shutdown(r1, 0x0)
fstat(r0, 0x0)
stat(0x0, 0x0)
setregid(0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0)

7.071833169s ago: executing program 2:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="73263ac2e79a0e", 0x7}], 0x1}], 0x1, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

6.293603969s ago: executing program 4:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x0, 0x0, 0x3f, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100, 0xffffff14}, {@multicast1}, {@remote}, {@dev}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@dev}, {@remote}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private, @rand_addr, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @local, @private=0xa010102]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.260189534s ago: executing program 0:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000002c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)

6.039715618s ago: executing program 3:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f0000000440)=ANY=[], 0x1, 0x63a, &(0x7f0000001280)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

5.813277703s ago: executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x88)
syz_open_procfs$userns(0x0, 0x0)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

5.461210207s ago: executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0)
ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000a00)={'lo\x00', 0x101})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000dba100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4}, 0xc)

5.18175854s ago: executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000)
r3 = open(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3)

4.908778022s ago: executing program 4:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
fstat(r0, &(0x7f00000011c0))

4.786864781s ago: executing program 4:
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0)
r0 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x6, 0x0, &(0x7f0000000180))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000020000000000000000095a2ba3e3b68d06c8eea824a6c57eec6d0de0000181b000000000e93fb726d03e7f650004b2a652cbfc9a19ec8b9522a4ec838f4e323c30b39033b3b7872bed7e1601b82"], &(0x7f0000000540)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ftruncate(r0, 0x2007ffb)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0)
r4 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f00000001c0)={0x1100, 0x0, 0x0, 0x2a44})
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000080))
mkdir(&(0x7f0000000580)='./file0/file0\x00', 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000005c0)='.\x00', 0x1a4243c, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES8, @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000))
sendfile(r3, r4, 0x0, 0x1000000201005)

4.401602271s ago: executing program 3:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x0, 0x0, 0x3f, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100, 0xffffff14}, {@multicast1}, {@remote}, {@dev}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@dev}, {@remote}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private, @rand_addr, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @local, @private=0xa010102]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.198532742s ago: executing program 2:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="73263ac2e79a0e", 0x7}], 0x1}], 0x1, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

3.315838559s ago: executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)

3.254630458s ago: executing program 1:
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000500))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000ec0)=0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x109001, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}}, 0x24}}, 0x0)
sendmmsg$unix(r5, &(0x7f0000000e80)=[{{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000031c0)="1751111f6ac98d20d3672f79d55fe43ec81131690f79e88be49d4efa319edb982e4a084ff90361209b2bf29a115507dc9ee688a702ca9178b258b81a53908cfd2859664719ab552c4d54014b86e9f365388c080093af4ba217c8c603a8860c78fd820c29c7ad67e0c313c6e037ffaf7dc3e4", 0x72}, {&(0x7f00000032c0)="60d1a869345fc8195815a482f42cb940bed324dfc27edc69befe0e111e9e8f2364be1fdba6233f47d15c67badf369168339718cdcf81d44f1b9fc276e8d797ad90b6cc29322c6979d0e56ea8590f679566bf537ec30410a2a31958273b602d9c316e7e87ebd9f494b51561efd6669a8c64354bb155d0b3a789c651950681c64a372a64124b0ec2b20bdd50f54c94e7369a040414eb41eab7213e0acc1976b25dcdba72d4a73b9d3018c5a23ae9cec8aea261e4f02b33f40dfb3adce68a127f4c52ce369b766ada5c8f8e22b13d5e2ea60cee6e6773d88fd62be03686dc", 0xdd}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="30deff00000000009509000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYRES32=r6], 0x30}}], 0x1, 0x800)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x5, &(0x7f0000000380)=0x1, 0x4)
sendto$inet(r7, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
recvmsg(r7, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120)
lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80))

3.069180426s ago: executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x88)
syz_open_procfs$userns(0x0, 0x0)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

3.004543966s ago: executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000001900)=ANY=[], 0xfd, 0x22e, &(0x7f0000000c00)="$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")
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100001, &(0x7f0000000940)={[{@nobh}, {@bsdgroups}, {@quota}, {@norecovery}]}, 0xdc, 0x4ad, &(0x7f0000001740)="$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")
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280)={[], [{@euid_eq}]}, 0x1, 0x76a, &(0x7f0000000fc0)="$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")
chdir(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800080, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)

2.366716705s ago: executing program 0:
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0))
ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000280)=0x3)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
capset(0x0, &(0x7f00000002c0)={0x0, 0x270cfbf1, 0x7fff, 0x8, 0x9, 0x8})
socket(0x10, 0x3, 0x0)
keyctl$update(0x2, r2, &(0x7f0000000080)="fdaa1e92066d36e2592250532b7aca62c851f82d6a0c8fd420989d67392a706df38c732d48bb38c7", 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00'}, 0x90)
fstat(r1, &(0x7f00000001c0))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)={{0x107, 0x7, 0x0, 0x299, 0x200, 0x7, 0x242}, "4b49d46db63a69aa781f329341fdb610cb9089bb62811dcbc735ac55445f14c1ee5242867e66e32ae86cb98a4a7f9b208478b3350dba9e", ['\x00', '\x00', '\x00']}, 0x357)
syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @dev, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@empty, 0x19}, {@remote}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, 0x0)
nanosleep(&(0x7f0000000080), 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

2.150960938s ago: executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x12)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x30}]}, 0x10)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x5)

1.838974446s ago: executing program 1:
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)

1.68599326s ago: executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000"], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0)
ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000a00)={'lo\x00', 0x101})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000dba100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4}, 0xc)

1.431777419s ago: executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat2(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x18)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0xfe66}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, [{}, {}]}}]}}]}, 0x64}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.404708383s ago: executing program 2:
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlink(0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r1 = open$dir(&(0x7f0000001240)='./file0\x00', 0x0, 0x0)
write(r0, &(0x7f0000002200)="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", 0x401)
sendfile(r0, r1, 0x0, 0x11f06)

1.330837674s ago: executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
r0 = socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'veth0_vlan\x00', 0x4a})

1.10560645s ago: executing program 0:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x0, 0x0, 0x3f, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100, 0xffffff14}, {@multicast1}, {@remote}, {@dev}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@dev}, {@remote}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private, @rand_addr, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @local, @private=0xa010102]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

990.890947ms ago: executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x40000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca31000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61143400000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

424.558085ms ago: executing program 2:
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0)
r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x6, 0x0, &(0x7f0000000180))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000020000000000000000095a2ba3e3b68d06c8eea824a6c57eec6d0de0000181b000000000e93fb726d03e7f650004b2a652cbfc9a19ec8b9522a4ec838f4e323c30b39033b3b7872bed7e1601b82"], &(0x7f0000000540)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
sendfile(r0, r1, 0x0, 0x1000000201005)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0)
r5 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f00000001c0)={0x1100, 0x0, 0x0, 0x2a44})
ioctl$FIBMAP(r6, 0x1, &(0x7f0000000080))
mkdir(&(0x7f0000000580)='./file0/file0\x00', 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000005c0)='.\x00', 0x1a4243c, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES8, @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000))
sendfile(r4, r5, 0x0, 0x1000000201005)

422.310885ms ago: executing program 3:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000002c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8)

315.742801ms ago: executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f88"], 0xfdef)

38.845034ms ago: executing program 1:
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x1c, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)

0s ago: executing program 0:
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x43, &(0x7f00000007c0)={[{@test_dummy_encryption}, {@noauto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@nomblk_io_submit}, {@lazytime}, {@nodelalloc}, {@oldalloc}, {@resgid}]}, 0xfc, 0x558, &(0x7f0000000240)="$eJzs3d9rW1UcAPDvTdP96nQdyFAfpLAHJ3Pp2vpjgg/zUXQ40PcZ2rsymi6jScdaB24vQ/BFhiDiQPwDfPdxD777Vwx0MGQUfRChcrObLmuTNuuyJTOfD9z2nHtPeu7Jvd/Tc3ISEsDQmsh+FCJeiYhvkohDLceKkR+ceFBu7f7V2WxLYn390z+TSPJ9zfJJ/nssz7wcEf9GxPHC1nprK6sL5UolXcrzk/XFS5O1ldUTFxbL8+l8enF6ZubU2zPT7737Ts/a+sbZv7//5PaHp74+uvbdz3cP30zidBzMj7W24wlca81MxET+nIzG6U0Fp3pQ2SBJ+n0C7MpIHuejkfUBh2Ikj3rg/+/LiFgHhlQi/mFINccBzbl9j+bBz417HzyYAG1qf1KM4oPXRmJfY250YC15ZGaUzXfHe1B/Vscvf9y6mW3Ru9chAHZ07XpEnCwWt/b/Sd7/7d7JLspsrkP/B8/O7Wz882a78V9hY/wTbcY/Y21idzd2jv/C3R5U01E2/nu/7fh3Y9FqfCTPvdAY840m5y9U0qxvezEijsXo3iy/3XrOqbU7652OtY7/si2rvzkWzM/jbnHvo4+ZK9fLT9LmVveuR7y6dfzb0v/va4x1N1//7Pk422UdR9Jbr3U6tnP7n671nyJeb3v9H65oJduvT0427ofJ5l2x1V83jvzWqf5+tz+7/ge2b/940rpeW3v8On7c90/a6dhu7/89yWeN9J5835Vyvb40FbEn+Xhj/6/N/dMPH9vMN8tn7T92dPv+r939vz8iPu+y/TdeutGx6CBc/7nHuv6Pn7jz0Rc/dKq/u+v/ViN1LN/TTf/X7Qk+yXMHAAAAAAAAg6YQEQcjKZQ20oVCqRQx9lVeoFqrHz9fXb44F43Pyo7HaKGx0p0vDzbfDzGVvx+2mZ/elJ+JiMMR8e3I/ka+NFutzPWz4QAAAAAAAAAAAAAAAAAAADBAxjp8/j/z+0i/zw546nzlNwyvHeO/F9/0BAwk//9heIl/GF7iH4aX+IfhJf5heIl/GF7iH4aX+AcAAAAAAAAAAAAAAAAAAAAAAAAAAICeOnvmTLatr92/Opvl5y6vLC9UL5+YS2sLpcXl2dJsdelSab5ana+kpdnq4k5/r1KtXpqajuUrk/W0Vp+srayeW6wuX6yfu7BYnk/PpaPPpFUAAAAAAAAAAAAAAAAAAADwfKmtrC6UK5V0qZ+J4mCchsRuEsXBOA2JHif63TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEP/BQAA//+OMThQ")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {}, {0x8}}}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)

kernel console output (not intermixed with test programs):

iled: -22
[  501.344415][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  501.352994][   T26] audit: type=1326 audit(1717578039.130:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d47cee9 code=0x7fc00000
[  501.505951][T10872] input: syz1 as /devices/virtual/input/input63
[  502.074787][   T26] audit: type=1326 audit(1717578039.130:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d47cee9 code=0x7fc00000
[  502.230395][   T26] audit: type=1326 audit(1717578039.130:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d47cee9 code=0x7fc00000
[  502.268882][T10882] futex_wake_op: syz-executor.0 tries to shift op by 144; fix this program
[  502.313818][   T26] audit: type=1326 audit(1717578039.130:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d47cee9 code=0x7fc00000
[  502.434084][T10890] loop4: detected capacity change from 0 to 256
[  502.535660][ T4441] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  502.589759][T10889] loop0: detected capacity change from 0 to 1024
[  502.639850][T10889] hfsplus: failed to load root directory
[  502.795590][ T4441] usb 4-1: Using ep0 maxpacket: 8
[  502.925970][ T4441] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  502.952428][ T4441] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  502.994280][ T4441] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  503.033939][ T4441] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  503.040909][T10898] loop2: detected capacity change from 0 to 1024
[  503.094946][ T4441] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  503.140998][ T4441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.171207][T10898] loop2: detected capacity change from 0 to 256
[  503.445892][ T4441] usb 4-1: GET_CAPABILITIES returned 0
[  503.454196][ T4441] usbtmc 4-1:16.0: can't read capabilities
[  503.703624][ T8474] usb 4-1: USB disconnect, device number 13
[  503.912931][T10906] input: syz1 as /devices/virtual/input/input64
[  504.101815][T10893] loop1: detected capacity change from 0 to 32768
[  504.537470][T10893] XFS (loop1): Mounting V5 Filesystem
[  504.650420][T10893] XFS (loop1): Ending clean mount
[  504.674723][T10893] XFS (loop1): Quotacheck needed: Please wait.
[  504.774046][T10893] XFS (loop1): Quotacheck: Done.
[  504.840654][ T6801] XFS (loop1): Unmounting Filesystem
[  505.052837][T10902] loop2: detected capacity change from 0 to 32768
[  505.085214][T10902] xfs: Bad value for 'allocsize'
[  505.951688][T10939] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'.
[  506.063004][T10942] loop2: detected capacity change from 0 to 1024
[  506.084993][T10942] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent
[  506.192439][T10942] loop2: detected capacity change from 0 to 512
[  506.200665][T10948] loop0: detected capacity change from 0 to 256
[  506.226095][T10948] FAT-fs (loop0): Directory bread(block 64) failed
[  506.232686][T10948] FAT-fs (loop0): Directory bread(block 65) failed
[  506.240026][T10948] FAT-fs (loop0): Directory bread(block 66) failed
[  506.246631][T10948] FAT-fs (loop0): Directory bread(block 67) failed
[  506.253225][T10948] FAT-fs (loop0): Directory bread(block 68) failed
[  506.259812][T10948] FAT-fs (loop0): Directory bread(block 69) failed
[  506.266438][T10948] FAT-fs (loop0): Directory bread(block 70) failed
[  506.272971][T10948] FAT-fs (loop0): Directory bread(block 71) failed
[  506.279638][T10948] FAT-fs (loop0): Directory bread(block 72) failed
[  506.286623][T10948] FAT-fs (loop0): Directory bread(block 73) failed
[  506.316445][T10948] syz-executor.0: attempt to access beyond end of device
[  506.316445][T10948] loop0: rw=524288, sector=1768, nr_sectors = 4 limit=256
[  506.331291][T10948] syz-executor.0: attempt to access beyond end of device
[  506.331291][T10948] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256
[  506.373691][T10932] loop4: detected capacity change from 0 to 32768
[  506.435377][T10932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (10932)
[  506.450345][T10935] loop1: detected capacity change from 0 to 32768
[  506.473015][T10952] random: crng reseeded on system resumption
[  506.493178][T10935] XFS (loop1): Mounting V5 Filesystem
[  506.503696][T10932] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  506.529909][T10932] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  506.539308][T10932] BTRFS info (device loop4): using free space tree
[  506.614531][T10935] XFS (loop1): Ending clean mount
[  506.623103][T10935] XFS (loop1): Quotacheck needed: Please wait.
[  506.683660][T10935] XFS (loop1): Quotacheck: Done.
[  506.735662][ T8475] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  506.788572][T10932] BTRFS info (device loop4): enabling ssd optimizations
[  506.826677][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  506.826691][   T26] audit: type=1800 audit(1717578044.750:576): pid=10932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  506.868488][ T6801] XFS (loop1): Unmounting Filesystem
[  506.946856][   T26] audit: type=1800 audit(1717578044.780:577): pid=10932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  506.995607][ T8475] usb 1-1: Using ep0 maxpacket: 8
[  507.051267][   T26] audit: type=1800 audit(1717578044.850:578): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  507.115874][ T8475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.139227][   T26] audit: type=1800 audit(1717578044.900:579): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  507.143883][ T8475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  507.269384][ T8475] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  507.295175][ T8475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.336661][ T8475] usb 1-1: config 0 descriptor??
[  507.388391][ T9251] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  507.827399][ T8475] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0
[  507.834842][ T8475] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0
[  507.865002][ T8475] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0
[  507.889839][ T8475] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0
[  507.916249][ T8475] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0
[  507.936708][ T8475] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0
[  507.966160][ T8475] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0
[  508.062218][ T8475] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found
[  508.071001][ T8475] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found
[  508.105410][ T8475] usb 1-1: USB disconnect, device number 14
[  508.137287][T11006] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'.
[  508.446766][T11010] loop2: detected capacity change from 0 to 1024
[  508.461133][T11010] EXT4-fs: Ignoring removed orlov option
[  508.467185][T11010] EXT4-fs: Ignoring removed nomblk_io_submit option
[  508.484877][T11010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  508.504274][T10992] loop1: detected capacity change from 0 to 32768
[  508.512105][T10992] xfs: Bad value for 'allocsize'
[  508.535587][ T8473] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  508.630008][ T5799] EXT4-fs (loop2): unmounting filesystem.
[  508.701890][T11016] loop0: detected capacity change from 0 to 256
[  508.785638][ T8473] usb 5-1: Using ep0 maxpacket: 8
[  509.175828][ T8473] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice= f.07
[  509.184549][T11026] loop1: detected capacity change from 0 to 128
[  509.196895][ T8473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.205129][ T8473] usb 5-1: Product: syz
[  509.230572][ T8473] usb 5-1: Manufacturer: syz
[  509.237824][ T8473] usb 5-1: SerialNumber: syz
[  509.265406][ T8473] usb 5-1: config 0 descriptor??
[  509.312750][T11028] loop2: detected capacity change from 0 to 1024
[  509.371619][T11028] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent
[  509.487405][T11028] loop2: detected capacity change from 0 to 512
[  509.566564][ T8473] ums-freecom 5-1:0.0: USB Mass Storage device detected
[  509.641186][ T8473] usb 5-1: USB disconnect, device number 14
[  509.705368][T11032] random: crng reseeded on system resumption
[  509.766525][T11024] loop3: detected capacity change from 0 to 32768
[  509.803523][T11024] XFS (loop3): Mounting V5 Filesystem
[  509.914190][T11024] XFS (loop3): Ending clean mount
[  509.930545][T11024] XFS (loop3): Quotacheck needed: Please wait.
[  509.982208][T11024] XFS (loop3): Quotacheck: Done.
[  510.134266][ T7009] XFS (loop3): Unmounting Filesystem
[  510.270374][T11052] loop4: detected capacity change from 0 to 64
[  510.285434][T11053] loop1: detected capacity change from 0 to 512
[  510.300959][T11053] EXT4-fs: Ignoring removed i_version option
[  510.308393][T11053] journal_path: Lookup failure for './file0'
[  510.319172][T11053] EXT4-fs: error: could not find journal device path
[  510.434504][T11052] MINIX-fs: bad superblock or unable to read bitmaps
[  512.085848][T11085] loop4: detected capacity change from 0 to 128
[  512.156955][T11081] loop1: detected capacity change from 0 to 256
[  512.510909][T11092] syz-executor.2 (pid 11092) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  512.869923][T11095] loop2: detected capacity change from 0 to 1024
[  512.921549][T11095] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent
[  513.070636][T11095] loop2: detected capacity change from 0 to 512
[  513.311966][T11102] random: crng reseeded on system resumption
[  513.448017][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  514.180593][T11087] loop3: detected capacity change from 0 to 32768
[  514.319214][T11087] XFS (loop3): Mounting V5 Filesystem
[  514.470403][T11087] XFS (loop3): Ending clean mount
[  514.509112][T11087] XFS (loop3): Quotacheck needed: Please wait.
[  514.629306][T11087] XFS (loop3): Quotacheck: Done.
[  514.767880][ T7009] XFS (loop3): Unmounting Filesystem
[  514.982228][T11121] loop1: detected capacity change from 0 to 64
[  515.021081][T11121] MINIX-fs: bad superblock or unable to read bitmaps
[  515.207290][   T22] kernel write not supported for file /dsp (pid: 22 comm: kworker/1:0)
[  516.584365][T11125] loop4: detected capacity change from 0 to 32768
[  516.608039][T11125] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  516.621795][T11142] loop0: detected capacity change from 0 to 32768
[  516.636586][T11125] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  516.727135][T11142] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (11142)
[  516.744676][T11125] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  516.776587][T11142] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  516.782201][T11151] loop2: detected capacity change from 0 to 256
[  516.787769][T11142] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  516.802321][T11142] BTRFS info (device loop0): using free space tree
[  516.809823][ T8475] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  516.826073][ T8475] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  516.976852][ T8475] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 150ms
[  517.000007][ T8475] gfs2: fsid=syz:syz.0: jid=0: Done
[  517.014496][T11125] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  517.044322][T11142] BTRFS info (device loop0): enabling ssd optimizations
[  517.319624][   T26] audit: type=1326 audit(1717578055.240:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2387cee9 code=0x7fc00000
[  517.355733][ T3578] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  517.952270][T11177] loop3: detected capacity change from 0 to 1024
[  517.982467][T11177] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent
[  518.113706][T11177] loop3: detected capacity change from 0 to 512
[  518.303738][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  519.030606][T11171] loop2: detected capacity change from 0 to 32768
[  519.052384][T11185] random: crng reseeded on system resumption
[  519.136822][T11168] loop1: detected capacity change from 0 to 32768
[  519.210613][T11168] XFS (loop1): Mounting V5 Filesystem
[  519.317671][T11168] XFS (loop1): Ending clean mount
[  519.328623][T11168] XFS (loop1): Quotacheck needed: Please wait.
[  519.441869][T11168] XFS (loop1): Quotacheck: Done.
[  519.661858][ T6801] XFS (loop1): Unmounting Filesystem
[  519.982250][T11210] loop2: detected capacity change from 0 to 64
[  520.046149][ T3883] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  520.068518][T11210] MINIX-fs: bad superblock or unable to read bitmaps
[  520.325619][ T3883] usb 4-1: Using ep0 maxpacket: 8
[  520.334555][T11213] loop1: detected capacity change from 0 to 4096
[  520.357226][T11213] ntfs3: Bad value for 'dmask'
[  520.465644][ T3883] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  520.497828][ T3883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  520.560369][ T3883] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  520.630781][ T3883] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  520.674688][ T3883] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  520.684448][ T3883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.756593][ T3883] usbtmc 4-1:16.0: bulk endpoints not found
[  520.984133][T11226] loop4: detected capacity change from 0 to 256
[  521.343576][T11233] loop3: detected capacity change from 0 to 1024
[  521.397333][T11214] loop0: detected capacity change from 0 to 32768
[  521.418940][T11233] hfsplus: failed to load root directory
[  521.447398][T11214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (11214)
[  521.473009][T11214] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  521.488016][T11214] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  521.499558][T11214] BTRFS info (device loop0): using free space tree
[  521.561556][T11214] BTRFS info (device loop0): enabling ssd optimizations
[  521.562678][T11232] loop1: detected capacity change from 0 to 4096
[  521.593272][T11232] NILFS (loop1): invalid segment: Checksum error in segment payload
[  521.689126][T11251] loop3: detected capacity change from 0 to 8
[  521.705609][T11232] NILFS (loop1): trying rollback from an earlier position
[  521.771629][T11232] NILFS (loop1): recovery complete
[  521.786765][T11253] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  521.879162][T11255] loop2: detected capacity change from 0 to 1024
[  521.910489][   T26] audit: type=1326 audit(1717578059.830:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2387cee9 code=0x7fc00000
[  521.942969][T11255] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent
[  521.956979][T11232] overlayfs: upper fs does not support tmpfile.
[  521.982004][ T3578] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  521.983763][T11232] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  522.019990][   T26] audit: type=1800 audit(1717578059.940:582): pid=11257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=16 res=0 errno=0
[  522.103009][T11232] overlayfs: failed to set xattr on upper
[  522.110001][T11255] loop2: detected capacity change from 0 to 512
[  522.133295][T11232] overlayfs: ...falling back to index=off,metacopy=off.
[  522.314294][T11232] overlayfs: failed to resolve './file0': -2
[  522.331468][T11259] random: crng reseeded on system resumption
[  522.748567][T11263] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.755785][T11263] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.800695][T11263] device bridge0 left promiscuous mode
[  522.828569][ T4071] usb 4-1: USB disconnect, device number 14
[  522.878731][T11264] device bridge_slave_1 left promiscuous mode
[  522.888093][T11264] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.990316][T11264] device bridge_slave_0 left promiscuous mode
[  523.024852][T11264] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.352634][T11283] loop2: detected capacity change from 0 to 128
[  524.385153][T11285] loop4: detected capacity change from 0 to 64
[  524.429631][T11285] MINIX-fs: bad superblock or unable to read bitmaps
[  525.235641][ T3571] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  525.242312][ T3577] Bluetooth: hci5: command 0x1003 tx timeout
[  525.732467][T11299] loop3: detected capacity change from 0 to 32768
[  525.745277][T11304] loop1: detected capacity change from 0 to 2048
[  525.754694][T11299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (11299)
[  525.792787][T11299] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  525.803436][T11299] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  525.815694][T11299] BTRFS info (device loop3): using free space tree
[  525.830831][T11304] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  525.844217][T11304] ext4 filesystem being mounted at /root/syzkaller-testdir3146099020/syzkaller.M21aEi/211/bus supports timestamps until 2038 (0x7fffffff)
[  525.889420][ T6801] EXT4-fs (loop1): unmounting filesystem.
[  525.987131][T11299] BTRFS info (device loop3): enabling ssd optimizations
[  526.231871][   T26] audit: type=1326 audit(1717578064.150:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4f27cee9 code=0x7fc00000
[  526.273752][ T7009] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  526.639986][T11333] loop3: detected capacity change from 0 to 1024
[  526.648535][T11333] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent
[  526.728172][T11333] loop3: detected capacity change from 0 to 512
[  526.780594][T11335] loop4: detected capacity change from 0 to 512
[  526.841795][T11335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  526.879280][T11336] random: crng reseeded on system resumption
[  527.020144][T11335] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 248: padding at end of block bitmap is not set
[  527.122414][T11335] Quota error (device loop4): write_blk: dquota write failed
[  527.167331][T11335] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  527.208213][T11342] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  527.231228][T11335] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 1
[  527.299839][T11335] EXT4-fs (loop4): 1 truncate cleaned up
[  527.317138][T11342] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  527.331859][T11335] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  527.375811][T11335] ext4 filesystem being mounted at /root/syzkaller-testdir2349323004/syzkaller.qXtCRT/76/bus supports timestamps until 2038 (0x7fffffff)
[  527.526398][T11335] EXT4-fs error (device loop4): __ext4_remount:6425: comm syz-executor.4: Abort forced by user
[  527.589362][T11335] EXT4-fs (loop4): Remounting filesystem read-only
[  527.718914][ T9251] EXT4-fs (loop4): unmounting filesystem.
[  528.267417][ T3883] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  528.535677][ T3883] usb 5-1: Using ep0 maxpacket: 32
[  528.696043][ T3883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.729389][ T3883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  528.770551][ T3883] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  528.809316][ T3883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.857342][ T3883] usb 5-1: config 0 descriptor??
[  528.906474][ T3883] hub 5-1:0.0: USB hub found
[  529.093638][   T26] audit: type=1800 audit(1717578067.010:584): pid=11360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0
[  529.185640][ T3883] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  529.511706][T11357] loop2: detected capacity change from 0 to 32768
[  529.520041][T11357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (11357)
[  529.545625][ T3883] usbhid 5-1:0.0: can't add hid device: -71
[  529.554768][ T3883] usbhid: probe of 5-1:0.0 failed with error -71
[  529.580961][T11357] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  529.602017][T11357] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  529.611383][ T3883] usb 5-1: USB disconnect, device number 15
[  529.625920][T11357] BTRFS info (device loop2): using free space tree
[  529.673887][T11368] loop3: detected capacity change from 0 to 1024
[  529.708430][T11372] loop0: detected capacity change from 0 to 1024
[  529.769641][T11368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  529.886745][T11357] BTRFS info (device loop2): enabling ssd optimizations
[  529.991263][   T26] audit: type=1800 audit(1717578067.910:585): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  530.191877][   T26] audit: type=1800 audit(1717578067.970:586): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  530.357406][   T26] audit: type=1800 audit(1717578068.110:587): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  530.484897][   T26] audit: type=1800 audit(1717578068.150:588): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  530.942100][T11403] BTRFS error (device loop2: state M): unrecognized mount option '����017777777777777777777770177777777777777777777701777777777777777777777�������������'
[  531.494802][ T5799] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  532.256380][T11410] loop4: detected capacity change from 0 to 2048
[  532.274314][T11410] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  532.343571][T11415] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  532.482680][ T7009] EXT4-fs (loop3): unmounting filesystem.
[  534.677078][T11430] sched: RT throttling activated
[  534.696040][ T3571] Bluetooth: hci1: command 0x0406 tx timeout
[  534.943487][   T26] audit: type=1800 audit(1717578072.860:589): pid=11434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1940 res=0 errno=0
[  535.094260][T11440] loop4: detected capacity change from 0 to 1024
[  537.029475][T11437] loop3: detected capacity change from 0 to 32768
[  537.215615][T11437] XFS (loop3): Mounting V5 Filesystem
[  537.360313][T11437] XFS (loop3): Ending clean mount
[  537.379877][T11437] XFS (loop3): Quotacheck needed: Please wait.
[  537.450144][T11437] XFS (loop3): Quotacheck: Done.
[  537.539219][ T7009] XFS (loop3): Unmounting Filesystem
[  537.925655][ T2965] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  538.305788][ T2965] usb 5-1: config 0 has an invalid interface number: 25 but max is 0
[  538.323938][ T2965] usb 5-1: config 0 has no interface number 0
[  538.341162][ T2965] usb 5-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  538.382213][ T2965] usb 5-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  538.423188][ T2965] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  538.449002][ T2965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.470491][ T2965] usb 5-1: config 0 descriptor??
[  538.952314][T11493] loop1: detected capacity change from 0 to 1024
[  539.014090][T11493] hfsplus: failed to load root directory
[  539.035659][ T2965] usbhid 5-1:0.25: can't add hid device: -71
[  539.041916][ T2965] usbhid: probe of 5-1:0.25 failed with error -71
[  539.080000][ T2965] usb 5-1: USB disconnect, device number 16
[  539.318535][T11488] loop2: detected capacity change from 0 to 32768
[  539.387649][T11488] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (11488)
[  539.460654][T11488] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  539.472758][T11488] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  539.483772][T11488] BTRFS info (device loop2): setting nodatacow, compression disabled
[  539.501875][T11488] BTRFS info (device loop2): enabling auto defrag
[  539.615526][T11488] BTRFS info (device loop2): max_inline at 0
[  539.635679][T11488] BTRFS info (device loop2): using free space tree
[  539.698206][T11498] mkiss: ax0: crc mode is auto.
[  540.475923][ T5799] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  542.118382][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  542.220306][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  542.391019][   T26] audit: type=1326 audit(1717578080.310:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcab27cee9 code=0x0
[  542.511720][T11551] loop0: detected capacity change from 0 to 128
[  542.580129][T11551] VFS: Found a Xenix FS (block size = 512) on device loop0
[  542.604047][T11551] sysv_count_free_blocks: cannot read free-list block
[  542.763383][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  542.807003][T11551] sysv_count_free_inodes: unable to read inode table
[  542.824211][T11556] sysv_count_free_blocks: cannot read free-list block
[  542.835848][T11556] sysv_count_free_inodes: unable to read inode table
[  543.431559][ T3578] sysv_free_block: trying to free block not in datazone
[  543.519089][ T3578] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  543.847704][T11554] loop4: detected capacity change from 0 to 32768
[  543.970767][T11554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (11554)
[  543.993809][T11554] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  544.005565][T11554] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  545.552324][T11554] BTRFS info (device loop4): setting nodatacow, compression disabled
[  545.579586][T11554] BTRFS info (device loop4): enabling auto defrag
[  546.566483][T11554] BTRFS info (device loop4): max_inline at 0
[  546.594083][T11569] overlayfs: missing 'lowerdir'
[  546.750979][T11554] BTRFS info (device loop4): using free space tree
[  547.043909][T11554] BTRFS error (device loop4): open_ctree failed
[  547.262353][T11590] loop1: detected capacity change from 0 to 2048
[  547.303758][T11590] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  547.385768][ T3615] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  548.736797][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  548.750578][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  548.760834][ T3615] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  548.771813][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.518863][ T3615] usb 1-1: config 0 descriptor??
[  549.707675][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  549.972041][ T6801] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[  550.004345][ T6801] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[  550.221247][T11588] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'.
[  550.336788][ T3615] usb 1-1: string descriptor 0 read error: -71
[  550.370812][ T3615] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71
[  550.402575][ T3615] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71
[  550.431625][ T3615] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71
[  550.454000][ T3615] uclogic 0003:256C:006D.0010: failed probing parameters: -71
[  550.491357][ T3615] uclogic: probe of 0003:256C:006D.0010 failed with error -71
[  550.538361][ T3615] usb 1-1: USB disconnect, device number 15
[  551.222147][ T3577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  551.233868][ T3577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  551.250951][ T3577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  551.260805][ T3577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  551.268582][ T3577] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  551.279520][ T3577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  551.380402][T11619] loop3: detected capacity change from 0 to 32768
[  551.403062][T11619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (11619)
[  551.420771][T11619] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  551.431240][T11619] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  551.440201][T11619] BTRFS info (device loop3): setting nodatacow, compression disabled
[  551.448638][T11619] BTRFS info (device loop3): enabling auto defrag
[  551.455281][T11619] BTRFS info (device loop3): max_inline at 0
[  551.462329][T11619] BTRFS info (device loop3): using free space tree
[  551.880985][ T7009] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  551.914945][ T3679] device hsr_slave_0 left promiscuous mode
[  551.931870][ T3679] device hsr_slave_1 left promiscuous mode
[  552.249945][T11626] loop2: detected capacity change from 0 to 32768
[  552.265739][T11626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (11626)
[  552.298004][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  552.844706][T11626] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  552.959708][T11626] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  552.979504][ T3679] bridge0: port 3(batadv_slave_0) entered disabled state
[  552.985702][T11626] BTRFS info (device loop2): using free space tree
[  552.993754][T11624] loop0: detected capacity change from 0 to 32768
[  553.001652][T11624] XFS: noikeep mount option is deprecated.
[  553.008386][ T3679] device bridge_slave_1 left promiscuous mode
[  553.014715][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.039000][ T3679] device bridge_slave_0 left promiscuous mode
[  553.045486][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.071943][T11624] XFS (loop0): Mounting V5 Filesystem
[  553.111305][T11626] BTRFS info (device loop2): enabling ssd optimizations
[  553.131260][T11624] XFS (loop0): Ending clean mount
[  553.132762][   T26] audit: type=1800 audit(1717578091.050:591): pid=11626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  553.171907][T11624] XFS (loop0): Quotacheck needed: Please wait.
[  553.180679][   T26] audit: type=1800 audit(1717578091.100:592): pid=11626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  553.275141][T11624] XFS (loop0): Quotacheck: Done.
[  553.287540][   T26] audit: type=1800 audit(1717578091.210:593): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  553.325737][ T3577] Bluetooth: hci0: command tx timeout
[  553.352668][ T3578] XFS (loop0): Unmounting Filesystem
[  553.482167][ T3679] team0 (unregistering): Port device team_slave_1 removed
[  553.549825][T11684] BTRFS error (device loop2: state M): unrecognized mount option '����017777777777777777777770177777777777777777777701777777777777777777777�������������'
[  553.569101][ T3679] team0 (unregistering): Port device team_slave_0 removed
[  553.611599][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  553.657911][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  553.737663][ T5799] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  554.030837][ T3679] bond0 (unregistering): Released all slaves
[  554.218517][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  554.333608][T11704] input: syz1 as /devices/virtual/input/input65
[  555.068220][T11627] chnl_net:caif_netlink_parms(): no params data found
[  555.398635][T11718] loop2: detected capacity change from 0 to 128
[  555.406328][ T3571] Bluetooth: hci0: command tx timeout
[  555.416969][T11718] VFS: Found a Xenix FS (block size = 512) on device loop2
[  555.426843][T11718] sysv_count_free_blocks: cannot read free-list block
[  555.483481][T11718] sysv_count_free_inodes: unable to read inode table
[  555.496406][T11718] sysv_count_free_blocks: cannot read free-list block
[  555.504499][T11718] sysv_count_free_inodes: unable to read inode table
[  555.515333][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  555.537073][T11627] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.597407][T11627] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.832745][T11627] device bridge_slave_0 entered promiscuous mode
[  556.077560][T11627] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.117451][T11627] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.171799][ T5799] sysv_free_block: trying to free block not in datazone
[  556.180377][T11627] device bridge_slave_1 entered promiscuous mode
[  556.195677][ T5799] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  556.312061][T11627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.354051][T11627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.480780][T11627] team0: Port device team_slave_0 added
[  556.511810][T11627] team0: Port device team_slave_1 added
[  556.613201][T11627] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.635640][T11627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.661572][    C0] vkms_vblank_simulate: vblank timer overrun
[  556.720641][T11627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.782978][T11627] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.811372][T11627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.901030][T11627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.040453][T11627] device hsr_slave_0 entered promiscuous mode
[  557.074524][T11627] device hsr_slave_1 entered promiscuous mode
[  557.475943][ T3571] Bluetooth: hci0: command tx timeout
[  557.696831][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  558.181426][T11722] loop2: detected capacity change from 0 to 32768
[  558.235997][T11722] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  558.445706][T11722] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  558.470059][T11722] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  558.550437][T11748] input: syz1 as /devices/virtual/input/input66
[  558.727508][ T3616] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  558.765827][ T3616] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  559.565694][ T3571] Bluetooth: hci0: command tx timeout
[  559.750248][ T3616] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 984ms
[  559.766520][ T3616] gfs2: fsid=syz:syz.0: jid=0: Done
[  559.783283][T11722] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  560.216687][T11758] loop2: detected capacity change from 0 to 2048
[  560.284264][T11627] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  560.312289][T11627] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  560.335793][T11758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  560.474240][T11627] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  560.514019][T11627] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  561.375349][T11627] 8021q: adding VLAN 0 to HW filter on device bond0
[  561.464762][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  561.481821][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  561.541634][T11627] 8021q: adding VLAN 0 to HW filter on device team0
[  561.567946][ T5799] EXT4-fs (loop2): unmounting filesystem.
[  561.632762][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  561.642604][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  561.666333][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.673657][ T9261] bridge0: port 1(bridge_slave_0) entered forwarding state
[  561.686959][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  561.707225][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  561.722035][T11754] loop3: detected capacity change from 0 to 32768
[  561.730303][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.737445][ T9261] bridge0: port 2(bridge_slave_1) entered forwarding state
[  561.747313][T11754] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (11754)
[  561.799641][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  561.812447][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  561.820490][T11754] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  561.841006][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  561.853748][T11754] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  561.865701][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  561.877086][T11754] BTRFS info (device loop3): using free space tree
[  561.883825][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  561.892771][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  561.903844][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  561.940714][T11627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  561.978801][T11627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  561.998928][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  562.019963][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  562.031602][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  562.044687][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  562.070211][T11754] BTRFS info (device loop3): enabling ssd optimizations
[  562.079353][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  562.094993][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  562.355193][ T7009] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  562.759513][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  562.766291][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  562.794188][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  562.816053][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  562.837655][T11627] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.921159][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  562.942937][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  563.024349][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  563.044324][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  563.076960][T11627] device veth0_vlan entered promiscuous mode
[  563.091709][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  563.120920][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  563.167637][T11627] device veth1_vlan entered promiscuous mode
[  563.424941][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  564.241226][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  564.280893][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  564.316204][T11627] device veth0_macvtap entered promiscuous mode
[  564.458591][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  564.548382][T11821] input: syz1 as /devices/virtual/input/input67
[  565.176341][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  565.278616][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  565.307826][T11627] device veth1_macvtap entered promiscuous mode
[  565.363428][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.399673][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.436364][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.467633][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.496752][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.523827][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.569511][T11627] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.601047][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  565.613520][ T9261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  565.639376][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.658262][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.672446][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.683288][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.693407][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.704326][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.714414][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  565.729682][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.762705][T11627] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.811072][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  565.820532][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  565.845299][T11627] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.862513][T11627] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.882034][T11627] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.900268][T11627] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  566.041214][   T26] audit: type=1800 audit(1717578103.960:594): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1950 res=0 errno=0
[  566.114456][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.139448][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.200512][ T2481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.214888][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  566.220795][ T2481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.319674][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  566.805640][T11846] loop2: detected capacity change from 0 to 1764
[  567.055655][ T2965] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  567.305592][ T2965] usb 5-1: Using ep0 maxpacket: 16
[  567.425691][ T2965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.449535][ T2965] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  567.490870][ T2965] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  567.530004][ T2965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.570637][ T2965] usb 5-1: config 0 descriptor??
[  567.687920][T11860] loop1: detected capacity change from 0 to 32768
[  567.714830][T11860] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (11860)
[  567.762537][T11860] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  567.778692][T11860] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  567.813173][T11860] BTRFS info (device loop1): use zlib compression, level 3
[  567.828634][T11857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.835641][T11860] BTRFS info (device loop1): using free space tree
[  567.837433][T11857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.868808][T11857] loop4: detected capacity change from 0 to 512
[  568.018193][T11857] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  568.036886][T11857] ext4 filesystem being mounted at /root/syzkaller-testdir2349323004/syzkaller.qXtCRT/109/file0 supports timestamps until 2038 (0x7fffffff)
[  568.185756][T11860] BTRFS info (device loop1): enabling ssd optimizations
[  568.254610][   T26] audit: type=1800 audit(1717578106.030:595): pid=11890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1965 res=0 errno=0
[  568.362726][T11627] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  568.385400][ T3611] usb 5-1: USB disconnect, device number 17
[  568.797621][T11894] loop1: detected capacity change from 0 to 128
[  568.875667][T11894] loop1: detected capacity change from 128 to 0
[  568.901614][    C0] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.910896][T11897] FAT-fs (loop1): Directory bread(block 3) failed
[  568.936080][    C0] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.945357][T11897] FAT-fs (loop1): Directory bread(block 4) failed
[  568.969472][    C0] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.972527][ T9251] EXT4-fs (loop4): unmounting filesystem.
[  568.989620][T11897] FAT-fs (loop1): Directory bread(block 5) failed
[  569.010967][    C0] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  569.034778][T11897] FAT-fs (loop1): Directory bread(block 6) failed
[  569.050424][    C0] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  569.059891][T11897] FAT-fs (loop1): FAT read failed (blocknr 1)
[  569.080452][    C0] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  569.107940][T11894] FAT-fs (loop1): Directory bread(block 3) failed
[  569.136300][    C1] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  569.145553][T11894] FAT-fs (loop1): Directory bread(block 4) failed
[  569.185717][    C0] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  569.197241][T11894] FAT-fs (loop1): Directory bread(block 5) failed
[  569.220545][    C1] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  569.229771][T11894] FAT-fs (loop1): Directory bread(block 6) failed
[  569.257590][    C1] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  569.267245][T11900] FAT-fs (loop1): Directory bread(block 3) failed
[  569.378701][T11904] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  569.473518][T11627] FAT-fs (loop1): unable to read boot sector to mark fs as dirty
[  569.653664][T11916] loop4: detected capacity change from 0 to 1024
[  569.663918][T11916] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent
[  569.670945][T11912] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  569.690461][T11912] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  569.828644][T11916] loop4: detected capacity change from 0 to 512
[  569.841419][ T3679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.943265][T11919] random: crng reseeded on system resumption
[  569.973255][ T3679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.044626][T11918] loop3: detected capacity change from 0 to 1764
[  570.140660][ T3679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.262135][ T3679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.122767][ T3577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  571.138359][ T3577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  571.147897][ T3577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  571.156595][ T3577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  571.166398][ T3577] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  571.173691][ T3577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  571.570643][T11921] loop0: detected capacity change from 0 to 32768
[  571.582742][T11921] xfs: Bad value for 'allocsize'
[  571.611813][ T3679] device hsr_slave_0 left promiscuous mode
[  571.621217][ T3679] device hsr_slave_1 left promiscuous mode
[  571.640359][   T26] audit: type=1800 audit(1717578109.420:596): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0
[  571.661804][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  571.687645][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  571.710529][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  571.728253][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  571.748254][ T3679] device bridge_slave_1 left promiscuous mode
[  571.755192][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.764560][ T3679] device bridge_slave_0 left promiscuous mode
[  571.772971][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.801122][ T3679] device veth1_macvtap left promiscuous mode
[  571.815567][ T3679] device veth0_macvtap left promiscuous mode
[  571.822829][ T3679] device veth1_vlan left promiscuous mode
[  571.829788][ T3679] device veth0_vlan left promiscuous mode
[  572.261166][ T3679] team0 (unregistering): Port device team_slave_1 removed
[  572.310856][ T3679] team0 (unregistering): Port device team_slave_0 removed
[  572.345095][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  572.371445][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  572.439793][T11964] loop2: detected capacity change from 0 to 512
[  572.503942][T11964] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  572.554861][T11964] ext4 filesystem being mounted at /root/syzkaller-testdir546469884/syzkaller.cy9XB0/335/bus supports timestamps until 2038 (0x7fffffff)
[  572.637786][ T3679] bond0 (unregistering): Released all slaves
[  572.661293][T11960] loop4: detected capacity change from 0 to 32768
[  572.701275][T11969] loop0: detected capacity change from 0 to 1024
[  572.709469][T11969] EXT4-fs (loop0): blocks per group (131072) and clusters per group (8192) inconsistent
[  572.777918][T11952] device pim6reg1 entered promiscuous mode
[  572.799342][T11969] loop0: detected capacity change from 0 to 512
[  572.992260][T11972] random: crng reseeded on system resumption
[  573.070540][T11933] chnl_net:caif_netlink_parms(): no params data found
[  573.235784][ T3577] Bluetooth: hci0: command tx timeout
[  573.255698][T11979] loop3: detected capacity change from 0 to 256
[  573.340723][T11979] loop3: detected capacity change from 0 to 1024
[  573.352244][T11933] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.377638][T11933] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.391704][T11933] device bridge_slave_0 entered promiscuous mode
[  573.404196][T11979] hfsplus: unable to parse mount options
[  573.429141][T11933] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.451400][T11933] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.479261][T11933] device bridge_slave_1 entered promiscuous mode
[  573.568750][T11933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  573.613354][T11933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  573.734895][T11933] team0: Port device team_slave_0 added
[  573.761149][T11933] team0: Port device team_slave_1 added
[  573.892860][T11933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.914026][T11933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.990029][T11933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  574.025845][T11933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  574.032998][T11933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.059087][    C1] vkms_vblank_simulate: vblank timer overrun
[  574.145528][T11933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  574.254038][T11933] device hsr_slave_0 entered promiscuous mode
[  574.280553][T11933] device hsr_slave_1 entered promiscuous mode
[  574.335758][ T3610] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  574.363347][T11984] loop4: detected capacity change from 0 to 32768
[  574.413646][T11984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (11984)
[  574.489812][T11984] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  574.523849][T11984] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  574.544833][T11995] trusted_key: encrypted_key: master key parameter '0��t' is invalid
[  574.563457][T11984] BTRFS info (device loop4): using free space tree
[  574.585561][ T3610] usb 1-1: Using ep0 maxpacket: 16
[  574.705676][ T3610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.738767][ T3610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  574.799349][T11984] BTRFS info (device loop4): enabling ssd optimizations
[  574.801923][ T3610] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  574.839246][   T26] audit: type=1800 audit(1717578112.620:597): pid=11984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  574.860020][    C1] vkms_vblank_simulate: vblank timer overrun
[  574.860908][ T3610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.884959][ T3610] usb 1-1: config 0 descriptor??
[  575.039740][   T26] audit: type=1800 audit(1717578112.690:598): pid=11984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  575.078845][ T5799] EXT4-fs (loop2): unmounting filesystem.
[  575.151026][   T26] audit: type=1800 audit(1717578112.690:599): pid=11984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  575.315696][ T3577] Bluetooth: hci0: command tx timeout
[  575.369044][T11933] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  575.387730][ T3610] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  575.394737][ T3610] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  575.450164][ T3610] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  575.473638][ T3610] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0
[  575.508736][T11933] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  575.521563][ T3610] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  575.558606][T11933] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  575.583992][T11933] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  575.655970][ T3610] cp2112 0003:10C4:EA90.0011: error requesting version
[  575.673067][ T3610] cp2112: probe of 0003:10C4:EA90.0011 failed with error -5
[  575.880425][T11933] 8021q: adding VLAN 0 to HW filter on device bond0
[  575.892961][ T8476] usb 1-1: USB disconnect, device number 16
[  575.948859][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  575.960695][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  575.989368][T11933] 8021q: adding VLAN 0 to HW filter on device team0
[  576.014724][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  576.032471][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  576.063113][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.070296][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.104651][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  576.251640][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  576.269727][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  576.358386][T12028] input: syz1 as /devices/virtual/input/input69
[  577.015774][ T9251] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  577.058195][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.065512][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state
[  577.115120][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  577.124725][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  577.134324][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  577.161256][T12035] Invalid ELF header len 1
[  577.175601][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  577.184323][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  577.208708][T12033] loop3: detected capacity change from 0 to 1024
[  577.216694][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  577.234681][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  577.255703][T12033] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent
[  577.281087][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  577.311435][T12036] loop0: detected capacity change from 0 to 64
[  577.312207][T11933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  577.346716][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  577.349637][T12036] hfs: unable to parse mount options
[  577.366915][ T8357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  577.380746][ T8357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  577.392910][ T8357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  577.405123][T12038] : renamed from ipvlan1
[  577.405653][ T3577] Bluetooth: hci0: command tx timeout
[  577.568622][T12033] loop3: detected capacity change from 0 to 512
[  577.691898][T12043] random: crng reseeded on system resumption
[  577.776594][T12048] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  577.814137][T12048] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  577.846403][T12050] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  577.868220][T12048] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  577.901273][ T8357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  577.913191][ T8357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  577.932823][T12048] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  577.951343][T12052] loop4: detected capacity change from 0 to 1024
[  577.967969][T11933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.978664][T12050] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  577.994260][T12052] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent
[  578.019827][T12048] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  578.032080][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  578.053485][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  578.081360][T12052] loop4: detected capacity change from 0 to 512
[  578.112733][ T8357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  578.132429][ T8357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  578.152330][T11933] device veth0_vlan entered promiscuous mode
[  578.171839][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  578.184787][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  578.218779][T11933] device veth1_vlan entered promiscuous mode
[  578.338804][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  578.352950][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  578.373850][T11933] device veth0_macvtap entered promiscuous mode
[  578.397050][T11933] device veth1_macvtap entered promiscuous mode
[  578.464687][T11933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  578.494353][T11933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.522370][T11933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  578.545422][T11933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.593270][T11933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  578.620469][T11933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.283251][T11933] batman_adv: batadv0: Interface activated: batadv_slave_0
[  579.332025][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  579.341479][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  579.355315][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  579.390767][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  579.444906][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  579.475822][ T3577] Bluetooth: hci0: command tx timeout
[  579.481932][T11933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  579.514889][T11933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.551206][T11933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  579.574163][T11933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.585525][ T3616] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  579.601019][T11933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  579.631348][T11933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.654345][T11933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  579.683440][T11933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.721441][T11933] batman_adv: batadv0: Interface activated: batadv_slave_1
[  579.749221][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  579.758964][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  579.759205][T12070] loop2: detected capacity change from 0 to 32768
[  579.777618][T11933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  579.787145][T11933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  579.799041][T12070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (12070)
[  579.806607][T11933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.830248][T11933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.830895][T12070] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  579.859385][T12070] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  579.874523][ T3616] usb 4-1: Using ep0 maxpacket: 16
[  579.882497][T12070] BTRFS info (device loop2): using free space tree
[  579.915444][T12061] loop4: detected capacity change from 0 to 32768
[  579.943443][T12061] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor.4 (12061)
[  579.966882][ T6425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.984148][ T6425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.004089][ T2481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.034626][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  580.043360][ T2481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.046519][ T3616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  580.062988][ T3616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  580.075437][ T3616] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  580.085273][T12070] BTRFS info (device loop2): enabling ssd optimizations
[  580.093982][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  580.101409][ T3616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.111764][ T3616] usb 4-1: config 0 descriptor??
[  580.134166][   T26] audit: type=1800 audit(1717578117.910:600): pid=12070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  580.161659][   T26] audit: type=1800 audit(1717578117.940:601): pid=12070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  580.209933][T12070] BTRFS error (device loop2: state M): unrecognized mount option '����017777777777777777777770177777777777777777777701777777777777777777777�������������'
[  580.228644][   T26] audit: type=1800 audit(1717578117.940:602): pid=12070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  580.256285][   T26] audit: type=1800 audit(1717578117.940:603): pid=12070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  580.277062][    C1] vkms_vblank_simulate: vblank timer overrun
[  580.314607][ T5799] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  580.469517][T12102] loop0: detected capacity change from 0 to 64
[  580.496690][T12102] MINIX-fs: bad superblock or unable to read bitmaps
[  580.608894][   T26] audit: type=1326 audit(1717578118.390:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12060 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67027cee9 code=0x7fc00000
[  580.737707][ T3616] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  580.744770][ T3616] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  580.795448][ T3616] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  580.827536][ T3616] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0
[  580.882821][ T3616] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  581.035833][ T3616] cp2112 0003:10C4:EA90.0012: error requesting version
[  581.060355][ T3616] cp2112: probe of 0003:10C4:EA90.0012 failed with error -5
[  581.118444][T12120] loop4: detected capacity change from 0 to 1024
[  581.142715][T12120] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent
[  581.236824][T12120] loop4: detected capacity change from 0 to 512
[  581.270990][ T3616] usb 4-1: USB disconnect, device number 15
[  581.428912][T12127] random: crng reseeded on system resumption
[  582.330194][T12138] loop1: detected capacity change from 0 to 128
[  582.459589][T12129] loop2: detected capacity change from 0 to 32768
[  582.512792][T12129] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (12129)
[  582.555099][T12129] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  582.590925][T12129] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  582.644894][T12129] BTRFS info (device loop2): using free space tree
[  582.908638][T12129] BTRFS info (device loop2): enabling ssd optimizations
[  583.098151][ T5799] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  583.205162][T12136] loop0: detected capacity change from 0 to 32768
[  583.251899][T12136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (12136)
[  583.316314][T12136] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  583.404771][T12136] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  583.451389][T12136] BTRFS info (device loop0): using free space tree
[  583.576548][T12143] loop4: detected capacity change from 0 to 32768
[  583.589513][T12143] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor.4 (12143)
[  583.650465][T12136] BTRFS info (device loop0): enabling ssd optimizations
[  583.691359][   T26] audit: type=1800 audit(1717578121.470:605): pid=12136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  583.787724][T12136] BTRFS error (device loop0: state M): unrecognized mount option '����017777777777777777777770177777777777777777777701777777777777777777777�������������'
[  583.820394][   T26] audit: type=1800 audit(1717578121.510:606): pid=12136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  583.841226][    C1] vkms_vblank_simulate: vblank timer overrun
[  583.913606][   T26] audit: type=1800 audit(1717578121.510:607): pid=12136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  583.962135][ T3578] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  584.033235][   T26] audit: type=1800 audit(1717578121.510:608): pid=12136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  584.093459][T12199] loop3: detected capacity change from 0 to 64
[  584.197433][   T26] audit: type=1800 audit(1717578121.740:609): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1957 res=0 errno=0
[  584.315544][T12199] MINIX-fs: bad superblock or unable to read bitmaps
[  584.490484][T12201] xt_TCPMSS: Only works on TCP SYN packets
[  584.734111][T12211] loop0: detected capacity change from 0 to 1024
[  584.802100][T12211] EXT4-fs (loop0): blocks per group (131072) and clusters per group (8192) inconsistent
[  584.917838][T12211] loop0: detected capacity change from 0 to 512
[  585.078497][T12228] random: crng reseeded on system resumption
[  585.670506][T12230] block device autoloading is deprecated and will be removed.
[  585.702520][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  585.702536][   T26] audit: type=1800 audit(1717578123.480:612): pid=12237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1964 res=0 errno=0
[  585.880580][T12240] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
[  586.087729][T12246] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  586.570881][   T26] audit: type=1800 audit(1717578124.350:613): pid=12264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1960 res=0 errno=0
[  586.634809][T12259] loop4: detected capacity change from 0 to 1764
[  586.904798][   T26] audit: type=1326 audit(1717578124.670:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb2387cee9 code=0x0
[  587.408975][T12242] loop2: detected capacity change from 0 to 32768
[  587.445395][T12242] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (12242)
[  587.507948][T12242] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  587.541673][T12242] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  587.579921][T12242] BTRFS info (device loop2): using free space tree
[  587.798211][T12261] loop3: detected capacity change from 0 to 32768
[  587.805392][T12261] xfs: Bad value for 'allocsize'
[  587.832493][T12242] BTRFS info (device loop2): enabling ssd optimizations
[  587.907580][T12299] loop0: detected capacity change from 0 to 64
[  588.163981][   T26] audit: type=1326 audit(1717578125.940:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12241 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9d47cee9 code=0x7fc00000
[  588.173555][T12310] loop0: detected capacity change from 0 to 64
[  588.222508][ T5799] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  588.264955][T12310] MINIX-fs: bad superblock or unable to read bitmaps
[  588.955345][   T26] audit: type=1800 audit(1717578126.730:616): pid=12327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1966 res=0 errno=0
[  589.930440][ T3582] Bluetooth: hci1: unexpected event for opcode 0x0c7c
[  590.236284][T12379] loop4: detected capacity change from 0 to 256
[  590.331326][T12379] loop4: detected capacity change from 0 to 1024
[  590.338719][T12379] hfsplus: unable to parse mount options
[  590.535059][T12368] loop2: detected capacity change from 0 to 32768
[  590.542276][T12368] xfs: Bad value for 'allocsize'
[  590.702859][ T3582] Bluetooth: hci4: unexpected event for opcode 0x0c7c
[  590.822343][   T26] audit: type=1800 audit(1717578128.600:617): pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0
[  590.857429][T12408] loop0: detected capacity change from 0 to 64
[  590.898245][T12408] MINIX-fs: bad superblock or unable to read bitmaps
[  592.364663][   T26] audit: type=1800 audit(1717578130.140:618): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1965 res=0 errno=0
[  592.442213][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  593.391030][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  593.568801][T12479] loop2: detected capacity change from 0 to 64
[  593.598609][   T26] audit: type=1326 audit(1717578131.380:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67027cee9 code=0x7ffc0000
[  594.157541][ T3582] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  594.166519][ T3582] Bluetooth: hci1: Injecting HCI hardware error event
[  594.178901][ T3577] Bluetooth: hci1: hardware error 0x00
[  594.350439][   T26] audit: type=1326 audit(1717578132.130:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67027cee9 code=0x7ffc0000
[  594.383274][   T26] audit: type=1326 audit(1717578132.130:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff67027cee9 code=0x7ffc0000
[  594.394814][T12479] MINIX-fs: bad superblock or unable to read bitmaps
[  594.518888][   T26] audit: type=1326 audit(1717578132.130:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67027cee9 code=0x7ffc0000
[  594.656969][   T26] audit: type=1326 audit(1717578132.130:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7ff67027cee9 code=0x7ffc0000
[  594.720522][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  594.920785][ T3582] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  594.930970][ T3582] Bluetooth: hci4: Injecting HCI hardware error event
[  594.946836][ T3582] Bluetooth: hci4: hardware error 0x00
[  595.574597][T12492] loop1: detected capacity change from 0 to 1764
[  595.630406][   T26] audit: type=1326 audit(1717578132.130:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67027cee9 code=0x7ffc0000
[  595.743407][   T26] audit: type=1326 audit(1717578132.130:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7ff67027cee9 code=0x7ffc0000
[  595.842036][T12502] loop3: detected capacity change from 0 to 256
[  595.902775][T12506] loop4: detected capacity change from 0 to 128
[  596.021374][T12502] loop3: detected capacity change from 0 to 1024
[  596.046209][T12502] hfsplus: unable to parse mount options
[  596.100345][T12483] loop0: detected capacity change from 0 to 32768
[  596.149489][T12483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (12483)
[  596.195649][T12495] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  596.204519][T12495] Bluetooth: hci0: Injecting HCI hardware error event
[  596.216693][T12495] Bluetooth: hci0: hardware error 0x00
[  596.237386][T12483] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  596.263495][T12483] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  596.291325][T12483] BTRFS info (device loop0): using free space tree
[  596.450990][ T3577] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  596.593854][ T8473] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  596.700260][T12483] BTRFS error (device loop0): open_ctree failed
[  596.967845][ T8473] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  596.985326][ T8473] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  597.091616][T12540] loop0: detected capacity change from 0 to 256
[  597.107741][ T8473] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  597.125359][ T8473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  597.139460][ T8473] usb 3-1: SerialNumber: syz
[  597.148465][T12540] FAT-fs (loop0): Directory bread(block 64) failed
[  597.164000][T12540] FAT-fs (loop0): Directory bread(block 65) failed
[  597.173099][T12540] FAT-fs (loop0): Directory bread(block 66) failed
[  597.183247][T12540] FAT-fs (loop0): Directory bread(block 67) failed
[  597.190835][T12540] FAT-fs (loop0): Directory bread(block 68) failed
[  597.197973][T12540] FAT-fs (loop0): Directory bread(block 69) failed
[  597.204754][T12540] FAT-fs (loop0): Directory bread(block 70) failed
[  597.211781][T12540] FAT-fs (loop0): Directory bread(block 71) failed
[  597.295801][T12540] FAT-fs (loop0): Directory bread(block 72) failed
[  597.305358][T12540] FAT-fs (loop0): Directory bread(block 73) failed
[  597.485876][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  597.503094][ T3582] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  597.622801][ T3883] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  598.225626][ T3883] usb 2-1: Using ep0 maxpacket: 16
[  598.275722][T12495] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  598.296321][ T8473] usb 3-1: USB disconnect, device number 13
[  598.431284][ T3883] usb 2-1: config 0 has no interfaces?
[  598.467791][T12558] loop4: detected capacity change from 0 to 1024
[  598.534360][ T9251] hfsplus: bad catalog entry type
[  598.545886][ T9251] hfsplus: bad catalog entry type
[  598.597913][  T102] hfsplus: b-tree write err: -5, ino 4
[  598.632926][ T3883] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=fb.43
[  598.645917][ T3883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.654690][ T3883] usb 2-1: Product: syz
[  598.669931][ T3883] usb 2-1: Manufacturer: syz
[  598.670626][T12561] loop2: detected capacity change from 0 to 1764
[  598.682397][ T3883] usb 2-1: SerialNumber: syz
[  598.717640][ T3883] usb 2-1: config 0 descriptor??
[  598.873623][T12563] ALSA: seq fatal error: cannot create timer (-22)
[  598.969566][ T8477] usb 2-1: USB disconnect, device number 15
[  599.084744][T12566] loop0: detected capacity change from 0 to 256
[  599.097634][ T3679] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.186760][T12566] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  599.204744][ T3679] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.270446][ T3679] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.381097][ T3679] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.271216][T12581] loop0: detected capacity change from 0 to 256
[  600.306459][T12584] loop1: detected capacity change from 0 to 512
[  600.354545][ T3582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  600.364408][T12584] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  600.374779][ T3582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  600.384197][ T3582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  600.385738][T12581] loop0: detected capacity change from 0 to 1024
[  600.398885][ T3582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  600.407284][T12584] UDF-fs: Scanning with blocksize 512 failed
[  600.413906][ T3582] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  600.421426][ T3582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  600.425772][T12584] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  600.474914][T12581] hfsplus: unable to parse mount options
[  600.475612][T12584] UDF-fs: Scanning with blocksize 1024 failed
[  600.503579][T12584] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  600.520183][T12584] UDF-fs: Scanning with blocksize 2048 failed
[  600.537693][T12584] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  600.540932][T12569] loop3: detected capacity change from 0 to 32768
[  600.562102][T12569] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (12569)
[  600.579065][ T3679] device hsr_slave_0 left promiscuous mode
[  600.586629][T12584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  600.597895][ T3679] device hsr_slave_1 left promiscuous mode
[  600.604909][T12569] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  600.615701][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  600.621388][T12569] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  600.624573][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  600.632887][T12569] BTRFS info (device loop3): use zlib compression, level 3
[  600.649054][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  600.651838][T12569] BTRFS info (device loop3): turning on sync discard
[  600.663342][T12569] BTRFS info (device loop3): max_inline at 0
[  600.665601][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  600.676269][T12569] BTRFS info (device loop3): enabling ssd optimizations
[  600.683553][T12569] BTRFS info (device loop3): using spread ssd allocation scheme
[  600.696497][T12569] BTRFS info (device loop3): using free space tree
[  600.699815][ T3679] device bridge_slave_1 left promiscuous mode
[  600.709820][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.721199][ T3679] device bridge_slave_0 left promiscuous mode
[  600.729036][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.742768][ T3679] device veth1_macvtap left promiscuous mode
[  600.749324][ T3679] device veth0_macvtap left promiscuous mode
[  600.756122][ T3679] device veth1_vlan left promiscuous mode
[  600.762214][ T3679] device veth0_vlan left promiscuous mode
[  600.940428][ T7009] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  600.958170][   T26] audit: type=1800 audit(1717578138.740:626): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1958 res=0 errno=0
[  601.052656][   T26] audit: type=1804 audit(1717578138.740:627): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1652389424/syzkaller.DLXR3r/39/bus" dev="sda1" ino=1958 res=1 errno=0
[  601.148493][   T26] audit: type=1804 audit(1717578138.740:628): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1652389424/syzkaller.DLXR3r/39/bus" dev="sda1" ino=1958 res=1 errno=0
[  601.409131][ T3679] team0 (unregistering): Port device team_slave_1 removed
[  601.475438][ T3679] team0 (unregistering): Port device team_slave_0 removed
[  601.500933][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  601.546041][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  601.602150][T12611] loop2: detected capacity change from 0 to 32768
[  601.623451][T12611] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (12611)
[  601.646316][T12611] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  601.662488][T12611] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  601.678749][T12611] BTRFS info (device loop2): using free space tree
[  601.748826][ T3679] bond0 (unregistering): Released all slaves
[  601.770577][T12611] BTRFS info (device loop2): enabling ssd optimizations
[  601.801073][   T26] audit: type=1800 audit(1717578139.580:629): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  601.932092][   T26] audit: type=1800 audit(1717578139.610:630): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  602.047269][T12585] chnl_net:caif_netlink_parms(): no params data found
[  602.057890][T12653] BTRFS error (device loop2: state M): unrecognized mount option '����017777777777777777777770177777777777777777777701777777777777777777777�������������'
[  602.059495][   T26] audit: type=1800 audit(1717578139.680:631): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  602.152499][   T26] audit: type=1800 audit(1717578139.700:632): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  602.237947][T12585] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.246450][T12585] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.257185][T12585] device bridge_slave_0 entered promiscuous mode
[  602.278073][T12585] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.285589][ T8477] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  602.327809][T12585] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.342755][T12585] device bridge_slave_1 entered promiscuous mode
[  602.449874][ T5799] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  602.482517][T12585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.563047][ T3582] Bluetooth: hci1: command tx timeout
[  602.597899][T12668] input: syz1 as /devices/virtual/input/input71
[  602.904095][T12585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  603.115550][ T8477] usb 1-1: Using ep0 maxpacket: 16
[  603.191867][T12671] loop3: detected capacity change from 0 to 256
[  603.238440][ T8477] usb 1-1: unable to get BOS descriptor or descriptor too short
[  603.292487][T12671] loop3: detected capacity change from 0 to 1024
[  603.305697][ T8477] usb 1-1: unable to read config index 0 descriptor/start: -71
[  603.317933][ T8477] usb 1-1: can't read configurations, error -71
[  603.331531][T12671] hfsplus: unable to parse mount options
[  603.421014][T12585] team0: Port device team_slave_0 added
[  603.458135][T12585] team0: Port device team_slave_1 added
[  603.541821][T12585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.566006][T12585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  603.618039][T12585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.655727][T12585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.673829][T12585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  603.712480][T12585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.830977][T12585] device hsr_slave_0 entered promiscuous mode
[  603.849550][T12585] device hsr_slave_1 entered promiscuous mode
[  603.859416][T12585] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  603.867276][T12585] Cannot create hsr debugfs directory
[  603.933035][T12697] loop0: detected capacity change from 0 to 256
[  603.997590][T12697] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  604.322889][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  604.391965][T12710] input: syz1 as /devices/virtual/input/input72
[  604.607461][T12495] Bluetooth: hci1: command tx timeout
[  605.518390][T12585] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  605.543831][T12585] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  605.563946][T12585] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  605.586875][T12585] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  605.725570][T12529] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  605.757600][T12585] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.787260][ T8477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  605.797400][ T8477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  605.827293][T12585] 8021q: adding VLAN 0 to HW filter on device team0
[  605.852843][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  605.872665][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  605.898379][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.905606][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.944032][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  605.955516][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  605.974523][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  605.977636][T12529] usb 3-1: Using ep0 maxpacket: 16
[  605.992114][ T4071] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.999317][ T4071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  606.023841][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  606.076248][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  606.092716][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  606.116082][T12529] usb 3-1: unable to get BOS descriptor or descriptor too short
[  606.123371][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  606.143741][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  606.164786][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  606.177706][T12529] usb 3-1: unable to read config index 0 descriptor/start: -71
[  606.185316][T12529] usb 3-1: can't read configurations, error -71
[  606.208875][T12585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  606.229708][T12585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  606.258390][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  606.268831][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  606.285014][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  606.300582][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  606.316409][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  606.346678][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  606.429153][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  606.509554][T12729] loop0: detected capacity change from 0 to 32768
[  606.600588][T12729] XFS (loop0): Mounting V5 Filesystem
[  606.676130][T12495] Bluetooth: hci1: command tx timeout
[  606.794017][T12729] XFS (loop0): Ending clean mount
[  606.924562][T12763] input: syz1 as /devices/virtual/input/input73
[  607.194976][ T3578] XFS (loop0): Unmounting Filesystem
[  607.691165][T12585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  607.733861][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  607.753313][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  608.649353][   T26] audit: type=1800 audit(1717578146.430:633): pid=12779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1951 res=0 errno=0
[  608.682939][T12781] loop2: detected capacity change from 0 to 64
[  608.700441][   T26] audit: type=1804 audit(1717578146.460:634): pid=12779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3980388716/syzkaller.jRl042/298/bus" dev="sda1" ino=1951 res=1 errno=0
[  608.752030][T12781] MINIX-fs: bad superblock or unable to read bitmaps
[  608.757290][   T26] audit: type=1804 audit(1717578146.480:635): pid=12779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3980388716/syzkaller.jRl042/298/bus" dev="sda1" ino=1951 res=1 errno=0
[  608.759271][T12495] Bluetooth: hci1: command tx timeout
[  608.956674][   T26] audit: type=1800 audit(1717578146.580:636): pid=12785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1939 res=0 errno=0
[  609.158102][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  609.675453][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  610.682151][T12814] input: syz1 as /devices/virtual/input/input74
[  611.928669][T12820] loop3: detected capacity change from 0 to 256
[  611.939317][T12820] exfat: Bad value for 'uid'
[  611.982361][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  612.014084][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  612.280478][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  612.312706][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  612.339464][T12585] device veth0_vlan entered promiscuous mode
[  612.360961][T12529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  612.373876][T12529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  612.399009][T12585] device veth1_vlan entered promiscuous mode
[  613.317136][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  613.398498][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  613.412378][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  613.428771][T12585] device veth0_macvtap entered promiscuous mode
[  613.472220][T12585] device veth1_macvtap entered promiscuous mode
[  613.531134][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.545604][ T8972] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  613.551882][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.592380][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.610090][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.745543][ T8972] usb 2-1: device descriptor read/64, error -71
[  613.767708][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.794881][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.870345][T12585] batman_adv: batadv0: Interface activated: batadv_slave_0
[  613.879221][T12529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  613.893382][T12529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  613.901792][T12529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  613.930561][T12529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  613.947190][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.982798][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.005202][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.021210][ T8972] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  614.029066][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.048717][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.063645][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.079544][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.091409][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.108602][T12585] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.120240][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  614.132437][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  614.155036][T12585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.179597][T12585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.200775][T12585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.222788][T12585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.235545][ T8972] usb 2-1: device descriptor read/64, error -71
[  614.356031][ T8972] usb usb2-port1: attempt power cycle
[  614.420537][ T6425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.434405][ T6425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.490701][ T8477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  614.506440][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.520844][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.543094][ T8477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  614.709575][T12847] loop4: detected capacity change from 0 to 512
[  614.764864][T12846] loop1: detected capacity change from 0 to 2048
[  614.797363][T12847] EXT4-fs (loop4): 1 orphan inode deleted
[  614.807887][T12847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  614.833554][T12847] ext4 filesystem being mounted at /root/syzkaller-testdir3005231947/syzkaller.ETsCwA/1/file1 supports timestamps until 2038 (0x7fffffff)
[  614.891613][T12846] EXT4-fs: Ignoring removed orlov option
[  614.904293][T12846] EXT4-fs (loop1): Test dummy encryption mode enabled
[  614.923590][T12846] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz-executor.1: casefold flag without casefold feature
[  614.937715][T12846] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  614.958982][T12846] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  614.974923][T12846] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  615.061340][T11933] EXT4-fs (loop1): unmounting filesystem.
[  615.144204][T12585] EXT4-fs (loop4): unmounting filesystem.
[  616.655643][T12881] xt_TCPMSS: Only works on TCP SYN packets
[  618.325821][ T4441] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  618.575706][ T4441] usb 4-1: device descriptor read/64, error -71
[  618.821424][T12880] loop2: detected capacity change from 0 to 32768
[  618.831389][T12880] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (12880)
[  618.852610][T12880] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  618.865687][ T4441] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  618.874899][T12880] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  618.883922][T12880] BTRFS info (device loop2): using free space tree
[  618.993746][T12923] xt_TCPMSS: Only works on TCP SYN packets
[  619.026032][T12880] BTRFS info (device loop2): enabling ssd optimizations
[  619.046395][   T26] audit: type=1800 audit(1717578156.830:637): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  619.070225][   T26] audit: type=1800 audit(1717578156.840:638): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  619.092586][ T4441] usb 4-1: device descriptor read/64, error -71
[  619.126000][   T26] audit: type=1800 audit(1717578156.910:639): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  619.225758][ T4441] usb usb4-port1: attempt power cycle
[  619.226626][   T26] audit: type=1800 audit(1717578156.960:640): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  619.271198][T12934] BTRFS error (device loop2: state M): unrecognized mount option '����017777777777777777777770177777777777777777777701777777777777777777777�������������'
[  619.564753][ T5799] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  619.602477][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  619.631860][T12949] loop1: detected capacity change from 0 to 1024
[  619.649308][T12949] EXT4-fs: Ignoring removed nomblk_io_submit option
[  619.665827][T12949] EXT4-fs: Ignoring removed oldalloc option
[  619.696893][T12949] EXT4-fs: test_dummy_encryption requires encrypt feature
[  619.704149][ T4441] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  619.767636][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  619.826016][ T4441] usb 4-1: device descriptor read/8, error -71
[  619.906690][T12955] loop0: detected capacity change from 0 to 128
[  619.944140][   T26] audit: type=1800 audit(1717578157.720:641): pid=12955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048971 res=0 errno=0
[  620.145593][ T4441] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  620.245731][ T4441] usb 4-1: device descriptor read/8, error -71
[  620.428054][ T4441] usb usb4-port1: unable to enumerate USB device
[  620.466626][T12963] loop2: detected capacity change from 0 to 4096
[  620.890487][T12975] loop4: detected capacity change from 0 to 256
[  620.901241][T12975] exfat: Bad value for 'uid'
[  620.992545][T12963] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  621.460923][ T5799] EXT4-fs (loop2): unmounting filesystem.
[  622.373860][T12970] loop0: detected capacity change from 0 to 32768
[  622.384494][T12970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (12970)
[  622.538332][T12989] loop1: detected capacity change from 0 to 1024
[  622.552273][T12989] EXT4-fs: Ignoring removed nomblk_io_submit option
[  622.560586][T12989] EXT4-fs: Ignoring removed oldalloc option
[  622.578564][T12970] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  622.596379][T12989] EXT4-fs: test_dummy_encryption requires encrypt feature
[  622.599450][T12970] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  622.628535][T12970] BTRFS info (device loop0): using free space tree
[  622.660494][T12970] BTRFS info (device loop0): enabling ssd optimizations
[  622.677099][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  622.690503][T13010] loop4: detected capacity change from 0 to 128
[  622.703452][   T26] audit: type=1800 audit(1717578160.480:642): pid=13010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048972 res=0 errno=0
[  622.735935][ T3613] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  622.755273][   T26] audit: type=1800 audit(1717578160.510:643): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  622.857916][   T26] audit: type=1800 audit(1717578160.510:644): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  622.879230][   T26] audit: type=1800 audit(1717578160.580:645): pid=13015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  622.901191][   T26] audit: type=1800 audit(1717578160.600:646): pid=13015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  622.921980][    C1] vkms_vblank_simulate: vblank timer overrun
[  622.964486][T13015] BTRFS error (device loop0: state M): unrecognized mount option '����017777777777777777777770177777777777777777777701777777777777777777777�������������'
[  623.009454][ T3613] usb 3-1: Using ep0 maxpacket: 8
[  623.072093][T13020] ALSA: seq fatal error: cannot create timer (-22)
[  623.125783][ T3613] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  623.147513][ T3613] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  623.187054][ T3613] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  623.221762][ T3613] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  623.235055][ T3613] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  623.244276][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.274997][ T3578] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  623.480388][ T8676] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  623.605781][ T3613] usb 3-1: GET_CAPABILITIES returned 0
[  623.611545][ T3613] usbtmc 3-1:16.0: can't read capabilities
[  624.025215][T13028] loop1: detected capacity change from 0 to 256
[  624.035665][T13028] exfat: Bad value for 'uid'
[  624.143525][ T3613] usb 3-1: USB disconnect, device number 16
[  624.246527][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  624.253331][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  624.506950][ T8676] usb 5-1: Using ep0 maxpacket: 8
[  624.635859][ T8676] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  624.644166][ T8676] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  624.666417][ T8676] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  624.684640][ T8676] usb 5-1: config 250 has no interface number 0
[  624.705019][ T8676] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  624.746471][ T8676] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  624.776257][ T8676] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[  624.818875][ T8676] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  624.857997][ T8676] usb 5-1: config 250 interface 228 has no altsetting 0
[  624.873882][T13041] loop2: detected capacity change from 0 to 128
[  624.913550][   T26] audit: type=1800 audit(1717578162.690:647): pid=13041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048973 res=0 errno=0
[  624.934827][    C1] vkms_vblank_simulate: vblank timer overrun
[  624.985785][ T8676] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  625.000847][ T8676] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  625.010096][ T8676] usb 5-1: Product: syz
[  625.021824][ T8676] usb 5-1: SerialNumber: syz
[  625.072299][ T8676] hub 5-1:250.228: bad descriptor, ignoring hub
[  625.080199][ T8676] hub: probe of 5-1:250.228 failed with error -5
[  625.277045][ T8676] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  625.596014][ T8676] usb 5-1: USB disconnect, device number 18
[  625.617120][ T8676] usblp0: removed
[  625.668775][T13052] loop0: detected capacity change from 0 to 32768
[  625.677244][T13052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (13052)
[  625.693779][T13052] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  625.715718][T13052] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  625.728396][T13052] BTRFS info (device loop0): using free space tree
[  625.841474][T13052] BTRFS info (device loop0): enabling ssd optimizations
[  625.872403][   T26] audit: type=1800 audit(1717578163.650:648): pid=13052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  625.898959][ T4439] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  625.936569][   T26] audit: type=1800 audit(1717578163.690:649): pid=13052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  625.974089][   T26] audit: type=1800 audit(1717578163.750:650): pid=13087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  625.989629][T13059] loop3: detected capacity change from 0 to 32768
[  626.037402][T13059] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (13059)
[  626.070387][T13089] loop4: detected capacity change from 0 to 128
[  626.071132][T13059] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  626.087194][ T3613] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  626.092393][   T26] audit: type=1800 audit(1717578163.780:651): pid=13087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  626.116039][T13059] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  626.139065][T13087] BTRFS error (device loop0: state M): unrecognized mount option '����017777777777777777777770177777777777777777777701777777777777777777777�������������'
[  626.154948][T13059] BTRFS info (device loop3): setting nodatasum
[  626.165789][T13059] BTRFS info (device loop3): force zlib compression, level 3
[  626.173247][T13059] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  626.183411][ T4439] usb 3-1: Using ep0 maxpacket: 8
[  626.189569][   T26] audit: type=1800 audit(1717578163.910:652): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048974 res=0 errno=0
[  626.215283][T13059] BTRFS info (device loop3): use lzo compression, level 0
[  626.223950][T13059] BTRFS info (device loop3): turning on flush-on-commit
[  626.232704][T13059] BTRFS info (device loop3): enabling auto defrag
[  626.241895][T13059] BTRFS info (device loop3): using free space tree
[  626.274383][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  626.309771][ T4439] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  626.329607][ T4439] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  626.357906][ T4439] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  626.365800][ T3613] usb 2-1: Using ep0 maxpacket: 16
[  626.372062][ T4439] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  626.386515][ T4439] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  626.395785][ T4439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.419412][ T3578] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  626.450169][T13059] BTRFS info (device loop3): enabling ssd optimizations
[  626.490934][ T3613] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  626.502933][ T3613] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  626.517190][ T3613] usb 2-1: config 0 interface 0 has no altsetting 0
[  626.675855][ T3613] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  626.684954][ T3613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.686082][ T7009] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  626.694607][ T3613] usb 2-1: Product: syz
[  626.707821][ T3613] usb 2-1: Manufacturer: syz
[  626.708470][ T4439] usb 3-1: GET_CAPABILITIES returned 0
[  626.712541][ T3613] usb 2-1: SerialNumber: syz
[  626.725268][ T3613] usb 2-1: config 0 descriptor??
[  626.726182][ T4439] usbtmc 3-1:16.0: can't read capabilities
[  626.770256][ T3613] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input76
[  626.997020][    T7] usb 2-1: USB disconnect, device number 19
[  627.003094][ T4801] usb 3-1: USB disconnect, device number 17
[  627.036705][   T26] audit: type=1326 audit(1717578164.820:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13115 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6aac67cee9 code=0x0
[  627.134322][T13120] loop3: detected capacity change from 0 to 1024
[  628.513571][T13148] loop1: detected capacity change from 0 to 4096
[  628.519207][T13136] loop4: detected capacity change from 0 to 32768
[  628.539548][T13136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (13136)
[  628.552858][T13148] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  628.572353][T13136] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  628.591974][T13136] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  628.609070][T13136] BTRFS info (device loop4): using free space tree
[  628.737722][T13136] BTRFS info (device loop4): enabling ssd optimizations
[  628.771909][   T26] audit: type=1800 audit(1717578166.550:654): pid=13136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  628.792907][ T4439] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  628.830780][   T26] audit: type=1800 audit(1717578166.590:655): pid=13136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  628.892638][   T26] audit: type=1800 audit(1717578166.590:656): pid=13136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  629.025432][T13174] ALSA: seq fatal error: cannot create timer (-22)
[  629.066692][ T4439] usb 3-1: Using ep0 maxpacket: 8
[  629.174462][T13173] BTRFS error (device loop4: state M): unrecognized mount option '����017777777777777777777770177777777777777777777701777777777777777777777�������������'
[  629.215807][ T4439] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  629.252223][ T4439] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  629.291034][ T4439] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  629.331382][ T4439] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  629.385206][ T4439] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  629.418989][ T4439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.674767][T13181] loop3: detected capacity change from 0 to 128
[  629.743950][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  630.183283][T12585] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  630.463782][ T4439] usb 3-1: GET_CAPABILITIES returned 0
[  630.469451][ T4439] usbtmc 3-1:16.0: can't read capabilities
[  630.539784][T13187] trusted_key: encrypted_key: master key parameter '��g9*pm�s-H�8�' is invalid
[  630.677245][ T4439] usb 3-1: USB disconnect, device number 18
[  630.803658][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  630.803672][   T26] audit: type=1326 audit(1717578168.580:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13194 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6aac67cee9 code=0x0
[  631.509130][T13205] loop2: detected capacity change from 0 to 4096
[  631.572833][T13205] NILFS (loop2): invalid segment: Checksum error in segment payload
[  631.622639][T13205] NILFS (loop2): trying rollback from an earlier position
[  631.687593][T13205] NILFS (loop2): recovery complete
[  631.720554][T13215] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  631.776857][   T26] audit: type=1800 audit(1717578169.550:659): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=12 res=0 errno=0
[  631.875400][   T26] audit: type=1804 audit(1717578169.600:660): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir546469884/syzkaller.cy9XB0/395/file1/file0" dev="loop2" ino=12 res=1 errno=0
[  632.804719][T13235] loop0: detected capacity change from 0 to 1024
[  632.815033][T13235] EXT4-fs: Ignoring removed nomblk_io_submit option
[  632.825000][T13235] EXT4-fs: Ignoring removed oldalloc option
[  632.835365][T13235] EXT4-fs: test_dummy_encryption requires encrypt feature
[  632.924572][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  632.945754][  T102] ------------[ cut here ]------------
[  632.951754][  T102] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  632.961982][  T102] WARNING: CPU: 1 PID: 102 at net/mac80211/rate.c:385 __rate_control_send_low+0x653/0x890
2024/06/05 09:02:50 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  632.971902][  T102] Modules linked in:
[  632.975828][  T102] CPU: 1 PID: 102 Comm: kworker/u4:4 Not tainted 6.1.92-syzkaller #0
[  632.983919][  T102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  632.994053][  T102] Workqueue: events_unbound cfg80211_wiphy_work
[  633.000463][  T102] RIP: 0010:__rate_control_send_low+0x653/0x890
[  633.006773][  T102] Code: 48 8b 14 24 0f 85 db 01 00 00 8b 0a 48 c7 c7 c0 02 fd 8b 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 fd e1 47 f7 <0f> 0b e9 79 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff
[  633.026447][  T102] RSP: 0018:ffffc900020bf540 EFLAGS: 00010246
[  633.032530][  T102] RAX: 50f71124c9cd8400 RBX: 000000000000000c RCX: ffff888014babb80
[  633.040656][  T102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  633.048764][  T102] RBP: ffff88807413f668 R08: ffffffff81528ede R09: fffff52000417e09
[  633.056789][  T102] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000800
[  633.065044][  T102] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000
[  633.073054][  T102] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  633.081992][  T102] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  633.088592][  T102] CR2: 0000001b32831000 CR3: 000000005d341000 CR4: 00000000003506e0
[  633.096577][  T102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  633.104539][  T102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  633.112515][  T102] Call Trace:
[  633.115801][  T102]  <TASK>
[  633.118721][  T102]  ? __warn+0x15a/0x520
[  633.122885][  T102]  ? __rate_control_send_low+0x653/0x890
[  633.128618][  T102]  ? report_bug+0x2af/0x500
[  633.133102][  T102]  ? __rate_control_send_low+0x653/0x890
[  633.138742][  T102]  ? handle_bug+0x3d/0x70
[  633.143059][  T102]  ? exc_invalid_op+0x16/0x40
[  633.147744][  T102]  ? asm_exc_invalid_op+0x16/0x20
[  633.152758][  T102]  ? __warn_printk+0x28e/0x350
[  633.157530][  T102]  ? __rate_control_send_low+0x653/0x890
[  633.163186][  T102]  rate_control_send_low+0x1a8/0x770
[  633.168477][  T102]  rate_control_get_rate+0x20a/0x5d0
[  633.173750][  T102]  ieee80211_tx_h_rate_ctrl+0xc72/0x1990
[  633.179402][  T102]  ? ieee80211_tx_h_select_key+0x16a0/0x16a0
[  633.185386][  T102]  ? ieee80211_queue_skb+0xd0/0x2300
[  633.190684][  T102]  invoke_tx_handlers_late+0xb2/0x1910
[  633.196169][  T102]  ? ieee80211_tx_h_select_key+0x9dd/0x16a0
[  633.202058][  T102]  ? invoke_tx_handlers_early+0xa0d/0x1d30
[  633.207878][  T102]  ieee80211_tx+0x2df/0x460
[  633.212454][  T102]  ? ieee80211_skb_resize+0x640/0x640
[  633.217835][  T102]  ? __bpf_trace_irq_handler_exit+0x7/0x10
[  633.223632][  T102]  ? ieee80211_xmit+0x307/0x3e0
[  633.228491][  T102]  ? __ieee80211_tx_skb_tid_band+0x49a/0x610
[  633.234457][  T102]  __ieee80211_tx_skb_tid_band+0x4de/0x610
[  633.240276][  T102]  ? ieee80211_handle_roc_started+0x14f/0x440
[  633.246361][  T102]  ieee80211_handle_roc_started+0x267/0x440
[  633.252261][  T102]  ? ieee80211_handle_roc_started+0x14f/0x440
[  633.258347][  T102]  _ieee80211_start_next_roc+0x7bb/0xb30
[  633.264089][  T102]  ieee80211_roc_work+0x2b/0x40
[  633.268982][  T102]  cfg80211_wiphy_work+0x21a/0x250
[  633.274092][  T102]  ? process_one_work+0x7a9/0x11d0
[  633.279226][  T102]  process_one_work+0x8a9/0x11d0
[  633.284164][  T102]  ? worker_detach_from_pool+0x260/0x260
[  633.289812][  T102]  ? _raw_spin_lock_irqsave+0x120/0x120
[  633.295350][  T102]  ? kthread_data+0x4e/0xc0
[  633.299875][  T102]  ? wq_worker_running+0x97/0x190
[  633.304892][  T102]  worker_thread+0xa47/0x1200
[  633.309592][  T102]  kthread+0x28d/0x320
[  633.314082][  T102]  ? worker_clr_flags+0x190/0x190
[  633.319111][  T102]  ? kthread_blkcg+0xd0/0xd0
[  633.323780][  T102]  ret_from_fork+0x1f/0x30
[  633.328341][  T102]  </TASK>
[  633.331347][  T102] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  633.338609][  T102] CPU: 1 PID: 102 Comm: kworker/u4:4 Not tainted 6.1.92-syzkaller #0
[  633.346665][  T102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  633.356713][  T102] Workqueue: events_unbound cfg80211_wiphy_work
[  633.362948][  T102] Call Trace:
[  633.366225][  T102]  <TASK>
[  633.369155][  T102]  dump_stack_lvl+0x1e3/0x2cb
[  633.373829][  T102]  ? nf_tcp_handle_invalid+0x642/0x642
[  633.379278][  T102]  ? panic+0x764/0x764
[  633.383332][  T102]  ? 0xffffffffa0000814
[  633.387479][  T102]  ? vscnprintf+0x59/0x80
[  633.391791][  T102]  panic+0x318/0x764
[  633.395678][  T102]  ? __warn+0x169/0x520
[  633.399835][  T102]  ? memcpy_page_flushcache+0xfc/0xfc
[  633.405202][  T102]  ? ret_from_fork+0x1f/0x30
[  633.409782][  T102]  __warn+0x348/0x520
[  633.413751][  T102]  ? __rate_control_send_low+0x653/0x890
[  633.419456][  T102]  report_bug+0x2af/0x500
[  633.423784][  T102]  ? __rate_control_send_low+0x653/0x890
[  633.429406][  T102]  handle_bug+0x3d/0x70
[  633.433562][  T102]  exc_invalid_op+0x16/0x40
[  633.438050][  T102]  asm_exc_invalid_op+0x16/0x20
[  633.442885][  T102] RIP: 0010:__rate_control_send_low+0x653/0x890
[  633.449109][  T102] Code: 48 8b 14 24 0f 85 db 01 00 00 8b 0a 48 c7 c7 c0 02 fd 8b 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 fd e1 47 f7 <0f> 0b e9 79 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff
[  633.468711][  T102] RSP: 0018:ffffc900020bf540 EFLAGS: 00010246
[  633.474766][  T102] RAX: 50f71124c9cd8400 RBX: 000000000000000c RCX: ffff888014babb80
[  633.482730][  T102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  633.490688][  T102] RBP: ffff88807413f668 R08: ffffffff81528ede R09: fffff52000417e09
[  633.498646][  T102] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000800
[  633.506600][  T102] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000
[  633.514559][  T102]  ? __warn_printk+0x28e/0x350
[  633.519336][  T102]  rate_control_send_low+0x1a8/0x770
[  633.524614][  T102]  rate_control_get_rate+0x20a/0x5d0
[  633.529892][  T102]  ieee80211_tx_h_rate_ctrl+0xc72/0x1990
[  633.535536][  T102]  ? ieee80211_tx_h_select_key+0x16a0/0x16a0
[  633.541517][  T102]  ? ieee80211_queue_skb+0xd0/0x2300
[  633.547239][  T102]  invoke_tx_handlers_late+0xb2/0x1910
[  633.552702][  T102]  ? ieee80211_tx_h_select_key+0x9dd/0x16a0
[  633.558593][  T102]  ? invoke_tx_handlers_early+0xa0d/0x1d30
[  633.564399][  T102]  ieee80211_tx+0x2df/0x460
[  633.568959][  T102]  ? ieee80211_skb_resize+0x640/0x640
[  633.574329][  T102]  ? __bpf_trace_irq_handler_exit+0x7/0x10
[  633.580142][  T102]  ? ieee80211_xmit+0x307/0x3e0
[  633.584993][  T102]  ? __ieee80211_tx_skb_tid_band+0x49a/0x610
[  633.590966][  T102]  __ieee80211_tx_skb_tid_band+0x4de/0x610
[  633.596864][  T102]  ? ieee80211_handle_roc_started+0x14f/0x440
[  633.602938][  T102]  ieee80211_handle_roc_started+0x267/0x440
[  633.608828][  T102]  ? ieee80211_handle_roc_started+0x14f/0x440
[  633.614890][  T102]  _ieee80211_start_next_roc+0x7bb/0xb30
[  633.620520][  T102]  ieee80211_roc_work+0x2b/0x40
[  633.625358][  T102]  cfg80211_wiphy_work+0x21a/0x250
[  633.630459][  T102]  ? process_one_work+0x7a9/0x11d0
[  633.635561][  T102]  process_one_work+0x8a9/0x11d0
[  633.640503][  T102]  ? worker_detach_from_pool+0x260/0x260
[  633.646125][  T102]  ? _raw_spin_lock_irqsave+0x120/0x120
[  633.651764][  T102]  ? kthread_data+0x4e/0xc0
[  633.656258][  T102]  ? wq_worker_running+0x97/0x190
[  633.661273][  T102]  worker_thread+0xa47/0x1200
[  633.665946][  T102]  kthread+0x28d/0x320
[  633.669996][  T102]  ? worker_clr_flags+0x190/0x190
[  633.675000][  T102]  ? kthread_blkcg+0xd0/0xd0
[  633.679570][  T102]  ret_from_fork+0x1f/0x30
[  633.683982][  T102]  </TASK>
[  633.687141][  T102] Kernel Offset: disabled
[  633.691591][  T102] Rebooting in 86400 seconds..