last executing test programs:

1m2.594140282s ago: executing program 0 (id=556):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffbfe, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)

1m2.082000498s ago: executing program 0 (id=560):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed394444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7dc, &(0x7f0000000d80)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x4b, 0x23, "4372071e845c149700352a72ee4d3795968b26680000000055965737ebaaec032b9753"}})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)
truncate(&(0x7f0000000300)='./file0\x00', 0x7fff)

1m0.310336601s ago: executing program 0 (id=566):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000002800010029bd7000fcf125120d"], 0x14}}, 0x20000010)
mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2f75466f09b806490f2afe0e09153ece3519bf"])
recvmmsg(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/159, 0x9f}], 0x1}, 0x9}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000740)=""/206, 0xce}, {0x0}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/219, 0xdb}], 0x4, &(0x7f00000009c0)=""/225, 0xe1}, 0x8}, {{&(0x7f0000000ac0)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/193, 0xc1}, {&(0x7f0000000c40)=""/216, 0xd8}], 0x2, &(0x7f0000000d80)=""/106, 0x6a}, 0x6}, {{&(0x7f0000000e00)=@in6, 0x80, &(0x7f0000000f00)=[{0x0}], 0x1, &(0x7f0000000f40)=""/89, 0x59}, 0x20b2}, {{&(0x7f0000002000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)=""/135, 0x87}], 0x1, &(0x7f0000002200)=""/70, 0x46}, 0x28eddeb9}, {{&(0x7f0000002280)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002300)=""/195, 0xc3}, {&(0x7f0000002400)=""/122, 0x7a}, {&(0x7f0000002480)=""/100, 0x64}, {&(0x7f0000002500)=""/79, 0x4f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/212, 0xd4}], 0x6, &(0x7f0000003700)=""/101, 0x65}, 0x2}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003780)=""/181, 0xb5}, {&(0x7f0000003840)=""/136, 0x88}, {&(0x7f0000003900)=""/178, 0xb2}, {&(0x7f00000039c0)=""/130, 0x82}, {&(0x7f0000003a80)=""/97, 0x61}, {&(0x7f0000003b00)=""/113, 0x71}, {&(0x7f0000003b80)=""/5, 0x5}, {&(0x7f0000003bc0)=""/186, 0xba}, {&(0x7f0000003c80)=""/17, 0x11}], 0x9}, 0x10000}], 0x7, 0x40010000, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r7, 0x1ff)
connect$inet(r7, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0xee00, 0x0)

56.668424647s ago: executing program 0 (id=571):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$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")
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x9d)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
listxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)

55.944783776s ago: executing program 0 (id=578):
io_uring_setup(0x1581, &(0x7f0000000a40)={0x0, 0x2000000, 0x40, 0x0, 0x3bd})
r0 = getpid()
prlimit64(r0, 0x3, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0106c0fd000000fdff", @ANYRES32=r3, @ANYBLOB="280050800800030004ac0f0005000200000000000500090002"], 0x44}, 0x1, 0x0, 0x0, 0x4091}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x1d)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3302)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
openat(0xffffffffffffff9c, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x103041, 0x1ae)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(r7, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2)
socket$netlink(0x10, 0x3, 0x0)

52.118354875s ago: executing program 0 (id=589):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303135322c666de17330303030303030303024dd7bf5028fddae3e3e7a78303030303030362c6769643d", @ANYRESDEC=r0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000080)={0xcc, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

51.73548931s ago: executing program 32 (id=589):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303135322c666de17330303030303030303024dd7bf5028fddae3e3e7a78303030303030362c6769643d", @ANYRESDEC=r0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000080)={0xcc, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

39.20129628s ago: executing program 1 (id=630):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001bc0)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x1, 0x4, 0x1ff, {0x8, 0x1, 0x7, 0xffff, 0x4, 0x4}, {0x5, 0x0, 0x1, 0x1, 0x7, 0x6}, 0x9, 0xe, 0xf}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x408c014)

33.459142813s ago: executing program 1 (id=640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8000)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x408c014)

32.219009599s ago: executing program 1 (id=645):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f00000024c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@gid}, {@dmode={'dmode', 0x3d, 0x8}}, {@undelete}, {@partition={'partition', 0x3d, 0x1}}, {@unhide}, {}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cpuacct.usage_all\x00', 0x275a, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

31.499328148s ago: executing program 1 (id=648):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000000780)=ANY=[], 0x10, 0x1c4, &(0x7f0000000440)="$eJzsVb/uEkEQ/uZu4UAtqG0lQqPA2fgG8gA+gAROJB7+4S5RCMVpQ2NhfAkSn8LCRHsLY0xssNBECyxJDGZ359YlasDkyO/3S/ZLyHzzzc7sDpedvZM8TAIAP9fzPmpQIFzARyIIAA3S2qas7Q+2W8YXof0O6y/ZfmabTGfvnmk6u9uL42iSTPcQImDfmh1y0KLDydunuwqhqMpFk9TX/+yfoec7SvC3NZyLE++iOOL/s52vRe9VwrHbAYxCB2R9eKE/52n5Fkci3n9lJeDxldx44uG7ct6v531JbvEUk9pA//IrodZI57W15qIAMoB8bE0doaYl0ADQSscPWsl0dmU07g2jYXQvDJG135znKxq1W7dHcdQm6xieJAIG8p5WrXgJwKff8QwWyDqaxDmA7Fw5f/Ph3LxkJVYBz8q1a+i6r0yNgDX5V9zEZVQAPMpkOGS1DllNQLXWBcFnpyOscwIbeKiowNX+/XiwAIHytCWEqdFZoSQdyoAoZEdFrl037S/Y1tl22S7Zrtjmb1f+JglV4Rt7zQwo43EvTSfq8dLMaKHRwprZ2eNd89eQ8pMEcHBwcHBwcHA4I/gVAAD//7B1VIM=")
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)

30.457338481s ago: executing program 1 (id=652):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0)
read$hiddev(r0, &(0x7f00000022c0)=""/4095, 0xfff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = semget$private(0x0, 0x4, 0x1)
mknodat(0xffffffffffffffff, 0x0, 0x20, 0x4)
semtimedop(r1, 0x0, 0x0, 0x0)
read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea)

27.599357718s ago: executing program 1 (id=658):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000001000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

26.884351967s ago: executing program 33 (id=658):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000001000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

13.2770873s ago: executing program 4 (id=691):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000002800010029bd7000fcf125120d"], 0x14}}, 0x20000010)
mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2f75466f09b806490f2afe0e09153ece3519bf"])
recvmmsg(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/159, 0x9f}], 0x1}, 0x9}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000740)=""/206, 0xce}, {0x0}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/219, 0xdb}], 0x4, &(0x7f00000009c0)=""/225, 0xe1}, 0x8}, {{&(0x7f0000000ac0)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/193, 0xc1}, {&(0x7f0000000c40)=""/216, 0xd8}], 0x2, &(0x7f0000000d80)=""/106, 0x6a}, 0x6}, {{&(0x7f0000000e00)=@in6, 0x80, &(0x7f0000000f00)=[{0x0}], 0x1, &(0x7f0000000f40)=""/89, 0x59}, 0x20b2}, {{&(0x7f0000002000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)=""/135, 0x87}], 0x1, &(0x7f0000002200)=""/70, 0x46}, 0x28eddeb9}, {{&(0x7f0000002280)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002300)=""/195, 0xc3}, {&(0x7f0000002400)=""/122, 0x7a}, {&(0x7f0000002480)=""/100, 0x64}, {&(0x7f0000002500)=""/79, 0x4f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/212, 0xd4}], 0x6, &(0x7f0000003700)=""/101, 0x65}, 0x2}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003780)=""/181, 0xb5}, {&(0x7f0000003840)=""/136, 0x88}, {&(0x7f0000003900)=""/178, 0xb2}, {&(0x7f00000039c0)=""/130, 0x82}, {&(0x7f0000003a80)=""/97, 0x61}, {&(0x7f0000003b00)=""/113, 0x71}, {&(0x7f0000003b80)=""/5, 0x5}, {&(0x7f0000003bc0)=""/186, 0xba}, {&(0x7f0000003c80)=""/17, 0x11}], 0x9}, 0x10000}], 0x7, 0x40010000, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r7, 0x1ff)
connect$inet(r7, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xb, 0x0, &(0x7f0000000500)="572e1f310c8e18e9eab954", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0xee00, 0x0)

11.680544821s ago: executing program 4 (id=692):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f000000d980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/141, 0x8d}, 0x9}], 0x1, 0x2031, 0x0)

11.360942795s ago: executing program 4 (id=696):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@local, 0x1})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@host, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@local}, 0x1, 0x0, 0x40})

10.95963237s ago: executing program 4 (id=698):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtclass={0x440, 0x28, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x9}, {0x0, 0x2}, {0xfff1, 0xc}}, [@c_atm={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xffffffff, 0x2, 0x101, 0x1, 0x2, 0x4d6, 0x8, 0x5, 0x200, 0xfffffff7, 0x9, 0x8, 0x0, 0x15, 0x3, 0x4, 0x2, 0x800, 0x8000, 0x123, 0x10001, 0x1, 0x727d1b26, 0x8, 0x3, 0xe, 0x7, 0x0, 0x67, 0x3, 0x3, 0x0, 0x7, 0x6, 0x101, 0x2, 0x6b7f, 0x3, 0xd, 0xffc00000, 0xcea, 0xd, 0x4, 0x9, 0x80000000, 0xd, 0x1, 0x2, 0x9, 0x7, 0x4, 0x9a, 0x100, 0x7, 0x849, 0xf2d, 0x8, 0x4, 0xae7, 0x0, 0xffff9d65, 0x1000, 0x3, 0x9, 0x6660, 0x6, 0x0, 0x8, 0x1, 0x19a7, 0x4, 0x80000000, 0x78, 0x8, 0xb, 0x0, 0x9, 0xdf, 0x307, 0xfffffff8, 0x8, 0xf1, 0x4, 0x5, 0x6, 0x7f, 0x10001, 0x40, 0x1, 0xe7a, 0x144, 0x6, 0x2, 0x100, 0x6, 0xfff, 0x8000, 0x9, 0x8e10, 0x10001, 0x80000001, 0x3, 0x7, 0x5, 0xfffffffc, 0x0, 0x8dc2, 0x80000001, 0x2333e6ef, 0x7fffffff, 0x1, 0xf8000000, 0x9, 0x80000001, 0x9, 0x4f71, 0x8, 0xd5, 0x11, 0x6, 0x3, 0x7, 0x0, 0xfffff000, 0x100, 0x3, 0x5, 0x3, 0x8, 0x7, 0x0, 0xd9, 0x0, 0x400, 0x9, 0x1, 0x4, 0x3, 0x0, 0x3, 0x4, 0x3ff, 0x9bf1, 0x24, 0x9, 0xa6, 0x3ff, 0xc, 0xbed, 0x401, 0x7, 0x7fff, 0x3, 0x80000000, 0x8, 0xd, 0x8, 0x7, 0x726f, 0x7fff, 0x6, 0x7fff, 0x8, 0x0, 0x6, 0x67a, 0xf09, 0x144, 0x6, 0xa, 0x2f2, 0x9, 0x0, 0x7fffffff, 0xfffffff9, 0x5c, 0x4, 0x7, 0x5, 0x9, 0x9, 0x2, 0x10000, 0x4, 0x4, 0x6, 0x13, 0x0, 0x3, 0x3, 0x9, 0x1000, 0xd7, 0x80000001, 0xc5cf, 0x101, 0x33, 0xffffffff, 0xffff, 0x3, 0x3, 0x2, 0x3, 0x0, 0x1, 0xb6, 0xd56d, 0x9, 0x85429a37, 0x109e, 0x507, 0x4, 0x7, 0x935, 0x2, 0x8, 0x6, 0x8, 0x4, 0x7, 0x2, 0x81, 0x0, 0x7, 0x32a8, 0xfff, 0x80000000, 0x7, 0x1000, 0x8, 0xfff, 0x89, 0xfffffff8, 0x10001, 0x8, 0x5, 0x7fffffff, 0xff, 0x1, 0x7fff, 0x2, 0x8, 0x401, 0x4, 0xffff, 0x3, 0x8, 0x3ff, 0x0, 0x80000001, 0x1, 0x0, 0x5, 0xff, 0x6, 0x80000001]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6288f669, 0x3, 0xc000}}}, 0x78)

9.785314115s ago: executing program 4 (id=706):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000002800010029bd7000fcf125120d"], 0x14}}, 0x20000010)
mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2f75466f09b806490f2afe0e09153ece3519bf"])
recvmmsg(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/159, 0x9f}], 0x1}, 0x9}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000740)=""/206, 0xce}, {&(0x7f0000000840)=""/66, 0x42}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/219, 0xdb}], 0x4, &(0x7f00000009c0)=""/225, 0xe1}, 0x8}, {{&(0x7f0000000ac0)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/193, 0xc1}, {&(0x7f0000000c40)=""/216, 0xd8}], 0x2, &(0x7f0000000d80)=""/106, 0x6a}, 0x6}, {{&(0x7f0000000e00)=@in6, 0x80, &(0x7f0000000f00)=[{0x0}], 0x1, &(0x7f0000000f40)=""/89, 0x59}, 0x20b2}, {{&(0x7f0000002000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)=""/135, 0x87}], 0x1, &(0x7f0000002200)=""/70, 0x46}, 0x28eddeb9}, {{&(0x7f0000002280)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002300)=""/195, 0xc3}, {&(0x7f0000002400)=""/122, 0x7a}, {&(0x7f0000002480)=""/100, 0x64}, {&(0x7f0000002500)=""/79, 0x4f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/212, 0xd4}], 0x6, &(0x7f0000003700)=""/101, 0x65}, 0x2}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003780)=""/181, 0xb5}, {&(0x7f0000003840)=""/136, 0x88}, {&(0x7f0000003900)=""/178, 0xb2}, {&(0x7f00000039c0)=""/130, 0x82}, {&(0x7f0000003a80)=""/97, 0x61}, {&(0x7f0000003b00)=""/113, 0x71}, {&(0x7f0000003b80)=""/5, 0x5}, {&(0x7f0000003bc0)=""/186, 0xba}, {&(0x7f0000003c80)=""/17, 0x11}], 0x9}, 0x10000}], 0x7, 0x40010000, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ffffff0600000000fcffffff8500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r7, 0x1ff)
connect$inet(r7, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000500)="572e1f310c8e18e9eab9547ed387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0xee00, 0x0)

8.319179703s ago: executing program 4 (id=713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7.405923575s ago: executing program 34 (id=713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7.386088205s ago: executing program 3 (id=717):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000001f80)=ANY=[@ANYBLOB="73686f77657865632c756e695f786c6174653d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c756e695f786c6174653d302c726f6469722c636865636b3d7374726963742c726f6469722c756e695f786c6174653d312c696f636861727365743d6d6163637972696c6c69632c636f6465706167653d3837342c756e695f786c6174653d312c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303030303030303030362c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c726f6469722c756e695f786c6174653d312c757466383d312c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c757466383d312c73686f72746e616d653d77696e39352c757466383d312c726f6469722c646566636f6e746578743d756e636f6e66696e65645f752c00318f7e629767ced6883360f35407762d12b615023e62d95e0ad95350295ffedb27f3301281ad27bf9a40ed5e9e3130366c7c64e2bba17de457f57b"], 0x6, 0x2d1, &(0x7f0000000740)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mknod(&(0x7f0000000280)='./bus\x00', 0x8000, 0x9)
truncate(&(0x7f00000000c0)='./bus\x00', 0x7)

6.696183814s ago: executing program 3 (id=718):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
pipe(0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x840, 0x4)
connect$unix(r2, &(0x7f0000000140)=@abs={0x1}, 0x6e)
sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x78}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x58}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000070a010165de4f8428bb000000000000000300"], 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6a8, &(0x7f0000001dc0)="$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")
getcwd(0x0, 0x0)
symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5.632334528s ago: executing program 3 (id=719):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x80, 0x200, 0x1, 0x7fe, 0x8, 0x40009, 0x6, 0x4, 0x2c, 0x1})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000006500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})

5.559123358s ago: executing program 2 (id=720):
openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="f9c81d47136d376f0ec8f4513060d2e8ce32b7f8b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ptrace$getsig(0x4202, r0, 0x6, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r3, 0x0, 0x1500}, 0x38)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'})
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000240)="11", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380))
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f0000033380)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYBLOB="108f2bbc120007171ae540810800f1d9ed7e6b556183cf5283da18c329fc2d1132e25424748c5ce2f044a26a71a4de16e74d22c6a1c791fde85bd9a764fe6fce36aa6b3fa6955e74b5b00555552570a64d455cedd37b6ad3f685ff3807c16bc31bc554aedf0b654e4fd98d6fee2d132b17cfa29e5cb8ad61cfa808973a8765ee335d3d94ed492ec65735a9789fec9e90fcf11ddc857c39ecfaeff5d28676fb5647093c8d4c7ed6ffe24515ce75f94c6e71ba05f8f7afb787856e3c7f6296f2b92894e189750940ccc0dda4db6115e9c8399bc0805eaf4cd1cd0824c2ac82d9a43f9e763a90b662", @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x1, 0xa53, &(0x7f0000000bc0)="$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")
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

4.196195146s ago: executing program 2 (id=723):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)='\\', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140))
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0x8000, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x4000, 0x5, 0x4, 0x3, 0x4, 0x6, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0x7, 0x1, 0x1, 0x5, 0xd091, 0x3e, 0x7, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x9, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x200c7, 0xf9, 0xd, 0x2bf, 0x6c9, 0x10000007, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x0, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f5, 0x0, 0x2, 0x80, 0x9, 0x4, 0x9, 0x8, 0x800000d, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0xffffffff, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0xf5fd, 0x0, 0x5, 0xfffffffa, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x6c8712a, 0x5, 0xad, 0x4, 0x5, 0x20000005, 0x800, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0xc4, 0x120000, 0xbe, 0x9, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0xa, 0x80000006, 0xffffffff, 0x5, 0x7d, 0x1fc, 0x6, 0x6, 0x8, 0x57b, 0x101, 0x10000, 0x6, 0x7fff, 0xfffd, 0x4, 0x20002, 0x5, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x10000003, 0x7e, 0x100, 0x9600, 0xa, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0xfffffffe, 0x6, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.351971957s ago: executing program 3 (id=724):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000e40)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f630100727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72682e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000d6d876f2e37dde582f497ab6d4d11f7211b4aaf087f529ffc0000ee312a30cc69ae25ac6a986a76824020b12971980e00a27786eef1c2537fdcb1de9c4bed7175c6704f0c39d14da07a8edf97525a0c8138686d6e2b8d90102027245729e944719894ebe079bf1ab2b7002c54c5c714bff93d9475ff23f653874321e4ecc1ebd2baa44aea86a1617e53fcc5683e5c7b14e5158239aebf96ef3b73359414993575bf4e880ac24d7fee38c5a22f6fae6a22a2185cd5a25b7bc11062d649340f8220bfa18cae94fd73afbb38b2fc20a263e091c5eb14ce630628aaf65b7ccab9b4d3b2c220153cd28c86e6c8e58903c66698fd27f4f22a9fd1dd67d70de664e3b985f20ada8c0f531865a9093fe6d3cd52c721dcfe391a812583c4e745b824429ce98f2a7928d22c9b5302719058f593fddbbb60ca7", @ANYRES64=0x0, @ANYRESDEC], 0x1, 0x284, &(0x7f0000000b80)="$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")
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
utimes(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
rmdir(&(0x7f0000000180)='./file0/../file0\x00')

3.208140359s ago: executing program 5 (id=725):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[<r3=>0x0], &(0x7f0000000200), 0x1, r2, 0xcccccccc})
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x18, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x9})

2.928637942s ago: executing program 3 (id=726):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0x0, 0x5, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xd, 0x3, 0xffc}, {0x3, 0x0, 0x7bc5680b, 0xf}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

2.881218983s ago: executing program 5 (id=727):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
pipe(0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x840, 0x4)
connect$unix(r2, &(0x7f0000000140)=@abs={0x1}, 0x6e)
sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x78}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x58}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000070a010165de4f8428bb000000000000000300"], 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6a8, &(0x7f0000001dc0)="$eJzs3c1vHGcdB/DvrDd2Ni0hSZM2oEq1GgkQEYkTKy3mQkAI5VBVVTlwthKnseKkxXGRWyHi8HrtoX9AOeSCOCFx4hKpcOBCb70hH5GQuJQD4cKimZ2117vrzbpN/EI/n2j2eZt55je/mdk3K9oAn1tXzqb5IEWunH1ltWyv359dWr8/e6tTf7WZZCrJWlJWG0mKf7fb7Q+Ty0mxMU3RVw54f3Hu9Y8/Wf97p9Wsl2r9xqjt+tTrrfV1r3X7ppNM1OVnsGW+q595vmIj8stJztQl7LlDSdpb/OgvT2+M9GgN2/rwrsQIPFlF53VzwLHkSH2jl+8Duq+8jd2NbjwT3SDH0P8OAgAAAA6a6jNwc6B7S88XH+ZhVoujuxgWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHGhryWT98/lFvTS69ekU3d//n6z7Utf3lxd2tvqDJxUHAAAAAAAAAOyiFx7mYVZztNtuF9Xf/F+sGierx6fydu5kIcs5l9XMZyUrWc6FJMd6JppcnV9Zmeq2Rm15cdiWyxcfEWh36tZjOGgAAAAAAAAA+P/zs1zZ/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsB0Uy0SlS3OvpPpZGM8nhJJNlx1ryUbd+kD3Y6wAAAABgF0wlD7Oao912u8jJJM9W3wEcztu5nZUsZiVLWci16nuBzqf+xvr92aX1+7O3ymVw3u/8c0dhVDOm893D8D2frtZo5XoWq55zuZo3s5RraVRblk7X8XRn7YvrXhlT8e3ay+NFdq0uyyN/ry4H3N3RwW5nh1+mHKsycqiTkYlkpo6tzMbx7pkZfoZ2eHa27CkLuZDGRrAn+/Y0ufVgtuZ8c8rGqP0dqcvyeH61Xc73RCcT/213LORiz9X37OicJ1/9w+9+OFPX988hjWeiLtvVY2vwmpjtycRz42TixtLtmzeu3zl70DIxYKbKxKmN9pV8Pz/I2UzntSxnMT/OfFaykOl8r6rN1ye/6Lnlt8nU5S2t1x4VyWR9hXZO1s5ierHa9mgW82rezLUs5KXq38VcyMu5lEuZ6znDp0af4equbwze9ZX2F4YGf+ZrdaWV5Nd1uT+UeT3ek9fNq36myvfxLT11lopmToyRpSHPjaM0v1xXyn38/FFPpLuqPxMXeq6XZ0Zn4jfV08qdpds3l2/MvzXe7k68V1fK++iXyfT+eSIpr5cT5cmqWlNbro5y7JmNsa35KsdObow1BsZO5Y9pNrt7WczatnfqZP0ebnCmi9XYc0PHZqux0z1jw95vAbDvHfn6kcnWP1p/bX3Q+kXrRuuVw9+d+ubU85M59KdD32rOTHyl8Xzx+3yQn25+/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD69O++8e3N+aWlhua/SbrfvfjR8aMxK9/dqPuXm/ZXur0KNsXKm//ZUueqQoYm0724z9KQqX3o62a197d/Kf9rtdt1TbLPOb//cn6ip7FHq6t/5a++L1I2oHH5899dAZc+ekoBdcn7l1lvn77zz7jcWb82/sfDGwu25S5fmZuYuvTR7/vri0sJM53GvowSehM0X/b2OBAAAAAAAAAAAABjXY/4/A2vDhvb6GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICD7crZNB+kyIWZczNle/3+7FK5dOubazaTNJIUP0mKD5PL6Sw51jNdsd1+3l+ce/3jT9b/1e6o56vWb4zabjxr9ZLpJBOd8t7jmu9qXY5UjDqEYuMIy4Sd6SYO9tr/AgAA///XgQ6S")
getcwd(0x0, 0x0)
symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.411710129s ago: executing program 2 (id=728):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x30, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffe0}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x40)

2.32333782s ago: executing program 3 (id=729):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))

1.865251506s ago: executing program 5 (id=730):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x5)
r2 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123)
copy_file_range(r2, 0x0, r1, 0x0, 0x3df1, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0)

1.351233502s ago: executing program 35 (id=729):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))

1.323601572s ago: executing program 2 (id=732):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x2})

877.320048ms ago: executing program 5 (id=733):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)

581.842332ms ago: executing program 5 (id=734):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0xfffffffffffffffd})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f00000003c0)={{@host}, 0x0, 0x8, 0x1})

264.886686ms ago: executing program 2 (id=735):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)

218.175566ms ago: executing program 5 (id=736):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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")
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
truncate(&(0x7f0000000040)='./file2\x00', 0x80000)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4140aecd, 0x0)
ftruncate(r0, 0x200004)

0s ago: executing program 2 (id=737):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 102.674100][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  102.734889][ T4736] Dev loop2: unable to read RDB block 0
[  102.752587][ T4736]  loop2: unable to read partition table
[  102.780356][ T4736] loop2: partition table beyond EOD, truncated
[  102.801297][ T4736] loop_reread_partitions: partition scan of loop2 (dŸ) failed (rc=-5)
[  103.322541][  T128] usb 3-1: USB disconnect, device number 2
[  103.502877][   T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.561149][ T4766] netlink: 80 bytes leftover after parsing attributes in process `syz.3.150'.
[  103.659001][   T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.759129][   T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.941523][   T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.428961][ T4787] Illegal XDP return value 1309820637 on prog  (id 11) dev syz_tun, expect packet loss!
[  104.663454][ T4261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  104.674292][ T4261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  104.683233][ T4261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  104.691583][ T4261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  104.710275][ T4261] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  104.717666][ T4261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  104.853421][ T4796] device syzkaller1 entered promiscuous mode
[  104.928996][ T4799] loop3: detected capacity change from 0 to 8192
[  104.995414][ T4799] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  105.045371][ T4799] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  105.054734][ T4799] REISERFS (device loop3): using ordered data mode
[  105.062716][ T4799] reiserfs: using flush barriers
[  105.069654][ T4799] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  105.086615][ T4799] REISERFS (device loop3): checking transaction log (loop3)
[  105.277748][ T4799] REISERFS (device loop3): Using tea hash to sort names
[  105.318161][ T4799] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  105.536617][ T4799] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  105.622932][ T4824] loop0: detected capacity change from 0 to 512
[  105.740419][ T4824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  105.802133][ T4824] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  106.049436][ T4800] chnl_net:caif_netlink_parms(): no params data found
[  106.102626][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  106.170424][ T4293] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  106.392264][ T4293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  106.470942][ T4293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  106.492280][ T4293] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  106.506454][ T4293] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  106.516078][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.537628][ T4293] usb 2-1: config 0 descriptor??
[  106.545509][ T4834] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  106.567947][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  106.780036][    T7] usb 1-1: Using ep0 maxpacket: 8
[  106.790484][    T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  106.800404][ T4260] Bluetooth: hci2: command 0x0409 tx timeout
[  106.807950][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.835422][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.842976][    T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  106.877848][ T4800] device bridge_slave_0 entered promiscuous mode
[  106.900735][    T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  106.904773][ T4800] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.931423][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.939614][    T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  106.950360][ T4800] device bridge_slave_1 entered promiscuous mode
[  106.968790][    T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  106.990392][    T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  106.996541][ T4293] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[  107.007774][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.033102][ T4293] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  107.102903][ T4293] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  107.276889][    T7] usb 1-1: GET_CAPABILITIES returned 0
[  107.282763][    T7] usbtmc 1-1:16.0: can't read capabilities
[  107.343601][   T14] usb 2-1: USB disconnect, device number 2
[  107.397566][ T4862] fido_id[4862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  107.496989][ T4800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.538530][ T4293] usb 1-1: USB disconnect, device number 2
[  107.539059][ T4800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.654866][   T51] device hsr_slave_0 left promiscuous mode
[  107.666960][   T51] device hsr_slave_1 left promiscuous mode
[  107.681090][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.688620][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.730895][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.738401][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.766225][   T51] device bridge_slave_1 left promiscuous mode
[  107.783587][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.806019][   T51] device bridge_slave_0 left promiscuous mode
[  107.820325][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.953877][   T51] device veth1_macvtap left promiscuous mode
[  107.963602][ T4861] loop2: detected capacity change from 0 to 32768
[  107.999285][   T51] device veth0_macvtap left promiscuous mode
[  108.009248][   T51] device veth1_vlan left promiscuous mode
[  108.024226][ T4861] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  108.053301][   T51] device veth0_vlan left promiscuous mode
[  108.096162][ T4861] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  108.279504][ T4861] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  108.330529][ T4293] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  108.338103][ T4293] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  108.516704][ T4293] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 178ms
[  108.568916][ T4293] gfs2: fsid=syz:syz.0: jid=0: Done
[  108.590869][ T4861] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  108.637820][ T4878] loop0: detected capacity change from 0 to 8192
[  108.722176][ T4878] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  108.820355][ T4878] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  108.838703][ T4878] REISERFS (device loop0): using ordered data mode
[  108.845658][ T4878] reiserfs: using flush barriers
[  108.864763][ T4878] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  108.881145][ T4260] Bluetooth: hci2: command 0x041b tx timeout
[  108.887812][ T4878] REISERFS (device loop0): checking transaction log (loop0)
[  109.023380][ T4878] REISERFS (device loop0): Using tea hash to sort names
[  109.061919][ T4878] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  109.349436][ T4878] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  109.782447][ T4873] loop1: detected capacity change from 0 to 40427
[  109.942420][ T4873] F2FS-fs (loop1): Found nat_bits in checkpoint
[  110.142796][   T14] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[  110.142796][   T14]   bh = 9387 (magic number)
[  110.142796][   T14]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 492
[  110.164971][  T126] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[  110.164971][  T126]   bh = 9390 (magic number)
[  110.164971][  T126]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 492
[  110.184497][    T7] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[  110.184497][    T7]   bh = 9386 (magic number)
[  110.184497][    T7]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 492
[  110.208177][ T4297] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[  110.208177][ T4297]   bh = 9381 (magic number)
[  110.208177][ T4297]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 492
[  110.227638][ T4873] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  110.237408][ T4861] gfs2: fsid=syz:syz.0: inum=9394 error=-28, nblocks=118, full=1 fail_pt=0
[  110.270010][ T4861] gfs2: fsid=syz:syz.0: rgrp 68 has an error, marking it readonly until umount
[  110.279524][ T4861] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  110.291111][  T126] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  110.321610][ T4861] gfs2: fsid=syz:syz.0:  R: n:68 f:80000000 b:4294967295/4294967295 i:2147483648 q:0 r:4190 e:0
[  110.436455][ T4902] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0
[  110.474272][ T4902] CPU: 0 PID: 4902 Comm: syz.1.177 Not tainted 6.1.140-syzkaller #0
[  110.482338][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  110.492542][ T4902] Call Trace:
[  110.495870][ T4902]  <TASK>
[  110.498835][ T4902]  dump_stack_lvl+0x168/0x22e
[  110.503562][ T4902]  ? show_regs_print_info+0x12/0x12
[  110.508791][ T4902]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  110.514726][ T4902]  f2fs_is_valid_blkaddr+0xc3b/0x1250
[  110.520137][ T4902]  f2fs_get_read_data_page+0x3ed/0x610
[  110.525638][ T4902]  ? f2fs_get_block+0x130/0x130
[  110.530546][ T4902]  f2fs_find_data_page+0x9b/0x3a0
[  110.535605][ T4902]  f2fs_readdir+0x47b/0x990
[  110.540147][ T4902]  ? f2fs_fill_dentries+0xcb0/0xcb0
[  110.545364][ T4902]  ? lockdep_hardirqs_on+0x94/0x140
[  110.550587][ T4902]  ? __fdget_pos+0x2ae/0x360
[  110.555197][ T4902]  ? end_current_label_crit_section+0x14b/0x170
[  110.561457][ T4902]  ? preempt_count_add+0x8d/0x190
[  110.566499][ T4902]  ? down_read_killable+0x1cc/0x340
[  110.571716][ T4902]  ? fsnotify_perm+0x248/0x550
[  110.576503][ T4902]  iterate_dir+0x218/0x560
[  110.580954][ T4902]  ? f2fs_fill_dentries+0xcb0/0xcb0
[  110.586172][ T4902]  __se_sys_getdents64+0xe5/0x260
[  110.591223][ T4902]  ? __x64_sys_getdents64+0x80/0x80
[  110.596446][ T4902]  ? filldir+0x700/0x700
[  110.600720][ T4902]  ? lockdep_hardirqs_on+0x94/0x140
[  110.605956][ T4902]  do_syscall_64+0x4c/0xa0
[  110.610394][ T4902]  ? clear_bhb_loop+0x60/0xb0
[  110.615087][ T4902]  ? clear_bhb_loop+0x60/0xb0
[  110.619776][ T4902]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  110.625725][ T4902] RIP: 0033:0x7f6cb8b8e969
[  110.630257][ T4902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.649887][ T4902] RSP: 002b:00007f6cb992e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  110.658350][ T4902] RAX: ffffffffffffffda RBX: 00007f6cb8db6080 RCX: 00007f6cb8b8e969
[  110.666335][ T4902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  110.674318][ T4902] RBP: 00007f6cb8c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  110.682308][ T4902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.690293][ T4902] R13: 0000000000000000 R14: 00007f6cb8db6080 R15: 00007fffc52f5838
[  110.698291][ T4902]  </TASK>
[  110.884312][ T4905] loop0: detected capacity change from 0 to 1024
[  110.908682][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  110.919520][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  110.927776][    T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!!
[  110.936026][    T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!!
[  110.955232][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  110.960077][ T4260] Bluetooth: hci2: command 0x040f tx timeout
[  110.973544][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  110.981851][    T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!!
[  110.990082][    T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!!
[  110.998505][    T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!!
[  111.006789][    T0] NOHZ tick-stop error: local softirq work is pending, handler #112!!!
[  111.524793][ T4251] syz-executor: attempt to access beyond end of device
[  111.524793][ T4251] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  111.565173][   T51] team0 (unregistering): Port device team_slave_1 removed
[  111.724565][   T51] team0 (unregistering): Port device team_slave_0 removed
[  111.745423][ T4892] loop3: detected capacity change from 0 to 40427
[  111.790443][ T4892] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff
[  111.837719][ T4892] F2FS-fs (loop3): invalid crc value
[  111.888187][ T4892] F2FS-fs (loop3): Found nat_bits in checkpoint
[  111.972748][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.060533][ T4892] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  112.116916][ T4911] f2fs_ckpt-7:3: attempt to access beyond end of device
[  112.116916][ T4911] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  113.004792][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.040161][ T4260] Bluetooth: hci2: command 0x0419 tx timeout
[  113.111563][ T4915] sctp: failed to load transform for md5: -2
[  113.987383][   T51] bond0 (unregistering): Released all slaves
[  114.072094][ T4800] team0: Port device team_slave_0 added
[  114.086082][ T4927] netlink: 80 bytes leftover after parsing attributes in process `syz.1.186'.
[  114.113935][ T4800] team0: Port device team_slave_1 added
[  114.358215][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.383993][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.419309][ T4800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.509549][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.530698][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.620390][ T4800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.746395][ T4800] device hsr_slave_0 entered promiscuous mode
[  114.789103][ T4800] device hsr_slave_1 entered promiscuous mode
[  114.829357][ T4800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.890010][ T4800] Cannot create hsr debugfs directory
[  115.174539][ T4941] loop3: detected capacity change from 0 to 32768
[  115.319538][ T4941] XFS (loop3): Mounting V5 Filesystem
[  115.376955][  T126] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  115.406345][  T126] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 1
[  115.440374][  T126] gfs2: fsid=syz:syz.0: File system withdrawn
[  115.446521][  T126] CPU: 0 PID: 126 Comm: kworker/0:2 Not tainted 6.1.140-syzkaller #0
[  115.454634][  T126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  115.464733][  T126] Workqueue: delete_workqueue delete_work_func
[  115.470941][  T126] Call Trace:
[  115.474347][  T126]  <TASK>
[  115.477321][  T126]  dump_stack_lvl+0x168/0x22e
[  115.482050][  T126]  ? kobject_uevent_env+0x35f/0x8a0
[  115.487295][  T126]  ? show_regs_print_info+0x12/0x12
[  115.492574][  T126]  ? load_image+0x3b0/0x3b0
[  115.497117][  T126]  ? kobject_uevent_env+0x35f/0x8a0
[  115.502550][  T126]  gfs2_withdraw+0x143f/0x1780
[  115.507379][  T126]  ? __wait_on_bit+0x2d0/0x2d0
[  115.512657][  T126]  ? gfs2_lm+0x220/0x220
[  115.516954][  T126]  ? wake_bit_function+0x200/0x200
[  115.522123][  T126]  ? gfs2_meta_new+0x160/0x160
[  115.526961][  T126]  gfs2_meta_check_ii+0x6e/0x80
[  115.531867][  T126]  gfs2_meta_buffer+0x232/0x310
[  115.536879][  T126]  gfs2_inode_refresh+0xb5/0xfc0
[  115.541875][  T126]  ? gfs2_inode_lookup+0x4d4/0xc80
[  115.547035][  T126]  ? gfs2_inode_metasync+0xf0/0xf0
[  115.552205][  T126]  ? do_raw_spin_lock+0x11d/0x280
[  115.557305][  T126]  ? __rwlock_init+0x140/0x140
[  115.562151][  T126]  gfs2_instantiate+0x15e/0x210
[  115.567061][  T126]  gfs2_inode_lookup+0x66f/0xc80
[  115.572055][  T126]  ? set_meta_super+0x10/0x10
[  115.576777][  T126]  ? gfs2_lookup_by_inum+0x4e/0xf0
[  115.581943][  T126]  ? __lock_acquire+0x7c50/0x7c50
[  115.587044][  T126]  ? do_raw_spin_lock+0x11d/0x280
[  115.592148][  T126]  ? __rwlock_init+0x140/0x140
[  115.596981][  T126]  gfs2_lookup_by_inum+0x4e/0xf0
[  115.601978][  T126]  delete_work_func+0x176/0x5a0
[  115.606879][  T126]  ? glock_work_func+0x470/0x470
[  115.611859][  T126]  ? read_lock_is_recursive+0x10/0x10
[  115.617289][  T126]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  115.623242][  T126]  ? _raw_spin_unlock+0x40/0x40
[  115.627975][ T4941] XFS (loop3): Ending clean mount
[  115.628132][  T126]  ? _raw_spin_unlock_irq+0x1f/0x40
[  115.638585][  T126]  ? process_one_work+0x7a1/0x1160
[  115.643744][  T126]  process_one_work+0x898/0x1160
[  115.648740][  T126]  ? worker_detach_from_pool+0x240/0x240
[  115.654431][  T126]  ? _raw_spin_lock_irq+0xab/0xe0
[  115.659514][  T126]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  115.664943][  T126]  ? kthread_data+0x4b/0xc0
[  115.666173][ T4941] XFS (loop3): Quotacheck needed: Please wait.
[  115.669482][  T126]  worker_thread+0xaa2/0x1250
[  115.669532][  T126]  ? __kthread_parkme+0x162/0x1c0
[  115.685446][  T126]  kthread+0x29d/0x330
[  115.689578][  T126]  ? worker_clr_flags+0x1a0/0x1a0
[  115.694658][  T126]  ? kthread_blkcg+0xd0/0xd0
[  115.699358][  T126]  ret_from_fork+0x1f/0x30
[  115.703839][  T126]  </TASK>
[  116.049481][ T4941] XFS (loop3): Quotacheck: Done.
[  116.170262][ T4950] loop0: detected capacity change from 0 to 32768
[  116.236061][ T4950] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.191 (4950)
[  116.283084][ T4972] loop2: detected capacity change from 0 to 512
[  116.332420][ T4950] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  116.355461][ T4972] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  116.390441][ T4950] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  116.450143][ T4972] EXT4-fs (loop2): 1 truncate cleaned up
[  116.460669][ T4259] XFS (loop3): Unmounting Filesystem
[  116.473350][ T4972] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  116.476637][ T4950] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  116.493328][   T26] audit: type=1800 audit(1748294527.432:5): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.192" name="file1" dev="loop2" ino=18 res=0 errno=0
[  116.610262][ T4950] BTRFS info (device loop0): use zstd compression, level 3
[  116.627361][ T4950] BTRFS info (device loop0): using free space tree
[  116.688155][ T4977] loop1: detected capacity change from 0 to 256
[  116.731291][ T4977] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.926624][ T4977] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  116.951275][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  117.005735][ T4800] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  117.103105][ T4800] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  117.115869][ T4800] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  117.145787][ T4800] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  117.194649][ T4950] BTRFS info (device loop0): enabling ssd optimizations
[  117.220866][ T4998] loop2: detected capacity change from 0 to 128
[  117.312898][ T4998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  117.355017][ T4998] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.653294][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  117.716588][ T4250] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  117.811374][ T4800] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.891250][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  117.913620][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.946999][ T5009] loop2: detected capacity change from 0 to 1024
[  118.321949][ T4800] 8021q: adding VLAN 0 to HW filter on device team0
[  118.851970][ T5023] sctp: failed to load transform for md5: -2
[  119.170447][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  119.279673][ T5008] loop3: detected capacity change from 0 to 1024
[  119.335224][ T5009] hfsplus: xattr searching failed
[  119.420838][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  119.487513][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.494745][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.588312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  119.653736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  119.665448][ T4303] hfsplus: b-tree write err: -5, ino 3
[  119.724026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  119.792760][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.800052][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.870290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  119.919541][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  119.959350][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  120.025871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  120.095824][ T4800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.170029][ T4800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.245089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  120.263862][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  120.293607][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  120.349688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  120.387220][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  120.418069][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  120.449790][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  120.468730][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'.
[  120.505859][ T5057] device ipvlan2 entered promiscuous mode
[  120.632026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  121.122484][ T5050] loop1: detected capacity change from 0 to 32768
[  121.308725][ T5050] XFS (loop1): Mounting V5 Filesystem
[  122.411823][ T5093] sctp: failed to load transform for md5: -2
[  122.521796][ T5050] XFS (loop1): Ending clean mount
[  122.609173][ T5050] XFS (loop1): Quotacheck needed: Please wait.
[  122.810241][ T5050] XFS (loop1): Quotacheck: Done.
[  122.840509][ T5104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'.
[  123.060095][ T5104] netlink: 'syz.3.215': attribute type 2 has an invalid length.
[  123.068049][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.972292][ T5109] sctp: failed to load transform for md5: -2
[  124.000274][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  124.136381][ T4800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.146069][ T4251] XFS (loop1): Unmounting Filesystem
[  125.107496][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'.
[  125.136007][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[  125.165301][ T5139] netlink: 'syz.2.218': attribute type 15 has an invalid length.
[  125.223959][ T5137] loop3: detected capacity change from 0 to 4096
[  125.251177][ T5139] Zero length message leads to an empty skb
[  125.277286][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  125.293366][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  125.336139][ T5145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[  125.366775][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  125.387383][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  125.436720][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  125.475397][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  125.501180][ T4800] device veth0_vlan entered promiscuous mode
[  125.571797][ T4800] device veth1_vlan entered promiscuous mode
[  125.712136][ T5152] loop2: detected capacity change from 0 to 1024
[  126.321695][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  126.456775][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  126.506061][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  126.521925][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  126.580470][ T4800] device veth0_macvtap entered promiscuous mode
[  126.663240][ T4800] device veth1_macvtap entered promiscuous mode
[  126.746267][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.815613][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.844293][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.874843][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.897637][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.919461][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.985504][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.024342][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.066560][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.087768][ T5167] loop1: detected capacity change from 0 to 512
[  127.107094][ T5164] netlink: 76 bytes leftover after parsing attributes in process `syz.3.225'.
[  127.201476][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  127.254732][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  127.263608][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  127.272952][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  127.285846][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.297474][ T5167] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.226: casefold flag without casefold feature
[  127.335767][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.366008][ T5167] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.226: couldn't read orphan inode 15 (err -117)
[  127.385590][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.390386][ T5167] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  127.399078][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.414934][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.425846][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.465918][ T5185] loop3: detected capacity change from 0 to 512
[  127.472442][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.493385][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.503834][ T5185] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  127.515756][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.553660][ T5185] EXT4-fs (loop3): 1 truncate cleaned up
[  127.562686][ T4639] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  127.571006][ T5185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  127.588522][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  127.608495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  127.620454][ T4800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.629442][ T4800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.638894][ T4800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.648339][ T4800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.681316][   T26] audit: type=1800 audit(1748294538.632:6): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.230" name="file1" dev="loop3" ino=18 res=0 errno=0
[  127.808851][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  127.847339][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.891138][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.961902][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  127.993147][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.081095][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.135737][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  128.352496][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  128.692520][ T4333] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  128.719363][ T5206] loop3: detected capacity change from 0 to 1024
[  128.911627][ T4333] usb 5-1: Using ep0 maxpacket: 8
[  129.540092][ T5208] loop2: detected capacity change from 0 to 1024
[  129.890069][ T4333] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  129.901880][ T4333] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  129.911990][ T4333] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  129.925147][ T4333] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  129.938332][ T4333] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  129.947450][ T4333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.187183][ T4333] usb 5-1: GET_CAPABILITIES returned 0
[  130.196213][ T4333] usbtmc 5-1:16.0: can't read capabilities
[  130.238058][ T5210] device hsr0 entered promiscuous mode
[  130.258197][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'.
[  130.318694][ T5210] device hsr_slave_0 left promiscuous mode
[  130.334604][ T5210] device hsr_slave_1 left promiscuous mode
[  130.478406][ T4333] usb 5-1: USB disconnect, device number 2
[  130.517521][ T5193] loop1: detected capacity change from 0 to 32768
[  130.527229][ T5210] device hsr0 left promiscuous mode
[  130.590919][ T5193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.232 (5193)
[  130.664294][ T5193] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.706874][ T5193] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  130.742890][ T5193] BTRFS info (device loop1): metadata ratio 2
[  130.749060][ T5193] BTRFS info (device loop1): allowing degraded mounts
[  130.800555][ T5193] BTRFS info (device loop1): force zlib compression, level 3
[  130.830006][ T5193] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  130.865459][ T5193] BTRFS info (device loop1): use zstd compression, level 3
[  130.897430][ T5193] BTRFS info (device loop1): force clearing of disk cache
[  131.169643][ T5193] BTRFS info (device loop1): allowing degraded mounts
[  131.177447][ T5226] loop3: detected capacity change from 0 to 32768
[  131.680210][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  132.027667][ T5193] BTRFS info (device loop1): max_inline at 0
[  132.033834][ T5193] BTRFS info (device loop1): using free space tree
[  132.060853][ T5226] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.242 (5226)
[  132.395446][ T5226] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.405928][ T5226] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  132.414821][ T5226] BTRFS info (device loop3): enabling disk space caching
[  132.421957][ T5226] BTRFS info (device loop3): doing ref verification
[  132.428601][ T5226] BTRFS info (device loop3): use zlib compression, level 3
[  132.435964][ T5226] BTRFS info (device loop3): force clearing of disk cache
[  132.443201][ T5226] BTRFS info (device loop3): setting nodatacow, compression disabled
[  132.451505][ T5226] BTRFS info (device loop3): doing ref verification
[  132.458132][ T5226] BTRFS info (device loop3): disk space caching is enabled
[  132.557583][ T5193] BTRFS error (device loop1): open_ctree failed: -12
[  132.581720][ T5228] sctp: failed to load transform for md5: -2
[  132.802970][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.810383][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  132.970487][ T5226] BTRFS info (device loop3): enabling ssd optimizations
[  132.994679][ T5226] BTRFS info (device loop3): rebuilding free space tree
[  133.055444][ T4340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4340)
[  133.087818][ T5226] BTRFS info (device loop3): disabling free space tree
[  133.095034][ T5226] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  133.104783][ T5226] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  133.445159][ T5290] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  133.471161][   T26] audit: type=1800 audit(1748294544.422:7): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.242" name="bus" dev="loop3" ino=263 res=0 errno=0
[  133.670157][ T4333] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  133.756257][ T4259] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.880636][ T4333] usb 3-1: Using ep0 maxpacket: 32
[  133.887930][ T4333] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  133.924800][ T4333] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  133.983123][ T4333] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  134.031901][ T5298] loop0: detected capacity change from 0 to 512
[  134.038434][ T4333] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  134.092653][ T4333] usb 3-1: config 0 interface 0 has no altsetting 0
[  134.101190][ T5298] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.251: casefold flag without casefold feature
[  134.165406][ T4333] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  134.174587][ T4333] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  134.183158][ T4333] usb 3-1: Product: syz
[  134.187387][ T4333] usb 3-1: Manufacturer: syz
[  134.192095][ T4333] usb 3-1: SerialNumber: syz
[  134.200643][ T4333] usb 3-1: config 0 descriptor??
[  134.207717][ T5298] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.251: couldn't read orphan inode 15 (err -117)
[  134.222782][ T4333] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  134.233285][ T5298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  134.257835][ T4333] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  134.415641][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  134.754184][ T5318] loop3: detected capacity change from 0 to 1024
[  134.784488][ T5312] usb 3-1: USB disconnect, device number 3
[  134.871297][ T5312] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  135.825271][ T5318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  135.835210][ T5328] sctp: failed to load transform for md5: -2
[  136.085969][ T5318] overlayfs: conflicting lowerdir path
[  136.344489][ T5340] loop0: detected capacity change from 0 to 4096
[  136.367508][ T5346] mmap: syz.2.261 (5346) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  136.438507][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  136.655222][ T5351] program syz.3.263 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  137.050676][ T5361] loop1: detected capacity change from 0 to 1024
[  137.668218][ T5364] loop3: detected capacity change from 0 to 512
[  137.750748][ T5364] EXT4-fs: Ignoring removed nobh option
[  137.839058][ T5364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  137.968421][ T5358] loop2: detected capacity change from 0 to 512
[  138.110308][ T5358] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.266: casefold flag without casefold feature
[  138.186280][ T5358] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.266: couldn't read orphan inode 15 (err -117)
[  138.275479][ T5358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  138.313556][ T5367] loop4: detected capacity change from 0 to 32768
[  138.365882][ T5367] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.268 (5367)
[  138.430600][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  138.431715][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  138.459490][ T5367] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  138.536488][ T5367] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  138.631569][ T5367] BTRFS info (device loop4): enabling auto defrag
[  138.638396][ T5367] BTRFS info (device loop4): use no compression
[  138.666970][ T5367] BTRFS info (device loop4): force clearing of disk cache
[  138.684768][ T5367] BTRFS info (device loop4): max_inline at 4096
[  138.705801][ T5367] BTRFS info (device loop4): disabling free space tree
[  139.670245][   T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  139.757646][ T5367] BTRFS info (device loop4): enabling ssd optimizations
[  139.780899][ T5367] BTRFS info (device loop4): rebuilding free space tree
[  139.813816][ T5384] sctp: failed to load transform for md5: -2
[  139.917167][ T5367] BTRFS info (device loop4): disabling free space tree
[  139.980070][   T22] usb 3-1: Using ep0 maxpacket: 8
[  139.985576][ T5367] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  140.026305][   T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  140.086215][   T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  140.096987][ T5367] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  140.127482][   T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  140.152741][   T22] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  140.188746][   T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  140.214061][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.391706][ T5414] loop3: detected capacity change from 0 to 8192
[  140.478555][   T22] usb 3-1: GET_CAPABILITIES returned 0
[  140.484399][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  140.494747][   T22] usbtmc 3-1:16.0: can't read capabilities
[  140.694855][ T4636] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  140.708380][ T4800] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  140.810731][   T22] usb 3-1: USB disconnect, device number 4
[  140.882356][ T4636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  140.904001][ T4636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.934641][ T4636] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  140.954203][ T4636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.978902][ T4340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop4 scanned by udevd (4340)
[  140.992075][ T4636] usb 2-1: config 0 descriptor??
[  141.737073][ T4636] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  141.846892][ T4636] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  142.078671][ T4636] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  142.111249][ T4636] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  142.128513][ T4636] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  142.146583][ T4636] elan 0003:04F3:0755.0002: failed to start in urb: -90
[  142.164180][ T5445] tipc: Started in network mode
[  142.173914][ T4636] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  142.187975][ T5445] tipc: Node identity ac14140f, cluster identity 4711
[  142.209454][ T5445] tipc: New replicast peer: 255.255.255.255
[  142.251747][ T4636] usb 2-1: USB disconnect, device number 3
[  142.297625][ T5445] tipc: Enabled bearer <udp:syz2>, priority 10
[  142.419379][ T5450] fido_id[5450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  142.453162][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'.
[  142.490267][ T5449] tipc: Disabling bearer <udp:syz2>
[  142.599644][ T5448] loop0: detected capacity change from 0 to 1024
[  144.461256][ T5470] loop0: detected capacity change from 0 to 32768
[  144.495186][ T5470] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  144.610010][ T5312] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  144.746784][ T4340] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  144.810244][ T5312] usb 5-1: Using ep0 maxpacket: 16
[  144.817618][ T5312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.849358][ T5312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.880913][ T5312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  144.904286][ T5312] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  144.957034][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.998575][ T5312] usb 5-1: config 0 descriptor??
[  145.164157][ T5511] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  146.980992][ T5516] sched: RT throttling activated
[  147.387049][ T5312] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  147.516019][ T5312] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  147.526067][ T5312] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  147.534485][ T5312] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  147.546663][ T5312] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  147.554327][ T5312] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  147.563054][ T5312] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  147.576209][ T5312] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  147.587197][ T5312] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  147.598752][ T5312] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  147.677877][ T5312] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input6
[  147.785785][ T5312] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  147.838161][ T4297] kernel read not supported for file /bus/input/devices (pid: 4297 comm: kworker/0:4)
[  148.076355][ T4297] usb 5-1: USB disconnect, device number 3
[  148.203330][ T5535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'.
[  148.251497][ T5530] fido_id[5530]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  150.295158][ T5548] loop3: detected capacity change from 0 to 2048
[  150.574586][ T5548] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  150.627150][ T5549] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.489473][ T5562] loop2: detected capacity change from 0 to 1024
[  151.606297][ T5569] loop3: detected capacity change from 0 to 128
[  151.666505][ T5562] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  151.710304][ T5569] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  151.752992][ T5569] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  151.804077][ T5562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  151.816662][ T5577] loop0: detected capacity change from 0 to 512
[  151.826815][ T5577] EXT4-fs: Ignoring removed nobh option
[  151.882497][ T5577] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  151.980174][ T5312] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  152.087778][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  152.113150][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  152.185985][ T5312] usb 5-1: Using ep0 maxpacket: 8
[  152.209534][ T5312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.277397][ T5559] loop1: detected capacity change from 0 to 32768
[  152.279381][ T5312] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  152.308172][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  152.313669][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.356092][ T5559] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[  152.361514][ T5312] usb 5-1: config 0 descriptor??
[  152.437816][ T4378] blk_print_req_error: 46 callbacks suppressed
[  152.437837][ T4378] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  152.628744][ T5312] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  153.045486][ T5018] usb 5-1: USB disconnect, device number 4
[  153.139408][ T5598] netdevsim netdevsim3: Direct firmware load for ,Ú3ºhËÍ_F+¿²Ut,#ŽÀà|ÿÃrÏu&┤Vë£ûD3Yš®ŸÌÙ±©çíÀ{Š8Ê)‚Ȥ¿Z‚f#VQGk­`öÚi›©Ë?„¼w8	Îdó�Õ#µ~ç*5íC—2!8zñd™9I•»]†"‹[ÀëqiUñ failed with error -2
[  153.200185][ T5598] netdevsim netdevsim3: Falling back to sysfs fallback for: ,Ú3ºhËÍ_F+¿²Ut,#ŽÀà|ÿÃrÏu&┤Vë£ûD3Yš®ŸÌÙ±©çíÀ{Š8Ê)‚Ȥ¿Z‚f#VQGk­`öÚi›©Ë?„¼w8	Îdó�Õ#µ~ç*5íC—2!8zñd™9I•»]†"‹[ÀëqiUñ
[  153.677607][ T5603] loop1: detected capacity change from 0 to 2048
[  153.753959][ T5603] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  154.141531][ T5604] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.798164][ T5610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.335'.
[  155.081854][ T5619] loop3: detected capacity change from 0 to 512
[  155.167825][ T5619] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  155.204584][ T5619] EXT4-fs (loop3): invalid journal inode
[  155.239704][ T5619] EXT4-fs (loop3): can't get journal size
[  155.340423][ T5629] loop4: detected capacity change from 0 to 512
[  155.356019][ T5629] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  155.368963][ T5619] EXT4-fs (loop3): 1 truncate cleaned up
[  155.380271][ T5619] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  155.426571][ T5625] loop0: detected capacity change from 0 to 4096
[  155.453290][ T5629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  155.479804][ T5625] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  155.798087][   T26] audit: type=1800 audit(1748294566.742:8): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.341" name="file2" dev="loop0" ino=31 res=0 errno=0
[  155.846850][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  155.856640][ T4800] EXT4-fs (loop4): unmounting filesystem.
[  156.113556][ T5639] loop8: detected capacity change from 0 to 7
[  156.137634][ T4378] Dev loop8: unable to read RDB block 7
[  156.146346][ T4378]  loop8: unable to read partition table
[  156.157817][ T4378] loop8: partition table beyond EOD, truncated
[  156.358012][ T5639] Dev loop8: unable to read RDB block 7
[  156.370833][ T5639]  loop8: unable to read partition table
[  156.397339][ T5639] loop8: partition table beyond EOD, truncated
[  157.949332][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.283762][ T5653] loop2: detected capacity change from 0 to 2048
[  158.454005][ T5653] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  158.543261][ T5648] loop0: detected capacity change from 0 to 256
[  158.576433][ T5640] loop1: detected capacity change from 0 to 4096
[  158.676137][ T5639] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  158.794721][ T5640] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  158.801010][ T5654] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.958931][ T4260] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  158.963885][ T5648] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  158.973747][ T4260] Bluetooth: hci0: Injecting HCI hardware error event
[  158.989959][ T4253] Bluetooth: hci0: hardware error 0x00
[  159.158010][ T5648] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  159.348200][ T4260] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  159.358569][ T4260] CPU: 0 PID: 4260 Comm: kworker/u5:4 Not tainted 6.1.140-syzkaller #0
[  159.366894][ T4260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  159.377015][ T4260] Workqueue: hci2 hci_rx_work
[  159.381805][ T4260] Call Trace:
[  159.385126][ T4260]  <TASK>
[  159.388095][ T4260]  dump_stack_lvl+0x168/0x22e
[  159.392838][ T4260]  ? show_regs_print_info+0x12/0x12
[  159.398096][ T4260]  ? load_image+0x3b0/0x3b0
[  159.402678][ T4260]  sysfs_create_dir_ns+0x252/0x280
[  159.407850][ T4260]  ? hci_rx_work+0x3eb/0xd40
[  159.412501][ T4260]  ? sysfs_warn_dup+0xa0/0xa0
[  159.417242][ T4260]  ? do_raw_spin_unlock+0x11d/0x230
[  159.422516][ T4260]  kobject_add_internal+0x6b8/0xc80
[  159.427812][ T4260]  kobject_add+0x152/0x210
[  159.432302][ T4260]  ? kobject_init+0x1d0/0x1d0
[  159.437054][ T4260]  ? klist_children_get+0x50/0x50
[  159.442141][ T4260]  ? get_device_parent+0x121/0x3f0
[  159.447312][ T4260]  device_add+0x483/0xfb0
[  159.451700][ T4260]  ? kmem_cache_free+0xf7/0x290
[  159.456621][ T4260]  hci_conn_add_sysfs+0xd1/0x1e0
[  159.461633][ T4260]  le_conn_complete_evt+0xd1d/0x1320
[  159.466999][ T4260]  ? hci_le_big_info_adv_report_evt+0x310/0x310
[  159.473304][ T4260]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  159.479004][ T4260]  ? skb_pull_data+0xf7/0x200
[  159.483759][ T4260]  hci_le_conn_complete_evt+0x183/0x440
[  159.489373][ T4260]  ? hci_remote_host_features_evt+0x270/0x270
[  159.493340][ T5648] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  159.495498][ T4260]  hci_event_packet+0x791/0x1210
[  159.512636][ T4260]  ? bis_list+0x280/0x280
[  159.517025][ T4260]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  159.522991][ T4260]  ? kcov_remote_start+0x4c7/0x7e0
[  159.528162][ T4260]  ? exc_bounds+0x30/0xa0
[  159.532567][ T4260]  ? hci_send_to_monitor+0x9c/0x4a0
[  159.537836][ T4260]  hci_rx_work+0x3eb/0xd40
[  159.542433][ T4260]  ? _raw_spin_unlock+0x40/0x40
[  159.547354][ T4260]  ? process_one_work+0x7a1/0x1160
[  159.552532][ T4260]  process_one_work+0x898/0x1160
[  159.557559][ T4260]  ? worker_detach_from_pool+0x240/0x240
[  159.563275][ T4260]  ? _raw_spin_lock_irq+0xab/0xe0
[  159.568366][ T4260]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  159.573804][ T4260]  ? kthread_data+0x4b/0xc0
[  159.578377][ T4260]  worker_thread+0xaa2/0x1250
[  159.583142][ T4260]  kthread+0x29d/0x330
[  159.587271][ T4260]  ? worker_clr_flags+0x1a0/0x1a0
[  159.592352][ T4260]  ? kthread_blkcg+0xd0/0xd0
[  159.597015][ T4260]  ret_from_fork+0x1f/0x30
[  159.601535][ T4260]  </TASK>
[  159.610211][ T4260] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  159.623582][ T4260] Bluetooth: hci2: failed to register connection device
[  159.822726][   T14] kernel write not supported for file bpf-prog (pid: 14 comm: kworker/0:1)
[  160.168165][ T5668] loop4: detected capacity change from 0 to 1024
[  161.120488][ T4253] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  161.157920][ T5678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.357'.
[  161.168375][ T5678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.357'.
[  161.178695][ T5678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.357'.
[  161.272531][ T5678] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  162.713874][ T5700] loop1: detected capacity change from 0 to 256
[  162.908268][ T5702] loop4: detected capacity change from 0 to 2048
[  162.934482][ T5702] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  162.977895][ T5700] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  163.516417][ T5703] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.530083][ T5700] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  163.726464][ T5700] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  163.940657][   T26] audit: type=1800 audit(1748294574.892:9): pid=5700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.363" name="file1" dev="loop1" ino=1048606 res=0 errno=0
[  164.061400][ T5700] exFAT-fs (loop1): hint_cluster is invalid (17)
[  164.092682][ T5710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.365'.
[  164.109546][ T5700] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff)
[  164.150748][ T5700] exFAT-fs (loop1): Filesystem has been set read-only
[  164.959122][ T5730] loop1: detected capacity change from 0 to 4096
[  165.389095][ T5741] loop0: detected capacity change from 0 to 2048
[  165.429255][ T5741] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  165.743639][ T5742] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.780256][ T4260] Bluetooth: hci2: command 0x0406 tx timeout
[  166.672656][ T5757] tipc: Started in network mode
[  166.677617][ T5757] tipc: Node identity ac14140f, cluster identity 4711
[  166.690626][ T5757] tipc: New replicast peer: 255.255.255.255
[  166.703349][ T5757] tipc: Enabled bearer <udp:syz2>, priority 10
[  166.737522][ T5758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'.
[  166.750580][ T5758] tipc: Disabling bearer <udp:syz2>
[  166.948457][ T5762] loop4: detected capacity change from 0 to 47
[  168.427399][ T5749] loop0: detected capacity change from 0 to 32768
[  168.470851][ T5749] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.515227][ T5749] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  168.534963][ T5749] BTRFS info (device loop0): using free space tree
[  168.553258][ T5774] device veth1_macvtap left promiscuous mode
[  168.564187][ T5774] device macsec0 entered promiscuous mode
[  168.732755][ T5754] loop3: detected capacity change from 0 to 32768
[  168.752156][ T5787] loop4: detected capacity change from 0 to 1024
[  168.880211][ T5781] device veth1_macvtap entered promiscuous mode
[  169.113942][ T5781] device macsec0 left promiscuous mode
[  169.312727][ T5749] BTRFS info (device loop0): enabling ssd optimizations
[  169.493090][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  169.796531][ T4250] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.328285][ T5805] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  170.761575][ T5808] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.394'.
[  171.390542][ T5819] loop8: detected capacity change from 0 to 7
[  171.448961][ T5819] Dev loop8: unable to read RDB block 7
[  171.498054][ T5819]  loop8: unable to read partition table
[  171.575323][ T5819] loop8: partition table beyond EOD, truncated
[  171.611222][ T5819] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  171.746303][ T5826] netlink: 'syz.4.397': attribute type 3 has an invalid length.
[  172.764250][ T5846] loop3: detected capacity change from 0 to 64
[  172.808983][ T5848] loop2: detected capacity change from 0 to 1024
[  172.887060][ T5848] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  172.897076][ T5850] loop4: detected capacity change from 0 to 2048
[  172.979022][ T5850] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.737339][   T26] audit: type=1800 audit(1748294584.682:10): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.405" name="file1" dev="loop4" ino=1346 res=0 errno=0
[  173.840753][ T5304] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  174.228367][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  174.249996][ T5304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  174.420644][ T4635] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  174.710371][ T4635] usb 4-1: Using ep0 maxpacket: 32
[  174.759267][ T4635] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  174.865777][ T5863] loop8: detected capacity change from 0 to 7
[  174.872260][ T4635] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  174.904306][ T4340] Dev loop8: unable to read RDB block 7
[  174.917432][ T4340]  loop8: unable to read partition table
[  174.923743][ T4635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.945454][ T4340] loop8: partition table beyond EOD, truncated
[  174.968278][ T4635] usb 4-1: config 0 descriptor??
[  174.984424][ T5304] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  174.993732][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.017897][ T5304] usb 1-1: config 0 descriptor??
[  175.023317][ T5859] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  175.025049][ T5863] Dev loop8: unable to read RDB block 7
[  175.041586][ T4635] hub 4-1:0.0: bad descriptor, ignoring hub
[  175.047606][ T4635] hub: probe of 4-1:0.0 failed with error -5
[  175.074193][ T5863]  loop8: unable to read partition table
[  175.086338][ T5863] loop8: partition table beyond EOD, truncated
[  175.090643][ T4635] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  175.096997][ T5863] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  175.579097][ T5304] aureal 0003:0755:2626.0004: unknown main item tag 0x0
[  175.588906][ T5304] aureal 0003:0755:2626.0004: unknown main item tag 0x0
[  175.596082][ T5304] aureal 0003:0755:2626.0004: unknown main item tag 0x0
[  175.603425][ T5304] aureal 0003:0755:2626.0004: unknown main item tag 0x0
[  175.737299][ T5304] aureal 0003:0755:2626.0004: unknown main item tag 0x0
[  176.752899][ T5877] loop4: detected capacity change from 0 to 2048
[  176.820559][ T5877] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  176.893344][ T5880] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.168555][ T5304] aureal 0003:0755:2626.0004: unknown main item tag 0x0
[  177.176215][ T5304] aureal 0003:0755:2626.0004: unknown main item tag 0x0
[  177.215609][ T5304] aureal 0003:0755:2626.0004: hidraw0: USB HID v1.ff Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0
[  177.242166][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[  177.286103][ T5304] usb 1-1: USB disconnect, device number 3
[  177.490443][ T5814] usb 4-1: USB disconnect, device number 2
[  177.646561][ T5884] fido_id[5884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  178.041359][ T5913] loop2: detected capacity change from 0 to 64
[  178.250986][ T5914] loop4: detected capacity change from 0 to 4096
[  178.293103][ T5914] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  178.337307][ T5914] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  178.407768][ T5914] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  178.424197][ T5914] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  178.469145][ T5914] ntfs: volume version 3.1.
[  178.772782][ T5930] loop1: detected capacity change from 0 to 128
[  178.841257][ T5930] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  178.958885][ T5930] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  179.203727][ T4906] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  179.374318][ T5938] loop3: detected capacity change from 0 to 2048
[  179.405801][ T5938] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  180.008410][ T5939] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.034934][ T5937] loop2: detected capacity change from 0 to 1024
[  180.083064][ T4800] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  180.129665][ T5937] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  180.397075][ T5937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  180.433706][ T4303] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  180.748177][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  181.778219][ T5962] overlayfs: failed to set xattr on upper
[  181.859808][ T5962] overlayfs: ...falling back to index=off,metacopy=off.
[  182.094078][ T5969] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  182.923915][ T5943] loop0: detected capacity change from 0 to 32768
[  183.057803][ T5974] loop1: detected capacity change from 0 to 1024
[  183.290800][ T5974] hfsplus: b-tree write err: -5, ino 3
[  183.311213][ T5979] loop2: detected capacity change from 0 to 4096
[  183.360276][ T4635] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  183.383742][ T5979] NILFS (loop2): invalid segment: Checksum error in segment payload
[  183.402799][ T5979] NILFS (loop2): trying rollback from an earlier position
[  183.439887][   T11] hfsplus: b-tree write err: -5, ino 3
[  183.463631][ T5979] NILFS (loop2): recovery complete
[  183.495721][ T5985] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.562688][ T4635] usb 4-1: unable to get BOS descriptor or descriptor too short
[  183.578332][ T4635] usb 4-1: not running at top speed; connect to a high speed hub
[  183.598407][ T4635] usb 4-1: config 1 interface 0 has no altsetting 0
[  183.629758][ T4635] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.40
[  183.639968][ T5311] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  183.654789][ T4635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.686240][ T4635] usb 4-1: Product: syz
[  183.698775][ T4635] usb 4-1: Manufacturer: syz
[  183.715943][ T4635] usb 4-1: SerialNumber: syz
[  184.003303][ T5311] usb 1-1: Using ep0 maxpacket: 8
[  184.028549][ T5311] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  184.196779][ T5993] loop1: detected capacity change from 0 to 2048
[  184.241873][ T5993] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  184.499763][ T5311] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  184.509857][ T5311] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  184.519676][ T5311] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  184.543575][ T5994] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.940138][ T5311] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  184.957031][ T4635] usbhid 4-1:1.0: can't add hid device: -71
[  184.967033][ T4635] usbhid: probe of 4-1:1.0 failed with error -71
[  184.972056][ T5311] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  184.975966][ T4635] usb 4-1: USB disconnect, device number 3
[  185.014094][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.214637][ T5997] loop4: detected capacity change from 0 to 1024
[  185.257510][ T5311] usb 1-1: usb_control_msg returned -32
[  185.258413][ T5997] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  185.274738][ T5311] usbtmc 1-1:16.0: can't read capabilities
[  185.338180][ T5997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  185.380115][  T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  185.541239][ T4800] EXT4-fs (loop4): unmounting filesystem.
[  185.589983][  T126] usb 3-1: Using ep0 maxpacket: 8
[  185.608805][  T126] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  186.470052][  T126] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  186.480624][  T126] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  186.491521][  T126] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  186.511168][  T126] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  186.513563][ T4635] usb 1-1: USB disconnect, device number 4
[  186.538935][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.781131][ T6026] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  186.842549][  T126] usb 3-1: GET_CAPABILITIES returned 0
[  186.848371][  T126] usbtmc 3-1:16.0: can't read capabilities
[  188.785135][ T5304] usb 3-1: USB disconnect, device number 5
[  189.110843][ T6050] loop3: detected capacity change from 0 to 1024
[  189.175304][ T6050] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  189.271608][ T6050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  189.760317][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  189.802725][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  189.911521][ T5311] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  190.103509][ T5311] usb 1-1: Using ep0 maxpacket: 8
[  190.116980][ T5311] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  190.138454][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.149724][ T5311] usb 1-1: config 0 descriptor??
[  190.298354][ T6088] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  191.558911][ T5311] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  191.562686][ T6107] serio: Serial port ptm0
[  192.432211][ T6109] loop2: detected capacity change from 0 to 1024
[  192.482593][ T5311] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  192.494277][ T5311] asix: probe of 1-1:0.0 failed with error -71
[  192.515508][ T5311] usb 1-1: USB disconnect, device number 5
[  192.533811][ T6109] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  192.587155][ T6116] loop0: detected capacity change from 0 to 1024
[  192.630543][ T6119] loop1: detected capacity change from 0 to 128
[  192.671207][ T6119] EXT4-fs: Ignoring removed nobh option
[  192.692091][ T6109] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  192.703032][ T6116] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  192.851501][ T6119] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  192.880524][ T6119] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  193.094815][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  193.106447][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  193.124806][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  193.556858][ T6143] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  194.246373][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.252951][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.449207][ T6153] input: syz1 as /devices/virtual/input/input7
[  194.651829][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  195.626095][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  195.845055][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  195.855892][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  195.874398][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  195.910869][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  195.953618][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  196.140011][   T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  196.222596][ T6177] loop1: detected capacity change from 0 to 1024
[  196.302589][ T6177] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  196.360666][   T14] usb 3-1: Using ep0 maxpacket: 8
[  196.379605][   T14] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  196.844021][   T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  196.890121][ T6177] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  197.085086][   T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  197.185478][ T6180] loop3: detected capacity change from 0 to 1024
[  197.210153][   T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  197.250589][   T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.282634][   T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  197.302036][ T6180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  197.320041][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.320305][ T6180] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.503773][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  197.558232][   T14] usb 3-1: usb_control_msg returned -32
[  197.576347][   T14] usbtmc 3-1:16.0: can't read capabilities
[  198.903676][ T6200] loop4: detected capacity change from 0 to 2048
[  198.951717][ T6200] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  199.088270][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  199.445552][ T6205] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.792236][ T5814] usb 3-1: USB disconnect, device number 6
[  200.088311][ T6215] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  201.440284][ T4260] Bluetooth: hci4: command 0x0406 tx timeout
[  201.680089][ T4260] Bluetooth: hci1: command 0x0406 tx timeout
[  201.686934][ T4260] Bluetooth: hci3: command 0x0406 tx timeout
[  202.980759][ T6259] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  203.616720][ T6265] loop1: detected capacity change from 0 to 2048
[  203.631238][ T6265] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  203.637939][ T6267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.524'.
[  203.804898][ T6272] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.000339][ T4293] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  204.116568][ T4251] syz-executor: attempt to access beyond end of device
[  204.116568][ T4251] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  204.183734][ T4251] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[  204.210904][ T4293] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  204.231573][ T4293] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  204.272225][ T4293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  204.340713][ T4293] usb 1-1: config 0 interface 0 has no altsetting 0
[  204.382490][ T4293] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  204.413354][ T4293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  204.436968][ T6281] netlink: 'syz.4.529': attribute type 3 has an invalid length.
[  204.438396][ T4251] syz-executor: attempt to access beyond end of device
[  204.438396][ T4251] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  204.477093][ T4251] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[  204.489080][ T4293] usb 1-1: config 0 interface 0 has no altsetting 0
[  204.521351][ T4293] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  204.546204][ T4251] syz-executor: attempt to access beyond end of device
[  204.546204][ T4251] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  204.555720][ T4293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  204.625117][ T4251] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[  204.626335][ T4293] usb 1-1: config 0 interface 0 has no altsetting 0
[  204.648851][ T4251] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 147
[  204.687220][ T4251] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15)
[  204.757758][ T4251] Remounting filesystem read-only
[  204.777757][ T4251] NILFS (loop1): error -5 truncating bmap (ino=15)
[  204.838205][ T4251] syz-executor: attempt to access beyond end of device
[  204.838205][ T4251] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  204.884663][ T4293] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  204.897820][ T4293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  204.912382][ T4293] usb 1-1: config 0 interface 0 has no altsetting 0
[  204.922382][ T4251] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[  204.933490][ T4293] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  204.949358][ T4293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.708735][ T4637] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  205.719132][ T4293] usb 1-1: config 0 interface 0 has no altsetting 0
[  205.740499][ T4293] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.760064][ T4293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.775060][ T4251] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  205.800405][ T4293] usb 1-1: config 0 interface 0 has no altsetting 0
[  205.821162][ T4293] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.840392][ T4293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.853456][ T4293] usb 1-1: config 0 interface 0 has no altsetting 0
[  205.874681][ T4293] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.900074][ T4637] usb 4-1: Using ep0 maxpacket: 8
[  205.910501][ T4293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.925485][ T4637] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  205.969471][ T4637] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  205.981251][ T4293] usb 1-1: config 0 interface 0 has no altsetting 0
[  205.988581][ T4637] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  206.004615][ T4293] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  206.019970][ T4293] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  206.031697][ T4637] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  206.060000][ T4293] usb 1-1: Product: syz
[  206.064554][ T4637] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  206.074464][ T4293] usb 1-1: Manufacturer: syz
[  206.079301][ T4293] usb 1-1: SerialNumber: syz
[  206.099492][ T4637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.116693][ T4293] usb 1-1: config 0 descriptor??
[  206.150338][ T4293] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  206.369036][ T4637] usb 4-1: GET_CAPABILITIES returned 0
[  206.390039][ T4637] usbtmc 4-1:16.0: can't read capabilities
[  206.396457][    C1] usb 1-1: yurex_control_callback - control failed: -2
[  206.426625][ T5311] usb 1-1: USB disconnect, device number 6
[  206.473033][ T5311] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  206.602404][ T4637] usb 4-1: USB disconnect, device number 4
[  206.744914][ T6304] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  207.588537][ T6289] loop4: detected capacity change from 0 to 32768
[  207.610456][ T6289] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.532 (6289)
[  207.680241][ T6289] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  207.720486][ T6289] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  207.760377][ T6289] BTRFS info (device loop4): using free space tree
[  207.818631][ T6309] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  207.856228][ T6309] overlayfs: failed to set xattr on upper
[  207.899019][ T6309] overlayfs: ...falling back to index=off,metacopy=off.
[  209.215909][ T6289] BTRFS error (device loop4): open_ctree failed: -22
[  209.248497][ T4340] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by udevd (4340)
[  209.904973][ T6349] loop2: detected capacity change from 0 to 4096
[  209.948502][ T6349] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  210.009582][ T6351] 8021q: adding VLAN 0 to HW filter on device bond1
[  210.023604][ T6351] bridge0: port 3(bond1) entered blocking state
[  210.031277][ T6351] bridge0: port 3(bond1) entered disabled state
[  210.039638][ T6351] device bond1 entered promiscuous mode
[  210.047402][ T6351] bridge0: port 3(bond1) entered blocking state
[  210.055058][ T6351] bridge0: port 3(bond1) entered forwarding state
[  210.340898][ T5155] bridge0: port 3(bond1) entered disabled state
[  210.550634][ T6367] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  211.335205][ T6370] loop4: detected capacity change from 0 to 4096
[  211.480979][ T6371] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.733892][ T6376] loop1: detected capacity change from 0 to 2048
[  211.853573][ T6376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  213.008594][ T6377] loop3: detected capacity change from 0 to 8192
[  213.087045][ T6377] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  213.118785][ T6377] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  213.129864][ T6377] REISERFS (device loop3): using ordered data mode
[  213.169048][ T6377] reiserfs: using flush barriers
[  213.199712][ T6377] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  213.329116][ T6377] REISERFS (device loop3): checking transaction log (loop3)
[  213.367933][ T6377] REISERFS (device loop3): Using r5 hash to sort names
[  213.413453][ T6377] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  213.437729][ T6395] loop2: detected capacity change from 0 to 1024
[  213.627588][ T6401] loop0: detected capacity change from 0 to 764
[  213.640064][ T5308] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  213.809742][ T6401] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  213.855962][ T5308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  213.900881][ T5308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.962962][ T5308] usb 5-1: New USB device found, idVendor=056a, idProduct=034d, bcdDevice= 0.00
[  213.998710][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.055868][ T5308] usb 5-1: config 0 descriptor??
[  214.088914][ T5308] hub 5-1:0.0: USB hub found
[  214.292207][ T5308] hub 5-1:0.0: 14 ports detected
[  214.298037][ T5308] hub 5-1:0.0: insufficient power available to use all downstream ports
[  214.500685][ T5308] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  214.539592][ T5308] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  214.554758][ T6418] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  214.851450][ T5308] usb 5-1: USB disconnect, device number 5
[  218.986321][ T6444] loop0: detected capacity change from 0 to 512
[  219.061652][ T6444] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  219.101240][ T6444] EXT4-fs (loop0): invalid journal inode
[  219.130449][ T6444] EXT4-fs (loop0): can't get journal size
[  219.202263][ T6444] EXT4-fs (loop0): 1 truncate cleaned up
[  219.208210][ T6444] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  219.320892][ T6454] EXT4-fs error (device loop0): __ext4_get_inode_loc:4507: comm syz.0.571: Invalid inode table block 0 in block_group 0
[  219.532074][ T4250] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /117/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  219.579443][ T4250] EXT4-fs error (device loop0): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 0 in block_group 0
[  219.687835][ T4250] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  219.768219][ T6464] loop2: detected capacity change from 0 to 1024
[  219.825335][ T4250] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz-executor: mark_inode_dirty error
[  220.080115][   T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  220.604073][   T11] EXT4-fs error (device loop0): __ext4_get_inode_loc:4507: comm kworker/u4:1: Invalid inode table block 0 in block_group 0
[  220.651746][   T14] usb 2-1: Using ep0 maxpacket: 8
[  220.668411][   T14] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  220.682913][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.693099][   T14] usb 2-1: Product: syz
[  220.704884][   T14] usb 2-1: Manufacturer: syz
[  220.737040][ T5299] EXT4-fs (loop0): unmounting filesystem.
[  220.758048][   T14] usb 2-1: SerialNumber: syz
[  220.965450][   T14] usb 2-1: config 0 descriptor??
[  221.939280][   T14] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  221.957202][ T6474] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  222.636652][   T14] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  222.977337][   T14] usb 2-1: USB disconnect, device number 4
[  223.639740][ T4907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.772053][ T4907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.937709][ T4907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.087880][ T5304] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  225.405967][ T5304] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  225.594168][ T5304] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  225.670360][ T4907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.839815][ T5304] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  226.098325][ T5304] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  226.121288][ T4253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  226.127635][ T6524] overlayfs: missing 'lowerdir'
[  226.133652][ T4253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  226.135977][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.149723][ T4253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  226.156995][ T5304] usb 3-1: Product: syz
[  226.164487][ T5304] usb 3-1: Manufacturer: syz
[  226.169860][ T5304] usb 3-1: SerialNumber: syz
[  226.170220][ T4261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  226.185240][ T4261] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  226.199779][ T4261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  226.463068][ T5304] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  226.796387][ T6502] usblp0:failed reading printer status (-71)
[  226.802166][ T5304] usb 3-1: USB disconnect, device number 7
[  227.029471][ T6534] usblp0: removed
[  227.435553][ T6523] chnl_net:caif_netlink_parms(): no params data found
[  229.124530][ T4260] Bluetooth: hci1: command 0x0409 tx timeout
[  229.134555][ T6569] loop1: detected capacity change from 0 to 2048
[  229.320982][ T6569] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  229.361701][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.410373][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.445069][ T6586] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.470792][ T6523] device bridge_slave_0 entered promiscuous mode
[  229.669435][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.692875][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.735372][ T6523] device bridge_slave_1 entered promiscuous mode
[  229.986731][ T6597] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  230.125917][ T6523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.288757][ T6523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.807092][ T6523] team0: Port device team_slave_0 added
[  230.925117][ T4637] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  230.993511][ T6523] team0: Port device team_slave_1 added
[  231.114335][ T4637] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  231.149636][ T4637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.167854][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.188909][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.211330][ T4637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.229973][ T4260] Bluetooth: hci1: command 0x041b tx timeout
[  231.378237][ T6523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.465589][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.469534][ T4637] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  231.489743][ T4637] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  231.509252][ T4637] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  231.529984][ T4637] usb 3-1: Manufacturer: syz
[  231.548072][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.570508][ T4637] usb 3-1: config 0 descriptor??
[  232.721154][ T6523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.885045][ T6632] loop3: detected capacity change from 0 to 256
[  233.165427][ T4637] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[  233.176939][ T4637] appleir 0003:05AC:8243.0005: No inputs registered, leaving
[  233.191637][ T4637] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  233.197860][ T6632] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  234.212903][ T4260] Bluetooth: hci1: command 0x040f tx timeout
[  234.547653][ T5308] usb 3-1: USB disconnect, device number 8
[  234.557891][ T6632] exFAT-fs (loop3): hint_cluster is invalid (17)
[  234.644930][   T26] audit: type=1800 audit(1748294645.592:11): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.622" name="file1" dev="loop3" ino=1048610 res=0 errno=0
[  234.776293][ T6646] fido_id[6646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  234.878575][ T4907] device hsr_slave_0 left promiscuous mode
[  234.962776][ T4907] device hsr_slave_1 left promiscuous mode
[  235.000154][ T4907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.040059][ T4907] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.177107][ T6658] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  235.188430][ T4907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.453584][ T4907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.630710][ T4907] device bridge_slave_1 left promiscuous mode
[  235.743531][ T4907] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.822680][ T6656] loop4: detected capacity change from 0 to 128
[  235.874649][ T6656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  235.897582][ T4907] device bridge_slave_0 left promiscuous mode
[  235.910818][ T6656] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.980136][ T4907] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.100912][ T6656] Bluetooth: MGMT ver 1.22
[  236.190692][ T4907] device veth1_macvtap left promiscuous mode
[  236.198888][ T4907] device veth0_macvtap left promiscuous mode
[  236.234061][ T4907] device veth1_vlan left promiscuous mode
[  236.242595][ T4260] Bluetooth: hci1: command 0x0419 tx timeout
[  236.279796][ T4907] device veth0_vlan left promiscuous mode
[  236.400410][ T4800] EXT4-fs (loop4): unmounting filesystem.
[  236.632771][ T6679] loop4: detected capacity change from 0 to 256
[  236.692313][ T6679] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  236.786646][ T6679] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  236.810953][ T6684] loop2: detected capacity change from 0 to 2048
[  236.856908][ T6679] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  236.883149][ T6684] EXT4-fs: Ignoring removed mblk_io_submit option
[  236.941158][ T6684] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  237.162298][ T6684] input: 6ßÿŸúbxOá�~´ as /devices/virtual/input/input9
[  237.578416][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  237.834516][ T6696] loop4: detected capacity change from 0 to 1024
[  237.893886][ T6696] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  237.955585][ T6696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  238.425397][ T4800] EXT4-fs (loop4): unmounting filesystem.
[  238.679489][ T6709] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  239.805208][ T4907] team0 (unregistering): Port device team_slave_1 removed
[  240.051264][ T4907] team0 (unregistering): Port device team_slave_0 removed
[  240.191249][ T4907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  240.207662][ T6711] loop2: detected capacity change from 0 to 32768
[  240.325393][ T4907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  240.377475][ T6711] XFS (loop2): Mounting V5 Filesystem
[  240.547227][ T6711] XFS (loop2): Ending clean mount
[  240.612642][ T6711] XFS (loop2): Quotacheck needed: Please wait.
[  240.754992][ T6711] XFS (loop2): Quotacheck: Done.
[  240.862982][ T4263] XFS (loop2): Unmounting Filesystem
[  241.609163][ T4907] bond0 (unregistering): Released all slaves
[  241.740891][ T6523] device hsr_slave_0 entered promiscuous mode
[  241.748415][ T6523] device hsr_slave_1 entered promiscuous mode
[  241.758965][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'.
[  242.462570][ T6736] loop3: detected capacity change from 0 to 256
[  242.553020][ T6736] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  242.570340][ T4297] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  242.637827][ T6736] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  242.695046][ T6736] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  242.770154][ T4297] usb 5-1: Using ep0 maxpacket: 16
[  242.778443][ T4297] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.832217][ T4297] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.917397][ T4297] usb 5-1: config 0 interface 0 has no altsetting 0
[  242.936768][ T4297] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  242.970228][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.031424][ T4297] usb 5-1: config 0 descriptor??
[  243.143307][ T6523] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  243.232241][ T6523] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  243.320362][ T6523] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  243.366795][ T6523] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  243.456979][ T4297] hid (null): bogus close delimiter
[  243.486014][ T4297] hid (null): report_id 20891 is invalid
[  243.486540][ T6752] loop1: detected capacity change from 0 to 2048
[  243.510050][ T4297] hid (null): unknown global tag 0xe
[  243.530507][ T4297] hid (null): invalid report_size 22128
[  243.555246][ T4297] hid (null): global environment stack underflow
[  243.557760][ T6752] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.688414][ T6523] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.734166][ T4297] usb 5-1: USB disconnect, device number 6
[  243.776757][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  243.809194][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  243.867884][ T6758] loop2: detected capacity change from 0 to 1024
[  243.872076][ T6523] 8021q: adding VLAN 0 to HW filter on device team0
[  243.908124][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  243.933390][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  243.963824][ T6758] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  243.992588][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.001976][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.109822][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  244.169196][ T6758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  244.273565][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  244.319702][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  244.333750][ T6770] loop1: detected capacity change from 0 to 128
[  244.375792][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.385759][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.443120][ T6770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  244.481261][ T6770] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.490654][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  244.513101][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  244.548713][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  244.584723][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  244.652410][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  244.746248][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  244.808977][ T6770] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.648: bg 0: bad block bitmap checksum
[  244.821269][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  244.875737][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  244.907510][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  245.085867][ T4251] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 0
[  245.106427][ T6523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  245.119635][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  245.140424][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  245.178483][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  245.188124][ T4251] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 1024
[  245.230944][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  245.298333][ T4251] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 2048
[  245.360428][ T6783] loop2: detected capacity change from 0 to 2048
[  245.397255][ T6783] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  245.397474][ T4251] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 3072
[  245.467757][ T6787] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.541770][ T4251] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 4096
[  245.658125][ T4251] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 5120
[  245.759506][ T4251] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 6144
[  245.858824][ T4251] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 7168
[  245.941861][ T4251] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 8192
[  246.921415][ T6785] loop4: detected capacity change from 0 to 40427
[  246.950248][ T6785] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff
[  246.991408][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  246.997926][ T6785] F2FS-fs (loop4): invalid crc value
[  247.020271][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  247.042048][ T6523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.064030][ T6785] F2FS-fs (loop4): Found nat_bits in checkpoint
[  247.297233][ T6785] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  247.511746][ T6798] loop3: detected capacity change from 0 to 32768
[  247.637503][ T6798] XFS (loop3): Mounting V5 Filesystem
[  247.764600][ T6798] XFS (loop3): Ending clean mount
[  247.789197][ T6798] XFS (loop3): Quotacheck needed: Please wait.
[  247.797950][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  247.876548][ T6785] F2FS-fs (loop4) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x123/0xbd0
[  248.071859][ T6798] XFS (loop3): Quotacheck: Done.
[  248.128955][ T4800] syz-executor: attempt to access beyond end of device
[  248.128955][ T4800] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  248.610241][ T4259] XFS (loop3): Unmounting Filesystem
[  249.116923][ T6841] loop2: detected capacity change from 0 to 1024
[  249.267574][ T6841] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  249.348778][ T6841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  249.372523][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  249.400988][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  249.473085][ T4261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  249.487980][ T4261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  249.510252][ T4261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  249.525397][ T4261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  249.539734][ T4261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  249.556247][ T4261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  249.751914][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  249.780969][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  249.826776][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  249.910622][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  249.931777][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  250.117242][ T6523] device veth0_vlan entered promiscuous mode
[  251.196364][ T6523] device veth1_vlan entered promiscuous mode
[  251.222135][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  251.419158][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  251.431945][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  251.445664][ T6523] device veth0_macvtap entered promiscuous mode
[  251.526550][ T6523] device veth1_macvtap entered promiscuous mode
[  251.629804][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.644867][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.660165][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.672407][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.683298][ T4261] Bluetooth: hci0: command 0x0409 tx timeout
[  251.696857][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.720544][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.733736][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.746411][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.763456][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.835836][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  251.871131][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  251.900756][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  251.922098][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  251.958212][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.002282][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.051822][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.089460][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.109239][ T6874] loop3: detected capacity change from 0 to 4096
[  252.130461][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.168789][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.198210][ T6523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.248076][ T6523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.294426][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.464179][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  252.506480][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  252.706964][ T6523] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.743244][ T6523] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.792956][ T6523] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.840009][ T6523] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.902687][ T4259] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  252.946894][ T6849] chnl_net:caif_netlink_parms(): no params data found
[  252.952852][ T4259] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  253.048748][ T6897] loop4: detected capacity change from 0 to 2048
[  253.091621][ T6897] UDF-fs: bad mount option "lastblock=0L000000000000000¹" or missing value
[  253.367310][ T6849] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.375547][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.384315][ T6849] device bridge_slave_0 entered promiscuous mode
[  253.398840][ T6849] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.407282][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.441785][ T6849] device bridge_slave_1 entered promiscuous mode
[  253.494451][ T6907] loop3: detected capacity change from 0 to 1024
[  253.558874][ T5794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.595516][ T5794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.625362][ T6849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.687007][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  253.692732][ T6907] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  253.735813][ T6849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.760465][ T4261] Bluetooth: hci0: command 0x041b tx timeout
[  253.887253][ T6907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  253.915385][ T6916] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  254.484455][ T5522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.645205][ T5522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.681500][ T6849] team0: Port device team_slave_0 added
[  254.692208][ T6849] team0: Port device team_slave_1 added
[  254.809160][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  254.898945][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  254.998640][ T6849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.030102][ T6849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.152190][ T6849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.231947][ T6849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.239785][ T6849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.388550][ T6849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.381439][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  256.392751][ T4261] Bluetooth: hci0: command 0x040f tx timeout
[  256.410457][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  256.686341][ T6932] loop5: detected capacity change from 0 to 1024
[  256.874363][ T6849] device hsr_slave_0 entered promiscuous mode
[  256.930318][ T6849] device hsr_slave_1 entered promiscuous mode
[  256.952120][ T6849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.981800][ T6849] Cannot create hsr debugfs directory
[  257.301721][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.679'.
[  257.980540][ T6849] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  258.054776][ T6849] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  258.188940][ T6963] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  258.437054][ T6849] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  258.480222][ T4260] Bluetooth: hci0: command 0x0419 tx timeout
[  258.699781][ T6849] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  260.245699][ T6976] loop2: detected capacity change from 0 to 1024
[  262.087922][ T6980] Bluetooth: (null): Too short H5 packet
[  262.240269][ T6849] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.349604][ T6982] loop5: detected capacity change from 0 to 2048
[  262.367824][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  262.400990][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  262.577155][ T6849] 8021q: adding VLAN 0 to HW filter on device team0
[  262.601730][ T6982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.671534][ T6988] loop2: detected capacity change from 0 to 1764
[  262.694326][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  263.776214][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  263.861653][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.869053][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.896187][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  263.931256][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  263.980643][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  264.020649][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.030061][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.147299][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  264.208517][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  264.281199][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  264.340309][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  264.367088][ T7008] input: syz1 as /devices/virtual/input/input10
[  264.382234][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  264.432072][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  264.493547][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  264.515793][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  264.545334][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  264.581349][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  264.656578][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  264.679203][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  264.743412][ T7014] loop4: detected capacity change from 0 to 1024
[  264.829068][ T7014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  264.908250][ T7014] EXT4-fs error (device loop4): ext4_get_max_inline_size:116: inode #18: comm syz.4.698: can't get inode location 18
[  264.941493][ T7014] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Out of memory
[  265.010036][ T7014] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #18: comm syz.4.698: mark_inode_dirty error
[  265.082745][ T7014] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 12884902103
[  265.148740][ T7014] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Out of memory
[  265.203779][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.5.701'.
[  265.221500][ T7014] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #18: comm syz.4.698: mark_inode_dirty error
[  265.268172][ T7014] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Out of memory
[  265.320000][ T7014] EXT4-fs error (device loop4): ext4_ext_truncate:4453: inode #18: comm syz.4.698: mark_inode_dirty error
[  265.371696][ T7014] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Out of memory
[  265.469550][ T7014] EXT4-fs error (device loop4): ext4_truncate:4312: inode #18: comm syz.4.698: mark_inode_dirty error
[  265.637498][ T7044] loop2: detected capacity change from 0 to 256
[  265.755087][ T7044] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d)
[  266.071845][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  266.100224][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  266.427802][ T7052] loop3: detected capacity change from 0 to 2048
[  266.437385][ T7052] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  266.481121][ T7058] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.498436][ T7057] loop2: detected capacity change from 0 to 256
[  267.016037][ T6849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.073659][ T4800] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Out of memory
[  267.121235][ T4800] EXT4-fs (loop4): unmounting filesystem.
[  267.358603][ T7072] loop2: detected capacity change from 0 to 256
[  267.796838][ T5794] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.369023][ T7089] loop3: detected capacity change from 0 to 256
[  268.406201][ T5794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.664920][ T7089] syz.3.717: attempt to access beyond end of device
[  268.664920][ T7089] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256
[  268.760588][ T5794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.974207][ T5794] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.184397][ T7105] loop3: detected capacity change from 0 to 1024
[  270.503063][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  270.515177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  270.544573][ T4261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  270.584095][ T7122] loop2: detected capacity change from 0 to 2048
[  270.604734][ T7122] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  270.622825][ T4261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  270.635748][ T4261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  270.644630][ T4261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  270.655294][ T4261] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  270.665443][ T4261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  270.790846][ T7123] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.911470][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  271.101549][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  271.135436][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  271.298582][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  271.332609][ T5794] tipc: Left network mode
[  271.376547][ T6849] device veth0_vlan entered promiscuous mode
[  272.351519][ T7137] loop3: detected capacity change from 0 to 128
[  272.459035][ T7139] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  272.522727][ T6849] device veth1_vlan entered promiscuous mode
[  272.589733][    C1] vkms_vblank_simulate: vblank timer overrun
[  272.961223][ T4253] Bluetooth: hci2: command 0x0409 tx timeout
[  273.018572][ T7145] loop5: detected capacity change from 0 to 1024
[  273.185599][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  273.394735][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  273.682646][ T6849] device veth0_macvtap entered promiscuous mode
[  274.043320][ T6849] device veth1_macvtap entered promiscuous mode
[  274.076207][ T7152] loop5: detected capacity change from 0 to 4096
[  274.190597][ T7154] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.426642][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.476218][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.518297][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.598499][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.627550][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.648704][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.667938][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.689129][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.708235][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.719318][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.733171][ T6849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.750316][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  274.761577][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  274.907851][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.939467][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.965728][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.003442][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.015041][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.022213][ T4260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.027937][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.050345][ T4261] Bluetooth: hci2: command 0x041b tx timeout
[  275.053834][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.068741][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.080699][ T4260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.093241][ T6849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.106472][ T4260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.114677][ T6849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.126034][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.137947][ T6849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.146112][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  275.165692][ T4261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  275.355187][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  275.379166][ T7173] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  275.387310][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  275.413187][ T7173] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  275.438095][ T6849] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.468490][ T6849] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.478554][ T6849] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.485154][ T7176] loop5: detected capacity change from 0 to 1024
[  275.499211][ T6849] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.651531][ T7178] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.659744][ T7178] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.705910][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.719817][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.750730][ T7178] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.805338][ T7178] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.816658][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.824834][ T7181] ------------[ cut here ]------------
[  275.838071][ T7181] WARNING: CPU: 0 PID: 7181 at fs/hfsplus/extents.c:346 hfsplus_free_extents+0x6e9/0xac0
[  275.839795][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.848913][ T7181] Modules linked in:
[  275.848988][ T7181] CPU: 0 PID: 7181 Comm: syz.5.736 Not tainted 6.1.140-syzkaller #0
[  275.849016][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  275.849031][ T7181] RIP: 0010:hfsplus_free_extents+0x6e9/0xac0
[  275.849067][ T7181] Code: 8b 1b 0f cb 89 ef 89 de e8 b4 1d 3b ff 39 dd 75 20 49 83 c7 28 e8 47 1c 3b ff 41 bc 05 00 00 00 e9 fa f9 ff ff e8 37 1c 3b ff <0f> 0b e9 9d f9 ff ff 89 ef 89 de e8 87 1d 3b ff 29 dd 73 0a e8 1e
[  275.877950][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.880437][ T7181] RSP: 0018:ffffc900033077f0 EFLAGS: 00010287
[  275.887168][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.908863][    C1] vkms_vblank_simulate: vblank timer overrun
[  275.908939][ T7181] 
[  275.908950][ T7181] RAX: ffffffff8245bad9 RBX: ffff8880731dd820 RCX: 0000000000080000
[  275.908972][ T7181] RDX: ffffc9000fdff000 RSI: 0000000000018f3b RDI: 0000000000018f3c
[  275.908989][ T7181] RBP: 000000000000014e R08: dffffc0000000000 R09: ffffed100f4c980a
[  275.909008][ T7181] R10: ffffed100f4c980a R11: 1ffff1100f4c9809 R12: ffff88805539e000
[  275.909028][ T7181] R13: ffff8880775537b0 R14: 000000000000014e R15: ffff888077553618
[  275.909047][ T7181] FS:  00007f119ba846c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  275.909071][ T7181] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  275.909090][ T7181] CR2: 0000001b32619ff8 CR3: 000000005e520000 CR4: 00000000003506f0
[  275.909112][ T7181] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  275.909127][ T7181] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  275.909143][ T7181] Call Trace:
[  275.909152][ T7181]  <TASK>
[  275.909165][ T7181]  ? hfsplus_find_init+0x150/0x1c0
[  275.909210][ T7181]  hfsplus_file_truncate+0x731/0xb30
[  275.909247][ T7181]  ? unmap_mapping_range+0x91/0x100
[  275.909275][ T7181]  ? __up_read+0x27c/0x660
[  275.909306][ T7181]  ? hfsplus_add_extent+0x890/0x890
[  275.909349][ T7181]  ? unmap_mapping_range+0x91/0x100
[  275.909386][ T7181]  hfsplus_write_begin+0xc8/0xd0
[  275.909419][ T7181]  cont_write_begin+0x2a9/0x7d0
[  275.909539][ T7181]  ? generic_cont_expand_simple+0x1f0/0x1f0
[  275.951043][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.958069][ T7181]  ? seqcount_lockdep_reader_access+0x120/0x1c0
[  275.958113][ T7181]  ? lockdep_hardirqs_on+0x94/0x140
[  275.981667][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.983337][ T7181]  ? ktime_get_coarse_real_ts64+0x36/0x120
[  275.997917][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  275.999132][ T7181]  ? seqcount_lockdep_reader_access+0x172/0x1c0
[  275.999169][ T7181]  ? ktime_get_real_ts64+0x420/0x420
[  275.999200][ T7181]  hfsplus_write_begin+0x87/0xd0
[  276.015875][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  276.015942][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  276.024107][ T7181]  ? hfsplus_ext_write_extent+0x200/0x200
[  276.024149][ T7181]  generic_cont_expand_simple+0x136/0x1f0
[  276.024187][ T7181]  ? inode_owner_or_capable+0x200/0x200
[  276.024219][ T7181]  ? submit_bh+0x20/0x20
[  276.024253][ T7181]  ? current_time+0x1c2/0x2b0
[  276.024281][ T7181]  ? setattr_prepare+0x1f5/0xd00
[  276.036380][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  276.041477][ T7181]  hfsplus_setattr+0x165/0x280
[  276.041516][ T7181]  ? hfsplus_fileattr_set+0x330/0x330
[  276.041544][ T7181]  notify_change+0xc74/0xf40
[  276.041593][ T7181]  do_truncate+0x197/0x220
[  276.041625][ T7181]  ? put_page_bootmem+0x2c0/0x2c0
[  276.041666][ T7181]  ? rcu_read_lock_bh_held+0xe0/0xe0
[  276.041700][ T7181]  ? bpf_lsm_path_truncate+0x5/0x10
[  276.048560][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  276.051638][ T7181]  do_sys_ftruncate+0x312/0x3c0
[  276.051684][ T7181]  do_syscall_64+0x4c/0xa0
[  276.051722][ T7181]  ? clear_bhb_loop+0x60/0xb0
[  276.051747][ T7181]  ? clear_bhb_loop+0x60/0xb0
[  276.051772][ T7181]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.051808][ T7181] RIP: 0033:0x7f119ab8e969
[  276.066114][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  276.067567][ T7181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.067594][ T7181] RSP: 002b:00007f119ba84038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[  276.079655][ T7176] hfsplus: request for non-existent node 16777216 in B*Tree
[  276.087140][ T7181] RAX: ffffffffffffffda RBX: 00007f119adb6160 RCX: 00007f119ab8e969
[  276.087172][ T7181] RDX: 0000000000000000 RSI: 0000000000200004 RDI: 0000000000000005
[  276.087189][ T7181] RBP: 00007f119ac10ab1 R08: 0000000000000000 R09: 0000000000000000
[  276.087205][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.087220][ T7181] R13: 0000000000000000 R14: 00007f119adb6160 R15: 00007ffe868c24a8
[  276.087253][ T7181]  </TASK>
[  276.087277][ T7181] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  276.087290][ T7181] CPU: 0 PID: 7181 Comm: syz.5.736 Not tainted 6.1.140-syzkaller #0
[  276.087312][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  276.087325][ T7181] Call Trace:
[  276.087332][ T7181]  <TASK>
[  276.087339][ T7181]  dump_stack_lvl+0x168/0x22e
[  276.087374][ T7181]  ? memcpy+0x3c/0x60
[  276.087398][ T7181]  ? show_regs_print_info+0x12/0x12
[  276.087428][ T7181]  ? load_image+0x3b0/0x3b0
[  276.087483][ T7181]  panic+0x2c9/0x710
[  276.087525][ T7181]  ? bpf_jit_dump+0xd0/0xd0
[  276.087575][ T7181]  __warn+0x2f8/0x4f0
[  276.087609][ T7181]  ? hfsplus_free_extents+0x6e9/0xac0
[  276.087642][ T7181]  ? hfsplus_free_extents+0x6e9/0xac0
[  276.087672][ T7181]  report_bug+0x2ba/0x4f0
[  276.087705][ T7181]  ? hfsplus_free_extents+0x6e9/0xac0
[  276.087750][ T7181]  handle_bug+0x3a/0x70
[  276.087783][ T7181]  exc_invalid_op+0x16/0x40
[  276.087818][ T7181]  asm_exc_invalid_op+0x16/0x20
[  276.087856][ T7181] RIP: 0010:hfsplus_free_extents+0x6e9/0xac0
[  276.087888][ T7181] Code: 8b 1b 0f cb 89 ef 89 de e8 b4 1d 3b ff 39 dd 75 20 49 83 c7 28 e8 47 1c 3b ff 41 bc 05 00 00 00 e9 fa f9 ff ff e8 37 1c 3b ff <0f> 0b e9 9d f9 ff ff 89 ef 89 de e8 87 1d 3b ff 29 dd 73 0a e8 1e
[  276.087909][ T7181] RSP: 0018:ffffc900033077f0 EFLAGS: 00010287
[  276.087933][ T7181] RAX: ffffffff8245bad9 RBX: ffff8880731dd820 RCX: 0000000000080000
[  276.087951][ T7181] RDX: ffffc9000fdff000 RSI: 0000000000018f3b RDI: 0000000000018f3c
[  276.087968][ T7181] RBP: 000000000000014e R08: dffffc0000000000 R09: ffffed100f4c980a
[  276.087986][ T7181] R10: ffffed100f4c980a R11: 1ffff1100f4c9809 R12: ffff88805539e000
[  276.088005][ T7181] R13: ffff8880775537b0 R14: 000000000000014e R15: ffff888077553618
[  276.088032][ T7181]  ? hfsplus_free_extents+0x6e9/0xac0
[  276.088071][ T7181]  ? hfsplus_find_init+0x150/0x1c0
[  276.088107][ T7181]  hfsplus_file_truncate+0x731/0xb30
[  276.088144][ T7181]  ? unmap_mapping_range+0x91/0x100
[  276.088173][ T7181]  ? __up_read+0x27c/0x660
[  276.088204][ T7181]  ? hfsplus_add_extent+0x890/0x890
[  276.088248][ T7181]  ? unmap_mapping_range+0x91/0x100
[  276.088283][ T7181]  hfsplus_write_begin+0xc8/0xd0
[  276.088315][ T7181]  cont_write_begin+0x2a9/0x7d0
[  276.088370][ T7181]  ? generic_cont_expand_simple+0x1f0/0x1f0
[  276.088412][ T7181]  ? seqcount_lockdep_reader_access+0x120/0x1c0
[  276.088443][ T7181]  ? lockdep_hardirqs_on+0x94/0x140
[  276.088480][ T7181]  ? ktime_get_coarse_real_ts64+0x36/0x120
[  276.088510][ T7181]  ? seqcount_lockdep_reader_access+0x172/0x1c0
[  276.088539][ T7181]  ? ktime_get_real_ts64+0x420/0x420
[  276.088571][ T7181]  hfsplus_write_begin+0x87/0xd0
[  276.088596][ T7181]  ? hfsplus_ext_write_extent+0x200/0x200
[  276.088631][ T7181]  generic_cont_expand_simple+0x136/0x1f0
[  276.088672][ T7181]  ? inode_owner_or_capable+0x200/0x200
[  276.088708][ T7181]  ? submit_bh+0x20/0x20
[  276.088756][ T7181]  ? current_time+0x1c2/0x2b0
[  276.088788][ T7181]  ? setattr_prepare+0x1f5/0xd00
[  276.088832][ T7181]  hfsplus_setattr+0x165/0x280
[  276.088860][ T7181]  ? hfsplus_fileattr_set+0x330/0x330
[  276.088890][ T7181]  notify_change+0xc74/0xf40
[  276.088939][ T7181]  do_truncate+0x197/0x220
[  276.088975][ T7181]  ? put_page_bootmem+0x2c0/0x2c0
[  276.089016][ T7181]  ? rcu_read_lock_bh_held+0xe0/0xe0
[  276.089053][ T7181]  ? bpf_lsm_path_truncate+0x5/0x10
[  276.089094][ T7181]  do_sys_ftruncate+0x312/0x3c0
[  276.089134][ T7181]  do_syscall_64+0x4c/0xa0
[  276.089164][ T7181]  ? clear_bhb_loop+0x60/0xb0
[  276.089188][ T7181]  ? clear_bhb_loop+0x60/0xb0
[  276.089215][ T7181]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.089252][ T7181] RIP: 0033:0x7f119ab8e969
[  276.089274][ T7181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.089294][ T7181] RSP: 002b:00007f119ba84038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[  276.089321][ T7181] RAX: ffffffffffffffda RBX: 00007f119adb6160 RCX: 00007f119ab8e969
[  276.089339][ T7181] RDX: 0000000000000000 RSI: 0000000000200004 RDI: 0000000000000005
[  276.089356][ T7181] RBP: 00007f119ac10ab1 R08: 0000000000000000 R09: 0000000000000000
[  276.089373][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.089388][ T7181] R13: 0000000000000000 R14: 00007f119adb6160 R15: 00007ffe868c24a8
[  276.089424][ T7181]  </TASK>
[  276.096209][ T7181] Kernel Offset: disabled
[  276.835891][ T7181] Rebooting in 86400 seconds..