last executing test programs:

11.743058151s ago: executing program 4 (id=1545):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x3c5103)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0)
r1 = memfd_secret(0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)=',$J#]$:\x00', 0x0, 0x0)
r2 = socket(0xa, 0x3, 0xff)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x8930, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000240)={{0x2, 0x2, 0x10, 0x2, 0x2}, 0x100, 0x6, 0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x3}})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x3, 'veth0_to_batadv\x00', {0x4f}, 0x2})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x108, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xbd, 0x7, 0x1, 0x0, "edc2aa1ba1caf00a3e59a950be02e2027ea46633f3b4fa10bfe08edfc37eb9a2b23aa4433bbebb087c276abd74be48b6a045f4caeeef6d06f3038c4d0ffddf5905d09cccfa09859e3f639882f4d1eb72142a25b8841e51806468107f00bee20d1a494072afe117614c02fdf5dc0a9ed2784da2da3959ac099152602b5e82ee4723ae0e7280f421f3b6690f05d03a4ec6852a09587b59a7f66dbf8bc15f74b13d4abfe8e466be2a9d0154c60d5c1a191ca73c73c5a263bcceae"}]}], {0x14}}, 0x130}}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

10.880311994s ago: executing program 4 (id=1550):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10)
socket$packet(0x11, 0xa, 0x300)
socket$kcm(0x10, 0x3, 0x10)
syz_emit_ethernet(0x62, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa06020201"], 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000440)=[{}], 0x1, 0xfffffffa, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000000e0001006e657464657673696d0000000f0002006e657464657673"], 0x3c}}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
unshare(0x22020400)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1)
r5 = socket$kcm(0x10, 0x2, 0x10)
socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175", 0xec)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x40000)

10.840711327s ago: executing program 4 (id=1551):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000300)=""/104, 0x68)
getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8)
lseek(r1, 0x6be5, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
fchmod(0xffffffffffffffff, 0x504)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
msgsnd(0x0, &(0x7f0000000100)=ANY=[], 0x2000, 0x0)

9.681125325s ago: executing program 4 (id=1552):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21000f, &(0x7f0000000640)={[{@dax}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2006}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_user={'subj_user', 0x3d, '\xachMs\xf1\xe5\x81:Wi\x96\x01e\t\x9d\xcc\xe4\xaa\xf6\x87Y\xcb\x03%\x9f\xc2\x87y8\xf4\nk_\xab\xc0h\xaeb\xf6\x93Y\t~\xf8+T\b3\xdb\n\xc5\x92\x12\xd0\xb2\xff\xad_\xc8\xd4\xb8\xe3\xc0^%\x94\r\n\xfc\xc8Dn\xca+\x06\x8a3\xe2\xb2\"\x92\xda2\xfb\xa8\x8d\x9c\x90\xda>\xf1\xdd\xaf\r\x8d#\xfc\xe8P\xed\x9d\xe6\bz\x9dA\xa3\x8dn\xdfH\xcaz\xff&*Q\x81\xf0\f&\x99?\xcdbL\x06\xce\x95\xabH\xc0|\xafw\xfc\xda\xd9\xbb\xdd0mu\x99\x93unxw\xc2\x19o\xe7\xd7(\'\a\xd0\x93\xf9\xd48\'Vv\xd1\xaeD\xf0\xa4\x7f\xb5T|Y\xe6Y\xf2.Q\x82\xbe\x1a\xed\x04EHv^*\xfazX\xe78\x92\xa1\x9e\xd4\xaf\fg\xf4\xa1\xecy\xb3}'}}]}, 0x1, 0x51c, &(0x7f0000000cc0)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x1}]}}]}, 0x50}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = socket(0x0, 0x0, 0x1)
bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e)
socket(0x2, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, 0x0, 0xa08)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x14)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x2a)

9.677281445s ago: executing program 3 (id=1553):
r0 = socket$inet6(0xa, 0x2, 0x0)
clock_gettime(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$xdp(0x2c, 0x3, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_set$pid(0x2, r1, 0x2007)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9fe1dfa}, @IFA_LOCAL={0x8, 0x2, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x240400c4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000480)=ANY=[], 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

9.329170695s ago: executing program 2 (id=1554):
socket$isdn(0x22, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
connect$tipc(r3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000003880)=@multiplanar_mmap={0x81, 0x1, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "243032ae"}, 0x0, 0x1, {0x0}})
r4 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880), 0x63}, 0x0, 0xe3d08660d3cd4684})
getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0)

8.573258938s ago: executing program 3 (id=1556):
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="cc", 0x1}, {&(0x7f0000000140)="1a", 0x1}, {&(0x7f0000000700)="e6", 0x1}, {&(0x7f00000009c0)='A', 0x1}, {&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000ac0)='=', 0x1}, {&(0x7f0000000e00)="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", 0x201}], 0x7, 0x0)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0xdf7, 0x2, 0x0, 0x5, 0x1ff, 0x7f}, 0x20)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8bf527", 0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000007400000000000000000000005"], 0x38}}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))

8.368137926s ago: executing program 3 (id=1557):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="070000000000000000000000000000000000002a81918e4ac47434082ffbe05e754baa0a140000001100010000000000000000000000000a"], 0x28}}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0xe}]}}, 0x0, 0x26, 0x0, 0x10000000, 0x9}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x8, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x4}, 0x48)
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_emit_ethernet(0x32, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@noop, @lsrr={0x83, 0x3}]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x43)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@minixdf}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x23, 0x44d, &(0x7f0000000980)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
flistxattr(r4, 0x0, 0xfbffffff)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001680)=0x7e)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000a80)=0xff)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@dellink={0x20, 0x11, 0x421, 0x0, 0x2, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x24004800)

7.6001771s ago: executing program 2 (id=1560):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8100, &(0x7f00000002c0)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c646f733178666c6f7070792c646973636172642c636865636b3d7374726963742c646f74732c756d61736b3d30303030303030303030303030303030303030303030302c005cfc62f4d02467f358b5994840ea56b0221d013e71e44b8219d56c01000100d5bfd1b1537d0559da1ee418effe196657db344d30f27f6c0609979d6c93505e2d63e489bba6c6ee52f58754c60dfcc1d4"], 0x1, 0x255, &(0x7f000001fd40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000000)={0x0, 0x1})

7.515364047s ago: executing program 4 (id=1561):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x54d, &(0x7f0000000400)="$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")
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000100))
r5 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
prlimit64(0xffffffffffffffff, 0x9, &(0x7f00000003c0)={0x1}, &(0x7f0000000c40))
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
chdir(&(0x7f0000000280)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000005000000004000000300000d0000000002000000020000000e000000040000000d000000020000000000303000"], &(0x7f0000000b00)=""/147, 0x41, 0x93, 0x1, 0x5}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0xf, 0x0, r5, 0x0, '\x00', 0x0, r7, 0x4, 0x0, 0x2}, 0x48)

7.471935661s ago: executing program 3 (id=1562):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x14fc, &(0x7f0000001540)="$eJzs3Au0jtX2OP4511oPm6Q3yX3NNR/e5LJIklyS5JIkSXIkt4SQJElIbHJLQpL7Lck9JLeQ3Mk99yQ5kiQJCUnWfyiNOt/O//T9fc/5Hmd89/yM8Yy95l7vms989nzHc3nH2O/XHQZVrlulQm1mhn8K/vIjFQBSAKAvAFwDABEAlMhSIsul+QwaU/+5nYh/rYemXekKxJUk/U/bpP9pm/Q/bZP+p23S/7RN+p+2Sf/TNum/EGnZ1uk5r5Ut7W7y+f//beofzsr1P00a8utA+p+2Sf//D8rw+6D8P3yp9D9tk/6nbdL/tE36n7ZJ/9M26b8Qadn/4DPjSg//B3xu/W/cFABcif1m+Hfs90q//4QQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpA3nwm8MAPw6vtJ1CSGEEEIIIYQQ4l8npL/SFQghhBBCCCGEEOJ/H4ICDQYiSAfpIQUyQEa4CjLB1ZAZroEEXAtZ4DrICtdDNsgOOSAn5ILckAcsEDhgiCEv5IMk3AD54UYoAAWhEBQGD0WgKNwExeBmKA63QAm4FUrCbVAKSkMZKAu3Qzm4A8rDnVAB7oKKUAkqQxW4G6rCPVAN7oXqcB/UgPuhJjwAteBBqA0PQR34C9SFh6EePAL1oQE0hEbQ+H+0/nnoAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXAYASNhFIyGMTAWxsF4eAMmwJswEd6CSTAZpsBUmAbTYQa8DTNhFsyGd2AOvAtzYR7MhwWwEN6DRbAYlsD7sBQ+gGWwHFbASlgFq2ENrIV18CGshw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+H9ef/S/rOyIgoEKFBg2mw3SYgimYETNiJsyEmTEzJjCBWTALZsWsmA2zYQ7MgbkwF+bBPEhIyMiYF/NiEpOYH/NjASyAhbAQevRYFItiMbwZi2NxLIElsCSWxFJYGktjWSyL5bAclsfyWAErYEWsiJWxMt6Nd+M9WA2rYXWsjjWwBtbEmlgLa2FtrI11sA7WxbpYD+thfayPDbEhNsbG2ASbYFNsis2xObbAFtgKW2FrbI1tsA22xLbYDtthe2yPHbADdsRO2Amfx+fxBXwBu2FF1R17YA/siT2xN/bBPvgS9sOX8WV8BQfgQByEr+Kr+BoOwTM4FIfhcByO5dQoHI1jkNU4HI/jcQJOwIk4ESfhZJyMU3EaTscZOANn4iyche/gHHwX38V5OA8X4EJciItwMS7BJbgUz+IyXI4rcCWuwtW4CtfiOlyL63EDrsdNuAm34Bb8CD/CEbgdd+JO3I278WP8GD/BT3AA7sf9eAAP4EE8iIfwEB7Gw3gEj+BRPIrH8Bgex+N4Ak/iKTyJp/E0nsGzeA7P4Xk8jxfw2Vxf1tld8MMBoC4xyqh0Kp1KUSkqo8qoMqlMKrPKrBIqobKoLCqryqqyqWwqh8qhcqlcKo/Ko0iRYhWrvCqvSqqkyq9SLp9TCimvvCqqiqpiqpgqroqrEupWVVLdpkqp0qqZL6vKqnKquS+v7lQVVAVVUVVSlVUVBEhVVVU1VU1VV9VVDVVD1VQPqFqqO/bGh9SlztRVA7GeGoT1VQPV8EIj9Ro+qpqoIdhUNVPN1eNqGA7FVqqJb62eVG3UaGyrnlZj8BnVXo3DDuo51VF1Up3V86qLauq7qm5qEnZXPdRU7Kl6qd6qj5qJldSljlVWr6gBaqAapF5VC/A1NUS9roaqYWq4GqFGqlFqtBqjxqpxarx6Q01Qb6qJ6i01SU1WU9RUNU1NVzPU22qmmlV+tnpHzVHvqrlqnpqvFqiF6j21SC1WS9T7aqn6QC1Ty9UKtVKtUqvVGrU2IIBarzaojWqT2qy2qK3qI7VNbVc71E61S+1We9THaq/6RO1Tn6r96jN1QP1VHVSfq0PqC3VYfamOqK/UUfW1Oqa+UcfVt+qEOqlOqe/UafW9OqPOqnPqB3Ve/aguqJ/URRUUaNRKa210pNPp9DpFZ9AZ9VU6k75aZ9bX6IS+VmfR1+ms+nqdTWfXOXROnUvn1qB+6TTrWOfV+XRS36Dz6xt1AV1QF9KFtddFdFF9ky6mb9bF9S26hL5Vl9S36VK6tC6jy+rbdTl9hy6v79QV9F26oq6kK+sq+m5dVd+jq+l7dXV9n66h79c19QO6ln5Q19YP6Tr6L7qufljX04/o+rqBbqgb6cb6Ud1EP6ab6ma6uX5ct9AtdSv9hG6tn9Rt9FO6rX5at9PP6Pb6Wd1BP6c76k66s/5JX9RBd9XddKrurnvoF3VP3Uv31n10X/2S7qdf1v31K3qAHqgH6Vf1YP2aHqJf10P1MD1cj9Aj9Sg9Wo/RY/U4PV6/oSfoN/VE/ZaepCfrKXqqnqan696XM83+b6x/8++s7//z3rforfojvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9g/5On9bf6zP6rD6rf9Dn9Xl94fLfAAwaZbQxJjLpTHqTYjKYjOYqk8lcbTKba0zCXGuymOtMVnO9yWaymxwmp8llcps8xhoyzrCJTV6TzyTNDSa/udEUMAVNIVPYeFPEFDU3/dPr/6y+xqaxaWKamKamqWlumpsWpoVpZVqZ1qa1aWPamLamrWln2pn2pr3pYDqYjqaj6Ww6my6mi+lquppUk2p6mBdNT9PL9DZ9TF/zkuln+pn+pr8ZYAaYQWaQGWwGmyFmiBlqhprhZrgZaUaa0Wa0GWvGmvFmvJlgJpiJZqKZZCaZKWaKmWammRlmhplpZprZZraZY+aYuWaumW/mm4VmoVlkFpklZolZapaaZWa5WW5WmpVmtVlt1pq15kPzodlgNphNZpNZZraarWab2WZ2mB1ml9ll9pg9Zq/Za/aZfWa/2W8OmAPmoDloDplD5vCl0685Yo6ao+aYOWaOm+PmhDlhTplT5rQ5bc6YM+acOWfOm/PmgrlgLpqLl277IhWpyEQmSheli1KilChjlDHKFGWKMkeZo0SUiLJEWaKs0fVRtih7lCPKGeWKckd5IhtR5CKO4ihvlC9KRjdE+aMbowJRwahQVDjyUZGoaHRTVCy6OSoe3RKViG6NSka3RaWi0lGZqGx0e1QuuiMqH90ZVYjuiipGlaLKUZXo7qhqdE9ULbo3qh7dF9WI7o9qRg9EtaIHo9rRQ1GdyFy+vjwS1Y8aRA2jRlHjf2n+EM5kf8x3td1squ1ue9gXbU/by/a2fWxf+5LtZ1+2/e0rdoAdaAfZV+1g+5odYl+3Q+0wO9yOsCPtKDvajrFj7Tg73r6Bl4u1k+xkO8VOtdPsdDvDvm1n2ll2tn3HzrHv2rl2np1vF9h0ALDILrZL7Pt2qf3ALrPL7Qq70q6yq+0au9ausx/a9XaD3Wg32c12i91qP7Lb7Ha7w+60u+xuu8d+bPfaT+w++6ndbz+zB+xf7UH7uT1kv7CH7Zf2iP3KHrVf22P2G3vcfmtP2JP2lP3Onrbf2zP2rD1nf7Dn7Y/2gv3JXrTh0s39pcs7GTKUjtJRCqVQRspImSgTZabMlKAEZaEslJWyUjbKRjkoB+WiXJSH8tAlTEx5KS8lKUn5KT8VoAJUiAqRJ09FqSgVo2JUnIpTCSpBJakklaJSVIbK0O10O91Bd9CddCfdRXdRJapEVagKVaWqVI2qUXWqTjWoBtWkmlSLalFtqk11qA7VpbpUj+pRfapPDakhNabG1ISaUFNqSs2pObWgFtSKWlFrak1tqA21pbbUjtpRe2pPHagDdaSO1Jk6UxfqQl2pK6VSKvWgHtSTelJv6k19qS/1o37Un/rTABpAg2gQDabBNISG0FAaRsNpBI2kUTSaxtBYGkfjaTxNoAk0kSbSJJpEU2gKTaNpNINm0EyaSbNpNs2hOTSX5tJ8mk8LaSEtokW0hJbQUlpKy2gZraAVtIpW0RpaQ+toHa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nH+kC/UQXKVCKy+AyuqtcJne1y+yucf81zuFyulwut8vjrMvmsv9NTM65Aq6gK+QKO++KuKLupj/EpVxpV8aVdbe7cu4OV/4PcVV3j6vm7nXV3X2uirv7b+Ia7n5Xs/zDrpZ7xNV2DVwd18jVdQ+7eu4RV981cA1dI9fCtXSt3BOutXvStXFP/SFe5BYjuA/derfB7XWfuHPuB3fUfe3Oux9dV9fN9XUvuX7uZdffveIGuIF/iIe7EW6kG+VGuzFurBv3h3iKm+qmueluhnvbzXSz/hAvdO+5OW6Jm+vmufluwc/xIrfYLXHvu6XuA7fMLXcr3Eq3yq12a9xat+5yrSvdJrfZbXF73Mdum9vudridbpfb/XN86Tj2uU/dfveZO+K+cgfd5+6QO+YOuy9/ji8d3zH3jTvuvnUn3El3yn3nTrvv3Rl39ufjv3Ts37mf3EUXHDCyYs2GI07H6TmFM3BGvooz8dWcma/hBF/LWfg6zsrXczbOzjk4J+fi3JyHLRM7Zo45L+fjJN/A+flGLsAFuRAXZs9FuCjfxMX4Zi7Ot3AJvpVL8m1ciktzGS7Lt3M5voPL851cge/iilyJK3MVvpur8j1cje/l6nwf1+D7uSY/wLX4Qa7ND3Ed/gvX5Ye5Hj/C9bkBN+RG3Jgf5Sb8GDflZtycH+cW3JJb8RPcmp/kNvwUt+WnGVJ/OUF34Oe4I3fizvw8d+EXuCt341RO5R78IvfkXtyb+3Bffon78cvcn1/hATyQB/GrPJhf4yH8Og/lYTycR/BIHsWjeQyP5XE8nt/gCfwmT+S3eBJP5ik8lafxdJ7Bb/NMnsWz+R2ew+/yXJ7H83kBL+T3eBEv5iX8Pi/lD3gZL+cVvJJX8Wpew2t5HX/I63kDb+RNvJm38Fb+iLfxdt7BO3kX7+Y9/DHv5U94H3/K+/kzPsB/5YP8OR/iL/gwf8lH+Cs+yl/zMf6Gj/O3fIJP8in+jk/z93yGz/I5/oHP8498gX/iixwYYoxVrGMTR3G6OH2cEmeIMx5YEWeKr44zx9fEifjaOEt8XZw1vj7OFmePc8Q541xx7jhPbGOKXcxxHOeN88XJ+IY4f3xjXCAuGBeKC8c+LhIXjW+Ki8U3x8XjW+IS8a1xyfi2uFRcOn74vrLx7XG5+I64fHxnXCG+K64YV4orx1Xiu+Oq8T1xtfjeuHp8X1w8vj+uGT8Q14ofjGvHD8V14r/EdeOH43rxI3H9uEHcMG4UN44fjZvEj8VN42Zx8/jxuEXcMm4VPxG3jp+M28RP/el8atw97hG/GL8Yh3Cvnp9ckFyYfC+5KLk4meHyZX1ZcnlyRXJlclVydXJNcm1yXfLD5PrkhuTG5Kbk5uSWZAhV0oNHr7z2xkc+nU/vU3wGn9Ff5TP5q31mf41P+Gt9Fn+dz+qv99l8dp/D5/S5fG6fx1tP3nn2sc/r8/mkv8Hn9zf6Ar6gL+QLe++L+KK+kW/sG/sm/jHf1Dfzzf3j/nHf0rf0T/gn/JO+jX/Kt/VP+3b+Gd/eP+uf9c/5jr6T7+yf9138C76r7+ZTfarv4Xv4nr6n7+17+76+r+/n+/n+vr8f4Af4QX6QH+wH+yF+iB/qh/rhfrgf6Uf60X60H+vH+vF+vJ/gJ/iJfqKf5Cf5KX6Kn+an+Rl+hp/pZ/rZfrafU2COn+vn+vl+vl/oF/pFfpFf4pf4pX6pX+aX+RV+hV/lV/k1fo1f59f59X693+g3+s1+s9/qt/ptfpvf4Xf4XX6X3+P3+L1+r9/n9/n9fr8/4A/4g/6gP+S/8If9l/6I/8of9V/7Y/4bf9x/60/4k/6U/86f9t/7M/6sP+d/8Of9j/6C/8lf9MGPT7yRmJB4MzEx8VZiUmJyYkpiamJaYnpiRuLtxMzErMTsxDuJOYl3E3MT8xLzEwsSCxPvJRYlFieWJN5PLE18kFiWWJ5YkViZWJVYnQgh97Y45A35ukG4IeQPN4YCoWAoFAoHH4qEouGmUCzcHIqHW0KJcGsoGW4LpULpUCY8EuqHBqFhaBQah0dDk/BYaBqahebh8dAitAytwhOhdXgytAlPhbbh6dAuPBPah2dDh/Bc6Bg6hc7h+dAlvBC6hm4hNXQPPcKLoWfoFXqHPqFveCn0Cy+H/uGVMCAMDIPCq2FweC0MCa+HoWFYGB5GhJFhVBgdxoSxYVwYH94IE8KbYWJ4K0wKk8OUMDVMC9PDjPB2mBlmhdnhnTAnvBvmhnlhflgQFob3wqKwOCwJ74el4YOwLCwPK8LKsCqsDmvC2rAu/HoLvClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hoOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M+aEEIIIcR/y4Q/me/+d36nLm+X9ACAq7fnPPz7eQ0AG7P9Mk5RuVokAODJbh0e+nWrWDE19fKjNyzTEOWbBwAJSPfr+p+/fyDxy3g5NIeW0BqaQbG/W18v7HSe/yR/8laAjL/mvlQT/C7u9mv+m/9+fjVqzp/mnwdQIN9vay49If4a/1Z/8f+f/Nmb/En+DJ+PB2j6uzWZ4Lf4t/xF4TF4Clr/zSuFEEIIIYQQQohf9FJl2v3Z8+2l5/Nc5rc16eG3eDngP3w+F0IIIYQQQgghxJX3TKfOTzzaunWzdmly0P0/o4z//IG+/Hb53VShkgBXvjAZ/G8NrvCJSQghhBBCCPEv99tN/5WuRAghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESLv+HV8ndqWPUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjS/r8AAAD//9LtH/I=")
clock_gettime(0x9, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0xffffff85, 0x0, 0x0, 0xfffffffffffffca9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
rmdir(&(0x7f0000000100)='./control\x00')
link(0x0, &(0x7f0000000080)='./file0\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
rename(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='./file0\x00')

7.071674014s ago: executing program 1 (id=1564):
dup(0xffffffffffffffff)
connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mtu(r1, 0x6, 0xd, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x5452, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x301481, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8912, &(0x7f0000000080)={0x2, 'ip6gretap0\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x5452, 0x0)
futex(&(0x7f0000000700), 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@kern={0xa}, 0x2f)
shutdown(0xffffffffffffffff, 0x0)

6.623941342s ago: executing program 1 (id=1565):
syz_usb_connect$uac1(0x0, 0xba, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x5}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7, 0xc, "3cad09", "c142c1"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6c, 0x1, 0x5, 0x7, "fb3e5a83a1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x3, 0x62159479c80b9627)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000020bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x600000b, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000140), 0x0, 0x4)
ioctl$UFFDIO_CONTINUE(r3, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

6.369518084s ago: executing program 2 (id=1566):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x204002, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64=0x0], 0xfc, 0xc58, &(0x7f0000004180)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVskMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkN02YXnroIUBR9JATgdYokKKB0RRFj2zrAsnFh8KnnogWNoKiKNgiQE4pi5l9K67+SyYpUvbnY5Pf2dn3Zt6bWc1QAt+8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAifvuVs8efT/vdCgDgYTo/+ZXjJ9z/AeBj5YK//wMAAAAAAAAAAAAAwEGXoognIsXi+c00Xb3uGDzXnr96bWps/PbVhlJVs68qX34NPn/i5KkvvjB6upt3r7/bnorXJi+crb+8cGVxqbW83JqtT823ZxZmW/e9hZ3Wv9lIdQDqV16/Onvp0nL9xHMnb3j72vAHA48fGT4z+syxp7tlp8bGxyd7ytT6P/Teb3GnER6HoohjkeLZ7/84NSOiiJ0fi3t8dvbaUNWJkaoTU2PjVUfm2s35lfLNie6BKCLqPZUa3WP0EM7FjjQiVsvmlw0eKbs3udhcal6ca9Unmksr7ZX2wvxE6rS27E89ijidItYiYmPg1s31RxG1SPHdw5vpYkT0dY/DF6qBwXduR7GHfbwPZTvr/RFrxSNwzg6wgSji1Ujxk3eKmMl/Nmrlt89FvFrm30e8VeZLEal8/1TE+9XnaGg/m80uqUURf1Ke/zObaba6HnSvK+e+Wv/y/KWFnrLd68ojf394mO56bdr/cZeDUUSzasdmesAfdva/8QAAAAAAAAAAAAAAAAAfYUNRxFOR4pV//f1qXHFU49IPnxn9neGf7x3g9eQ9tlOWfS4iVov7G5N7KA8hnkgTKXXGEv/frneOexqMIv4wj//79n43BgAAAAAAAAAAAAAAAAAA4GOtiPcixYvvHk1r0TuneHv+cv1C8+JcZ1bY7ty/3TnTt7a2tuqpk42c0zlXc67lXM+5kTOKXD9nI+d0ztWcaznXc27kjL5cP2cj53TO1ZxrOddzbuSMWq6fs5Gzlvu2ml+v5VzPuZEzzCsOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDriijiZ5HiO1/fTJEiohExHZ1cH+iWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD200Aq4geRov67jevrahGRqv87jpbfTkXjUJmfjMZomS9F42zOZpW1xrf3of3sTH8q4keRYmDw7esnPJ///s6r6x+DeOsb1av/Lpd/qdZZ19d9c/iDgcePHD4zOv4rT95pOd2uASPn2vNXr9WnxsbHJ3tW1/LeP9mzbjjvt9i13rP8xpuvN+fmWksWPh4Ltc5CLXZ1y0MRu7vB3VuodRby9Sr2vT13WGgcjGZsL0R17b/tNZuPjPL+/36k+I13/617w+/e/3+u8+r6HT5++s3tnwZevHlDe3T/f6Jn3Yv5p5H+WsTgypXF/iMRg8tvvHmsfaV5uXW5NX/q+PEvjY5+6eTx/kMRg5fac62epR0fKgAAAAAAAAAAAAAAAICHKxXxW5Gi+aPNVI+Ia9V4reEzo88ce7ov+qrxVjeM23pt8sLZ+ssLVxaXWsvLrdn61Hx7ZmG2db+7G6yGe02Nje9JZ+5paI/bPzT48sLiG0vty7+3ctv3Hxs8e3F5Zak5c/u3YyiKiEbvmpGqwVNj41Wj59rN+arqxC4NzOxPRfx7pJg5VU+fzevy+L8y3uvvKZvH/1dWe9ZXy3s0/u8TN+0npSJ+Gik+/6dPxmerdj4WtxyzXO4vI8XI6c/kcnGoLNdtQ+e5Ap2RgWXZ/4kUf/uzG8t2+/7EdtnnH+zoHnzl+T8cKX7wx9+LX83rbnz+w/b4z97z/9jNG7rH+V+ND3f+P9Wz7rEbnlew466Tz/+xSPHSE2/Hr+V1d3v+RxFbW1vfijiaC19/Psce/fn/dM+64ejs99d3r/sAAAAAAAAAAACPrP5UxF9FiqfHa+mFvO5+fv9v9uYN7dHvf/1iz7rZhzRf0Y4PKgAAAAAcEP2piPcixeWVt6+Poe4Z/33j+M/f3J57fSzd9G7173y/UD03YDf//a/XcN7v9M67DQAAAAAAAAAAAAAAAAAAAAdKSkW8ECk+v/VkNa7+bvOpr0eKV/7z2VwuHSnLdeeBH66+D55fmD92dm5uYaa50rw416pPLjZnWmXdT0WKzb/4TK5bVPOrd+eb78zxPrjVnYt9KVKM/3W3bGcu9u7c5J35wDtzsZdlPxEp/uNvbizbncf609tlT5Rl/zxSfO0fbl/2yHbZk2XZ70WKH36t3i37WFm2+3zUzjNJh2sx13puZmHulkehAgAAAAAAAAAAAAAAAAAAwIPqT0X8UaT4rytrsZqH/ef5/7sz8Ne6Zd/6Rs98/ze5Vs3zP1zN/3+n5Q8z///wrvUUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHSmKeDNSLJ7fTOsD5euOwXPt+avXpsbGb19tKFU1+6ry5dfg8ydOnvriC6Onu3n3+rvtqXht8sLZ+ssLVxaXWsvLrdn61Hx7ZmG2dd9b2Gn97UPXMVIdgPqV16/OXrq0XD/x3Mkb3r42/MHA40eGz4w+c+zpbtmpsfHxyZ4ytf4H2PsDNW7boSjizyLFs9//cfrHgYgiHvRYFLesucdnZ68NVU0aqToxNTZedWSu3ZxfKd+c6B6IIqLeU6nRPUYP4VzsSCNitWx+2eCRsnuTi82l5sW5Vn2iubTSXmkvzE+kTmvL/tSjiNMpYi0iNgZu3Vx/FPF6pPju4c30TwMRfd3j8IXzk185fuLO7bj1tO+KO31Ob1a2s94fsVY8AufsABuIIv4uUvzknaPxzwMRteh8xeciXu0t+FJEKk/OqYj3b/M54tFUiyL+tzz/ZzbTOwPl9aB7XTn31fqX5y8t9JTtXld2eq/czfvD1oN/Fod2Ybf374BfmwajiB9WV93N9C8D8c1n97tBAAAAAAAAAAAAAAAAAGRF/HKkePHdo6kaH3x9THF7/nL9QvPiXGdYX3fsXz3iD8rc2traqqdONnJO51zNuZZzPedGzihy/ZyNnNM5V3Ou5VzPuZEz+nL9nI2c0zlXc67lXM+5kTNqVWxtbX2rU7+W6+dczblWiyjK+vn1Rs44IGP3AAAAAAAAAAAAAAAAAACAj5ai+i/Fd76+maq5VBsR09HJdfP8fuT9fwAAAP//7kf9eA==")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x8c9d7, 0x9, 0x1}, 0x48)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000340)={@val, @void, @eth={@multicast, @local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x8}}}}}}, 0x36)

6.342047926s ago: executing program 3 (id=1576):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x550, 0x228, 0x228, 0x0, 0x228, 0x3e8, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4a8, 0x6, 0x0, {[{{@ipv6={@loopback={0x6200000000000000}, @local, [], [], 'syzkaller1\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netpci0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@local, @private1, [], [], 'veth0_macvtap\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@multicast1}}}, {{@ipv6={@private0, @local, [], [], 'vlan0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r2, 0x107, 0x17, 0x0, &(0x7f0000000080))
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14)
bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x15, r1, 0x1, 0x5, 0x6, @multicast}, 0x14)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x1, 0x6, @remote}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x2}, 0x4)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r8=>0x0})
syz_mount_image$befs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x8f17, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32=0x0], 0x0, 0x9dfc, &(0x7f0000013c80)="$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")
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000000306050000000000000000000500000805000100070000000900020073797a320000000500010007000000050001000700000005000100070000000900020073797a32000000004ca14f44ac1fbe81887cad95142855445ad353bc64a0ad96b794b168d5a8a74b00b0573342b578"], 0x54}, 0x1, 0x0, 0x0, 0x20044800}, 0x20000000)

6.0526655s ago: executing program 0 (id=1568):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000002c0)='netlink_extack\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
inotify_init1(0x0)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0xf5ca}, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
pipe(&(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="340000001500010000020000000000000a000000", @ANYRES32=r3, @ANYBLOB="0800080000000000140002"], 0x34}}, 0x0)

5.10370562s ago: executing program 4 (id=1569):
inotify_init1(0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1000002, &(0x7f0000000700)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$eJzs3U9oI9UfAPBvOmnSXfj9tjdREKI3Qct2b3qxRbqw2ItK8M9BDG5XJa1Ci8X2sG09KB4Fj3rypqAHD+JRBEW8efDqCrIqHrS3BRefTCaTTJu02y5WKX4+0PTlvfed73cmQzINyetzc9G9PBlXdnevx9RULepzj8zFjVpMRxal7RjVGNMHAJwON1KK31PhiCG1Ey4JADhhvdf/FyKiFdNFz+tfHjY/efUHgFOv//f/mcPmTB008MqJlAQAnLCR9//v3TPc6P3Uy7v1yqcCAIDT6omnn3l0fjHi8VZrKmLlzfX2ejseGo7PX4mXYjmW4nyci5sRxYVCflPr3V68tLhwvtVqbcVP09GOiIl+YLu4UpjPevHNmB2MDK42UkrZxU8WF2ZbPRGxvdXLHyu19fZknO3n//5sLA0vPKbLIqJ3c2lx4UKrv4H2Shm/FbEzfN8ir38mzsW3zw82k1L5CcbFhauzE/07w/j1djMuD47Cge+AAAAAAAAAAAAAAAAAAAAAAADAbZlpDUwP1s9J+e9ipZyZmTHjvfVxivj++kA7xfpAqZkipd9ee6D9VhZ71gfavz7PuoUEAQAAAAAAAAAAAAAAAAAAYGBtoxGd5eWl1bWNzW61sbW6tjEREXnPy19/9MWZGJ1zi0a9SNGMGKRo9dNudjspKyenLGI0PMuTlz0ffDqouDqnOdiLsWU0xw/tRt743z0/vjscujsrt/zncHIW43cwq5Tx8L6kK/8vSjrOgRo0LlR7mqPZr6WUKj1vVMOvPju6wahF1I//wG12J+LgOSlvfHX9xTvLo9/5PBXuu//ck9feef+Xbmc5zxy9R7CxunYzdTu1cvLxDkt+qMueWhSNWvVMqB8WvrO3p5N99+tTd739zdGyp2rPq/n5vG9OVuzOx/vDG0UjLzNvNIZny5lh+GR/J5aXJsec/Ldq3MZjesd7n32Y0g8/HzlFIa9+YuRpo/b3PQMBAAAAAAAAAAAAAAAAAAClynfF+/pf9p08LOrBx06+MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD45wz//3+lsbMd+3qO0vhja0xUc2l1LaLxb+8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/cX8FAAD//zbhVeI=")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000540)={[{0xffffffec, 0x5, 0x3, 0x0, 0x2, 0x0, 0xfd, 0xf5, 0x0, 0x0, 0xfd, 0x0, 0x6}, {0xc, 0xb, 0x77, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7, 0xff, 0x4e, 0xfc, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6ddc}], 0xffffffff})
capset(&(0x7f0000000000)={0x20080522}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004ce], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000300)=0x92b1, 0x4)
listen(0xffffffffffffffff, 0xb84)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5.039379386s ago: executing program 0 (id=1570):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x0, 0xc1}}}}, 0x30}}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140), 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='=', @ANYBLOB=','])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102379, 0x18feb}], 0x1, 0x3, 0x0)
write$sequencer(0xffffffffffffffff, 0x0, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x11c)
semget$private(0x0, 0x4000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, 0x0)

4.997321519s ago: executing program 3 (id=1571):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
io_setup(0x6, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
rt_sigpending(0x0, 0x1000000)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r4, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r7})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.914100896s ago: executing program 2 (id=1572):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)

3.892359272s ago: executing program 2 (id=1573):
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
set_mempolicy(0x3, &(0x7f0000000000)=0xda2, 0x3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x0)
set_mempolicy(0x0, &(0x7f0000004bc0)=0xfffffffffffffffb, 0x3)
set_mempolicy(0x3, &(0x7f0000006940)=0x8a1, 0x20)
recvmmsg(r2, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000003c0)=""/166, 0xa6}], 0x3}, 0x7fff}, {{&(0x7f0000000480)=@can, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/247, 0xf7}, {&(0x7f0000001600)=""/80, 0x50}, {&(0x7f0000001680)=""/79, 0x4f}, {&(0x7f0000001700)=""/216, 0xd8}, {&(0x7f0000001800)=""/192, 0xc0}], 0x6, &(0x7f0000001940)=""/229, 0xe5}, 0xffffffff}, {{&(0x7f0000001a40)=@nfc, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001ac0)=""/202, 0xca}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/9, 0x9}, {&(0x7f0000002c00)=""/229, 0xe5}, {&(0x7f0000002d00)=""/236, 0xec}, {&(0x7f0000002e00)=""/108, 0x6c}, {&(0x7f0000002e80)=""/101, 0x65}], 0x7}, 0x18}, {{&(0x7f0000002f80)=@generic, 0x80, &(0x7f0000003140)=[{&(0x7f0000003000)=""/192, 0xc0}, {&(0x7f00000030c0)=""/7, 0x7}, {&(0x7f0000003100)=""/26, 0x1a}], 0x3, &(0x7f0000003180)=""/174, 0xae}, 0x10001}, {{&(0x7f0000003240)=@nfc, 0x80, &(0x7f0000003740)=[{&(0x7f00000032c0)=""/194, 0xc2}, {&(0x7f00000033c0)=""/137, 0x89}, {&(0x7f0000003480)=""/9, 0x9}, {&(0x7f00000034c0)=""/32, 0x20}, {&(0x7f0000003500)=""/39, 0x27}, {&(0x7f0000003540)=""/30, 0x1e}, {&(0x7f0000003580)=""/28, 0x1c}, {&(0x7f00000035c0)=""/126, 0x7e}, {&(0x7f0000003640)=""/62, 0x3e}, {&(0x7f0000003680)=""/150, 0x96}], 0xa}, 0x5}, {{&(0x7f0000003800)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003880)=""/129, 0x81}, {&(0x7f0000003940)=""/134, 0x86}, {&(0x7f0000003a00)=""/12, 0xc}, {&(0x7f0000003a40)=""/179, 0xb3}, {&(0x7f0000003b00)=""/171, 0xab}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)}, {&(0x7f0000004c00)=""/114, 0x72}], 0x8, &(0x7f0000004d00)=""/61, 0x3d}, 0x4}, {{&(0x7f0000004d40), 0x80, &(0x7f00000063c0)=[{&(0x7f0000004dc0)=""/198, 0xc6}, {&(0x7f0000004ec0)=""/114, 0x72}, {&(0x7f0000004f40)=""/32, 0x20}, {&(0x7f0000004f80)=""/235, 0xeb}, {&(0x7f0000005080)=""/75, 0x4b}, {&(0x7f0000005100)=""/162, 0xa2}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/196, 0xc4}, {&(0x7f00000062c0)=""/67, 0x43}, {&(0x7f0000006340)=""/119, 0x77}], 0xa, &(0x7f0000006480)=""/146, 0x92}, 0x81}], 0x7, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$isdn(0x22, 0x3, 0x10)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000006880)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x5, 0x7, 0x4, 0x9, 0x870]}, &(0x7f0000006900)=0x78)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x800448d3, 0x0)
sendto(r4, &(0x7f0000006700)="1eb3a37439e9a5090281a392ca96a35e6c805ef9fbac39774831b6d7a8adbac55b828273bacfe0222739972f2e1025c92457a585d080e2854e7a632a11f18da301d2997d1cdafa589a46ed1d88667920f5fa7d4a7d43c54443fc2dcd793280e2170da560514d22b816570a20f05d55a9bdaa07ca0177d8b34ebc8a167ffacb867819cd786b7cf46b1d97e41b0a4f02c24634ca3b1a2799003c60db96de4673fb00e0b151c8043a4ee12af0df0fb32688347efb6ca040b47fa6badef13bd471673d2bfcd2d58790971c7532ea5f0479098496b0fd3f7a892d987521ef5403f5", 0xdf, 0x10, &(0x7f0000006800)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x2, {0xa, 0x4e24, 0x401, @mcast1, 0x8001}}}, 0x80)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafc0d8c560a84476080040000000f0800000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'macvlan1\x00', {0x6}, 0x400})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000001cf0b00006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bcb6c866c96ed3822a0200000046", 0x48}], 0x1}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$kcm(0x29, 0x0, 0x0)

3.848246316s ago: executing program 0 (id=1574):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000965000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x3ba22000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r5, &(0x7f0000001140), 0x700, 0x0, 0x0)

1.590059806s ago: executing program 1 (id=1575):
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x4, 0x2f2, &(0x7f0000000200)="$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")
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002740)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket(0x0, 0x803, 0x0)
socket(0x1, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000080), 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x200480c4)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)={0x200, 0x100, 0x39}, 0x18)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000580)="9b2e5db69230022b535e9e4846eef0cf236fbbe97ed6b2e33a62ff45bef54cc3aea410310affa9ee0d16a1", 0x2b}], 0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4500, &(0x7f00000005c0)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@minixdf}, {@test_dummy_encryption}, {@auto_da_alloc_val}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@barrier}, {@delalloc}, {@usrquota}], [{@fsuuid={'fsuuid', 0x3d, {[0x5b, 0x66, 0x66, 0x39, 0x65, 0x31, 0x33, 0x37], 0x2d, [0xc, 0x38, 0x37, 0x33], 0x2d, [0x32, 0x66, 0x0, 0x38], 0x2d, [0x31, 0x62, 0x37, 0x66], 0x2d, [0x38, 0x35, 0x3, 0x30, 0x62, 0x63, 0x66, 0x63]}}}]}, 0x11, 0x4c6, &(0x7f0000000ec0)="$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")
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)

1.582216166s ago: executing program 0 (id=1577):
openat$hwrng(0xffffffffffffff9c, 0x0, 0x1c9100, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket(0x0, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
syz_open_dev$usbfs(0x0, 0x77, 0xb8800)
syz_emit_vhci(0x0, 0x52)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)

1.576795557s ago: executing program 2 (id=1578):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c5002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0)
write$binfmt_script(r2, &(0x7f0000000a80)={'#! ', './file0'}, 0xb)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000140))
syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220f0000008326251c20ebfeb71bc84ee13699e2e573a8407a730b93bf0280037488dffc"], 0x0}, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000080))
ftruncate(r1, 0x5d801)
r5 = dup(r0)
read$FUSE(r5, &(0x7f0000004540)={0x2020}, 0x2020)

1.252333064s ago: executing program 1 (id=1579):
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x102000, 0x0, 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {r0}}, './file0\x00'})
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd74a3838a7000fbdbdf25040000000900010073797a31"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC])
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r2, 0xff, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r3, 0xff, 0x0, 0x0, &(0x7f00000000c0))
r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000002540)={0xffffffffffffffff, 0x1, 0x1000, 0x1000000000000})
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x80800, 0x6e361a0c411a6d13)
r5 = openat$ptp0(0xffffff9c, &(0x7f0000002580), 0x260640, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{0x0}], 0x1}}, {{&(0x7f00000003c0)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000001cc0)=[@rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r2, r4, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x88}}, {{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000002040), 0x0, 0x20004004}}, {{&(0x7f0000002080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002100)}, {&(0x7f0000002200)="aa0f0bef27d6122ab82f751e7aee2ecec68a8d84d960b2d125d3958de9e82f27a846b8374b2486f9b03cc2efb9820a23128d6fdc7f9ca5f7a3b5976e01474955efd277a288ae7508a47efb21fe95bee52373c623114ca7769c5c8f55d521f9e9e58027a853ffa0e267f8c23ea2433b42dfdf5c33b41c2a0af58181b8f94e15bd0dc274a09613842ff6633f6cecf0f6cd2a3d6c59a38fbd942dafbe051132ba1bb2c631ec83b942bc6c8ba05ec9e79e2b70ff7895dcb4", 0xb6}, {&(0x7f00000022c0)}, {0x0}], 0x4, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x148, 0x4000000}}], 0x4, 0x200040c4)
getsockopt(0xffffffffffffffff, 0xffffffff, 0x16c1, &(0x7f0000000100)=""/53, &(0x7f0000000340)=0x35)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002480))
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10)
connect$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x1, 0x3, 0x0, @remote}, 0x10)

1.251784054s ago: executing program 0 (id=1580):
mkdir(&(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)=@framed, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a}, 0x20)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300))
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=""/8})
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = eventfd(0x0)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5})
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000000c0)={r5})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r6, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000600)='rpc_pipefs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80060, 0x0)

1.021125354s ago: executing program 0 (id=1581):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
r0 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0xb, @pix_mp={0x38305343}})
r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0xc0305710, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.freeze\x00', 0x275a, 0x0)
ftruncate(r2, 0x8000000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100))
mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040))

863.027837ms ago: executing program 1 (id=1582):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffff00)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a09040000000000000000020000050900020073797a32000000000900010073797a3000000000340004803000018008000100636d7000240002800800014000000012100003800c00010066d4a2086a2826ec08000240000000001400000011000100000000000000"], 0x88}}, 0x0)

0s ago: executing program 1 (id=1583):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001740)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f00000003c0)={[{@gid}, {@nobarrier}, {@nodecompose}, {@creator={'creator', 0x3d, "3bf9bacf"}}, {@barrier}]}, 0x1, 0x6a9, &(0x7f0000000c80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat(r4, &(0x7f0000001380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000240)='./file0\x00')
sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

kernel console output (not intermixed with test programs):

dv: batadv0: Interface deactivated: batadv_slave_0
[  441.244918][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.257848][ T3579] Bluetooth: hci4: wrong event for mode 0
[  441.271942][   T25] audit: type=1804 audit(1724249800.219:111): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1112" name="/newroot/91/file0" dev="loop1" ino=2 res=1 errno=0
[  441.326094][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.332932][ T8521] sysv_count_free_inodes: unable to read inode table
[  441.338456][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.353122][ T4302] device bridge_slave_1 left promiscuous mode
[  441.353900][   T25] audit: type=1804 audit(1724249800.261:112): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1112" name="/newroot/91/file0" dev="loop1" ino=2 res=1 errno=0
[  441.370150][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.799316][ T6609] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  442.108509][ T4302] device bridge_slave_0 left promiscuous mode
[  442.158946][ T8533] cgroup: Unexpected value for 'cpuset_v2_mode'
[  442.169610][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.189308][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1117'.
[  442.227569][   T25] audit: type=1326 audit(1724249801.299:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8535 comm="syz.1.1117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9f0197e79 code=0x0
[  442.263958][ T4302] device veth1_macvtap left promiscuous mode
[  442.280515][ T4302] device veth0_macvtap left promiscuous mode
[  442.290852][ T4302] device veth1_vlan left promiscuous mode
[  442.301920][ T4302] device veth0_vlan left promiscuous mode
[  442.721746][ T4302] team0 (unregistering): Port device team_slave_1 removed
[  442.748114][ T4302] team0 (unregistering): Port device team_slave_0 removed
[  442.764328][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  442.785185][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  442.890643][ T4302] bond0 (unregistering): Released all slaves
[  442.939989][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  442.955040][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'.
[  442.972051][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'.
[  443.251612][ T8549] loop3: detected capacity change from 0 to 2048
[  443.383335][ T8548] loop0: detected capacity change from 0 to 8192
[  443.480032][ T8558] loop2: detected capacity change from 0 to 256
[  443.502754][ T8556] loop4: detected capacity change from 0 to 128
[  443.588827][ T8558] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d)
[  443.614403][ T8558] exFAT-fs (loop2): error, invalid access to FAT bad cluster (entry 0x00000005)
[  443.623639][ T8558] exFAT-fs (loop2): Filesystem has been set read-only
[  443.630551][ T8558] exFAT-fs (loop2): failed to initialize root inode
[  443.731500][ T8549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  443.954024][   T25] audit: type=1800 audit(1724249803.115:114): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1121" name="bus" dev="loop0" ino=1048690 res=0 errno=0
[  444.006791][   T25] audit: type=1800 audit(1724249803.146:115): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1121" name="bus" dev="loop0" ino=1048690 res=0 errno=0
[  444.117472][    T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  444.284732][ T8563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1125'.
[  444.353275][    T7] usb 2-1: Using ep0 maxpacket: 8
[  445.239858][    T7] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  445.286041][    T7] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  445.325437][    T7] usb 2-1: Product: syz
[  445.329638][    T7] usb 2-1: Manufacturer: syz
[  445.334253][    T7] usb 2-1: SerialNumber: syz
[  445.370865][ T8572] loop2: detected capacity change from 0 to 8192
[  445.375978][    T7] usb 2-1: config 0 descriptor??
[  445.434329][ T8572] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  445.442965][    T7] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  445.450310][ T8572] REISERFS (device loop2): using ordered data mode
[  445.457176][ T8572] reiserfs: using flush barriers
[  445.468619][ T8572] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  445.536131][ T8572] REISERFS (device loop2): checking transaction log (loop2)
[  445.632032][ T8572] REISERFS (device loop2): Using r5 hash to sort names
[  445.639627][ T8572] REISERFS (device loop2): using 3.5.x disk format
[  445.643646][ T8553] ucma_write: process 302 (syz.1.1122) changed security contexts after opening file descriptor, this is not allowed.
[  445.651208][ T8572] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  445.964039][    T7] gspca_zc3xx: reg_r err -71
[  445.969860][    T7] gspca_zc3xx: probe of 2-1:0.0 failed with error -71
[  446.002084][    T7] usb 2-1: USB disconnect, device number 17
[  446.452660][ T8584] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001
[  446.462111][ T8585] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1129'.
[  446.982897][ T8590] loop1: detected capacity change from 0 to 512
[  447.773016][ T6904] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  447.835972][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1133'.
[  447.840572][ T8592] cgroup: Unexpected value for 'cpuset_v2_mode'
[  447.845100][ T6904] Bluetooth: hci4: Injecting HCI hardware error event
[  447.867876][ T8590] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  447.880960][ T8586] loop3: detected capacity change from 0 to 4096
[  447.889132][ T8590] ext4 filesystem being mounted at /94/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8 supports timestamps until 2038 (0x7fffffff)
[  447.897882][ T3579] Bluetooth: hci4: hardware error 0x00
[  447.918512][ T8595] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1134'.
[  447.928770][   T25] audit: type=1326 audit(1724249807.292:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.0.1133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90ad99e79 code=0x0
[  447.989646][ T8586] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  448.047851][ T8586] ntfs3: loop3: Failed to load $LogFile.
[  448.072371][ T8590] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1132: Directory hole found for htree leaf block 0
[  448.143216][ T8590] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1132: Directory hole found for htree leaf block 0
[  448.352958][ T8610] loop3: detected capacity change from 0 to 256
[  448.400651][ T8610] exfat: Bad value for 'uid'
[  450.334973][ T8622] loop4: detected capacity change from 0 to 2048
[  450.457589][ T5750] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  450.479984][ T5750] Bluetooth: hci1: Injecting HCI hardware error event
[  450.519149][ T8624] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  450.624081][ T3571] Bluetooth: hci1: hardware error 0x00
[  450.670261][ T8622] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.1140: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  450.719300][ T8622] EXT4-fs (loop4): get root inode failed
[  450.738024][ T8622] EXT4-fs (loop4): mount failed
[  450.873700][ T8626] loop3: detected capacity change from 0 to 8192
[  450.965350][ T8626] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  451.017889][ T8626] REISERFS (device loop3): using ordered data mode
[  451.045730][ T8626] reiserfs: using flush barriers
[  451.051977][ T8644] loop0: detected capacity change from 0 to 256
[  451.060301][ T8642] netlink: 'syz.2.1144': attribute type 10 has an invalid length.
[  451.078293][ T8626] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  451.115561][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.118157][ T8646] loop4: detected capacity change from 0 to 512
[  451.123741][ T8626] REISERFS (device loop3): checking transaction log (loop3)
[  451.141577][ T8642] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.165872][ T8626] REISERFS (device loop3): Using r5 hash to sort names
[  451.187086][ T8626] REISERFS (device loop3): using 3.5.x disk format
[  451.197662][ T8626] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  451.205095][ T8642] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  451.248083][ T8646] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  451.258985][ T8646] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  451.259624][ T8646] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1140: invalid indirect mapped block 2683928664 (level 1)
[  451.259970][ T8646] EXT4-fs (loop4): Remounting filesystem read-only
[  451.260271][ T8646] EXT4-fs (loop4): 1 truncate cleaned up
[  451.260290][ T8646] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback.
[  451.425452][ T8644] device syzkaller0 entered promiscuous mode
[  451.604517][ T8659] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  452.550045][ T8670] tipc: Enabling of bearer <�z:l> rejected, media not registered
[  452.660045][    C0] eth0: bad gso: type: 1, size: 1408
[  452.795397][ T8679] loop3: detected capacity change from 0 to 1024
[  454.057837][ T8683] loop1: detected capacity change from 0 to 164
[  454.305158][ T8689] sctp: [Deprecated]: syz.4.1158 (pid 8689) Use of int in maxseg socket option.
[  454.305158][ T8689] Use struct sctp_assoc_value instead
[  454.480461][ T8692] loop0: detected capacity change from 0 to 4096
[  454.571402][ T8692] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  454.606031][ T8689] loop4: detected capacity change from 0 to 4096
[  454.678666][ T8692] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  454.831898][ T8689] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  455.627292][ T8716] loop0: detected capacity change from 0 to 164
[  455.740703][   T25] audit: type=1326 audit(1724249815.456:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.2.1162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87af984e79 code=0x0
[  455.837595][ T8716] isofs: isofs_export_get_parent(): child directory not normalized!
[  455.856564][ T8714] loop1: detected capacity change from 0 to 32768
[  456.630111][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'.
[  456.679947][ T8736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  456.774485][ T6904] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  457.122447][ T1074] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  457.532744][ T1074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  457.559753][ T1074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  457.570988][ T1074] usb 3-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=dd.34
[  457.581048][ T1074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.604751][ T1074] usb 3-1: config 0 descriptor??
[  457.761597][ T8742] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  457.790691][ T1074] option 3-1:0.0: GSM modem (1-port) converter detected
[  458.132129][ T1074] usb 3-1: USB disconnect, device number 10
[  459.077113][ T1074] option 3-1:0.0: device disconnected
[  459.203825][ T6904] usb 4-1: config 0 has no interfaces?
[  459.212838][ T6904] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  459.222264][ T6904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.234733][ T6904] usb 4-1: config 0 descriptor??
[  460.079414][ T8762] loop1: detected capacity change from 0 to 164
[  461.020748][ T6904] usb 4-1: USB disconnect, device number 22
[  461.124544][ T8762] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  461.139676][ T8761] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  462.202671][ T8775] loop1: detected capacity change from 0 to 24
[  462.468305][ T6801] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  463.558440][ T8782] loop4: detected capacity change from 0 to 512
[  463.653865][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'.
[  463.673744][ T8782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  463.707330][ T6904] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  463.758142][ T8782] EXT4-fs (loop4): 1 truncate cleaned up
[  463.758162][ T8782] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  463.797263][   T25] audit: type=1800 audit(1724249823.935:118): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1180" name="bus" dev="loop4" ino=18 res=0 errno=0
[  463.909126][ T6801] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  463.909157][ T6801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.911000][ T6801] usb 3-1: config 0 descriptor??
[  464.012342][ T6904] usb 4-1: device descriptor read/all, error -71
[  465.204957][ T6801] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  465.250806][ T8805] loop1: detected capacity change from 0 to 736
[  465.260697][ T6801] asix: probe of 3-1:0.0 failed with error -71
[  465.287153][ T8802] netlink: 'syz.3.1187': attribute type 1 has an invalid length.
[  465.325238][ T6801] usb 3-1: USB disconnect, device number 11
[  466.625385][ T8801] infiniband syz1: set down
[  466.643175][ T8801] infiniband syz1: added ipvlan1
[  466.899233][ T8801] RDS/IB: syz1: added
[  466.924338][ T8801] smc: adding ib device syz1 with port count 1
[  466.953412][ T8801] smc:    ib device syz1 port 1 has pnetid 
[  466.973318][ T8825] loop3: detected capacity change from 0 to 4096
[  467.862448][ T8831] device team0 entered promiscuous mode
[  467.868028][ T8831] device team_slave_0 entered promiscuous mode
[  467.913244][ T8831] device team_slave_1 entered promiscuous mode
[  467.948308][ T8831] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  467.979776][ T8831] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  468.386368][ T8825] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  468.489135][ T8839] loop1: detected capacity change from 0 to 512
[  468.536430][ T8839] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  468.543742][ T8839] EXT4-fs (loop1): Unrecognized mount option "uid>00000000000000000000" or missing value
[  468.738451][ T6575] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22.
[  469.303782][ T6575] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  469.333699][ T6575] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22.
[  470.485566][ T8849] loop2: detected capacity change from 0 to 128
[  470.585117][ T8849] FAT-fs (loop2): bogus number of FAT structure
[  470.616250][ T8849] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  470.679265][ T8858] device syzkaller0 entered promiscuous mode
[  470.691076][ T8849] FAT-fs (loop2): Can't find a valid FAT filesystem
[  470.783453][ T8862] loop4: detected capacity change from 0 to 2048
[  471.252179][ T8862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  472.007999][ T6798] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  472.503379][ T6798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.530089][ T6798] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  472.547551][ T8875] loop3: detected capacity change from 0 to 16
[  472.642155][ T6798] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  472.651633][ T6798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.662838][ T6798] usb 3-1: config 0 descriptor??
[  472.676075][ T6904] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  472.688170][ T8875] erofs: (device loop3): mounted with root inode @ nid 36.
[  473.444206][   T25] audit: type=1326 audit(1724249834.062:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8879 comm="syz.4.1209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd38f14de79 code=0x0
[  473.529896][   T25] audit: type=1326 audit(1724249834.146:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.0.1210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90ad99e79 code=0x0
[  473.706268][ T6904] usb 2-1: config 1 has an invalid interface number: 3 but max is 2
[  474.337242][ T6904] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  474.358054][ T6904] usb 2-1: config 1 has no interface number 1
[  474.367839][ T6904] usb 2-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30
[  474.385888][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1212'.
[  474.395500][ T6904] usb 2-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187
[  474.437336][ T6798] usbhid 3-1:0.0: can't add hid device: -71
[  474.455066][ T6798] usbhid: probe of 3-1:0.0 failed with error -71
[  474.474819][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1212'.
[  474.484192][ T6904] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  474.595086][ T8893] cgroup: Unexpected value for 'cpuset_v2_mode'
[  474.645071][ T6798] usb 3-1: USB disconnect, device number 12
[  474.694374][ T6904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  474.866388][ T8905] loop1: detected capacity change from 0 to 512
[  474.978311][ T8908] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 1, id = 0
[  475.217821][ T8905] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  475.308011][ T6904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.410127][ T8905] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038 (0x7fffffff)
[  475.417631][ T8913] loop0: detected capacity change from 0 to 2048
[  475.436462][ T6904] usb 2-1: Product: syz
[  475.485726][ T6904] usb 2-1: can't set config #1, error -71
[  476.429339][ T8905] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1216: Directory hole found for htree leaf block 0
[  476.450620][ T6904] usb 2-1: USB disconnect, device number 18
[  476.459891][ T8913] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  476.470617][ T8913] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff)
[  476.487727][ T8913] fs-verity: sha512 using implementation "sha512-avx2"
[  476.637271][ T8905] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1216: Directory hole found for htree leaf block 0
[  476.686322][ T6791] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  476.714720][ T8931] loop2: detected capacity change from 0 to 2048
[  476.841990][ T8931] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  476.943470][ T6791] usb 5-1: Using ep0 maxpacket: 32
[  477.097641][ T6791] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  477.218643][ T8937] loop1: detected capacity change from 0 to 1024
[  477.281425][ T8352] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  477.317226][ T6791] usb 5-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=95.2e
[  477.339266][ T8352] EXT4-fs error (device loop2): __ext4_iget:4872: inode #13: block 127754: comm syz-executor: invalid block
[  477.361035][ T6791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.372397][ T6791] usb 5-1: Product: syz
[  477.376943][ T6791] usb 5-1: Manufacturer: syz
[  477.381550][ T6791] usb 5-1: SerialNumber: syz
[  477.387120][ T8352] EXT4-fs error (device loop2): __ext4_iget:4872: inode #13: block 127754: comm syz-executor: invalid block
[  477.404204][ T6791] usb 5-1: config 0 descriptor??
[  477.432043][ T8940] loop0: detected capacity change from 0 to 164
[  477.467180][ T6791] keyspan 5-1:0.0: Keyspan - (without firmware) converter detected
[  477.529556][ T6791] usb 5-1: Direct firmware load for keyspan/usa28.fw failed with error -2
[  477.539680][ T6791] usb 5-1: Falling back to sysfs fallback for: keyspan/usa28.fw
[  477.694672][ T1138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.785391][ T1138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.951517][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.052852][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.584280][ T8967] cgroup: Unexpected value for 'cpuset_v2_mode'
[  479.309256][    T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  479.369269][ T8989] loop3: detected capacity change from 0 to 2048
[  479.436873][ T8989] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  479.444809][ T8989] UDF-fs: Scanning with blocksize 512 failed
[  479.456145][ T8989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.923477][ T8997] loop0: detected capacity change from 0 to 40427
[  480.136510][ T8997] F2FS-fs (loop0): invalid crc value
[  480.252562][ T5380] Bluetooth: hci2: command 0x0409 tx timeout
[  480.288531][    T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  480.297188][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  480.342988][ T8997] F2FS-fs (loop0): Found nat_bits in checkpoint
[  480.392503][ T8997] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  480.408242][ T8997] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  480.488413][ T8955] chnl_net:caif_netlink_parms(): no params data found
[  480.541053][   T25] audit: type=1800 audit(1724249841.512:121): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1236" name="bus" dev="loop0" ino=10 res=0 errno=0
[  480.963966][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.983062][ T8985] loop4: detected capacity change from 0 to 40427
[  480.993418][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.039547][ T8985] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  481.054345][ T8955] device bridge_slave_0 entered promiscuous mode
[  481.078665][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.093325][ T8985] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  481.111871][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.140103][ T8955] device bridge_slave_1 entered promiscuous mode
[  481.158153][ T8985] F2FS-fs (loop4): Found nat_bits in checkpoint
[  481.266094][    T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  481.275318][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.325578][ T8985] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  481.365267][ T8985] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  481.393912][    T7] usb 2-1: string descriptor 0 read error: -71
[  481.402299][ T8139] attempt to access beyond end of device
[  481.402299][ T8139] loop0: rw=2049, want=45104, limit=40427
[  481.406280][ T8955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.413824][    T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  481.536635][ T8955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.572333][    T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  481.632044][    T7] usb 2-1: can't set config #1, error -71
[  481.642972][    T7] usb 2-1: USB disconnect, device number 19
[  481.842699][ T9031] loop1: detected capacity change from 0 to 128
[  482.282925][ T3614] Bluetooth: hci2: command 0x041b tx timeout
[  482.383589][ T9035] loop3: detected capacity change from 0 to 512
[  482.406156][ T8955] team0: Port device team_slave_0 added
[  482.476060][ T8955] team0: Port device team_slave_1 added
[  482.509184][ T9035] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1241: bad orphan inode 1
[  482.534842][ T1138] IPVS: stopping backup sync thread 8908 ...
[  482.585049][ T9035] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,resgid=0x0000000000000000,max_dir_size_kb=0x00000000000003f5,min_batch_time=0x0000000000000005,errors=continue,noquota,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  482.620468][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  482.638531][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.689265][ T8955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  482.739990][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  482.760741][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.792080][ T8955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  482.949360][ T8955] device hsr_slave_0 entered promiscuous mode
[  482.962179][ T8955] device hsr_slave_1 entered promiscuous mode
[  482.977830][ T8955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  483.001103][ T8955] Cannot create hsr debugfs directory
[  483.395809][ T1138] device hsr_slave_0 left promiscuous mode
[  483.403697][ T1138] device hsr_slave_1 left promiscuous mode
[  483.435383][ T9045] loop0: detected capacity change from 0 to 40427
[  483.442389][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  483.454541][ T9068] loop1: detected capacity change from 0 to 2048
[  483.470848][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  483.473908][ T5594] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  483.509006][ T9045] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  483.546321][ T5594] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  483.546344][ T5594] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  483.554325][ T1138] device bridge_slave_1 left promiscuous mode
[  483.569351][ T9045] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  483.586211][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.586249][ T5594] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  483.599956][ T1138] device bridge_slave_0 left promiscuous mode
[  483.618032][ T5594] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  483.618055][ T5594] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  483.619191][ T9045] F2FS-fs (loop0): invalid crc value
[  483.632451][ T5594] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  483.643179][ T9068] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  483.691011][ T9045] F2FS-fs (loop0): Found nat_bits in checkpoint
[  483.693832][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.717555][ T1138] device team0 left promiscuous mode
[  483.723128][ T1138] device team_slave_0 left promiscuous mode
[  483.730179][ T1138] device team_slave_1 left promiscuous mode
[  483.737539][ T1138] device veth1_macvtap left promiscuous mode
[  483.744218][ T1138] device veth0_macvtap left promiscuous mode
[  483.753080][ T1138] device veth1_vlan left promiscuous mode
[  483.760443][ T1138] device veth0_vlan left promiscuous mode
[  483.900269][ T9045] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  483.912594][ T9045] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  485.508099][ T5750] Bluetooth: hci2: command 0x040f tx timeout
[  485.525648][ T8139] attempt to access beyond end of device
[  485.525648][ T8139] loop0: rw=2049, want=45104, limit=40427
[  485.708910][ T1138] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  485.899359][ T1138] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  486.747537][ T1387] ieee802154 phy0 wpan0: encryption failed: -22
[  486.753875][ T1387] ieee802154 phy1 wpan1: encryption failed: -22
[  486.992137][ T9087] loop0: detected capacity change from 0 to 4096
[  487.098099][ T1138] team0 (unregistering): Port device team_slave_1 removed
[  487.116342][ T9087] ntfs3: loop0: ino=3, Correct links count -> 2.
[  487.143657][ T1138] team0 (unregistering): Port device team_slave_0 removed
[  487.157940][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  487.184809][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  487.352825][ T1138] bond0 (unregistering): Released all slaves
[  487.365253][ T9091] ntfs3: loop0: failed to convert "0080" to macinuit
[  487.406699][ T3614] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  487.464791][ T9090] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  487.505219][    T7] Bluetooth: hci2: command 0x0419 tx timeout
[  487.512551][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1257'.
[  487.613310][ T9096] syz.1.1250[9096] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  487.613384][ T9096] syz.1.1250[9096] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  487.757958][ T9099] loop0: detected capacity change from 0 to 256
[  487.776177][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.787108][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.797199][ T3614] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  487.806889][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.826678][ T3614] usb 4-1: config 0 descriptor??
[  487.855038][ T9099] exfat: Bad value for 'uid'
[  488.257604][ T8955] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  488.286534][ T8955] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  488.308504][ T8955] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  488.330158][ T8955] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  488.563291][ T8955] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.611477][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  488.636707][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  488.658597][ T8955] 8021q: adding VLAN 0 to HW filter on device team0
[  488.684915][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  488.704813][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  488.738234][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.745391][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.798200][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  488.807271][ T3614] usbhid 4-1:0.0: can't add hid device: -71
[  488.813293][ T3614] usbhid: probe of 4-1:0.0 failed with error -71
[  488.839857][ T3614] usb 4-1: USB disconnect, device number 25
[  488.855729][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  488.884624][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  488.908503][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.915680][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  488.948270][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  488.977660][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  489.013761][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  489.048585][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  489.076156][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  489.102863][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  489.124535][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  489.154863][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  489.180412][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  489.202431][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  489.231710][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  489.275587][ T9136] block nbd4: NBD_DISCONNECT
[  489.285890][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  489.344426][ T9136] block nbd4: Disconnected due to user request.
[  489.363095][ T9136] block nbd4: shutting down sockets
[  489.828190][ T9136] device bond0 entered promiscuous mode
[  489.921385][ T9136] device bond_slave_0 entered promiscuous mode
[  490.031930][ T9136] device bond_slave_1 entered promiscuous mode
[  490.171498][ T9135] device bond0 left promiscuous mode
[  490.176815][ T9135] device bond_slave_0 left promiscuous mode
[  490.225304][ T9135] device bond_slave_1 left promiscuous mode
[  490.262267][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  490.281453][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  490.317136][ T8955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.371468][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  490.389868][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  490.429925][ T9155] loop3: detected capacity change from 0 to 1024
[  490.451083][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  490.473730][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  490.492446][ T8955] device veth0_vlan entered promiscuous mode
[  490.500917][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  490.526864][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  490.548024][ T8955] device veth1_vlan entered promiscuous mode
[  490.563661][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  490.605063][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  490.616054][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  490.634917][ T8955] device veth0_macvtap entered promiscuous mode
[  490.650892][ T8955] device veth1_macvtap entered promiscuous mode
[  490.694784][ T9163] hfsplus: xattr searching failed
[  490.721113][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.732007][   T25] audit: type=1800 audit(1724249852.195:122): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1256" name="bus" dev="loop3" ino=4 res=0 errno=0
[  490.740296][ T9155] hfsplus: catalog searching failed
[  490.771059][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.784338][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.803638][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.814393][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.822361][ T9165] loop0: detected capacity change from 0 to 2048
[  490.825600][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.872153][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.891399][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  490.919542][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  490.953637][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  490.963827][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  490.975913][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.989544][ T9165] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #2: comm syz.0.1258: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  490.999152][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.037371][ T9165] EXT4-fs (loop0): get root inode failed
[  491.050917][ T9165] EXT4-fs (loop0): mount failed
[  491.083133][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.115644][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.143521][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.173827][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.219879][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.283441][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  491.298758][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  492.069813][ T8955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.080755][ T8955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.089557][ T8955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.098404][ T8955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.211848][ T4301] hfsplus: b-tree write err: -5, ino 3
[  492.213869][ T9165] loop0: detected capacity change from 0 to 512
[  492.231884][ T6575] hfsplus: node 4:3 still has 1 user(s)!
[  492.301453][ T9165] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  492.364571][ T9165] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  492.387886][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.390395][ T9165] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1258: invalid indirect mapped block 2683928664 (level 1)
[  492.429649][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.450114][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  492.457316][ T9165] EXT4-fs (loop0): Remounting filesystem read-only
[  492.457627][ T9165] EXT4-fs (loop0): 1 truncate cleaned up
[  492.472189][ T9165] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback.
[  492.476855][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.613040][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.711879][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  495.129442][ T9240] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001
[  495.166027][ T9236] loop3: detected capacity change from 0 to 2048
[  495.166814][ T9238] loop0: detected capacity change from 0 to 1024
[  495.250183][ T9236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  495.277357][ T9238] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none.
[  495.379073][ T9241] loop4: detected capacity change from 0 to 4096
[  495.503256][ T9241] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  495.534177][ T9241] ntfs3: loop4: Failed to load $LogFile.
[  495.536315][ T9245] loop0: detected capacity change from 0 to 1024
[  495.605847][    C0] eth0: bad gso: type: 1, size: 1408
[  495.634660][ T9245] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: none.
[  501.198547][ T5750] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  501.212547][ T5750] Bluetooth: hci3: Injecting HCI hardware error event
[  501.221350][ T3579] Bluetooth: hci3: hardware error 0x00
[  501.244084][ T9279] Error parsing options; rc = [-22]
[  502.608276][ T9282] loop0: detected capacity change from 0 to 1024
[  502.667478][ T9282] hfsplus: extend alloc file! (8192,65536,366)
[  502.819270][ T9288] loop2: detected capacity change from 0 to 1024
[  503.586276][   T25] audit: type=1326 audit(1724249865.691:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9293 comm="syz.4.1281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd38f14de79 code=0x0
[  503.834503][ T9282] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns
[  503.904239][ T9298] loop0: detected capacity change from 0 to 512
[  503.915894][   T25] audit: type=1326 audit(1724249866.037:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c630e79 code=0x7ffc0000
[  504.026396][ T9298] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  504.040792][   T25] audit: type=1326 audit(1724249866.068:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fac0c630e79 code=0x7ffc0000
[  504.088652][ T9298] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff)
[  504.145524][   T25] audit: type=1326 audit(1724249866.121:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c630e79 code=0x7ffc0000
[  504.344592][   T25] audit: type=1326 audit(1724249866.131:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fac0c630e79 code=0x7ffc0000
[  504.367205][   T25] audit: type=1326 audit(1724249866.131:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c630e79 code=0x7ffc0000
[  504.549873][   T25] audit: type=1326 audit(1724249866.131:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c630e79 code=0x7ffc0000
[  504.622631][   T25] audit: type=1326 audit(1724249866.131:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fac0c630e79 code=0x7ffc0000
[  504.677999][   T25] audit: type=1326 audit(1724249866.131:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c630e79 code=0x7ffc0000
[  504.707044][   T25] audit: type=1326 audit(1724249866.131:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0c630e79 code=0x7ffc0000
[  504.767940][ T9290] chnl_net:caif_netlink_parms(): no params data found
[  504.862376][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.870212][ T9290] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.886216][ T9290] device bridge_slave_0 entered promiscuous mode
[  504.899533][ T9290] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.908870][ T9290] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.921976][ T9290] device bridge_slave_1 entered promiscuous mode
[  504.964054][ T9290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.984348][ T9290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.033712][ T9290] team0: Port device team_slave_0 added
[  505.042103][ T9290] team0: Port device team_slave_1 added
[  505.079491][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.094263][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.127644][ T9290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.140737][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.147679][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.189070][ T9290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.241202][ T9290] device hsr_slave_0 entered promiscuous mode
[  505.255264][ T9290] device hsr_slave_1 entered promiscuous mode
[  505.261952][ T9290] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  505.279090][ T9290] Cannot create hsr debugfs directory
[  505.418925][ T9290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.636434][ T6798] Bluetooth: hci5: command 0x0409 tx timeout
[  505.899404][ T9290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.971334][ T9290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.019733][ T9290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.109990][ T9290] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  506.118673][ T9290] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  506.130083][ T9290] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  506.138804][ T9290] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  506.198177][ T9290] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.213930][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  506.221707][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  506.236339][ T9290] 8021q: adding VLAN 0 to HW filter on device team0
[  506.247611][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  506.256841][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  506.265293][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.272362][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.280901][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  506.292558][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  506.301409][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  506.309853][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.316949][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.335011][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  506.344257][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  506.354121][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  506.363844][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  506.383269][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  506.391522][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  506.402621][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  506.411234][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  506.420206][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  506.428945][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  506.437664][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  506.449186][ T9290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  506.521309][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  506.529036][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  506.545436][ T9290] 8021q: adding VLAN 0 to HW filter on device batadv0
[  506.561745][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  506.574030][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  506.593183][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  506.602612][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  506.611576][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  506.619715][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  506.632448][ T9290] device veth0_vlan entered promiscuous mode
[  506.643553][ T9290] device veth1_vlan entered promiscuous mode
[  506.664247][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  506.672548][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  506.681051][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  506.689584][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  506.700941][ T9290] device veth0_macvtap entered promiscuous mode
[  506.712423][ T9290] device veth1_macvtap entered promiscuous mode
[  506.726637][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.737996][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.747856][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.758398][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.768237][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.778711][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.788637][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.799670][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.810962][ T9290] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.823396][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  506.831789][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  506.840403][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  506.849206][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  506.860313][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.872961][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.883230][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.893701][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.903617][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.914686][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.924608][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.935402][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.950688][ T9290] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.960212][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  506.968986][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  506.980579][ T9290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.989766][ T9290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  506.998446][ T9290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.009221][ T9290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.071760][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.091118][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.100401][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.111476][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.112955][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  507.133529][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  507.618648][ T6792] Bluetooth: hci5: command 0x041b tx timeout
[  508.615410][ T9337] loop0: detected capacity change from 0 to 256
[  508.667414][ T9337] exfat: Deprecated parameter 'namecase'
[  508.720055][ T9326] loop2: detected capacity change from 0 to 32768
[  508.751003][ T9337] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  510.571239][ T1074] Bluetooth: hci5: command 0x040f tx timeout
[  514.059534][ T9362] ODEBUG: Out of memory. ODEBUG disabled
[  514.424666][ T8404] Bluetooth: hci5: command 0x0419 tx timeout
[  514.438032][ T9358] loop4: detected capacity change from 0 to 8192
[  514.536403][ T9367] overlayfs: missing 'lowerdir'
[  514.827518][ T9382] loop2: detected capacity change from 0 to 1764
[  515.790839][ T9358]  loop4: p1 p2 p4[EZD]
[  515.813600][ T9358] loop4: p1 size 16128 extends beyond EOD, truncated
[  515.849627][ T9358] loop4: p2 size 2130728454 extends beyond EOD, truncated
[  515.873075][ T9358] loop4: p4 size 65536 extends beyond EOD, truncated
[  516.382273][ T9397] loop1: detected capacity change from 0 to 64
[  516.656935][ T9394] Trying to free block not in datazone
[  516.662935][ T9394] Trying to free block not in datazone
[  516.668512][ T9394] Trying to free block not in datazone
[  516.674018][ T9394] Trying to free block not in datazone
[  516.679462][ T9394] Trying to free block not in datazone
[  516.685210][ T9394] minix_free_block (loop1:6): bit already cleared
[  516.692221][ T9394] Trying to free block not in datazone
[  516.931983][ T8449] udevd[8449]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  516.962618][ T8977] udevd[8977]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  516.974442][ T8564] udevd[8564]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  516.997489][ T9403] loop4: detected capacity change from 0 to 128
[  519.695539][ T9405] tipc: Started in network mode
[  519.730359][ T9405] tipc: Node identity ba15af40904a, cluster identity 4711
[  519.750128][ T9405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.488355][ T9401] tipc: Disabling bearer <eth:syzkaller0>
[  520.780546][ T9425] netlink: 'syz.1.1314': attribute type 4 has an invalid length.
[  520.790081][ T9425] netlink: 'syz.1.1314': attribute type 1 has an invalid length.
[  520.798234][ T9425] netlink: 'syz.1.1314': attribute type 7 has an invalid length.
[  520.815315][   T25] kauditd_printk_skb: 3 callbacks suppressed
[  520.815330][   T25] audit: type=1107 audit(1724249883.772:136): pid=9423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�63
�\��m!�iN���͋�E�~8�*ԎFE�@P7+�k��'
[  521.598334][ T9422] loop4: detected capacity change from 0 to 128
[  521.689958][ T9422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  521.713471][ T9422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  522.018137][   T25] audit: type=1326 audit(1724249885.031:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.0.1318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90ad99e79 code=0x0
[  522.112066][ T6792] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  522.191756][ T9442] rdma_rxe: ignoring netdev event = 14 for ipvlan1
[  522.211324][ T9442] infiniband syz1: set active
[  522.218554][ T9442] infiniband syz1: set active
[  522.225570][ T9442] infiniband syz1: set active
[  522.230661][ T9442] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  523.093855][ T6792] usb 3-1: Using ep0 maxpacket: 8
[  523.246189][ T6792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  523.262350][ T9455] loop4: detected capacity change from 0 to 512
[  523.381664][ T9455] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  523.388968][ T9455] EXT4-fs (loop4): Unrecognized mount option "uid>00000000000000000000" or missing value
[  523.474667][ T6792] usb 3-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46
[  523.512955][ T6801] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  524.540441][ T6792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.323517][ T6801] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb
[  528.096376][ T9457] loop0: detected capacity change from 0 to 2048
[  528.781093][ T9459] loop2: detected capacity change from 0 to 64
[  528.793390][ T6792] usb 3-1: Product: syz
[  528.851276][ T6801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.887551][ T6792] usb 3-1: Manufacturer: syz
[  528.918929][ T9463] binder: 9460:9463 ioctl c0306201 0 returned -14
[  529.013809][ T6792] usb 3-1: SerialNumber: syz
[  529.808943][ T6792] usb 3-1: config 0 descriptor??
[  529.816343][ T6801] usb 4-1: config 0 descriptor??
[  529.890533][ T6792] usb 3-1: can't set config #0, error -71
[  529.897263][ T6801] usb 4-1: can't set config #0, error -71
[  529.912837][ T9470] loop4: detected capacity change from 0 to 512
[  529.926277][ T8955] hfs: node 4:3 still has 1 user(s)!
[  529.927051][ T6792] usb 3-1: USB disconnect, device number 13
[  529.938404][ T6801] usb 4-1: USB disconnect, device number 26
[  529.972156][ T9471] loop0: detected capacity change from 0 to 512
[  530.820895][ T9471] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  530.957404][ T9474] loop1: detected capacity change from 0 to 512
[  530.967941][ T9470] EXT4-fs (loop4): 1 orphan inode deleted
[  530.973688][ T9470] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[  531.042759][ T9470] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038 (0x7fffffff)
[  531.158738][ T9492] loop3: detected capacity change from 0 to 1024
[  531.854056][ T9474] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  531.866760][ T9471] EXT4-fs (loop0): 1 truncate cleaned up
[  531.985926][ T9474] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff)
[  532.092255][ T9498] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  532.118970][ T9471] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  532.685024][ T9511] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1339'.
[  532.711675][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1339'.
[  532.844213][ T9511] bridge0: port 2(bridge_slave_1) entered listening state
[  532.927667][ T6798] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  533.503375][ T6798] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  533.700261][ T6798] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  533.710001][ T6798] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  533.719388][ T6798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.739037][ T9524] syz.4.1340[9524] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  533.739127][ T9524] syz.4.1340[9524] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  533.768947][ T9522] loop2: detected capacity change from 0 to 512
[  533.800046][ T5380] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  533.835798][ T5380] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  533.851850][ T9526] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  533.991522][ T9508] loop0: detected capacity change from 0 to 16384
[  534.061547][ T5750] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  534.156909][ T6798] usb 2-1: string descriptor 0 read error: -22
[  534.252765][ T9524] device bridge_slave_1 left promiscuous mode
[  534.262764][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.272240][ T9531] loop_set_block_size: loop0 () has still dirty pages (nrpages=290)
[  534.287865][ T9524] device bridge_slave_0 left promiscuous mode
[  534.294946][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.425796][ T5750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.451078][ T5750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.479624][ T5750] usb 4-1: New USB device found, idVendor=04e7, idProduct=0830, bcdDevice= 0.00
[  534.506445][ T5750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.536131][ T5750] usb 4-1: config 0 descriptor??
[  534.636983][ T9535] loop2: detected capacity change from 0 to 64
[  534.777527][ T9537] loop4: detected capacity change from 0 to 512
[  534.904491][ T9537] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  535.000395][ T9537] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038 (0x7fffffff)
[  535.016996][ T5750] hid-generic 0003:04E7:0830.0009: item fetching failed at offset 5/7
[  535.037833][ T5750] hid-generic: probe of 0003:04E7:0830.0009 failed with error -22
[  535.306979][ T6791] usb 5-1: ezusb_ihex_firmware_download - request "keyspan/usa28.fw" failed
[  535.345506][ T6791] usb 5-1: failed to load firmware "keyspan/usa28.fw"
[  535.352606][ T6791] keyspan: probe of 5-1:0.0 failed with error -2
[  535.376917][ T6791] usb 5-1: USB disconnect, device number 17
[  535.785295][ T6792] usb 4-1: USB disconnect, device number 27
[  536.252805][    C1] vkms_vblank_simulate: vblank timer overrun
[  537.932404][ T6792] usb 2-1: USB disconnect, device number 20
[  537.962991][ T9560] netlink: 'syz.3.1354': attribute type 3 has an invalid length.
[  537.995261][ T9560] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1354'.
[  538.155057][ T9569] netlink: 'syz.0.1356': attribute type 3 has an invalid length.
[  538.169640][ T9569] netlink: 'syz.0.1356': attribute type 3 has an invalid length.
[  538.818687][ T6792] Bluetooth: hci2: command 0x0409 tx timeout
[  538.846981][ T9581] xt_bpf: check failed: parse error
[  538.964522][ T9583] loop1: detected capacity change from 0 to 512
[  539.085237][ T9583] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1360: corrupted in-inode xattr
[  539.129241][ T9583] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1360: couldn't read orphan inode 15 (err -117)
[  539.149311][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1363'.
[  539.208358][ T9583] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,sb=0x0000000000000006,nolazytime,,errors=continue. Quota mode: writeback.
[  539.602153][ T9583] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1360: Directory hole found for htree leaf block 0
[  539.818511][ T9593] tipc: Started in network mode
[  539.823395][ T9593] tipc: Node identity , cluster identity 4711
[  539.861566][ T9598] loop4: detected capacity change from 0 to 164
[  539.893657][ T9593] tipc: Failed to set node id, please configure manually
[  539.900866][ T9593] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  540.151710][ T9583] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1360: Directory hole found for htree leaf block 0
[  540.279101][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1365'.
[  540.476711][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.780434][ T6801] Bluetooth: hci2: command 0x041b tx timeout
[  540.868477][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.074230][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.243136][ T9587] loop0: detected capacity change from 0 to 32768
[  541.274551][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.417161][ T9563] chnl_net:caif_netlink_parms(): no params data found
[  541.700595][ T9629] loop0: detected capacity change from 0 to 2048
[  541.756299][ T9563] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.799597][ T9629] NILFS (loop0): invalid segment: Sequence number mismatch
[  541.807863][ T9629] NILFS (loop0): trying rollback from an earlier position
[  541.832068][ T9629] NILFS (loop0): invalid segment: Checksum error in segment payload
[  541.840186][ T9629] NILFS (loop0): error -22 while searching super root
[  542.060392][ T9631] loop4: detected capacity change from 0 to 32768
[  542.123840][ T9631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1372 (9631)
[  542.578106][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.387110][ T9633] loop0: detected capacity change from 0 to 1024
[  543.412494][ T9632] hfsplus: bad catalog entry type
[  543.417813][ T6792] Bluetooth: hci2: command 0x040f tx timeout
[  543.452855][ T9631] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  543.461629][ T9631] BTRFS info (device loop4): using free space tree
[  543.468166][ T9631] BTRFS info (device loop4): has skinny extents
[  543.524266][ T9563] device bridge_slave_0 entered promiscuous mode
[  543.582296][ T9563] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.639158][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.654798][  T144] hfsplus: b-tree write err: -5, ino 4
[  543.678273][ T9563] device bridge_slave_1 entered promiscuous mode
[  543.745544][  T154] tipc: Left network mode
[  543.860968][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'.
[  543.877247][ T9631] BTRFS info (device loop4): enabling ssd optimizations
[  544.768532][ T9563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  544.897948][ T1387] ieee802154 phy0 wpan0: encryption failed: -22
[  544.904322][ T1387] ieee802154 phy1 wpan1: encryption failed: -22
[  545.001422][  T154] tipc: Left network mode
[  546.405904][ T9683] loop3: detected capacity change from 0 to 2048
[  546.623187][ T9683] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  546.680370][   T26] Bluetooth: hci2: command 0x0419 tx timeout
[  546.702248][ T9683] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  546.741562][ T9563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.793917][ T9683] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28
[  546.810088][ T9683] EXT4-fs (loop3): This should not happen!! Data will be lost
[  546.810088][ T9683] 
[  546.836646][ T9683] EXT4-fs (loop3): Total free blocks count 0
[  546.857956][ T9683] EXT4-fs (loop3): Free/Dirty block details
[  546.898458][ T9683] EXT4-fs (loop3): free_blocks=2415919104
[  546.904372][ T9683] EXT4-fs (loop3): dirty_blocks=16
[  546.964805][ T9683] EXT4-fs (loop3): Block reservation details
[  547.004905][ T9683] EXT4-fs (loop3): i_reserved_data_blocks=1
[  547.154199][ T3693] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  547.174001][ T9563] team0: Port device team_slave_0 added
[  547.187954][ T3693] EXT4-fs (loop3): This should not happen!! Data will be lost
[  547.187954][ T3693] 
[  547.206385][ T9563] team0: Port device team_slave_1 added
[  547.361051][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  547.383307][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  547.497633][ T9563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  547.580961][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  547.593882][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  547.735200][ T9563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  547.996352][ T9563] device hsr_slave_0 entered promiscuous mode
[  548.010530][   T25] audit: type=1326 audit(1724249912.305:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.1.1385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1992c10e79 code=0x0
[  548.061606][ T9736] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  548.085092][ T9563] device hsr_slave_1 entered promiscuous mode
[  548.102285][ T9563] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  548.111575][ T9563] Cannot create hsr debugfs directory
[  548.364929][ T6792] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  548.631729][ T6792] usb 5-1: Using ep0 maxpacket: 32
[  548.648099][ T6791] Bluetooth: hci2: command 0x0405 tx timeout
[  548.817416][ T9759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  548.849731][ T9563] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  548.889621][ T9751] netlink: 'syz.3.1386': attribute type 3 has an invalid length.
[  548.902207][ T9563] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  548.925811][ T9563] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  548.950148][ T9563] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  548.962349][ T6792] usb 5-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71
[  548.975205][ T6792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.986993][ T6792] usb 5-1: Product: syz
[  548.991185][ T6792] usb 5-1: Manufacturer: syz
[  548.998265][ T6792] usb 5-1: SerialNumber: syz
[  549.017170][ T6792] usb 5-1: config 0 descriptor??
[  549.053699][ T6792] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected
[  549.076328][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87
[  549.105530][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7
[  549.140374][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81
[  549.174063][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1
[  549.195707][ T9563] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.203602][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2
[  549.212281][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85
[  549.250275][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  549.263230][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  549.274397][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5
[  549.296213][ T6792] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  549.306191][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83
[  549.323610][ T9563] 8021q: adding VLAN 0 to HW filter on device team0
[  549.337085][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3
[  549.365624][ T9731] kvm: pic: non byte write
[  549.379075][  T154] device hsr_slave_0 left promiscuous mode
[  549.385276][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4
[  549.393008][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86
[  549.416051][  T154] device hsr_slave_1 left promiscuous mode
[  549.443080][ T6792] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6
[  549.497665][ T6792] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  549.608902][ T6792] usb 5-1: USB disconnect, device number 18
[  549.631558][ T6792] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  549.648798][ T6792] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  549.739007][ T9766] loop1: detected capacity change from 0 to 256
[  549.760273][ T6792] keyspan 5-1:0.0: device disconnected
[  549.898318][ T9766] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4310b8cd, utbl_chksum : 0xe619d30d)
[  550.267563][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.300707][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.464885][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.472399][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.480600][  T154] device bridge_slave_1 left promiscuous mode
[  550.488536][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.500138][  T154] device bridge_slave_0 left promiscuous mode
[  550.506415][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.717154][  T154] device hsr_slave_0 left promiscuous mode
[  550.800203][  T154] device hsr_slave_1 left promiscuous mode
[  550.888504][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.978662][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.107416][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.121132][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.130288][  T154] device bridge_slave_1 left promiscuous mode
[  551.136676][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.145294][  T154] device bridge_slave_0 left promiscuous mode
[  551.151951][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.273948][  T154] device veth1_macvtap left promiscuous mode
[  551.280095][  T154] device veth0_macvtap left promiscuous mode
[  551.286367][  T154] device veth1_vlan left promiscuous mode
[  551.292249][  T154] device veth0_vlan left promiscuous mode
[  551.299268][  T154] device veth1_macvtap left promiscuous mode
[  551.305495][  T154] device veth0_macvtap left promiscuous mode
[  551.311966][  T154] device veth1_vlan left promiscuous mode
[  551.317856][  T154] device veth0_vlan left promiscuous mode
[  551.752592][  T154] team0 (unregistering): Port device team_slave_1 removed
[  551.764781][  T154] team0 (unregistering): Port device team_slave_0 removed
[  551.778049][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.793223][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.853995][  T154] bond0 (unregistering): Released all slaves
[  551.955149][  T154] team0 (unregistering): Port device team_slave_1 removed
[  551.966490][  T154] team0 (unregistering): Port device team_slave_0 removed
[  551.979251][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.995268][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  552.055958][  T154] bond0 (unregistering): Released all slaves
[  552.088921][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  552.098481][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  552.107757][ T3778] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.114842][ T3778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  552.122515][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  552.131570][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  552.140124][ T3778] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.147162][ T3778] bridge0: port 2(bridge_slave_1) entered forwarding state
[  552.155231][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  552.167335][ T9778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1391'.
[  552.273518][ T9782] loop4: detected capacity change from 0 to 256
[  552.273794][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  552.327993][ T9782] FAT-fs (loop4): Unrecognized mount option "uid=00000000000000000000�!$9�8������@�����N���z��|h����S���P����l`8
aD�_���vA0��" or missing value
[  552.418867][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  552.456564][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  552.510378][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  552.519094][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  552.528446][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  552.541964][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  553.851579][ T9788] tipc: Failed to remove unknown binding: 66,1,1/0:1282086762/1282086764
[  553.860564][ T9788] tipc: Failed to remove unknown binding: 66,1,1/0:1282086762/1282086764
[  553.922563][ T9563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  553.956923][ T9563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  553.988449][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  553.989466][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  553.990109][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  553.990556][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  553.991025][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  553.994507][ T9793] loop3: detected capacity change from 0 to 512
[  554.068112][ T9800] loop0: detected capacity change from 0 to 1024
[  554.163145][ T9800] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  555.243100][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  555.255264][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  555.290806][ T9563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  555.369036][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  555.377985][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  555.473851][ T6904] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  555.491541][ T9563] device veth0_vlan entered promiscuous mode
[  555.593117][ T9563] device veth1_vlan entered promiscuous mode
[  555.657495][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  555.667108][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  555.820076][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  555.875866][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  555.959061][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  556.522368][ T6904] usb 5-1: Using ep0 maxpacket: 8
[  556.545298][ T9563] device veth0_macvtap entered promiscuous mode
[  556.549716][ T9835] loop3: detected capacity change from 0 to 1024
[  556.663032][ T6904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  557.126955][ T6904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  557.135248][ T9563] device veth1_macvtap entered promiscuous mode
[  557.147194][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  557.188006][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  557.224008][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  557.255930][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  557.324243][ T6904] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85
[  557.330503][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.344428][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.359313][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.370060][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.377657][ T6904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.398959][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.416718][ T6904] usb 5-1: Product: syz
[  557.426572][ T6904] usb 5-1: Manufacturer: syz
[  557.436470][ T6904] usb 5-1: SerialNumber: syz
[  557.441454][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.472844][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  557.474390][ T6904] usb 5-1: config 0 descriptor??
[  557.490076][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  557.519367][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  557.553129][ T6904] ipw 5-1:0.0: IPWireless converter converter detected
[  557.555709][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  557.596182][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.635973][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  557.661164][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.680751][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  557.694841][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.750091][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  557.815103][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  557.819878][ T9854] syz.3.1403 sent an empty control message without MSG_MORE.
[  557.833092][ T5750] usb 5-1: USB disconnect, device number 19
[  557.852200][ T5750] ipw 5-1:0.0: device disconnected
[  557.857835][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  557.889039][ T9563] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  557.908160][ T9563] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  557.915809][ T6904] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  557.943469][ T9563] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  557.967543][ T9563] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  558.256094][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.272798][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.337717][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  558.375164][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.474135][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.068417][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  559.238130][ T6801] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  559.249582][ T9883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1406'.
[  559.276292][ T6904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  559.308309][ T6904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.336040][ T6904] usb 2-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00
[  559.354067][ T6904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.390934][ T6904] usb 2-1: config 0 descriptor??
[  559.495504][ T6801] usb 5-1: Using ep0 maxpacket: 16
[  559.637981][ T9887] loop3: detected capacity change from 0 to 1024
[  559.696430][ T6801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  559.713022][ T9887] hfsplus: invalid btree flag
[  559.727671][ T9887] hfsplus: failed to load attributes file
[  559.736649][ T6801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1792, setting to 1024
[  559.860836][ T6904] wacom 0003:056A:0018.000A: Unknown device_type for 'HID 056a:0018'. Assuming pen.
[  559.897635][ T6904] wacom 0003:056A:0018.000A: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.1-1/input0
[  559.952838][ T6801] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  559.976533][ T6801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.978166][ T6904] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0018.000A/input/input20
[  560.062719][ T6801] usb 5-1: Product: syz
[  560.082407][ T6904] usb 2-1: USB disconnect, device number 21
[  560.131346][ T6801] usb 5-1: Manufacturer: syz
[  560.159864][ T6801] usb 5-1: SerialNumber: syz
[  560.211450][ T6801] usb 5-1: config 0 descriptor??
[  560.257999][ T9867] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  560.363578][ T6801] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected
[  560.479301][ T6801] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  561.150435][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'.
[  561.390058][ T6904] usb 5-1: USB disconnect, device number 20
[  561.559952][ T9916] loop1: detected capacity change from 0 to 40427
[  561.599973][ T9916] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  561.607794][ T9916] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  561.619156][ T6904] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  561.692271][ T6904] kobil_sct 5-1:0.0: device disconnected
[  561.735739][ T9916] F2FS-fs (loop1): Found nat_bits in checkpoint
[  561.792237][ T9920] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1415'.
[  561.813972][ T9916] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  561.821219][ T9916] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  561.973340][ T6798] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  562.925841][ T6798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.708204][ T6798] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  563.824167][ T6798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.834682][ T9290] attempt to access beyond end of device
[  563.834682][ T9290] loop1: rw=2051, want=53248, limit=40427
[  563.951986][ T6798] usb 3-1: config 0 descriptor??
[  564.748631][ T9290] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5
[  564.958043][ T6798] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0
[  564.986395][ T6798] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0
[  564.997575][ T6798] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0
[  565.005023][ T6798] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0
[  565.012117][ T6798] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0
[  565.065399][ T6798] corsair 0003:1B1C:1B3E.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0
[  565.495627][ T9972] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1427'.
[  566.900641][ T6798] usb 3-1: USB disconnect, device number 14
[  567.194076][ T9977] 9pnet: Insufficient options for proto=fd
[  567.891826][ T9990] loop1: detected capacity change from 0 to 1024
[  568.035411][T10004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1436'.
[  568.054828][ T9990] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  568.063617][T10004] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  568.138598][ T9990] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff)
[  568.226603][T10008] loop3: detected capacity change from 0 to 2048
[  568.423818][T10008] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  568.657151][T10019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  568.665456][T10019] IPv6: NLM_F_CREATE should be set when creating new route
[  568.672750][T10019] IPv6: NLM_F_CREATE should be set when creating new route
[  568.795873][T10028] nfs: Unknown parameter '00000000000000000007��00000000000000000001014'
[  569.511804][T10019] xt_bpf: check failed: parse error
[  569.784313][ T3577] block nbd4: Receive control failed (result -107)
[  569.971382][T10034] nbd4: detected capacity change from 0 to 15960
[  570.392488][T10039] loop4: detected capacity change from 0 to 128
[  570.471650][ T8449] block nbd4: shutting down sockets
[  571.777710][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1450'.
[  571.792079][T10057] loop3: detected capacity change from 0 to 1024
[  572.110822][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  572.746375][T10060] loop2: detected capacity change from 0 to 1024
[  577.227363][T10072] 9pnet: Insufficient options for proto=fd
[  577.254646][T10072] loop1: detected capacity change from 0 to 512
[  577.299358][T10072] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1454: casefold flag without casefold feature
[  577.322307][T10071] loop0: detected capacity change from 0 to 2048
[  577.340518][T10072] EXT4-fs (loop1): 1 truncate cleaned up
[  577.346693][T10072] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  577.417341][T10071] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  577.701392][T10084] loop3: detected capacity change from 0 to 512
[  577.733659][T10087] loop2: detected capacity change from 0 to 512
[  577.793462][T10087] EXT4-fs (loop2): Invalid journal IO priority (must be 0-7)
[  577.911946][T10084] EXT4-fs (loop3): orphan cleanup on readonly fs
[  577.919093][T10084] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.1458: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  578.012620][T10098] (syz.4.1460,10098,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "��~g��<+��(��.�1 1'�Ɖ�" or missing value
[  578.026125][T10098] (syz.4.1460,10098,0):ocfs2_fill_super:1177 ERROR: status = -22
[  578.132558][T10084] EXT4-fs error (device loop3): ext4_quota_enable:6390: comm syz.3.1458: Bad quota inode: 4, type: 1
[  578.227814][T10084] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  578.329911][T10084] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  578.338023][   T25] audit: type=1326 audit(1724249944.144:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992c10e79 code=0x7ffc0000
[  578.341446][T10084] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  578.566897][   T25] audit: type=1326 audit(1724249944.165:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1992c10e79 code=0x7ffc0000
[  579.030392][   T25] audit: type=1326 audit(1724249944.165:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992c10e79 code=0x7ffc0000
[  579.421022][   T25] audit: type=1326 audit(1724249944.165:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1992c10e79 code=0x7ffc0000
[  579.511880][   T25] audit: type=1326 audit(1724249944.165:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992c10e79 code=0x7ffc0000
[  579.587604][   T25] audit: type=1326 audit(1724249944.165:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f1992c10e79 code=0x7ffc0000
[  579.606091][T10108] syz.1.1461 (10108): drop_caches: 2
[  579.674826][T10121] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1466'.
[  579.694522][   T25] audit: type=1326 audit(1724249944.165:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992c10e79 code=0x7ffc0000
[  579.766730][   T25] audit: type=1326 audit(1724249944.165:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f1992c10e79 code=0x7ffc0000
[  579.864679][   T25] audit: type=1326 audit(1724249944.165:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1992c10e79 code=0x7ffc0000
[  579.885032][T10124] netlink: 'syz.1.1467': attribute type 21 has an invalid length.
[  580.066882][   T25] audit: type=1326 audit(1724249944.165:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.1.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1992c10e79 code=0x7ffc0000
[  581.135455][    C0] eth0: bad gso: type: 1, size: 1408
[  581.170088][T10141] overlayfs: failed to resolve './file1': -2
[  581.237640][T10138] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  581.453959][T10153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1472'.
[  581.484568][T10153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1472'.
[  581.633421][T10167] loop3: detected capacity change from 0 to 256
[  581.692093][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'.
[  581.713965][T10171] netlink: 'syz.0.1476': attribute type 4 has an invalid length.
[  581.734864][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'.
[  581.762750][T10171] netlink: 'syz.0.1476': attribute type 7 has an invalid length.
[  581.784370][T10171] netlink: 126500 bytes leftover after parsing attributes in process `syz.0.1476'.
[  582.117277][T10179] loop2: detected capacity change from 0 to 1024
[  582.758061][T10197] raw_sendmsg: syz.4.1486 forgot to set AF_INET. Fix it!
[  582.771453][T10197] netlink: 'syz.4.1486': attribute type 1 has an invalid length.
[  582.788764][T10197] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1486'.
[  582.989029][T10203] 
: renamed from bond0
[  583.069706][T10205] loop4: detected capacity change from 0 to 1024
[  583.639664][T10207] loop1: detected capacity change from 0 to 4096
[  584.513442][   T25] kauditd_printk_skb: 3 callbacks suppressed
[  584.513456][   T25] audit: type=1326 audit(1724249950.619:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.0.1491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90ad99e79 code=0x0
[  584.569256][T10205] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  584.850249][T10220] loop3: detected capacity change from 0 to 128
[  585.322664][T10220] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  585.333267][T10220] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  586.449628][ T5384] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  586.575004][T10239] loop2: detected capacity change from 0 to 512
[  586.593025][T10243] netlink: 'syz.1.1497': attribute type 9 has an invalid length.
[  586.603600][T10243] netlink: 92148 bytes leftover after parsing attributes in process `syz.1.1497'.
[  586.639160][T10243] fuse: Unknown parameter '00000000000000000000'
[  586.678555][T10239] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback.
[  586.682317][ T3614] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  586.694046][T10239] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff)
[  586.733618][   T25] audit: type=1804 audit(1724249952.948:153): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1498" name="/newroot/16/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  586.758481][ T5384] usb 5-1: Using ep0 maxpacket: 16
[  586.895882][T10247] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1500'.
[  586.901374][ T6907] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  587.025568][ T5384] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  587.035064][ T5384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.058143][ T5384] usb 5-1: Product: syz
[  587.064299][ T5384] usb 5-1: Manufacturer: syz
[  587.068906][ T5384] usb 5-1: SerialNumber: syz
[  587.073683][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  587.085405][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  587.098794][ T5384] usb 5-1: config 0 descriptor??
[  587.103932][ T3614] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  587.113057][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.122257][T10252] block nbd2: shutting down sockets
[  587.132223][ T3614] usb 4-1: config 0 descriptor??
[  587.140966][ T5384] appledisplay 5-1:0.0: Could not find int-in endpoint
[  587.149326][ T5384] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  587.331685][T10254] overlayfs: unrecognized mount option "\�
" or missing value
[  587.357266][ T8404] usb 5-1: USB disconnect, device number 21
[  587.425648][ T6907] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d
[  587.439389][ T6907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.450052][ T6907] usb 2-1: Product: syz
[  587.458141][ T6907] usb 2-1: Manufacturer: syz
[  587.462742][ T6907] usb 2-1: SerialNumber: syz
[  587.472233][ T6907] usb 2-1: config 0 descriptor??
[  587.525737][ T6907] xillyusb 2-1:0.0: Failed to send quiesce request. Aborting.
[  587.553482][ T6907] xillyusb: probe of 2-1:0.0 failed with error -5
[  587.692431][T10236] xt_CT: You must specify a L4 protocol and not use inversions on it
[  588.168704][ T8404] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  588.203751][ T6801] usb 2-1: USB disconnect, device number 22
[  588.208359][ T3614] logitech-djreceiver 0003:046D:C71B.000C: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.3-1/input0
[  588.323128][T10261] loop2: detected capacity change from 0 to 4096
[  588.342814][ T3614] usb 4-1: USB disconnect, device number 28
[  588.412044][T10261] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  588.436540][ T8404] usb 5-1: Using ep0 maxpacket: 8
[  588.462015][T10261] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  588.473157][T10261] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  588.482378][T10261] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  588.496869][T10261] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  588.522574][T10261] ntfs: volume version 3.1.
[  588.557526][T10261] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1505'.
[  588.567012][ T8404] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  588.575216][ T8404] usb 5-1: config 0 has no interface number 0
[  588.585082][ T8404] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  588.608668][ T8404] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  588.619163][ T8404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.628965][ T8404] usb 5-1: config 0 descriptor??
[  588.667397][ T8404] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  588.788748][ T8404] usb 5-1: USB disconnect, device number 22
[  588.807372][ T8404] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected
[  588.881813][T10270] loop1: detected capacity change from 0 to 16
[  588.907237][T10272] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  588.979378][T10270] erofs: (device loop1): mounted with root inode @ nid 36.
[  589.455107][ T8404] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  590.093837][ T8404] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  590.107296][T10289] trusted_key: encrypted_key: keyword '�����$]&@�' not recognized
[  590.112953][ T8404] usb 2-1: config 179 has no interface number 0
[  590.120933][T10289] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.1515'.
[  590.130875][T10289] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  590.132502][ T8404] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  590.139630][T10289] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  590.221902][T10292] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1513'.
[  590.268921][ T8404] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64
[  590.472847][ T8404] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64
[  590.607106][ T8404] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  590.691899][ T8404] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  590.739075][ T8404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.932507][T10270] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  590.946676][T10270] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  590.956003][    C0] eth0: bad gso: type: 1, size: 1408
[  591.001857][ T8404] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input23
[  591.008517][ T5380] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  591.231186][T10296] loop0: detected capacity change from 0 to 2048
[  591.251232][ T8404] usb 2-1: USB disconnect, device number 23
[  591.257300][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  591.280211][ T8404] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  591.332624][ T5380] usb 5-1: Using ep0 maxpacket: 32
[  591.542317][ T5380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.647753][ T5380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.670131][T10296] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,nogrpid,,errors=continue. Quota mode: writeback.
[  591.864764][ T5380] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  591.886861][T10296] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.1517: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  591.926082][ T5380] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  591.946143][ T5380] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  591.985227][ T5380] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  592.180596][ T5380] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  592.195375][ T5380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.216386][T10310] loop2: detected capacity change from 0 to 8192
[  592.252151][ T5380] usb 5-1: Product: syz
[  592.264225][ T5380] usb 5-1: Manufacturer: syz
[  592.291485][T10310] REISERFS warning (device loop2): sh-2012 read_super_block: found unknown format "1282" of reiserfs with non-standard magic
[  592.306222][ T5380] usb 5-1: SerialNumber: syz
[  592.314276][T10310] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2
[  592.364935][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1523'.
[  592.554759][T10322] device ip6gre0 entered promiscuous mode
[  592.561428][T10322] device vlan2 entered promiscuous mode
[  592.604282][T10322] device ip6gre0 left promiscuous mode
[  592.714415][ T5380] cdc_ncm 5-1:1.0: bind() failure
[  592.726906][ T5380] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  592.733951][ T5380] cdc_ncm 5-1:1.1: bind() failure
[  593.056187][T10328] netlink: 'syz.1.1526': attribute type 1 has an invalid length.
[  594.264866][ T5380] usb 5-1: USB disconnect, device number 23
[  595.987549][T10354] loop3: detected capacity change from 0 to 512
[  596.114066][T10354] EXT4-fs (loop3): Unrecognized mount option "hash" or missing value
[  598.396419][T10370] loop0: detected capacity change from 0 to 256
[  598.459683][T10373] device team_slave_0 entered promiscuous mode
[  598.466605][T10373] device team_slave_1 entered promiscuous mode
[  598.525242][T10375] fuse: root generation should be zero
[  598.543843][T10367] loop4: detected capacity change from 0 to 4096
[  598.570888][T10373] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  598.585010][T10377] loop3: detected capacity change from 0 to 164
[  598.591645][T10373] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  598.728356][T10367] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  598.867589][T10373] device bond0 entered promiscuous mode
[  598.867607][T10373] device bond_slave_0 entered promiscuous mode
[  598.867777][T10373] device bond_slave_1 entered promiscuous mode
[  598.867868][T10373] device macvlan2 entered promiscuous mode
[  598.867878][T10373] device team0 entered promiscuous mode
[  599.326136][    C0] eth0: bad gso: type: 1, size: 1408
[  599.560979][ T5380] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  599.680046][T10370] loop0: detected capacity change from 0 to 40427
[  599.756243][   T25] audit: type=1326 audit(1724249966.622:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.4.1545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd38f14de79 code=0x0
[  599.799753][T10370] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  599.828244][T10370] F2FS-fs (loop0): invalid crc value
[  599.837268][T10370] F2FS-fs (loop0): Found nat_bits in checkpoint
[  599.866760][T10370] F2FS-fs (loop0): recover fsync data on readonly fs
[  599.873523][ T6907] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  599.882089][T10370] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  599.891284][T10370] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  599.899445][ T5380] usb 4-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8
[  599.919212][ T5380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.935621][ T5380] usb 4-1: config 0 descriptor??
[  599.943444][T10370] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0
[  599.951951][T10370] F2FS-fs (loop0): switch extent_cache option is not allowed
[  600.109219][ T6907] usb 2-1: Using ep0 maxpacket: 8
[  600.422469][T10411] loop2: detected capacity change from 0 to 2048
[  600.483128][T10411] EXT4-fs (loop2): Unrecognized mount option "context=root" or missing value
[  600.679172][T10417] loop4: detected capacity change from 0 to 764
[  600.813386][T10417] rock: directory entry would overflow storage
[  600.822094][T10417] rock: sig=0x4f50, size=4, remaining=3
[  600.831728][T10417] iso9660: Corrupted directory entry in block 4 of inode 1792
[  600.846539][T10417] rock: directory entry would overflow storage
[  600.858402][T10417] rock: sig=0x4f50, size=4, remaining=3
[  600.864558][T10417] iso9660: Corrupted directory entry in block 4 of inode 1792
[  601.398279][ T8404] usb 4-1: USB disconnect, device number 29
[  601.782688][ T6907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  601.793329][ T6907] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  601.804071][ T6907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  601.817061][ T6907] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  601.826281][ T6907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.853035][ T6907] usb 2-1: config 0 descriptor??
[  601.919842][T10419] loop4: detected capacity change from 0 to 512
[  602.075601][T10419] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  602.108075][T10419] EXT4-fs (loop4): Invalid want_extra_isize 8198
[  602.849990][T10394] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  602.937709][T10430] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  603.091543][ T6907] usb 2-1: can't set config #0, error -71
[  603.099288][ T6907] usb 2-1: USB disconnect, device number 24
[  603.122130][T10436] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1558'.
[  603.138435][T10436] device gretap0 entered promiscuous mode
[  603.482943][ T1387] ieee802154 phy0 wpan0: encryption failed: -22
[  603.489575][ T1387] ieee802154 phy1 wpan1: encryption failed: -22
[  603.505704][T10443] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1558'.
[  603.863541][T10443] 0�X: renamed from gretap0
[  603.894220][T10448] loop2: detected capacity change from 0 to 128
[  603.922569][T10443] device 
00�X left promiscuous mode
[  603.942816][T10443] A link change request failed with some changes committed already. Interface 
00�X may have been left with an inconsistent configuration, please check.
[  603.986633][T10454] loop4: detected capacity change from 0 to 1024
[  604.015358][T10457] loop3: detected capacity change from 0 to 256
[  604.031127][T10436] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1558'.
[  604.042025][T10436] device 
00�X entered promiscuous mode
[  604.066930][T10451] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1558'.
[  604.085728][T10451] 1�X: renamed from 
00�X
[  604.091719][T10451] device 
01�X left promiscuous mode
[  604.127243][T10454] EXT4-fs (loop4): Ignoring removed bh option
[  604.143274][T10451] A link change request failed with some changes committed already. Interface 
01�X may have been left with an inconsistent configuration, please check.
[  604.167185][T10457] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  605.010907][T10454] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  605.092975][T10475] loop2: detected capacity change from 0 to 2048
[  605.156610][T10477] loop0: detected capacity change from 0 to 512
[  605.192732][T10479] loop3: detected capacity change from 0 to 128
[  605.240089][T10475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  605.258711][T10477] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1567: bad orphan inode 1
[  605.277486][T10479] befs: (loop3): invalid magic header
[  605.286776][T10477] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,resgid=0x0000000000000000,max_dir_size_kb=0x00000000000003f5,min_batch_time=0x0000000000000005,errors=continue,noquota,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  605.294579][T10480] EXT4-fs warning (device loop4): ext4_xattr_inode_get:509: inode #18: comm syz.4.1561: EA inode hash validation failed
[  605.475452][ T6801] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  606.026629][ T6801] usb 2-1: Using ep0 maxpacket: 16
[  606.084318][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'.
[  606.180342][ T6801] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  606.240651][ T6801] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  606.244102][T10488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1576'.
[  606.259067][ T6801] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  606.302044][ T6801] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  606.357288][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3723271288, rec_len=27469, size=1024 fake=0
[  606.396098][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  606.428339][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  606.451551][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 35: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  606.490730][T10492] fuse: Unknown parameter 'PC'
[  606.543696][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 36: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  606.570840][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  606.592797][ T6801] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  606.602918][ T6801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.612795][ T6801] usb 2-1: Product: syz
[  606.626061][ T6801] usb 2-1: Manufacturer: syz
[  606.661099][ T6801] usb 2-1: SerialNumber: syz
[  606.669511][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  606.744448][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 39: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  607.754736][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 40: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  607.781427][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 41: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  607.787395][ T6801] usb 2-1: USB disconnect, device number 25
[  608.844673][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  609.892388][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  609.908685][T10512] loop1: detected capacity change from 0 to 128
[  609.927375][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  609.986076][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.003540][T10516] loop2: detected capacity change from 0 to 512
[  610.027730][T10518] input: syz0 as /devices/virtual/input/input24
[  610.045697][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.083791][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.140668][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.172384][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.176745][T10516] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  610.209494][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.222770][T10516] UDF-fs: Scanning with blocksize 512 failed
[  610.263298][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.341061][T10516] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  610.368056][T10516] UDF-fs: Scanning with blocksize 1024 failed
[  610.421342][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.445046][T10516] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  610.449054][T10525] fuse: Bad value for 'fd'
[  610.480368][T10516] UDF-fs: Scanning with blocksize 2048 failed
[  610.498606][T10516] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  610.527457][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.559507][T10516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  610.582211][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.607392][   T25] audit: type=1800 audit(1724249977.997:155): pid=10516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1578" name="file1" dev="loop2" ino=26 res=0 errno=0
[  610.633340][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  610.665710][T10527] loop0: detected capacity change from 0 to 8192
[  611.335378][ T5594] EXT4-fs error: 158 callbacks suppressed
[  611.335402][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3723271288, rec_len=27469, size=1024 fake=0
[  611.364053][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  611.388014][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  611.422019][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 35: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  611.478465][ T5384] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  611.490390][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 36: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  611.506047][T10527] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  611.541862][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 37: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  611.548669][T10527] REISERFS (device loop0): using ordered data mode
[  611.563423][    C1] vkms_vblank_simulate: vblank timer overrun
[  611.576134][T10527] reiserfs: using flush barriers
[  611.588252][T10527] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  611.606536][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  611.628657][T10527] REISERFS (device loop0): checking transaction log (loop0)
[  611.646215][T10536] loop1: detected capacity change from 0 to 1024
[  611.664847][T10527] REISERFS (device loop0): Using r5 hash to sort names
[  611.673350][T10527] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  611.721517][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 39: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  611.771129][T10537] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2113, free_space(entry_count) 2
[  611.794804][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 40: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  611.828003][T10537] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 564. Fsck?
[  611.845738][ T5594] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 41: comm syz-executor: path /244/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  611.870607][ T5384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  611.901339][ T5384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.912770][T10537] REISERFS (device loop0): Remounting filesystem read-only
[  611.926309][ T5384] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  611.945212][T10537] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  611.963308][ T5594] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  611.979625][ T5384] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  612.005087][T10527] ------------[ cut here ]------------
[  612.039513][ T5384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.065290][T10527] WARNING: CPU: 0 PID: 10527 at fs/reiserfs/journal.c:3393 journal_end+0x1f7/0x2b0
[  612.095188][ T5384] usb 3-1: config 0 descriptor??
[  612.130077][T10527] Modules linked in:
[  612.155288][T10527] CPU: 0 PID: 10527 Comm: syz.0.1581 Not tainted 5.15.165-syzkaller #0
[  612.201959][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  612.258762][T10527] RIP: 0010:journal_end+0x1f7/0x2b0
[  612.287466][T10527] Code: df 31 b8 ff 48 b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 a1 00 00 00 c7 45 00 00 00 00 00 eb 30 e8 99 66 6e ff <0f> 0b b8 fb ff ff ff eb 24 e8 8b 66 6e ff 4c 89 f7 31 f6 48 83 c4
[  612.395102][T10527] RSP: 0018:ffffc900035d7a18 EFLAGS: 00010283
[  612.428921][T10527] RAX: ffffffff8211fb07 RBX: 0000000000000000 RCX: 0000000000040000
[  612.475184][T10527] RDX: ffffc90012708000 RSI: 000000000003baad RDI: 000000000003baae
[  612.522650][T10527] RBP: ffffc900035d7af4 R08: ffffffff8211fa1a R09: ffffc900035d7ae8
[  612.568000][T10527] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805c58ebb8
[  612.595187][ T5384] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  612.625429][T10527] R13: 1ffff920006baf5e R14: ffffc900035d7ae0 R15: 1ffff1100b8b1d77
[  612.644838][ T5384] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  612.682740][T10527] FS:  00007fa9092166c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[  612.730061][T10527] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  612.747959][T10527] CR2: 0000000020001540 CR3: 00000000656bb000 CR4: 00000000003506f0
[  612.760026][T10527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  612.770838][T10527] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  612.793811][T10527] Call Trace:
[  612.800070][T10527]  <TASK>
[  612.805032][T10527]  ? __warn+0x15b/0x300
[  612.809372][T10527]  ? journal_end+0x1f7/0x2b0
[  612.818965][T10527]  ? report_bug+0x1b7/0x2e0
[  612.825238][T10527]  ? handle_bug+0x3d/0x70
[  612.829697][T10527]  ? exc_invalid_op+0x16/0x40
[  612.843241][T10527]  ? asm_exc_invalid_op+0x16/0x20
[  612.848458][T10527]  ? journal_end+0x10a/0x2b0
[  612.871533][T10527]  ? journal_end+0x1f7/0x2b0
[  612.879582][ T5384] usb 3-1: USB disconnect, device number 15
[  612.900377][T10527]  ? journal_end+0x1f7/0x2b0
[  612.910299][T10527]  ? journal_end+0x1f7/0x2b0
[  612.915161][T10527]  reiserfs_truncate_file+0x643/0xda0
[  612.923362][T10527]  ? reiserfs_new_symlink+0x760/0x760
[  612.932578][T10527]  ? truncate_setsize+0xcb/0xf0
[  612.960270][T10527]  reiserfs_setattr+0xa4d/0xf90
[  612.965643][T10527]  ? reiserfs_commit_write+0x5a0/0x5a0
[  612.981802][T10527]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  612.988371][T10527]  ? lockdep_hardirqs_on+0x94/0x130
[  613.000090][T10527]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  613.006922][T10527]  ? reiserfs_commit_write+0x5a0/0x5a0
[  613.018507][T10527]  ? notify_change+0xc60/0xf50
[  613.023690][T10527]  ? reiserfs_commit_write+0x5a0/0x5a0
[  613.029372][T10527]  notify_change+0xc6d/0xf50
[  613.040276][T10527]  do_truncate+0x21c/0x300
[  613.044793][T10527]  ? rcu_lock_release+0x20/0x20
[  613.054761][T10527]  ? bpf_lsm_path_truncate+0x5/0x10
[  613.061736][T10527]  do_sys_ftruncate+0x2eb/0x390
[  613.066727][T10527]  do_syscall_64+0x3b/0xb0
[  613.077763][T10527]  ? clear_bhb_loop+0x15/0x70
[  613.084615][T10527]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  613.095819][T10527] RIP: 0033:0x7fa90ad99e79
[  613.102305][T10527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  613.128190][T10527] RSP: 002b:00007fa909216038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[  613.140387][T10527] RAX: ffffffffffffffda RBX: 00007fa90af35f80 RCX: 00007fa90ad99e79
[  613.151159][T10527] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000006
[  613.162930][T10527] RBP: 00007fa90ae07916 R08: 0000000000000000 R09: 0000000000000000
[  613.179441][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  613.190543][T10527] R13: 0000000000000000 R14: 00007fa90af35f80 R15: 00007ffe0437c8c8
[  613.205190][T10527]  </TASK>
[  613.208309][T10527] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  613.215579][T10527] CPU: 0 PID: 10527 Comm: syz.0.1581 Not tainted 5.15.165-syzkaller #0
[  613.223815][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  613.233861][T10527] Call Trace:
[  613.237131][T10527]  <TASK>
[  613.240053][T10527]  dump_stack_lvl+0x1e3/0x2d0
[  613.244731][T10527]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  613.250359][T10527]  ? panic+0x860/0x860
[  613.254430][T10527]  ? journal_end+0x1f0/0x2b0
[  613.259012][T10527]  ? journal_end+0x1f0/0x2b0
[  613.263603][T10527]  panic+0x318/0x860
[  613.267529][T10527]  ? __warn+0x16a/0x300
[  613.271694][T10527]  ? fb_is_primary_device+0xd0/0xd0
[  613.276906][T10527]  ? journal_end+0x1f7/0x2b0
[  613.281495][T10527]  __warn+0x2b2/0x300
[  613.285483][T10527]  ? journal_end+0x1f7/0x2b0
[  613.290071][T10527]  report_bug+0x1b7/0x2e0
[  613.294408][T10527]  handle_bug+0x3d/0x70
[  613.298558][T10527]  exc_invalid_op+0x16/0x40
[  613.303055][T10527]  asm_exc_invalid_op+0x16/0x20
[  613.307898][T10527] RIP: 0010:journal_end+0x1f7/0x2b0
[  613.313094][T10527] Code: df 31 b8 ff 48 b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 a1 00 00 00 c7 45 00 00 00 00 00 eb 30 e8 99 66 6e ff <0f> 0b b8 fb ff ff ff eb 24 e8 8b 66 6e ff 4c 89 f7 31 f6 48 83 c4
[  613.332698][T10527] RSP: 0018:ffffc900035d7a18 EFLAGS: 00010283
[  613.338774][T10527] RAX: ffffffff8211fb07 RBX: 0000000000000000 RCX: 0000000000040000
[  613.346916][T10527] RDX: ffffc90012708000 RSI: 000000000003baad RDI: 000000000003baae
[  613.354885][T10527] RBP: ffffc900035d7af4 R08: ffffffff8211fa1a R09: ffffc900035d7ae8
[  613.362850][T10527] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805c58ebb8
[  613.370811][T10527] R13: 1ffff920006baf5e R14: ffffc900035d7ae0 R15: 1ffff1100b8b1d77
[  613.378769][T10527]  ? journal_end+0x10a/0x2b0
[  613.383339][T10527]  ? journal_end+0x1f7/0x2b0
[  613.387906][T10527]  ? journal_end+0x1f7/0x2b0
[  613.392469][T10527]  reiserfs_truncate_file+0x643/0xda0
[  613.397995][T10527]  ? reiserfs_new_symlink+0x760/0x760
[  613.403363][T10527]  ? truncate_setsize+0xcb/0xf0
[  613.408189][T10527]  reiserfs_setattr+0xa4d/0xf90
[  613.413027][T10527]  ? reiserfs_commit_write+0x5a0/0x5a0
[  613.418460][T10527]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  613.424586][T10527]  ? lockdep_hardirqs_on+0x94/0x130
[  613.429757][T10527]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  613.435885][T10527]  ? reiserfs_commit_write+0x5a0/0x5a0
[  613.441318][T10527]  ? notify_change+0xc60/0xf50
[  613.446052][T10527]  ? reiserfs_commit_write+0x5a0/0x5a0
[  613.451480][T10527]  notify_change+0xc6d/0xf50
[  613.456047][T10527]  do_truncate+0x21c/0x300
[  613.460436][T10527]  ? rcu_lock_release+0x20/0x20
[  613.465266][T10527]  ? bpf_lsm_path_truncate+0x5/0x10
[  613.470435][T10527]  do_sys_ftruncate+0x2eb/0x390
[  613.475260][T10527]  do_syscall_64+0x3b/0xb0
[  613.479650][T10527]  ? clear_bhb_loop+0x15/0x70
[  613.484298][T10527]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  613.490161][T10527] RIP: 0033:0x7fa90ad99e79
[  613.494549][T10527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  613.514143][T10527] RSP: 002b:00007fa909216038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[  613.522543][T10527] RAX: ffffffffffffffda RBX: 00007fa90af35f80 RCX: 00007fa90ad99e79
[  613.530488][T10527] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000006
[  613.538450][T10527] RBP: 00007fa90ae07916 R08: 0000000000000000 R09: 0000000000000000
[  613.546394][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  613.554338][T10527] R13: 0000000000000000 R14: 00007fa90af35f80 R15: 00007ffe0437c8c8
[  613.562293][T10527]  </TASK>
[  613.565481][T10527] Kernel Offset: disabled
[  613.570254][T10527] Rebooting in 86400 seconds..