last executing test programs:

1m35.926849492s ago: executing program 2 (id=244):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="44c394f305916c4516999da288a8", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m35.748064911s ago: executing program 2 (id=247):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10)

1m35.698631713s ago: executing program 2 (id=249):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, &(0x7f00000002c0)=""/153, 0x99)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000b0e000/0x3000)=nil, 0x3000, 0x6)

1m33.476246082s ago: executing program 2 (id=270):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0)

1m33.308048981s ago: executing program 2 (id=272):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0xc0000000, 0x6, 0x6}}]})
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401})

1m32.888656591s ago: executing program 2 (id=277):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x3f00000000000000)

1m32.739968499s ago: executing program 32 (id=277):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x3f00000000000000)

1m15.219126792s ago: executing program 5 (id=404):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
ptrace(0x10, r0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0xffffffffffffffa8, &(0x7f0000000040)={0x1})

1m14.289631448s ago: executing program 5 (id=407):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x80020007, 0x804, 0x7, 0x13, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x200000000000002, 0x0, 0x102, 0x3, 0xffffffffffffffff], 0x8000000, 0x141202})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0xd1, 0x82, '\x00', 0x1})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x9)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cef10f349c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc0295c1ded60062c9810c4bc1ad7afe338f2b0029059e684fe16098eb30da105be01ca11a2936356f77998fcc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c00f1a6bd9f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000d00000000000000000000000000000000000000000000000600"})

1m13.992081772s ago: executing program 5 (id=408):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
r3 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
r4 = getpid()
write$cgroup_pid(r3, &(0x7f00000001c0)=r4, 0x12)

1m13.880104348s ago: executing program 5 (id=410):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f00000021c0)='./file1/file0\x00', &(0x7f0000002200)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

1m13.708691137s ago: executing program 5 (id=412):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x1d, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x0)

1m13.162190963s ago: executing program 5 (id=419):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x8, 0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)

1m12.953964244s ago: executing program 33 (id=419):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x8, 0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)

58.663483088s ago: executing program 0 (id=515):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700})
recvfrom(r1, &(0x7f0000000480)=""/69, 0x45, 0x100, 0x0, 0x0)

58.508889596s ago: executing program 0 (id=518):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x50)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x1, 0x1548, &(0x7f0000004240)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJKkkSU4JSZJXEhJDSNKQhOQwJDGE5DAxaZzP50NCk6RJkpCckvW/Jubz9lX/eg9f3uud+3dd+7Lu2Xutfe/nnr2ftfdjnm+6DavdpE6NRkQE/xK88E8CAMQCwCAAyAsAAQBUiKsQl7k+p8SEf20n7N/rgeTLnQG7nLj+2RvXP3vj+mdvXP/sjeufvXH9szeuf/bG9WcsO9s8vdBVvGTfhZ//ZzvpY/+nye///0Uyyoz7Ym2Za7oDxPx8Cv4JMf/XObH/aHz+/9cK/sxGXP/sjeufXf3JCQL7r8bnf3aQ43fXcP2zN64/Y9nZ5X7+fLkXiPyHvQZHcl4ozF91/IwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2F/gtL9EAUBW+3LnxRhjjDHGGGOMsX8fn+NyZ8AYY4wxxhhjjLH/ewgCJCgIIAZyQCzkhFwgAOBKyAN5IQJXQRxcDfngGsgPBaAgFIJ4KAxFQIMBCwQhFIViEIVroThcByWgJJSC0uCgDJSF66Ec3ADl4UaoADdBRbgZKkFlqAJV4RaoBrdCdbgNasDtUBNqQW2oA3dAXbgT6sFdUB/uhgZwD9wL90FDuB8awQPQGB6EJvAQNIWHoRk0hxbQElr9U/2fg17wPPSGPpAAfaEfvAD9YQAMhBdhELwEg+FlGAKvQCIMhWHwKgyH12AEvA4jYRSMhjdgDLwJY2EcjIcJkAQTYRK8BZPhbZgC78BUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU0uGzf7D/qf/VvzsCAgoUqFBhDMZgLMZiLsyFuTE35sE8GMEIxmEc5sN8mB/zY0EsiPEYj0WwCBo0SEhYFItiFKNYHItjCSyBpbAUOnRYFstiObwBy2N5rIAVsCJWxEpYGStjVayK1bAaVsfqWANrYE2sibWxNt6Bd2BfrIf1sD7WxwbYIOvxFDbCRtgYG2MTbIJNsSk2w2bYAltgK2yFrbE1tsE22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xa7YDbthd+yBPTKeywH4PD6PfbCm6Iv9sB/2x8QcA/FFfBFfwsH4Mr6Mr2AiDsVh+Cq+iq/hCDyJI3EUjsbRWE28iWNxHJKYgEmYhJNwEk7GyZiZ6Ds4DZNxOs7AGTgTZ+EsfA/n4Pv4Ps7DebgAUzAFF+IiTMVUXIynMA2X4FJchstxBS7HVbgaV+FaXIdrcQNuwE24CbfgFtyG23AH7sCPUQHgJ7gH92AipmM67sN9uB/34wE8gBmYgQfxIB7CQ3gYD+MRPIJH8Rgex2N4Ak/gSTyFp/E0nsWzeA6fif+q8ccl1ySCyKSEEjEiRsSKWJFL5BK5RW6RR+QRERERcSJO5BP5RH6RXxQUBUW8iBdFRBFhhBEkwhgAEFERFcVFcVFClBClRCnhhBNlRVlRTpQT5UV5UUHcJCqKm0UlUVm0dVVFVVFNtHPVxW2ihqghaopaoraoI+qIuqKuqCfqifqivmggGoh7xX2ioeiLA/EBkVmZJmIoNhXDsJloLuTFK1hrMQLbiLainXhMjMKR2EG0dh3Fk6KTGIudxd/EOHxadBUTsJt4VnQXPURP8ZzoJdq43qKPmIJ9RT8xDfuLAWKgeFHMxFriPZyTs7Z4RSSKoWKYeFUswNfECPG6GClGidHiDTFGvCnGinFivJggksREMUm8JSaLt4UQ74ipYppIFtPFDPGumClmidniPTFHvC/minlivlggUsQHYqFYJFLFh2Kx+EikiSViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYquIhe1ih9gpPha7xCdit9gj9opPRbr4TOwTn4v94gtxQHwpMsRX4qD4WhwS34jD4ltxRHwnjopj4rj4XpwQP4iT4pQ4Lc6Is+JHcU78JM4LL0CiFFJKJQMZI3PIWJlT5pJXyNwyuPjqXiXj5NUyn7xG5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyWllcXidLyJKylCwtnSwjy8rrZTl5gywvb5QV5E2yorxZVpKVZRVZVd4iq8lbJUQu7KOmrCVryzryDpkAd8p68i5ZX94tG8h75L3yPtlQ3i8byQdkY/mgbCIfkk3lw7KZbC5byJaylXxEtpaPyjayrWwnH5Pt5eOyg3xCdpRPyk7SX/wVeVp2lc/IbvJZ2V32kD3lT/K89LK37COhL8h+8gXZXw6QA2MBQL4kB8uX5RD5ikyUQ+Uw+aocLl+TI+TrcqQcJUfLN+QY+aYcK8fJ8XKCTJIT5ST5lpws35ZT5Dtyqpwmk+V0OVAO+nmk2VL+Yf+3fqP/kJ/3vklullvkVrlNbpc75E75sdwld8ndcrfcK/fKdJku98l9cr/cLw/IAzJDZsiD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA1AoRJKKqUCFaNyqFiVU+VSV6jc6kqVR+VVEXWVilNXq3zqGpVfFVAFVSEVrwqrIkoro6wiFaqiqpiKqmvx4i+MKqVKK6fKqLLq+p/7Z33E8Af9VXF1nSqhSv6if1Z+Cb+TXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVEfVUXVSnVRn1Vl1UV1UV9VVdVPdVHfVXfVUPVUv1Uv1Vr1VgkpQ/dQLqr8aoAaqF9Ug9ZIarAarIWqISlSJapgapoar4WqEGqFGqpFqtBqtxqgxaqwaq8ar8SpJJalJapKarCarKWqKmqqmqmSVrGaoGWqmmqlmq9lqjpqj5qq5ar6ar1JUilqoFqpUlaoWq8UqTS1RS9QytUytUCvUKrVKrVFr1Dq1Tm1QG1Sa2qw2q61qq9qutqudaqfapXap3WK32qv2qnSVrvapfWq/2q8OqAMqQ2Wog+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nTvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcE+QPCgQFg0JBfFA4KBLowAQ2EBdrGw2uDYoH1wUlgpJBqaB04IIyQdng+qBccENQPrgxqBDcFFQMbg4qBZWDKkHV4JagWnBrUD24LagR3B7UDGoFtYM6wR1B3eDOoF4sBPWDu4MGwT3BvcF9QcPg/qBR8EDQOHgwaBI8FDQNHg6aBc2DFkHLoNU/M35w1++M7/3JAo+63rqPTtB9dT/9gu6vB+iB+kU9SL+kB+uX9RD9ik7UQ/Uw/aoerl/TI/TreqQepUfrN/QY/aYeq8fp8XqCTtIT9ST9lp6s39ZT9Dt6qp6mk/V0PUO/q2fqWXq2fk/P0e/ruXqenq8X6BT9gV6oF+lU/aFerD/SaXqJXqqX6eV6hV6pV+nVeo1eq9fp9XqD3qg36c16i96qt+nteofeqT/Wu/Qnerfeo/fqT3W6/kzv05/r/foLfUB/qTP0V/qg/lof0t/ow/pbfUR/p4/qY/q4/l6f0D/ok/qUPq3P6LP6R31O/6TPa585uc98ezfKKBNjYkysiTW5TC5THnKbPCaPiZiIiTNxJp/JZ/Kb/KagKWjiTbwpYoqYTGTIFDVFTdRETXFT3JQwJUwpU8o440xZU9aUM+VMeVPeVDAVTEVT0VQylUwVU8XcYm4xt5pbzW3mNnO7ud3UMrVMHVPH1DV1TT1Tz9Q39U0D08Dca+41DU1D08g0Mo1NY9PENDFNTVPTzDQzLUwL08q0Mq1Na9PGtDHtTDvT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfT1XQ13Uw30910Nz1NT9PL9DK9TW+TYBJMP9PP9Df9zUAz0Awyg8xgM9gMMUNMokk0w8wwM9wMNyPMCDPSjDKjMy9y5k0z1owz480Ek2SSzCQzyUw2k80UM8VMNVNNskk2M8wMM9PMNLPNbDPHzDFzzVwz38w3KSbFLDQLTapJNYvNYpNm0sxSs9QsN8vNSrPSrDarzVqz1qyH9Waj2Wg2m81mq9lqtpvtZqfZaXaZXWa32W32mr0m3aSbfWaf2W/2mwPmgMkwGeagOWgOmUPmsDlsjpgj5qg5ao6b4+aEOWFOmpPmtDltzpoCF98vvcm6mOe2V9o8Nq+NtTltLnuFvRBnzbwK2yJW2/y2gC1oC9l4eyE21toStqQtZUtbZ8vYsvb6X8WVbGVbxVa1t9hq9lZb/VdxXXunrWfvsvXt3baOveMXcQN7j82cnTREBLDNbWPb0jaxD9mm9mHbzDa3LWxL294+bjvYJ2xH+6TtZJ/6VbzQLrKr7Rq71q6zu+0ee9qesYfsN/as/dH2tn3sIPuSHWxftkPsKzbRDv1VPNq+YcfYN+1YO86OtxN+FU+102yynW5n2HftTDvrV3GK/cDOsal2rp1n59sFP8eZOaXaD+1i+5FNswEstcvscrvCrrSrsnL1ee0Gu9FusrvsJ3ar3Wa32x12Z1Y57B67135q0+1n9qD92u63X9gD9rDNsF/9HGce32H7rT1iv7NH7TF73H5vT9gfVFbvzGP/3v5kz1tvgZCAJCkKKIZyUCzlpFx0BeWmKykP5aUIXUVxdDXlo2soPxWgglSI4qkwFSFNhiwRhVSUilGUrqWs9EpRaXJUhsrS9VSObqDydCNVoJuoIt1MlagyVaGqdAtVo1upOt1GNeh2qkm1qDbVoTuoLt1J9eguqk93UwO6h+6l+6gh3U+N6AFqTA9SE3qImtLD1IyaUwtqSa3oEWpNj1Ibakvt6DFqT49TB3qCOtKT1Imeos70N+pCT1NXeoa60bPUnXpQT3qOetHz1Jv6UAL1pX70AvWnATSQXqRB9BINppdpCL1CiTSUhtGrNJxeoxH0Oo2kUTSa3qAx9CaNpXE0niZQEk2kSfQWTaa3aQq9Q1NpGiXTdJpB79JMmkWz6T2aQ+/TXJpH82kBpdAHtJAWUSp9SIvpI0qjJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQTvpY9pFn9Bu2kN76VNKp88I6XPaT1/QAfqSMugrOkhf0yH6hg7Tt74PfUdH6Rgdp+/pBP1AJ+kUnaYzdJZ+pHP0E50nTxBiKEIZqjAIY8IcYWyYM8wVXhHmDq8M84R5w0h4VRgXXh3mC68J84cFwoJhoTA+LBwWCXVoQhtSGIZFw2JhNLw2LB5eF5YIS4alwtKhC8uEZcPrw3LhDWH58MawQnhTWDG8OawUVg4furtqeEtYLbw1rB7eFtYIbw9rhrXC2mGd8I6wbnhnWC+8K6wf3h2WD+8J7w3vCxuG94eNwgfCxuGDYZPwobBp+HDYLGwetghbhq3CR8LW4aNhm7Bt2C58LGwfPh52CJ8IO4ZPhp3Cp35ef8+i31+fEPYN+4UvhC+E3t8l50cXRFOiH0QXRhdFU6MfRhdHP4qmRZdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vkwMcOuGkUy5wMS6Hi3U5XS53hcvtrnR5XF4XcVe5OHe1y+eucfldAVfQFXLxrrAr4rQzzjpyoSvqirmou9YVd9e5Eq6kK+VKO+fKuLKupWvlWrnW7lHXxrV17dxj7jH3uHvcPeGecE+6Tu4p19n9zXVxT7uu7hn3jHvWdXc9XE/3nOvlJua5cE4muH7O5+jv+ruBbqAb5Aa5wW6wG+KGuESX6Ia5YW64G+5GuBFupBvpRrvRbowb48a6sW68G++SXJKb5Ca5yW6ym+KmuKluqkt2yW6Gm+Fmupmu2qwLe5nr5rr5br5LcSluocucM6a6xW6xS3Npbqlb6pa75W6lW+lWu9VurVvr1rv1bqPb6Da7zW6r2+q2u+1up9vpdrldbrfPe2FQl+72uX1uv9vvDrgvXYb7yh10X7tD7ht32H3rjrjv3FF3zB1337sT7gd30p1yp90Zd9b96M65n9x5511SZGJkUuStyOTI25EpkXciUyPTIsmR6ZEZkXcjMyOzIrMj70XmRN6PzI3Mi8yPLIikRD6ILIwsiqRGPowsjnwUSYssiSyNLIssj6yIeF94a+iL+mI+6q/1xf11voQv6Uv50t75Mr6sv96X8zf48v5GX8Hf5Cv6m30lX9lX8Q/7Zr65b+Fb+lb+Ed/aP+rb+La+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/8338U/7bv6Z3w3/6zv7nv4nv4538s/73v7Pj7B9/X9/Au+vx/gB/oX/SD/kh/sX/ZD/Cs+0Q/1w/yrfrh/zY/wr/uRfpQfHfOGH5N1iwwTfJKf6Cf5t/xk/7af4t/xU/00n+yn+xn+XT/Tz/Kz/Xt+jn/fz/Xz/Hy/wKf4D/xCv8in+g/9Yv+RT/NLsh4q+5V+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/id/mO/y3/id/s9fq//1Kf7z/w+/7nf77/wB/yXPsN/5Q/6r/0h/40/7L/1R/x3/qg/5o/77/0J/4M/6U/50/6MP+t/9Of8T/48/80aY4wxxtifMvFSU/xyzYUnQH1/o4/4u437AcCV2wpl/P36zBnl+vwX2gNEfPsIADzZp9sDWUvNmgkJCRe3TZMQFJsHkPVJUKYYuBQvgXbwOHSEtlDuN/MfIHqcpT8YP3oTQK6/6xMLl+JL438OgAm/Mf4jj41eWDE8Hff/GX8eQIlil/rkhEvxEmj38/OVtlD+d/Iv0PoP8s/5RRJAm7/rkxsuxZfyLwuPwlPQ8RdbMsYYY4wxxhhjFwwQVbpk3X9m/Y/P37o/j1eX+uSAS/Ef3Z8zxhhjjDHGGGPs8nu6R88nHunYsW2Xf7xR/Y+3UZd+kvsf3UVT+GcT48Y/1fAe4H8KBwD/4oAAmQ35Vx7Flr9kX4kXT53/vWr5GR/Af0Yp/x2Ny3xhYowxxhhjjP3bXZr0//Ln6nIlxBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZUP/6ne8wZ/4lr7LfYyMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbY5fb/AgAA//8Stve0")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x198)
lseek(r2, 0xfffffffffffffffc, 0x2)
getdents(r2, 0x0, 0x58)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x3004d91, &(0x7f00000000c0)={[{@noinit_itable}, {@minixdf}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80f}}]}, 0x1, 0x523, &(0x7f0000000a80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x148)

57.916682875s ago: executing program 0 (id=525):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000340)=0xfffffffe, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

57.583302001s ago: executing program 0 (id=529):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0)
setns(0xffffffffffffffff, 0x24020000)
umount2(&(0x7f0000000380)='./file0\x00', 0x0)

57.433588149s ago: executing program 0 (id=531):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0x1000000000000000, 0x4})

57.208061s ago: executing program 0 (id=532):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
write$sndseq(r2, 0x0, 0x0)

57.053739658s ago: executing program 34 (id=532):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
write$sndseq(r2, 0x0, 0x0)

51.32746669s ago: executing program 1 (id=574):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x40}, 0x200040c4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

50.694717381s ago: executing program 1 (id=577):
socket$inet_sctp(0x2, 0x5, 0x84)
syz_open_procfs(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0/file1\x00', 0xc1004, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)

50.335800079s ago: executing program 1 (id=579):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

49.855485812s ago: executing program 1 (id=582):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1008055, &(0x7f0000000780)=ANY=[], 0x5, 0x559a, &(0x7f0000006a40)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20)

47.459415071s ago: executing program 1 (id=592):
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x101b)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
execveat$binfmt(r1, r0, 0x0, 0x0, 0x800)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020)

46.379986114s ago: executing program 1 (id=598):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
gettid()
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800004, 0x25dfdbff, {0x2, 0x7, 0x71, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

46.060900229s ago: executing program 35 (id=598):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
gettid()
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800004, 0x25dfdbff, {0x2, 0x7, 0x71, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

7.240276833s ago: executing program 4 (id=842):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_getoverrun(r0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r1, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

6.88575874s ago: executing program 3 (id=845):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42})

6.651221852s ago: executing program 7 (id=850):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[], 0x3, 0x21f, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28000, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

6.07298977s ago: executing program 7 (id=853):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
shutdown(r1, 0x1)

4.877885259s ago: executing program 7 (id=858):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0xf0, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x40000040, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x3, 0x40000000000004, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}}, 0xf0}}, 0x804)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000e04"], 0x0, 0x0, 0x0, 0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x0)

4.558731715s ago: executing program 6 (id=861):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b80)="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", 0x126}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4.44727757s ago: executing program 6 (id=862):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x340, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x11, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560)
socket(0x10, 0x803, 0x0)
pipe2(&(0x7f0000000100), 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0xfffffc00, 0x60ab, 0x8}}]}, 0x54}}, 0x0)

4.434391191s ago: executing program 4 (id=863):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

3.927954866s ago: executing program 6 (id=864):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103)
linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400)
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2042, 0x80)
copy_file_range(r0, 0x0, r0, &(0x7f0000001240)=0xfffffffffffffffd, 0x80000000000000, 0x0)

3.601669343s ago: executing program 3 (id=865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)

3.282149408s ago: executing program 6 (id=867):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c6e66732c73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c006a4fcfcc9fc5ea902e1a6384d405e843e1dfa18259eaaba553a63617a0f84f2e66f4a8121e2cea67640f61a98cef24cdbc0121ddb0212c7365c895e70775f8c82357782f45acff678373e50747f0dbd34a6c51a45f248402fd4340c0024ca0ee5de3af9233d9e31dd6f105e2696137379613fb63ef2a91ccf785af00684cfa440b01bda2cbcd1b326a0ee91991ebfbd00ec2a75ac8d59d1e7793dfb73a16dd3b166bc6a158528f"], 0x1, 0x26c, &(0x7f0000000840)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2b4602, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000a940)='freezer.parent_freezing\x00', 0x275a, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)

3.135919176s ago: executing program 3 (id=868):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50)
read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10)
syz_fuse_handle_req(r0, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0x77, 0x0, {0x20000, 0x0, 0x8000000000000000, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x100001, r4, r5, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
statx(r1, &(0x7f0000000000)='./file0/file0\x00', 0x2000, 0x28, 0x0)
open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff)

2.815385311s ago: executing program 6 (id=870):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

2.584587272s ago: executing program 6 (id=871):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1000, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.23204159s ago: executing program 3 (id=872):
syz_open_procfs(0x0, &(0x7f0000000000)='status\x00')
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0xfffffffe, 0x4)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2.060148748s ago: executing program 4 (id=873):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03000000ed"], 0x50)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.830261639s ago: executing program 4 (id=874):
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
fchdir(r2)
socket$nl_sock_diag(0x10, 0x3, 0x4)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x800, 0x1)

1.713100135s ago: executing program 7 (id=876):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x64)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.675495917s ago: executing program 8 (id=877):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f00000003c0)="96526b8149cda697f395b0b7d1c503bc291fb20f000059350c7cce721712e738c68b363ab6abc71fd59519057947173ce8ae27353f06edf09d", 0x39}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000600)='_', 0x1, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1}, 0x2062)

1.566028113s ago: executing program 8 (id=878):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050)

1.507260615s ago: executing program 8 (id=879):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x8, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x4, 0x4})
close(r0)

1.456397158s ago: executing program 8 (id=880):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x600008d0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

1.337068274s ago: executing program 3 (id=881):
r0 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0xd956ce61b30c7ab8]}}, 0x0, 0x28, 0x0, 0x1}, 0x28)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0xc, &(0x7f0000000100), 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x5, 0x5, 0x0, &(0x7f0000000100)="9227a960a5", 0x0, 0x1, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)
setsockopt$sock_attach_bpf(r0, 0x1, 0x19, &(0x7f0000000000)=r2, 0x4)

1.033114939s ago: executing program 4 (id=882):
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

960.620343ms ago: executing program 3 (id=883):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000100)={0x0, 0x0, 0x6, "f08039ad6674"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)

904.023565ms ago: executing program 4 (id=885):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3ctqFEscx/Ff9UySycmQ07kcDriMBnQjMW7EzQSZhxAXomZGCA4RTQR1YxQXIqJ7976CryC4UXwBXbnyAUYQWqq65pqe7jhkujP4/YChp7uq61/pS9V/wJQA/LWu1L++u/jd/jNSSSXp5WUpkPRCKkv6T/9XHuzu7+y3mo2U87QjRxXJKK5pDhXa3m0m1a3I1/BC+6msav8+TEYURVvfJO0VHQgK5Z7+BIE0559Od7ySe2Tpno5Z7+CY45g2pq22Hmqx6DgAAMXy43/gx/mqn78HgbTuh/0TOf6Pq110ABMXpR7tG/9dlhUZe33/dYd6+Z5L4ezxoJMlHqXlmaHPs4rvrIEJpsnKKl0swfztnVbz/PbdViPQM9W8vmKr7mcjvnU7MqJdS8hNUxyh7yZ5Rrng+jBj+7A5Iv6VMVscm/loPpvrJtRbNbrzv3Jk7GVyVyoculJx/Bujz+h6GdpS8q+NWq0WDBRZco2c8i14Gb2sJGck6txRSxr8giDMitPVWh6qFffuQkatlbjW1vxArc3OpxG1Vgfasr3p3s2j25s089pcNWv6ofeq983/AxvfulKfzN5TY9bjocD9xuP+zCY3V3bnDA+NHAe6Vh3c0/0tzo0K/Wf6Ow1DnqQce6VbuqTFvUeP75RareZ9u3EzYeNetbtn5rmUWKaAjUC9PTroHZpT/EXkoVqdQSnPUM8d6wnt+yOzsH3KcungibkTitiof8r3RipiI6d3FArVu+iZRT/kEhDy5uZdcf7Xl69suMme/RGmzNMzJ2T+jJGdY3czoMpA/WW39c8fZXALozO4o+Zcp89KZ7q7fkUZLYY+zukQpU39LFPXF93g+38AAAAAAAAAAAAAAAAAAIBpk8d/Jyi6jwAAAAAAAAAAAAAAAAAAAAAATLvu+r/qrP8rv/5vJX393+G//F2KV3g5lvV/3+yK9X+ByfsdAAD//y0Iis0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000740)='./file2\x00', 0x1a920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
syz_open_procfs(0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
llistxattr(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

810.64516ms ago: executing program 7 (id=886):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xc2924e2b4b46f3d6, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00v\x00\r\v\x00\x00\x00\b'], 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

720.437624ms ago: executing program 7 (id=887):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0xd9, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r1, 0xf6695000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="fc30dbe99679dd0987d9b79d2816807e5ae56a882530ffe1ae10045ba28c5dd5d248346be2a47ba7ee4ad5737e6f7ee5972f54c5c05986ceaefcd934112e67e808e7197431b1ccde1f3f6c5fc18a493805bc62c575cbdf0d821e4d78766945408115744f77f5fd65bbdc64876a8a4cc6c9ac20ba24e72a582ac25cf4c4abc66e220276c80ddfadfb0d2dbd81ac158689bb3ee37cd6030474f0b67ab077d71a4af43f2ad4865aebe10863d1fbc13d4b6fa0cf2ac1622bf3c908302f7e49debf566d5390f5cc4dca4aefa4823d39cb7dd4f4b9ccaa3deca2483f38c68a6dd882630c645b3731764f609c43fdf70d1426eb074aaf64f950877536287cbb548ae806ec459b787cbca0bbc12a0044111c8b688d9d2c1400cbd43c21fee0085f3a88a87d0acc4328488cf64db57a3ac6ca7ba0effedb266c9c8c2eb03d42aa488241af22018d2f94b6e657a54801b656a8806f1f6b009a6e9f37d02caa6795ca7bd3cac3507f37a462e1ac4439246310bfef901b7664009228e5db784966aa690a2a06414cb47c02440fb402a214f204030d28d13f1267dddfab49dc95ab673ec2a243ded076600e33fdca0495a0807d4a3057b703770316b6afd5dcd1ebe22e7922e67c8378c09623c068e49f788048bd2390e8d48301490e26b950018a18b196d038d9786f268a202b76acdeb0e879e291b0585aecc2b12b692e4ebde3703a7036408accf2a7ce0155b54bbd79aebb61e2f881ee21b5dc3b1971194f66e741442683da9d9015f3535458b69b1a231ddba9dedc1c3008bdf45b6b5d8d55f70d016836a1ffcf797c8e87451a3aea994e9a8bf28339910570d2c5fd5cf258e13649667da0fb5597144ba9beaae4488fab4bf92db02dd8a567a3448fbd4994c7ef6e94c1d94fe246a50dd0d4254dbde51ae8f0c135961175d68913beb0dbd725206beb1510ebb44319a9bdcb8949f46cf187faa8ff4095ec2ced4080e9510e16eac28ab16d2b52eef8131b6bb14059566c7b40ec939c3d9da8c07cea2a41943d2b0f2c46935e9d91e0f60933e70e83362e381f8c77bcf5462a8e951b2d268e27c0942c85ef832e731d9c0c72911fb8a5ad85e0d710b48d54d2c1ca5de57b3cc28c7ab7504c11e3ed03a68509159b8ca0b2be181a3ca748cd02969b94907c2687fca03fb6423854627f0c54f8af5b84630c34ec70815063c8ca0303bd6d97f53e2437a177381eb10ec1108d87285d3669fec1b2f31acc0f5663e888cabc8aeda7ca34f377377c7100edf49a914538835a916a0f84bfb5754fe3313c801168f806675b9813c3c3c5a52cbde1b907b2922ecda1db0a81108622e3517aea76f0debee7c452bef87f78394e0d9a85b90db51fd5d953a528d12ce517deef93b518ebc26197818238481940e1b8747f8d3e3398403837fe86a5c67a708c40e6c89275c1f9d07cfd5cee1d0379275899b1cda60b71f1ebe48867864529cd72e8437c01e71fd06c5c5b88752378932aaefc5dfb8580b00ba024cf132cfc2960d50aa0b33e3683f7f193accdd3ee2d0c47724165a0698d5098112ffa058ee93aa3b692ccbfd34274763c74f831c91fb84f7be645b0a00630226659d48e49da81a6d78f4478ad25458d91aae203a9b7413e65d7ae0b837312d09368852ef44960f71e9a2f915cfaa1b0848f2ef1dd6a7656bbfb0247a1f34e1b4d55c83578f2ba3eab5f94c878341e7c05d6a79a6e8c1024cebe808a09e1f202ecd024dfdd939d57ce4ed5a48d6a9b2df40b18d1f2e8b214e172fd05aa5159b71849bef0c9f576255a646453042c4d47e93ae8e0242e58c92fbdfe6748f4787c3ef1da49f0baa841ebbfe490cefca35910db567e59453824299cd26e625fbcfff898261de4f57e54ef909b2694adf79efec260f423055d48e38ed6e177550f6eae88f2f8618348396d006826349612401b40a318a29b5bcbc26e387944b31a852bc9c9cbf3947c9ecab7a9d22b57567c344947d734cfe39742632ff637c63f8134da78e499454cd2bb8c5faaabc32a5508e8cb053b49420f53a2fd3bc5496a2300e758f8f5e128e3edb039267e426b863aff638a460579e29be2c9938a2a273949152d0a83f757cdafbc664abefd59297f5dd112d47724e28f52a9660f9def5be26a5afc022e69c37dda79656042651c7bddefeaadabae7dd8ed9232f5e037cf586f5dcc319e18ceb90e7ce62b9ab270fbb62b29578b40614fa0dfba6a22a1cc2a3cc06e5c48d9ed3c145f3306e4e2f44812d908d558740b932229db5fccab7d43c53cd18063ec26da594fd0b2f4536b5dcb8b6c1fba1cf907140cda17207a9ba8a185cce514849f48c455574ab110750da0ec415e1e4279fbc63c298336f87b4b4776430195a4ee37f6a265792eb8d32e02ad6611a68cbe13202cc937fc5b3b8503ed59ee75ecf8a11f62d17e3ac0a797f9192217ae30a3ca3361d92cae64d1e00e8dad64c7ac5071df5a77b8cfb7b9e32b19d6c2c435bda45ec7e9bdd1cded92048bc65b346f427dbfe30561b14d73ea105c3866798524be7f211a58ae5db271441368dc68e95add6cb60b66135d3da6000acb5941c3e78c399886c71d9d9e401f9608bcf4e20fb024456d24054f96d7430eb3560e5dba6039190a855f9cfa3e0602a3fd4b7ecf70f7762e07ad1495b82ca660ffd82d1be4d9c098c42a70915d37157c27c7fc07b9eba5dad6bb798b76fe20df121d38ad3c1a33b8b707b1080e34bdd137dd73320a96ecd1d77ad5f73dac3b9a495fdd887c0ed81abb889d665b20fa0eea5ae0fabf7c4660604a3d767b281b8ff54a41af67da99a68598bfeb7060c40db6944cfb5a73058d31832b981b28e5c27c485feeb4a0d5913df851eb935c10b21c0e97f149040972ace826d5d55e09c70f9e43c3e57bfaa84ecbd44e5a4309511a8e5c73d4f7a5a05cc33598b1d5ce596d564b843ca60040358e4ca652d30b8dc3b00e73a3f284578321471cfc12316a80e1d77261598b540a14613100323f11e2bfd1db94d99e7a4cea7c18d82ef0b04eacc956bc032a6c0f3e7c6c0415f9d7ff18a7e72a60c0ec33779b6c4789616c0767294ca898a50ffc7887a4c7376c7d28eb0b74c29b4e399d99fcf91be83c922aabe8065533724c9d82f819bc7a7ebcfe3586b8e2ccde8a0e0ef4fa32e78d1ac90654e70fcb565e81dbe5e51801f501a379e98a74bd31e358950ecd8b5da2232bf90d48c1979d88c429ff77df926be757213796e457064fbff5cb7fee41c32159a9cdaa1176cd406f0823abd8c2b8f83dfb96e5e2474d79e30f726c47746520ff4b3227a636d1d24fc19515a63e8333211aa6bc63961eb810ec4830d16baacd52f96eb3d16adc4128500eda2188d88d9ef0235531455eed0657874b425d6ba68a67e3905ab6f4f729aa9ced5ceb96cd183806a6c3720e907f6c7b226c0fe15219c2ff3320c2e6880ad016dc8bdd911d60ea77d971ed05ca154b0e5ee7d6ebc28b86a66baedca6d39939943bff1d8b39dea87a59fecc6279f9b117b04562db7e952b516a91a364a3b57f9f51324764b4e2c50e0dd2b4a62d19fa665be338e0071edc2725a4a775e9eb0a9e1d01482ed9009e2b17deae69740399203d231b2cb54635aab4a5bc71c1d75d5c27a0e850ad7c39a38c2658d72e8bac7e9fd4f351ad427faafebf7beed212a2fae3cc0c811cb54c468d9aacc303567a5ab03d8c00007c80085b5d39285bb161d8db8de11ec6dce9eab7b7dadd892a4f25e3382a4fe72ce2b309d02ceeadb8daa6e28f4baf8535e7dbb888005651bb5f434ec32b45042363bc424dc3b3441fcc12cef6779ca4032835a225a4196aa952ed12eebd4712fe385dd933fc4110de767d0f9127e7cd815d613a454c56f3be15526c6af0cddae6a7ff375d283871b8761e1cc63f3ada963c127bcb528f971b50ebe6da93b36c1c0b11b7a677c3a2a5a09f2e9350b509f22a51e9c1f3e11383e703b9053ddb5884e9a5804b51fa06f7fbb2ddb8a2d72bebcced8d80834780cfcc578e0e2d0219b4d120b3587db65809709197a0c9f5f5262b091fbbf15f4767206f85406e2fad15c29407243834872d55f13a42a9745822b317edb26488e8517de1c61d5003776faa94fb2d851b4c914dfafea5f0228ce3c2c795511ea5d1bc2b47ee56f56cafd0670e81ee59d2a6125075e98d475f671eca2020d96b7cc33167fde43aa045ef9d71db070d02e642bab72d0e9ac64be602228d8e1e91e9486765c2bf6cfccd723564edbbf13a44809d5a03ae5800bde612ec4dc2a96cb9b8de34998b2ba891549d956f333eb2da9a67312d77c46cb1135694e582a4ac41d9eeb4ff87047e12418f9896ffc567c67a4d172203d79077b901ff42a34dadcbf4b80eacf84093206c563d377f30e427fcff6e1e8ad572e2e4dfc3def367feaacf526fcc75cf81d013d24d51adc630db4a51053e70ce6f482f4c41d973b68dac37214e9315556e5fba8dcd68bcaa24256045ada481af6dfd80b01336ba5405b3a6f810eccff2f79e640b8ec1871140f0b773b70f13fad81121fb16f4a92db25d29206c00b3768e47dbe827257e5901c62e2509438ac6596722d9882893e2ea8b1191e09a6638eaae77c8b52c5eba0c3fa2230e48510a1b810259101d75bc488bffdfe1a9c6da9e05e149ce2e9b865db0d884f1028f03c84d947cd33895d8581c83ec55431b340b7fb04cb36d187fe6bc204f6bc390aeec4c949ff0d3db4c1c5b85909f838cf3a56b5d610036a0cc851f836ad72b73377b6eb6a869b802d1c07c424dea55f91e88defff0f07a856a2ba15070f19d5fc5858ac33e233713a1a8445e3255bf43aea9c7cc18f1c225c4b194a333d42c4bb72c994a877b5ae840f1a4f52c9d3bb3afb187b251d1c68f380a5dbd1689a78d98e7edc49014ad7c79708758d8e23c5082298627e38f1e19e1623a8b7e12a6435deae6698f0015d8e2e1e918ab06d060dacad0d6cc6d835619fe361d5e8cde40565b76913a904b7e7c60ddfcce6afc9e4676ca526a68920bcf8fee9d5055ca360d390524ac6aee07060220e13f82d53d3048b7eb0657db4597bf9ad73b1963dee280f181d3d9428baa692e2486112a308c7c5e81f98dacc516909df9df934edc8db18b7d49afc2e00c863dfeb70362571bc9cf0c4c179df7b4ab5ae4737a611966cf9c3593d6731e31ac048f046f78a2ded8c71a5bd422fc7b68239175555896d42563c8cc5b950fd28fa54db2e0cc6cded799f087befa8acd68eea3644b2711259296667530c42e8ee3dab02ce2fe770e68fbbf12e1c274ad54bbd95d16530abfca59d268bd02d5a78d9a5bd91127fcb2bca57436f7bcbffc08422ec54f887fcdd84a81ea0228d75bcca42f2d4b5bd138f5c0821ffb185cbe6c1750b3de7ef6775898c6695e11bfbe2db80e0a500841c45514ee4bd2e84809cd3046eb820c9c96976a90732eebbd3023d02cb7d67f9cc891f8ba370037fd97ea0c5132ce63354c0e7fb7921602680da18f7dda895a287a9393d5", 0xf44}], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}, &(0x7f0000000380)=0x40)

591.69952ms ago: executing program 8 (id=888):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000200)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 8 (id=889):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f807570", 0x2d}], 0x2}}], 0x1, 0x2090)

kernel console output (not intermixed with test programs):

or -71
[   70.154163][ T4555] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.163403][ T4555] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.170149][ T4233] usb 2-1: USB disconnect, device number 2
[   70.184127][ T4555] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.368238][ T4555] syz.0.102 (4555) used greatest stack depth: 20432 bytes left
[   70.453139][ T4569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'.
[   70.667280][ T4579] capability: warning: `syz.4.112' uses deprecated v2 capabilities in a way that may be insecure
[   71.322500][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.329606][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.474767][ T4587] loop2: detected capacity change from 0 to 32768
[   71.688335][ T4587] JBD2: Ignoring recovery information on journal
[   71.771702][ T4622] Illegal XDP return value 4294967274, expect packet loss!
[   71.900186][ T4587] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   72.211636][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'.
[   72.239955][ T4663] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[   72.286746][ T4663] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   72.307739][ T4663] OCFS2: File system is now read-only.
[   72.325526][ T4663] (syz.2.116,4663,1):ocfs2_trim_mainbm:7603 ERROR: status = -30
[   72.447053][ T4187] ocfs2: Unmounting device (7,2) on (node local)
[   72.675707][ T4674] loop0: detected capacity change from 0 to 512
[   72.800890][ T4674] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   72.839206][ T4684] capability: warning: `syz.2.130' uses 32-bit capabilities (legacy support in use)
[   72.971035][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'.
[   73.156716][ T4693] loop1: detected capacity change from 0 to 1024
[   73.282551][ T4693] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   73.503586][ T4701] loop2: detected capacity change from 0 to 1024
[   73.553326][ T4693] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3885: comm syz.1.138: Allocating blocks 481-513 which overlap fs metadata
[   73.603122][ T4693] EXT4-fs (loop1): pa ffff88807204c540: logic 80, phys. 225, len 18
[   73.611694][ T4693] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 2
[   73.632119][ T4701] EXT4-fs (loop2): Ignoring removed nobh option
[   73.647702][ T4701] EXT4-fs (loop2): blocks per group (0) and clusters per group (8192) inconsistent
[   73.777072][ T4705] loop0: detected capacity change from 0 to 16
[   73.817656][ T4705] erofs: (device loop0): mounted with root inode @ nid 36.
[   73.988243][ T4191] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   74.030383][ T4710] netlink: 'syz.1.144': attribute type 1 has an invalid length.
[   74.056772][ T4710] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.144'.
[   74.228106][ T4191] usb 3-1: Using ep0 maxpacket: 32
[   74.348322][ T4191] usb 3-1: config 4 has an invalid interface number: 228 but max is 0
[   74.364021][ T4191] usb 3-1: config 4 has no interface number 0
[   74.382683][ T4191] usb 3-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30
[   74.415219][ T4191] usb 3-1: config 4 interface 228 altsetting 12 has an invalid endpoint with address 0xD9, skipping
[   74.441275][ T4191] usb 3-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[   74.475717][ T4191] usb 3-1: config 4 interface 228 has no altsetting 0
[   74.580212][ T4721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.149'.
[   74.638595][ T4191] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[   74.661046][ T4723] netlink: 100 bytes leftover after parsing attributes in process `syz.3.150'.
[   74.680384][ T4191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.703363][ T4191] usb 3-1: Product: syz
[   74.707579][ T4191] usb 3-1: Manufacturer: syz
[   74.729841][ T4191] usb 3-1: SerialNumber: syz
[   74.758623][ T4701] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   74.784701][ T4727] netlink: 'syz.0.162': attribute type 12 has an invalid length.
[   74.821216][ T4727] netlink: 'syz.0.162': attribute type 29 has an invalid length.
[   74.829515][ T4727] netlink: 148 bytes leftover after parsing attributes in process `syz.0.162'.
[   74.996942][ T4730] loop3: detected capacity change from 0 to 32768
[   75.102421][ T4730] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.153 (4730)
[   75.239280][ T4191] usb 3-1: USB disconnect, device number 2
[   75.260201][ T4730] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   75.270299][ T4730] BTRFS info (device loop3): metadata ratio 147
[   75.276579][ T4730] BTRFS info (device loop3): using free space tree
[   75.283197][ T4730] BTRFS info (device loop3): has skinny extents
[   75.461857][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   75.619441][ T4737] loop1: detected capacity change from 0 to 32768
[   75.637766][ T4730] BTRFS info (device loop3): enabling ssd optimizations
[   75.714062][ T4737] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.155 (4737)
[   75.806814][ T4737] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   75.831830][ T4737] BTRFS info (device loop1): enabling auto defrag
[   75.840686][ T4737] BTRFS info (device loop1): use no compression
[   75.847158][ T4737] BTRFS info (device loop1): max_inline at 4096
[   75.854122][ T4737] BTRFS info (device loop1): using free space tree
[   75.861925][ T4737] BTRFS info (device loop1): has skinny extents
[   75.926660][   T26] kauditd_printk_skb: 6 callbacks suppressed
[   75.926678][   T26] audit: type=1800 audit(1774282448.324:18): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.153" name="bus" dev="loop3" ino=263 res=0 errno=0
[   76.027370][ T4737] BTRFS info (device loop1): enabling ssd optimizations
[   76.452611][ T1108] cfg80211: failed to load regulatory.db
[   77.936737][ T4731] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.951303][ T4731] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.961859][ T4731] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.976054][ T4731] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.034052][ T4834] loop1: detected capacity change from 0 to 40427
[   78.053510][ T4834] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   78.063542][ T4834] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   78.098838][ T4817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'.
[   78.117385][ T4834] F2FS-fs (loop1): invalid crc value
[   78.189321][ T4819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.168'.
[   78.244047][ T4834] F2FS-fs (loop1): Found nat_bits in checkpoint
[   78.402766][ T4834] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   78.411240][ T4834] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   79.188274][ T1108] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   79.448243][ T1108] usb 3-1: Using ep0 maxpacket: 32
[   79.508775][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'.
[   79.543135][ T4882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'.
[   79.568405][ T1108] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[   79.576613][ T1108] usb 3-1: config 0 has no interface number 0
[   79.598115][ T1108] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   79.778426][ T1108] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[   79.797902][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.822512][ T1108] usb 3-1: Product: syz
[   79.826776][ T1108] usb 3-1: Manufacturer: syz
[   79.867656][ T1108] usb 3-1: SerialNumber: syz
[   79.891334][ T1108] usb 3-1: config 0 descriptor??
[   79.908586][ T4867] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   80.019149][ T4876] loop3: detected capacity change from 0 to 32768
[   80.124249][ T4876] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[   80.132794][ T4867] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   80.140554][ T4905] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   80.166121][ T4876] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[   80.178707][ T4876] XFS (loop3): DAX and reflink cannot be used together!
[   80.813166][ T1108] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random
[   81.049094][ T4923] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.201'.
[   81.458195][ T1108] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   81.481202][ T1108] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[   81.551578][ T1108] asix: probe of 3-1:0.188 failed with error -71
[   81.597645][ T1108] usb 3-1: USB disconnect, device number 3
[   82.036728][ T4939] loop1: detected capacity change from 0 to 32768
[   82.141668][ T4939] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.207 (4939)
[   82.292131][ T4944] loop2: detected capacity change from 0 to 32768
[   82.312687][ T4939] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   82.328342][ T4939] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   82.352427][ T4944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.209 (4944)
[   82.355868][ T4939] BTRFS info (device loop1): use zstd compression, level 3
[   82.386033][ T4939] BTRFS info (device loop1): using free space tree
[   82.398519][ T4939] BTRFS info (device loop1): has skinny extents
[   82.421344][ T4944] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   82.431059][ T4944] BTRFS info (device loop2): turning on sync discard
[   82.437774][ T4944] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   82.447336][ T4944] BTRFS info (device loop2): use zstd compression, level 3
[   82.454606][ T4944] BTRFS info (device loop2): turning on async discard
[   82.461824][ T4944] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   82.472501][ T4944] BTRFS info (device loop2): trying to use backup root at mount time
[   82.480804][ T4944] BTRFS info (device loop2): enabling auto defrag
[   82.487270][ T4944] BTRFS info (device loop2): using free space tree
[   82.493838][ T4944] BTRFS info (device loop2): has skinny extents
[   82.652310][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'.
[   82.668905][ T4647] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   82.700417][ T4939] BTRFS info (device loop1): enabling ssd optimizations
[   82.732050][ T4944] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[   82.741216][ T4645] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   82.766841][ T4944] BTRFS warning (device loop2): couldn't read tree root
[   82.774830][ T4944] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[   82.785491][ T4944] BTRFS warning (device loop2): couldn't read tree root
[   82.825581][ T4944] BTRFS info (device loop2): enabling ssd optimizations
[   82.833785][ T4944] BTRFS info (device loop2): clearing free space tree
[   82.842417][ T4944] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   82.852579][ T4944] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   82.868179][   T26] audit: type=1800 audit(1774282455.244:19): pid=4939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.207" name="bus" dev="loop1" ino=263 res=0 errno=0
[   82.902573][ T4944] BTRFS info (device loop2): creating free space tree
[   82.911626][ T4944] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   82.921552][ T4944] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   83.899419][ T5036] loop4: detected capacity change from 0 to 128
[   84.007001][ T5036] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   84.082920][ T5036] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   84.180421][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'.
[   84.376420][ T4645] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   84.458078][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   84.876162][ T5059] comedi comedi1: fl512: I/O port conflict (0x10003bc,16)
[   85.158311][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   85.633056][ T5077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'.
[   85.834038][ T5082] -1: renamed from syzkaller0
[   85.960952][ T5084] device syzkaller1 entered promiscuous mode
[   85.977264][ T5084] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   86.152072][ T5093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'.
[   86.526307][ T5112] loop4: detected capacity change from 0 to 128
[   86.644611][ T5112] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.669786][ T5112] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   86.720577][ T5120] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   86.797299][ T5091] loop3: detected capacity change from 0 to 32768
[   87.003037][   T26] audit: type=1800 audit(1774282459.404:20): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.243" name="file1" dev="loop3" ino=7 res=0 errno=0
[   87.095518][   T26] audit: type=1800 audit(1774282459.404:21): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.243" name="file1" dev="loop3" ino=7 res=0 errno=0
[   87.639721][ T5126] loop0: detected capacity change from 0 to 32768
[   87.682126][ T5016] Dev loop0 SGI disklabel: csum bad, label corrupted
[   87.710505][ T5126] Dev loop0 SGI disklabel: csum bad, label corrupted
[   87.877890][ T5150] device bridge_slave_1 left promiscuous mode
[   87.901907][ T5150] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.011207][ T5150] device bridge_slave_0 left promiscuous mode
[   88.017619][ T5150] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.583754][ T5165] input: syz1 as /devices/virtual/input/input5
[   88.818131][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   89.068133][    T7] usb 1-1: Using ep0 maxpacket: 16
[   89.191436][    T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   89.219582][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[   89.398268][    T7] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[   89.419902][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.452035][    T7] usb 1-1: Product: syz
[   89.456250][    T7] usb 1-1: Manufacturer: syz
[   89.468244][    T7] usb 1-1: SerialNumber: syz
[   89.487298][    T7] usb 1-1: config 0 descriptor??
[   89.710226][ T5206] chnl_net:caif_netlink_parms(): no params data found
[   89.767718][    T7] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[   89.836564][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.844545][ T5206] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.853899][ T5206] device bridge_slave_0 entered promiscuous mode
[   89.864056][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.871343][ T5206] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.882466][ T5206] device bridge_slave_1 entered promiscuous mode
[   89.914578][ T5206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.943803][ T5206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.012094][ T5206] team0: Port device team_slave_0 added
[   90.022556][ T5225] netlink: 'syz.3.282': attribute type 1 has an invalid length.
[   90.045405][ T5225] device bond1 entered promiscuous mode
[   90.052319][ T5225] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.063076][ T5206] team0: Port device team_slave_1 added
[   90.096874][ T5225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'.
[   90.107209][ T5225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'.
[   90.121464][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.140983][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.228306][    T7] rc_core: IR keymap rc-imon-pad not found
[   90.234181][    T7] Registered IR keymap rc-empty
[   90.257708][    T7] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[   90.278685][ T5206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.298637][    T7] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   90.323210][ T5225] bond1: (slave bridge2): making interface the new active one
[   90.334408][ T5225] device bridge2 entered promiscuous mode
[   90.344884][ T5225] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   90.356175][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.387610][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.402456][    T7] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   90.425052][ T5206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.464117][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   90.523767][    T7] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7
[   90.551898][    T7] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:2> initialized
[   90.587213][ T5206] device hsr_slave_0 entered promiscuous mode
[   90.602167][ T5206] device hsr_slave_1 entered promiscuous mode
[   90.617793][ T5206] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.646958][ T5206] Cannot create hsr debugfs directory
[   90.828392][    C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71)
[   90.838549][    T7] usb 1-1: USB disconnect, device number 2
[   91.049273][ T5206] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   91.075902][ T5206] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   91.101808][ T5206] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   91.109535][ T5252] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[   91.119285][ T5252] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[   91.133005][ T5252] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume.
[   91.148731][ T5206] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   91.215483][ T4645] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.464554][ T4645] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.523654][ T5206] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.558187][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   91.570955][ T4645] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.648201][ T5031] Bluetooth: hci3: command 0x0409 tx timeout
[   91.662384][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   91.680653][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.702657][ T5206] 8021q: adding VLAN 0 to HW filter on device team0
[   91.742385][ T5275] netlink: 'syz.3.299': attribute type 4 has an invalid length.
[   91.752284][ T5275] netlink: 17 bytes leftover after parsing attributes in process `syz.3.299'.
[   91.765611][ T5278] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.299'.
[   91.839934][ T4645] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.913752][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   91.923066][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   91.932072][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.939209][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.948513][    T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   91.957447][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   91.962838][    T7] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   91.974852][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   91.976802][    T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[   91.985062][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.999093][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   92.000268][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.015525][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   92.035344][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   92.118407][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   92.133568][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   92.157737][ T5286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'.
[   92.168473][    T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   92.183700][    T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   92.192244][    T7] usb 2-1: Product: syz
[   92.196428][    T7] usb 2-1: Manufacturer: syz
[   92.235905][ T5206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.253151][    T7] cdc_wdm 2-1:1.0: skipping garbage
[   92.258329][ T5206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.271510][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   92.281128][    T7] cdc_wdm 2-1:1.0: skipping garbage
[   92.299273][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   92.300505][    T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   92.314620][    T7] cdc_wdm 2-1:1.0: Unknown control protocol
[   92.315615][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   92.337936][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   92.349449][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   92.360310][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   92.369575][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   92.377965][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   92.386854][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   92.395222][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   92.893846][ T5206] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.905432][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   92.917747][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.322344][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.323195][ T5331] loop4: detected capacity change from 0 to 128
[   93.341179][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.466920][ T5331] attempt to access beyond end of device
[   93.466920][ T5331] loop4: rw=2049, want=154, limit=128
[   93.482567][ T4191] usb 2-1: USB disconnect, device number 3
[   93.492108][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.509814][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.544510][ T5334] attempt to access beyond end of device
[   93.544510][ T5334] loop4: rw=2049, want=140, limit=128
[   93.554973][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.565315][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.603802][ T5334] Buffer I/O error on dev loop4, logical block 69, lost async page write
[   93.630609][ T5331] attempt to access beyond end of device
[   93.630609][ T5331] loop4: rw=2049, want=144, limit=128
[   93.642912][ T5206] device veth0_vlan entered promiscuous mode
[   93.666117][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'.
[   93.693692][ T5206] device veth1_vlan entered promiscuous mode
[   93.718674][ T5032] Bluetooth: hci3: command 0x041b tx timeout
[   93.727428][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'.
[   93.760720][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   93.776558][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   93.788487][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.820624][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.851532][ T5206] device veth0_macvtap entered promiscuous mode
[   93.929389][ T5206] device veth1_macvtap entered promiscuous mode
[   94.051785][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.090978][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.107362][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.118315][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.148987][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.190306][ T5364] netlink: 156 bytes leftover after parsing attributes in process `syz.0.318'.
[   94.241435][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.253923][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.263475][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.273638][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.285439][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.297208][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.308613][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.325176][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.337125][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.383697][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.403481][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.430031][ T5206] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.449840][ T5206] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.459264][ T5206] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.468820][ T5206] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.567832][ T4645] device hsr_slave_0 left promiscuous mode
[   94.576741][ T4645] device hsr_slave_1 left promiscuous mode
[   94.583669][ T4645] device bridge_slave_1 left promiscuous mode
[   94.592863][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.611478][ T4645] device bridge_slave_0 left promiscuous mode
[   94.617915][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.637205][ T4645] device veth1_macvtap left promiscuous mode
[   94.644123][ T4645] device veth0_macvtap left promiscuous mode
[   94.650444][ T4645] device veth1_vlan left promiscuous mode
[   94.657022][ T4645] device veth0_vlan left promiscuous mode
[   94.816419][ T5378] loop0: detected capacity change from 0 to 32768
[   94.875925][ T5378] OCFS2: ERROR (device loop0): int ocfs2_validate_extent_block(struct super_block *, struct buffer_head *): Extent block #352 has bad signature B
[   94.898344][ T5378] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   94.909241][ T5378] OCFS2: File system is now read-only.
[   94.914892][ T5378] (syz.0.320,5378,1):__ocfs2_find_path:1845 ERROR: status = -30
[   94.926851][ T5378] (syz.0.320,5378,1):ocfs2_find_leaf:1941 ERROR: status = -30
[   94.934971][ T5378] (syz.0.320,5378,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[   94.943506][ T5378] (syz.0.320,5378,1):ocfs2_get_clusters:624 ERROR: status = -30
[   94.951295][ T5378] (syz.0.320,5378,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[   94.960158][ T5378] (syz.0.320,5378,1):ocfs2_read_virt_blocks:989 ERROR: status = -30
[   94.969369][ T5378] (syz.0.320,5378,1):ocfs2_read_dir_block:511 ERROR: status = -30
[   94.979829][ T5378] (syz.0.320,5378,1):ocfs2_init_global_system_inodes:462 ERROR: status = -30
[   94.990565][ T5378] (syz.0.320,5378,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs?
[   94.990603][ T5378] (syz.0.320,5378,1):ocfs2_init_global_system_inodes:473 ERROR: status = -30
[   95.032401][ T5378] (syz.0.320,5378,1):ocfs2_initialize_super:2281 ERROR: status = -30
[   95.051923][ T5378] (syz.0.320,5378,1):ocfs2_fill_super:1177 ERROR: status = -30
[   95.250310][ T4645] team0 (unregistering): Port device team_slave_1 removed
[   95.311364][ T4645] team0 (unregistering): Port device team_slave_0 removed
[   95.506990][ T5387] loop1: detected capacity change from 0 to 32768
[   95.553978][ T5381] netlink: 'syz.4.321': attribute type 3 has an invalid length.
[   95.589358][ T5381] netlink: 'syz.4.321': attribute type 3 has an invalid length.
[   95.619369][ T5387] XFS (loop1): Mounting V5 Filesystem
[   95.805078][ T5031] Bluetooth: hci3: command 0x040f tx timeout
[   95.979629][ T4647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.015772][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.033422][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.053810][ T4647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.107773][ T5387] XFS (loop1): Ending clean mount
[   96.143885][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   96.170382][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   96.239731][ T5387] XFS (loop1): Quotacheck needed: Please wait.
[   96.336604][ T5410] netlink: 68 bytes leftover after parsing attributes in process `syz.4.326'.
[   96.507449][ T5410] sctp: [Deprecated]: syz.4.326 (pid 5410) Use of int in maxseg socket option.
[   96.507449][ T5410] Use struct sctp_assoc_value instead
[   96.554957][ T5387] XFS (loop1): Quotacheck: Done.
[   96.878010][    C1] sched: RT throttling activated
[   97.198386][ T4791] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   97.415191][ T5405] loop0: detected capacity change from 0 to 262144
[   97.437045][ T4185] XFS (loop1): Unmounting Filesystem
[   97.444064][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'.
[   97.463426][ T5405] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.325 (5405)
[   97.466114][ T4791] usb 6-1: Using ep0 maxpacket: 8
[   97.552050][ T5405] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   97.562193][ T5405] BTRFS info (device loop0): using free space tree
[   97.569384][ T5405] BTRFS info (device loop0): has skinny extents
[   97.575672][ T5405] BTRFS info (device loop0): flagging fs with big metadata feature
[   97.648655][ T4791] usb 6-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[   97.682630][ T4791] usb 6-1: config 1 interface 0 has no altsetting 0
[   97.788465][ T4791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   97.799185][ T4791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   97.829977][ T4791] usb 6-1: SerialNumber: syz
[   97.854461][ T5405] BTRFS info (device loop0): enabling ssd optimizations
[   97.879379][ T4233] Bluetooth: hci3: command 0x0419 tx timeout
[   97.947496][   T26] audit: type=1800 audit(1774282470.354:22): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.325" name="bus" dev="loop0" ino=263 res=0 errno=0
[   98.207164][ T4791] usb 6-1: bad CDC descriptors
[   98.304155][ T4791] usb 6-1: USB disconnect, device number 2
[   98.538278][ T1325] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   98.808166][ T1325] usb 5-1: Using ep0 maxpacket: 8
[   99.098488][ T1325] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[   99.128864][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.168167][ T1325] usb 5-1: Product: syz
[   99.168293][ T5031] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   99.192748][ T1325] usb 5-1: Manufacturer: syz
[   99.198268][ T1325] usb 5-1: SerialNumber: syz
[   99.245220][ T1325] usb 5-1: config 0 descriptor??
[   99.458080][ T5031] usb 6-1: Using ep0 maxpacket: 8
[   99.528252][ T1325] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   99.618477][ T5031] usb 6-1: unable to get BOS descriptor or descriptor too short
[   99.708403][ T5031] usb 6-1: config 3 has an invalid interface number: 92 but max is 1
[   99.725698][ T5031] usb 6-1: config 3 has an invalid interface number: 120 but max is 1
[   99.766049][ T5031] usb 6-1: config 3 has an invalid interface number: 92 but max is 1
[   99.818265][ T5031] usb 6-1: config 3 has no interface number 0
[   99.828469][ T5031] usb 6-1: config 3 has no interface number 1
[   99.853468][ T5031] usb 6-1: config 3 interface 120 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0
[   99.896505][ T5031] usb 6-1: config 3 interface 92 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   99.966987][ T5031] usb 6-1: config 3 interface 92 has no altsetting 0
[   99.997214][ T5031] usb 6-1: config 3 interface 92 has no altsetting 1
[  100.043197][ T5031] usb 6-1: config 3 interface 120 has no altsetting 0
[  100.163916][ T5513] 9pnet: p9_fd_create_unix (5513): problem connecting socket: ./file0: -13
[  100.228362][ T5031] usb 6-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=16.b7
[  100.289431][ T5031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.307694][ T5515] loop0: detected capacity change from 0 to 32768
[  100.335348][ T5031] usb 6-1: Product: syz
[  100.350745][ T1325] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  100.358178][ T5031] usb 6-1: Manufacturer: syz
[  100.358202][ T5031] usb 6-1: SerialNumber: syz
[  100.379991][ T1325] usb 5-1: USB disconnect, device number 2
[  100.456635][ T5515] XFS (loop0): Mounting V5 Filesystem
[  100.595570][ T5515] XFS (loop0): Ending clean mount
[  100.679748][ T5031] usb 6-1: selecting invalid altsetting 1
[  100.685778][ T5031] sierra 6-1:3.92: Sierra USB modem converter detected
[  100.710992][ T5535] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  100.776831][ T4188] XFS (loop0): Unmounting Filesystem
[  100.838817][ T5031] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[  100.949445][ T5031] sierra 6-1:3.120: Sierra USB modem converter detected
[  100.980737][ T5031] usb 6-1: Sierra USB modem converter now attached to ttyUSB1
[  101.059555][ T5031] usb 6-1: USB disconnect, device number 3
[  101.114254][ T5031] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  101.149549][ T5031] sierra 6-1:3.92: device disconnected
[  101.203726][ T5031] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  101.265071][ T5031] sierra 6-1:3.120: device disconnected
[  101.585928][ T5559] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping
[  101.626995][ T5557] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  102.080593][ T5574] loop4: detected capacity change from 0 to 512
[  102.282602][ T5574] FAT-fs (loop4): bogus logical sector size 0
[  102.359759][ T5574] FAT-fs (loop4): Can't find a valid FAT filesystem
[  102.741404][ T5593] kvm: pic: single mode not supported
[  102.741428][ T5593] kvm: pic: level sensitive irq not supported
[  103.079556][ T5579] loop1: detected capacity change from 0 to 32768
[  103.351458][ T5579] XFS (loop1): Mounting V5 Filesystem
[  103.523224][ T5579] XFS (loop1): Ending clean mount
[  103.819809][ T5646] loop5: detected capacity change from 0 to 32768
[  103.958730][ T5646] JBD2: Ignoring recovery information on journal
[  104.063435][ T5646] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  104.186585][ T4185] XFS (loop1): Unmounting Filesystem
[  104.216573][   T26] audit: type=1800 audit(1774282476.614:23): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.371" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  104.419003][ T5206] ocfs2: Unmounting device (7,5) on (node local)
[  105.068738][ T5709] loop3: detected capacity change from 0 to 512
[  105.133604][ T5709] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  105.215253][ T5709] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback.
[  105.279630][ T5709] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.301143][ T5720] netlink: 'syz.1.390': attribute type 1 has an invalid length.
[  105.359907][ T5709] EXT4-fs (loop3): shut down requested (1)
[  105.374458][ T5720] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.403694][ T5016] udevd[5016]: incorrect ext4 checksum on /dev/loop3
[  105.468470][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.471736][ T5016] udevd[5016]: incorrect ext4 checksum on /dev/loop3
[  105.477375][ T5725] bond1: (slave bond0): making interface the new active one
[  105.515487][ T5725] bond1: (slave bond0): Enslaving as an active interface with an up link
[  105.524705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  105.633112][ T5725] syz.1.390 (5725) used greatest stack depth: 19952 bytes left
[  105.738441][ T5735] device batadv_slave_0 entered promiscuous mode
[  105.789890][ T5732] device batadv_slave_0 left promiscuous mode
[  106.830132][ T5741] loop3: detected capacity change from 0 to 32768
[  106.830295][ T5772] loop0: detected capacity change from 0 to 1024
[  106.869484][ T5750] loop4: detected capacity change from 0 to 32768
[  106.890251][ T5477] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  106.918523][ T5772] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  106.925935][ T5772] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  106.945365][ T5750] (syz.4.398,5750,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  106.988243][ T5741] XFS (loop3): Mounting V5 Filesystem
[  107.069727][ T5750] (syz.4.398,5750,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  107.091951][ T5741] XFS (loop3): Ending clean mount
[  107.099056][ T5772] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,nomblk_io_submit,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,noinit_itable,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none.
[  107.116011][ T5750] JBD2: Ignoring recovery information on journal
[  107.141662][ T5741] XFS (loop3): Quotacheck needed: Please wait.
[  107.168156][ T5477] usb 2-1: Using ep0 maxpacket: 32
[  107.259304][ T5741] XFS (loop3): Quotacheck: Done.
[  107.264882][ T5750] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  107.288409][ T5477] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  107.421638][ T4184] XFS (loop3): Unmounting Filesystem
[  107.468450][ T5477] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  107.488366][ T5477] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  107.502919][ T5477] usb 2-1: Product: syz
[  107.507550][ T5477] usb 2-1: Manufacturer: syz
[  107.513673][ T5477] usb 2-1: SerialNumber: syz
[  107.536216][ T5477] usb 2-1: config 0 descriptor??
[  107.563042][ T5765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  107.667381][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  107.845377][ T5792] loop0: detected capacity change from 0 to 1024
[  107.914878][ T5792] EXT4-fs (loop0): unsupported inode size: 8
[  107.958394][ T5792] EXT4-fs (loop0): blocksize: 1024
[  108.172956][ T5803] loop0: detected capacity change from 0 to 128
[  108.243597][   T26] audit: type=1326 audit(1774282480.644:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb3c85799 code=0x7ffc0000
[  108.335931][   T26] audit: type=1326 audit(1774282480.644:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb3c85799 code=0x7ffc0000
[  108.423166][   T26] audit: type=1326 audit(1774282480.644:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb3c85799 code=0x7ffc0000
[  108.545036][   T26] audit: type=1326 audit(1774282480.644:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bb3c85799 code=0x7ffc0000
[  108.608614][ T5816] loop5: detected capacity change from 0 to 7
[  108.635464][ T5816]  loop5:
[  108.638950][ T5816] loop5: partition table partially beyond EOD, truncated
[  108.656221][   T26] audit: type=1326 audit(1774282480.644:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb3c85799 code=0x7ffc0000
[  108.723033][   T26] audit: type=1326 audit(1774282480.644:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb3c85799 code=0x7ffc0000
[  108.788259][   T26] audit: type=1326 audit(1774282480.644:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb3c85799 code=0x7ffc0000
[  108.862813][ T5819] loop3: detected capacity change from 0 to 4096
[  108.888609][   T26] audit: type=1326 audit(1774282480.644:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4bb3c85799 code=0x7ffc0000
[  108.934491][ T5477] usb 2-1: USB disconnect, device number 4
[  108.968218][   T26] audit: type=1326 audit(1774282480.644:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb3c85799 code=0x7ffc0000
[  109.001616][ T5819] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  109.032116][ T5819] EXT4-fs (loop3): Test dummy encryption mode enabled
[  109.098499][ T5813] loop4: detected capacity change from 0 to 32768
[  109.099168][ T5819] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  109.209628][ T5813] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  109.231694][ T5819] EXT4-fs (loop3): mount failed
[  109.267253][ T5813] JBD2: Ignoring recovery information on journal
[  109.336634][ T5813] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  109.574224][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  109.738939][ T5477] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  109.988736][ T5477] usb 1-1: Using ep0 maxpacket: 8
[  110.003233][ T5848] sd 0:0:1:0: PR command failed: 2
[  110.010850][ T5848] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  110.032011][ T5848] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  110.151283][ T5856] netlink: 'syz.1.430': attribute type 39 has an invalid length.
[  110.253701][ T5833] chnl_net:caif_netlink_parms(): no params data found
[  110.291666][ T5477] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  110.311869][ T5477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.329252][ T5477] usb 1-1: Product: syz
[  110.333724][ T5477] usb 1-1: Manufacturer: syz
[  110.343916][ T5477] usb 1-1: SerialNumber: syz
[  110.370100][ T5477] usb 1-1: config 0 descriptor??
[  110.449496][ T4638] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.549023][ T4638] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.568321][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.575516][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.612314][ T5871] loop3: detected capacity change from 0 to 128
[  110.630746][ T5833] device bridge_slave_0 entered promiscuous mode
[  110.638582][ T5477] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  110.649883][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.667770][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.682469][ T5871] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  110.730421][ T5833] device bridge_slave_1 entered promiscuous mode
[  110.771993][ T4638] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.815184][ T5876] netlink: 'syz.4.437': attribute type 6 has an invalid length.
[  110.835998][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.922626][ T4638] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.957543][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.100425][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  111.125971][ T5833] team0: Port device team_slave_0 added
[  111.218483][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'.
[  111.264261][ T5833] team0: Port device team_slave_1 added
[  111.365872][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.388320][ T5477] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  111.394087][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.439312][ T5477] usb 1-1: USB disconnect, device number 3
[  111.446722][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.526656][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.549456][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.638809][ T5030] Bluetooth: hci3: command 0x0409 tx timeout
[  111.689255][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.872574][ T5833] device hsr_slave_0 entered promiscuous mode
[  111.890169][ T5833] device hsr_slave_1 entered promiscuous mode
[  112.324808][ T5833] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  112.356400][ T5833] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  112.386762][ T5833] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  112.455798][ T5833] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  112.750857][ T4638] device hsr_slave_0 left promiscuous mode
[  112.757885][ T4638] device hsr_slave_1 left promiscuous mode
[  112.785024][ T5910] loop3: detected capacity change from 0 to 40427
[  112.812184][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.837042][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.867093][ T5910] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff
[  112.868211][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.929716][ T5910] F2FS-fs (loop3): invalid crc value
[  112.943827][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.961375][ T4638] device bridge_slave_1 left promiscuous mode
[  112.962735][ T5910] F2FS-fs (loop3): Found nat_bits in checkpoint
[  112.969259][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.016149][ T4638] device bridge_slave_0 left promiscuous mode
[  113.028456][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.060722][ T5932] loop0: detected capacity change from 0 to 4096
[  113.072045][ T5910] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  113.092062][ T4638] device veth1_macvtap left promiscuous mode
[  113.106188][ T4638] device veth0_macvtap left promiscuous mode
[  113.122248][ T4638] device veth1_vlan left promiscuous mode
[  113.141856][ T4638] device veth0_vlan left promiscuous mode
[  113.262697][ T5910] attempt to access beyond end of device
[  113.262697][ T5910] loop3: rw=2049, want=45192, limit=40427
[  113.372843][ T5910] attempt to access beyond end of device
[  113.372843][ T5910] loop3: rw=34817, want=77864, limit=40427
[  113.392157][ T5910] attempt to access beyond end of device
[  113.392157][ T5910] loop3: rw=34817, want=45184, limit=40427
[  113.424368][ T5910] attempt to access beyond end of device
[  113.424368][ T5910] loop3: rw=524288, want=77864, limit=40427
[  113.437677][ T5910] attempt to access beyond end of device
[  113.437677][ T5910] loop3: rw=524288, want=45184, limit=40427
[  113.451463][ T5910] attempt to access beyond end of device
[  113.451463][ T5910] loop3: rw=0, want=77832, limit=40427
[  113.553219][ T4184] attempt to access beyond end of device
[  113.553219][ T4184] loop3: rw=2049, want=45200, limit=40427
[  113.575374][ T4188] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  113.587570][ T4188] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  113.728270][ T5032] Bluetooth: hci3: command 0x041b tx timeout
[  113.902960][ T4638] team0 (unregistering): Port device team_slave_1 removed
[  113.957256][ T4638] team0 (unregistering): Port device team_slave_0 removed
[  113.998377][ T4638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.067595][ T4638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.204797][ T4638] bond0 (unregistering): Released all slaves
[  114.267491][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.305529][ T5958] netlink: 'syz.3.456': attribute type 6 has an invalid length.
[  114.369747][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.396457][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.485535][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[  114.532214][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  114.565027][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.611737][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.618953][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.719600][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  114.769730][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.822526][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.864304][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.867534][ T5981] cgroup: Setting release_agent not allowed
[  114.871566][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.874970][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  114.904169][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.953160][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  115.022657][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  115.066975][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  115.095312][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  115.121976][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  115.146699][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  115.168551][ T4820] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  115.204229][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  115.236844][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  115.267531][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  115.278661][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  115.303237][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.408353][ T4820] usb 4-1: Using ep0 maxpacket: 8
[  115.528373][ T4820] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  115.542933][ T6012] loop1: detected capacity change from 0 to 512
[  115.564533][ T4820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  115.609368][ T4820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  115.625086][ T6012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  115.638872][ T6012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  115.650690][ T4820] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  115.700026][ T6012] EXT4-fs (loop1): 1 truncate cleaned up
[  115.705938][ T6012] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  115.706523][ T4820] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  115.727412][   T26] kauditd_printk_skb: 24 callbacks suppressed
[  115.727427][   T26] audit: type=1800 audit(1774282488.134:56): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.468" name="file1" dev="loop1" ino=15 res=0 errno=0
[  115.742316][ T4820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.808485][ T1108] Bluetooth: hci3: command 0x040f tx timeout
[  115.858262][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  115.903780][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  115.970361][   T26] audit: type=1800 audit(1774282488.164:57): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.468" name="file1" dev="loop1" ino=15 res=0 errno=0
[  115.974707][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.028266][ T4820] usb 4-1: GET_CAPABILITIES returned 0
[  116.034058][ T4820] usbtmc 4-1:16.0: can't read capabilities
[  116.267476][ T5984] udc-core: couldn't find an available UDC or it's busy
[  116.319106][ T5984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  116.358157][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  116.375657][ T5032] usb 4-1: USB disconnect, device number 2
[  116.678408][ T5030] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  116.695631][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  116.719407][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.744085][ T6044] binder: 6043:6044 ioctl c0306201 0 returned -14
[  116.758972][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  116.844324][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  116.858848][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  116.913827][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  116.958148][ T5030] usb 5-1: Using ep0 maxpacket: 16
[  116.977742][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.020831][ T5833] device veth0_vlan entered promiscuous mode
[  117.127026][ T5833] device veth1_vlan entered promiscuous mode
[  117.258430][ T5030] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  117.283631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  117.284647][ T5030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.309108][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  117.317508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  117.350645][ T5030] usb 5-1: Product: syz
[  117.365868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.369343][ T5030] usb 5-1: Manufacturer: syz
[  117.400151][ T5833] device veth0_macvtap entered promiscuous mode
[  117.408453][ T5030] usb 5-1: SerialNumber: syz
[  117.424837][ T5833] device veth1_macvtap entered promiscuous mode
[  117.519609][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.544184][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.583521][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.608235][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.635850][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.669122][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  117.685708][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.714242][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  117.751954][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.760750][ T5032] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  117.793450][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.822891][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.877728][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.923570][ T5031] Bluetooth: hci3: command 0x0419 tx timeout
[  117.935528][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.988425][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.003887][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  118.019987][ T5032] usb 1-1: Using ep0 maxpacket: 16
[  118.029408][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  118.069886][ T5833] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.074115][ T6075] loop3: detected capacity change from 0 to 2048
[  118.098208][ T5833] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.118162][ T5833] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.147689][ T5833] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.160650][ T5032] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.194104][ T5032] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00
[  118.213748][ T5032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.276103][ T5032] usb 1-1: config 0 descriptor??
[  118.364324][ T4643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.380954][ T5032] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  118.399137][ T4643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.439039][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.451665][ T5030] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[  118.480195][ T5030] usb 5-1: USB disconnect, device number 3
[  118.500291][ T6083] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.513123][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.584797][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.623477][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.650016][ T5031] usb 1-1: USB disconnect, device number 4
[  118.831338][   T26] audit: type=1800 audit(1774282491.234:58): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.477" name="file1" dev="loop3" ino=15 res=0 errno=0
[  118.904727][   T26] audit: type=1800 audit(1774282491.284:59): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.477" name="file1" dev="loop3" ino=15 res=0 errno=0
[  119.243024][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.479'.
[  119.287670][ T6096] netlink: 44 bytes leftover after parsing attributes in process `syz.6.479'.
[  119.308862][ T6098] netlink: 'syz.0.480': attribute type 10 has an invalid length.
[  119.370324][ T6098] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  119.646434][ T6114] netlink: 'syz.6.483': attribute type 1 has an invalid length.
[  119.803183][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.484'.
[  119.842448][ T6119] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.852122][ T6119] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.861319][ T6119] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.870140][ T6119] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.967696][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'.
[  120.028416][ T6101] bond0: (slave bond_slave_0): Slave does not support ipsec offload
[  120.189663][ T6140] loop3: detected capacity change from 0 to 512
[  120.268265][ T6140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  120.331359][ T6147] tipc: Started in network mode
[  120.331388][ T6147] tipc: Node identity d625b0898c34, cluster identity 4711
[  120.331600][ T6147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.358804][ T6147] syzkaller0: MTU too low for tipc bearer
[  120.361009][ T6147] tipc: Disabling bearer <eth:syzkaller0>
[  120.366606][ T6140] EXT4-fs (loop3): 1 truncate cleaned up
[  120.366632][ T6140] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  120.382080][   T26] audit: type=1804 audit(1774282492.784:60): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.488" name="/newroot/106/file0/bus" dev="loop3" ino=18 res=1 errno=0
[  120.756089][ T6167] loop0: detected capacity change from 0 to 1024
[  121.205091][    T9] hfsplus: b-tree write err: -5, ino 25
[  121.213109][    T9] hfsplus: b-tree write err: -5, ino 4
[  121.254857][    T9] hfsplus: b-tree write err: -5, ino 2
[  121.287371][    T9] hfsplus: b-tree write err: -5, ino 26
[  121.307749][    T9] hfsplus: b-tree write err: -5, ino 27
[  121.330729][    T9] hfsplus: b-tree write err: -5, ino 28
[  121.726004][ T6205] device syzkaller0 entered promiscuous mode
[  122.753432][ T6243] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  122.987098][ T6251] loop1: detected capacity change from 0 to 256
[  123.594120][ T6279] loop0: detected capacity change from 0 to 256
[  123.614578][ T6279] exfat: Deprecated parameter 'namecase'
[  123.624392][ T6281] binder: BINDER_SET_CONTEXT_MGR already set
[  123.651113][ T6281] binder: 6276:6281 ioctl 4018620d 200000004a80 returned -16
[  123.662950][ T6279] exfat: Deprecated parameter 'utf8'
[  123.769472][ T6279] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  124.100223][ T6299] netlink: 'syz.1.524': attribute type 1 has an invalid length.
[  124.646533][ T6317] raw_sendmsg: syz.3.528 forgot to set AF_INET. Fix it!
[  125.231331][ T6335] loop3: detected capacity change from 0 to 4096
[  125.885494][ T4184] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  125.901983][ T6341] chnl_net:caif_netlink_parms(): no params data found
[  125.931347][ T4184] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  126.024651][ T6364] loop6: detected capacity change from 0 to 164
[  126.050427][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.058797][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.067056][ T6341] device bridge_slave_0 entered promiscuous mode
[  126.077551][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.102044][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.138811][ T6364] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  126.160375][ T6341] device bridge_slave_1 entered promiscuous mode
[  126.225339][ T6364] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  126.300692][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.331274][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.366861][ T6341] team0: Port device team_slave_0 added
[  126.429296][ T6341] team0: Port device team_slave_1 added
[  126.471023][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.488231][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.553365][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.596691][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.618366][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.660441][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.756772][ T6341] device hsr_slave_0 entered promiscuous mode
[  126.777469][ T6341] device hsr_slave_1 entered promiscuous mode
[  126.807641][ T6341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.822175][ T6341] Cannot create hsr debugfs directory
[  127.298164][ T6410] kvm: pic: non byte write
[  127.323783][ T6341] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  127.360006][ T6341] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  127.395354][ T6341] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  127.429565][ T6341] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  127.488170][ T5032] Bluetooth: hci4: command 0x0409 tx timeout
[  127.653572][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.690414][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  127.699325][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.836456][ T6341] 8021q: adding VLAN 0 to HW filter on device team0
[  127.973220][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.011268][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.042278][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.049442][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.134059][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.165897][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.192852][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.206076][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.213232][ T4638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.280447][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.336681][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.371375][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  128.396601][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.427449][ T6443] loop1: detected capacity change from 0 to 512
[  128.462227][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  128.481297][ T6443] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  128.507631][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  128.549806][ T6443] EXT4-fs (loop1): #blocks per group too big: 268378112
[  128.563203][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.573478][ T6452] loop4: detected capacity change from 0 to 4096
[  128.593636][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.596445][ T6454] overlayfs: failed to clone lowerpath
[  128.657629][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.724122][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.737616][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.780650][ T6341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  129.181478][ T4186] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  129.203812][ T4186] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  129.262594][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.273186][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.320828][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.647670][ T5031] Bluetooth: hci4: command 0x041b tx timeout
[  130.156059][ T6504] input: syz0 as /devices/virtual/input/input8
[  130.362190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  130.363022][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  130.423432][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  130.425285][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  130.426023][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  130.426505][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  130.441151][ T6341] device veth0_vlan entered promiscuous mode
[  130.470501][ T6341] device veth1_vlan entered promiscuous mode
[  130.543701][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  130.544541][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  130.545169][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  130.545847][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  130.557618][ T6341] device veth0_macvtap entered promiscuous mode
[  130.577015][ T6341] device veth1_macvtap entered promiscuous mode
[  130.602339][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.602365][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.602376][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.602389][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.602402][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.602413][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.603820][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.603930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  130.604565][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  130.605149][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  130.605760][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.620484][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.620511][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.620522][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.620535][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.620548][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.620560][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.621917][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.630025][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  130.630786][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.645394][ T6341] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.645502][ T6341] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.645529][ T6341] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.645554][ T6341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.660062][ T6487] loop4: detected capacity change from 0 to 40427
[  130.676731][ T6487] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  130.677321][ T6487] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  130.704093][ T6487] F2FS-fs (loop4): invalid crc value
[  130.767308][ T6487] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  130.945058][ T4645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.945082][ T4645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.945364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  130.996029][ T6487] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  130.996071][ T6487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  131.041623][   T26] audit: type=1800 audit(1774282503.444:61): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.565" name="file1" dev="loop4" ino=10 res=0 errno=0
[  131.184791][ T4638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.184815][ T4638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.185710][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  131.419304][ T6543] tipc: Started in network mode
[  131.419337][ T6543] tipc: Node identity b241ca58047, cluster identity 4711
[  131.419449][ T6543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.422379][ T6543] D: renamed from syzkaller0
[  131.435787][ T6543] tipc: Disabling bearer <eth:syzkaller0>
[  131.439267][ T6547] loop1: detected capacity change from 0 to 512
[  131.543126][ T6547] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.577: inode has both inline data and extents flags
[  131.543546][ T6547] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.577: couldn't read orphan inode 15 (err -117)
[  131.543753][ T6547] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  131.732873][ T5032] Bluetooth: hci4: command 0x040f tx timeout
[  131.801324][   T26] audit: type=1800 audit(1774282504.184:62): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.565" name="file1" dev="loop4" ino=10 res=0 errno=0
[  131.845882][ T6561] loop3: detected capacity change from 0 to 512
[  131.880119][ T4186] attempt to access beyond end of device
[  131.880119][ T4186] loop4: rw=2049, want=45104, limit=40427
[  132.026441][ T6561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  132.026566][ T6561] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  132.052634][ T6561] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.580: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  132.764497][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.778472][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.019290][ T6561] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.580: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  133.564744][ T6574] loop1: detected capacity change from 0 to 40427
[  133.662471][ T6574] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  133.676708][ T6574] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  133.765938][ T6574] F2FS-fs (loop1): invalid crc value
[  133.801617][ T1108] Bluetooth: hci4: command 0x0419 tx timeout
[  133.833400][ T6574] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  133.916663][ T6574] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  134.153484][ T6574] F2FS-fs (loop1): recover fsync data on readonly fs
[  134.195433][ T6574] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[  134.225359][ T6574] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  134.691607][ T6582] loop6: detected capacity change from 0 to 40427
[  134.720203][ T6625] kvm: pic: single mode not supported
[  134.720511][ T6625] kvm: pic: single mode not supported
[  134.726058][ T6625] kvm: pic: single mode not supported
[  134.751254][ T6625] kvm: pic: single mode not supported
[  134.756721][ T6625] kvm: pic: level sensitive irq not supported
[  134.800503][ T6625] kvm: pic: level sensitive irq not supported
[  134.861919][ T6625] kvm: pic: single mode not supported
[  134.877210][ T6582] F2FS-fs (loop6): invalid crc value
[  134.888369][ T6625] kvm: pic: single mode not supported
[  134.889112][ T6625] kvm: pic: level sensitive irq not supported
[  134.922832][ T6625] kvm: pic: non byte read
[  134.986932][ T6582] F2FS-fs (loop6): Found nat_bits in checkpoint
[  135.304468][ T6582] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1
[  135.350810][ T6644] loop7: detected capacity change from 0 to 512
[  135.490026][ T6644] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.502955][ T6644] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  135.624414][ T6582] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  135.661663][ T6644] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.597: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  135.805202][ T6644] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 12: comm syz.7.597: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  135.985212][ T6644] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz.7.597: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  136.029106][ T6644] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 14: comm syz.7.597: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  136.211802][ T6644] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 15: comm syz.7.597: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  136.378248][ T6644] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz.7.597: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  136.576368][ T6644] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 17: comm syz.7.597: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  136.779784][ T6644] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #2: block 18: comm syz.7.597: lblock 23 mapped to illegal pblock 18 (length 1)
[  136.833471][ T6644] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 19: comm syz.7.597: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  136.919971][ T6670] loop6: detected capacity change from 0 to 2048
[  136.924115][ T6674] loop4: detected capacity change from 0 to 512
[  136.973745][ T6644] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 20: comm syz.7.597: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  137.034771][ T6674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  137.091093][ T6660] chnl_net:caif_netlink_parms(): no params data found
[  137.120793][ T6670] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.199520][ T6670] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.604: bg 0: block 234: padding at end of block bitmap is not set
[  137.211412][ T6674] EXT4-fs (loop4): 1 truncate cleaned up
[  137.220907][ T6670] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 828 with error 28
[  137.236216][ T6670] EXT4-fs (loop6): This should not happen!! Data will be lost
[  137.236216][ T6670] 
[  137.246573][ T6670] EXT4-fs (loop6): Total free blocks count 0
[  137.249706][ T6674] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.252923][ T6670] EXT4-fs (loop6): Free/Dirty block details
[  137.273983][ T6670] EXT4-fs (loop6): free_blocks=0
[  137.279290][ T6670] EXT4-fs (loop6): dirty_blocks=832
[  137.284642][ T6670] EXT4-fs (loop6): Block reservation details
[  137.364341][ T6670] EXT4-fs (loop6): i_reserved_data_blocks=52
[  137.435611][   T26] audit: type=1804 audit(1774282509.834:63): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.605" name="/newroot/127/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  137.434017][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.564611][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.587340][ T6660] device bridge_slave_0 entered promiscuous mode
[  137.639254][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.668115][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.717945][ T6660] device bridge_slave_1 entered promiscuous mode
[  137.786016][ T6660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.837547][ T6660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.979166][ T6660] team0: Port device team_slave_0 added
[  137.987307][ T6660] team0: Port device team_slave_1 added
[  138.146447][ T6693] loop7: detected capacity change from 0 to 128
[  138.174995][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.228090][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.388275][ T6660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.420676][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.447631][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.521570][ T6660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.608358][ T5030] Bluetooth: hci1: command 0x0409 tx timeout
[  138.827413][ T6660] device hsr_slave_0 entered promiscuous mode
[  138.856230][ T6660] device hsr_slave_1 entered promiscuous mode
[  138.885526][ T5030] libceph: connect (1)[c::]:6789 error -101
[  138.900613][ T5030] libceph: mon0 (1)[c::]:6789 connect error
[  138.934342][ T6699] ceph: No mds server is up or the cluster is laggy
[  138.948822][ T5032] libceph: connect (1)[c::]:6789 error -101
[  138.954950][ T6660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.964117][ T5032] libceph: mon0 (1)[c::]:6789 connect error
[  138.975420][ T6660] Cannot create hsr debugfs directory
[  139.328847][ T5030] libceph: connect (1)[c::]:6789 error -101
[  139.335307][ T5030] libceph: mon0 (1)[c::]:6789 connect error
[  139.745380][ T6660] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  139.879477][ T6660] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  139.898547][ T5031] libceph: connect (1)[c::]:6789 error -101
[  139.906325][ T5031] libceph: mon0 (1)[c::]:6789 connect error
[  140.110755][ T6660] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  140.144273][ T6728] loop4: detected capacity change from 0 to 8
[  140.159313][ T6660] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  140.302717][ T6728] SQUASHFS error: zlib decompression failed, data probably corrupt
[  140.358339][ T6728] SQUASHFS error: Failed to read block 0x9b: -5
[  140.429339][ T6728] SQUASHFS error: Unable to read metadata cache entry [99]
[  140.436595][ T6728] SQUASHFS error: Unable to read inode 0x127
[  140.490202][ T6660] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.562046][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  140.576183][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  140.646933][   T26] audit: type=1326 audit(1774282513.044:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4565db6799 code=0x0
[  140.678656][   T23] Bluetooth: hci1: command 0x041b tx timeout
[  140.697549][ T6660] 8021q: adding VLAN 0 to HW filter on device team0
[  140.779584][ T4638] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.781783][ T6753] loop4: detected capacity change from 0 to 2048
[  140.801101][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.810643][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.819253][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.826440][ T4647] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.834380][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  140.860213][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  140.871809][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.878971][ T4647] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.892999][ T6753] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.899236][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.913964][ T6751] tipc: Started in network mode
[  140.933222][ T6751] tipc: Node identity 56cbe0cd29b4, cluster identity 4711
[  140.948288][ T6751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.965363][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  140.975747][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.056339][ T6754] device syzkaller0 entered promiscuous mode
[  141.093381][ T4638] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.139027][ T6742] tipc: Resetting bearer <eth:syzkaller0>
[  141.220177][ T6742] tipc: Disabling bearer <eth:syzkaller0>
[  141.256299][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.270516][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.280487][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.292084][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.302222][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  141.314816][ T6767] loop4: detected capacity change from 0 to 8192
[  141.326343][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.338947][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  141.357035][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.376846][   T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  141.387468][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.422391][ T4638] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.503198][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  141.601395][ T6773] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  141.681555][ T4638] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.692446][   T23] usb 7-1: Using ep0 maxpacket: 8
[  141.848275][   T23] usb 7-1: unable to get BOS descriptor or descriptor too short
[  141.978172][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  142.019701][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  142.058109][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  142.111294][   T23] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  142.153460][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.7.630'.
[  142.162229][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  142.192471][ T4791] libceph: connect (1)[c::]:6789 error -101
[  142.198016][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[  142.206019][ T4791] libceph: mon0 (1)[c::]:6789 connect error
[  142.223883][   T23] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  142.271997][ T6791] ceph: No mds server is up or the cluster is laggy
[  142.284315][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.293655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.332506][ T6660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.418230][   T23] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  142.447776][   T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.468683][   T23] usb 7-1: Product: syz
[  142.482886][   T23] usb 7-1: Manufacturer: syz
[  142.497540][   T23] usb 7-1: SerialNumber: syz
[  142.549158][   T23] usb 7-1: config 0 descriptor??
[  142.550367][ T4791] libceph: connect (1)[c::]:6789 error -101
[  142.567737][ T4791] libceph: mon0 (1)[c::]:6789 connect error
[  142.581411][ T6765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  142.597484][ T6765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  142.759195][ T1108] Bluetooth: hci1: command 0x040f tx timeout
[  142.805722][ T6790] loop3: detected capacity change from 0 to 32768
[  143.092816][ T6790] XFS (loop3): Mounting V5 Filesystem
[  143.183064][ T4820] usb 7-1: USB disconnect, device number 2
[  143.236201][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  143.271459][ T6790] XFS (loop3): Ending clean mount
[  143.284082][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  143.346955][ T6790] XFS (loop3): Quotacheck needed: Please wait.
[  143.362440][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  143.371279][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  143.381117][ T6660] device veth0_vlan entered promiscuous mode
[  143.388790][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  143.406680][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  143.433667][ T6660] device veth1_vlan entered promiscuous mode
[  143.513875][ T6660] device veth0_macvtap entered promiscuous mode
[  143.523233][ T6790] XFS (loop3): Quotacheck: Done.
[  143.578370][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  143.591468][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  143.620324][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  143.684412][ T6660] device veth1_macvtap entered promiscuous mode
[  143.715545][   T26] audit: type=1804 audit(1774282516.114:65): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.631" name="/newroot/144/file1/bus" dev="loop3" ino=6154 res=1 errno=0
[  143.735532][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.803408][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.834888][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.836820][   T26] audit: type=1804 audit(1774282516.204:66): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.631" name="/newroot/144/file1/bus" dev="loop3" ino=6154 res=1 errno=0
[  143.896458][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.927075][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.966557][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.993499][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.065205][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.081636][ T6852] netlink: 64 bytes leftover after parsing attributes in process `syz.6.640'.
[  144.086380][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.136599][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.138266][ T4184] XFS (loop3): Unmounting Filesystem
[  144.173191][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.201053][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.226289][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.246602][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.300432][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.344878][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.405533][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.458771][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.518842][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  144.527143][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  144.601884][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  144.664372][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  144.716769][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  144.790604][ T6660] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.825845][ T6660] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.848082][ T5477] Bluetooth: hci1: command 0x0419 tx timeout
[  144.877308][ T6660] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.899442][ T6660] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.224369][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.254668][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.329095][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  145.380190][ T4638] device hsr_slave_0 left promiscuous mode
[  145.404549][ T4638] device hsr_slave_1 left promiscuous mode
[  145.501827][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.536859][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.573324][ T6872] loop4: detected capacity change from 0 to 32768
[  145.594203][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.609085][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.689830][ T4638] device bridge_slave_1 left promiscuous mode
[  145.711031][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.770341][ T6872] XFS (loop4): Mounting V5 Filesystem
[  145.772120][ T4638] device bridge_slave_0 left promiscuous mode
[  145.784079][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.894989][ T4638] device veth1_macvtap left promiscuous mode
[  145.910409][ T4638] device veth0_macvtap left promiscuous mode
[  145.916892][ T4638] device veth1_vlan left promiscuous mode
[  145.928640][ T4638] device veth0_vlan left promiscuous mode
[  145.930301][ T6872] XFS (loop4): Ending clean mount
[  145.940363][ T6901] loop7: detected capacity change from 0 to 512
[  145.989749][ T6901] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  146.036561][ T6872] XFS (loop4): Quotacheck needed: Please wait.
[  146.121676][ T6901] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,nogrpid,mblk_io_submit,,errors=continue. Quota mode: writeback.
[  146.220972][ T6901] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.240594][ T6872] XFS (loop4): Quotacheck: Done.
[  146.292574][   T26] audit: type=1800 audit(1774282518.694:67): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.645" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  146.363759][   T26] audit: type=1800 audit(1774282518.744:68): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.645" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  146.669625][ T4638] bond1 (unregistering): (slave bond0): Releasing active interface
[  146.730148][ T4638] bond1 (unregistering): Released all slaves
[  147.001982][ T4186] XFS (loop4): Unmounting Filesystem
[  147.215278][ T4638] team0 (unregistering): Port device team_slave_1 removed
[  147.286244][ T4638] team0 (unregistering): Port device team_slave_0 removed
[  147.316529][ T4638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.346232][ T4638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.690608][ T6924] loop5: detected capacity change from 0 to 7
[  147.743572][ T6924]  loop5:
[  147.746380][ T4638] bond0 (unregistering): Released all slaves
[  147.753451][ T6924] loop5: partition table partially beyond EOD, truncated
[  147.975063][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.996413][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.048660][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  148.307456][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.660'.
[  148.535584][   T26] audit: type=1326 audit(1774282520.934:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.7.662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9feeb98799 code=0x0
[  149.110982][ T6981] x_tables: duplicate underflow at hook 3
[  150.218566][ T7024] loop3: detected capacity change from 0 to 128
[  150.310236][ T7028] loop7: detected capacity change from 0 to 512
[  150.378701][ T7028] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  150.466526][ T7028] EXT4-fs (loop7): 1 truncate cleaned up
[  150.536834][ T7028] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  150.636825][   T26] audit: type=1804 audit(1774282523.034:70): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.676" name="/newroot/27/file0/bus" dev="loop7" ino=18 res=1 errno=0
[  150.728425][ T7032] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  150.759028][ T7032] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  150.773833][ T4641] attempt to access beyond end of device
[  150.773833][ T4641] loop3: rw=1, want=151, limit=128
[  150.983847][ T7047] loop3: detected capacity change from 0 to 512
[  151.066002][ T7053] fuse: Bad value for 'fd'
[  151.079335][ T7047] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  151.153454][ T7047] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,nogrpid,mblk_io_submit,,errors=continue. Quota mode: writeback.
[  151.179293][ T7047] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.267234][ T4791] libceph: connect (1)[c::]:6789 error -101
[  151.283682][ T4791] libceph: mon0 (1)[c::]:6789 connect error
[  151.458420][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  151.501515][ T7075] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  151.548517][ T4791] libceph: connect (1)[c::]:6789 error -101
[  151.556446][ T4791] libceph: mon0 (1)[c::]:6789 connect error
[  151.718301][ T1108] usb 5-1: Using ep0 maxpacket: 16
[  151.868327][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.887236][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  152.032935][ T7062] ceph: No mds server is up or the cluster is laggy
[  152.058735][ T4244] libceph: connect (1)[c::]:6789 error -101
[  152.070926][ T4244] libceph: mon0 (1)[c::]:6789 connect error
[  152.084739][ T7068] ceph: No mds server is up or the cluster is laggy
[  152.118620][ T1108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  152.138125][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.146555][ T4791] libceph: connect (1)[c::]:6789 error -101
[  152.155914][ T4791] libceph: mon0 (1)[c::]:6789 connect error
[  152.219881][ T1108] usb 5-1: Product: syz
[  152.254310][ T1108] usb 5-1: Manufacturer: syz
[  152.275783][ T1108] usb 5-1: SerialNumber: syz
[  152.366901][ T4820] libceph: connect (1)[c::]:6789 error -101
[  152.383084][ T4820] libceph: mon0 (1)[c::]:6789 connect error
[  152.678440][ T1108] usb 5-1: 0:2 : does not exist
[  152.782384][ T1108] usb 5-1: USB disconnect, device number 4
[  152.830194][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz.6.691'.
[  153.242966][ T7121] overlayfs: upper fs does not support file handles, falling back to index=off.
[  153.808682][ T7130] loop6: detected capacity change from 0 to 40427
[  153.905200][ T7130] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  153.913031][ T7130] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  153.937552][ T7130] F2FS-fs (loop6): invalid crc value
[  154.016473][ T7130] F2FS-fs (loop6): Found nat_bits in checkpoint
[  154.071606][ T7130] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  154.079168][ T7130] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  155.670625][ T7175] loop3: detected capacity change from 0 to 2048
[  155.863340][ T7175] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  155.874311][ T7111] netlink: 'syz.8.692': attribute type 5 has an invalid length.
[  157.194123][ T7214] loop7: detected capacity change from 0 to 512
[  157.392212][ T7214] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  157.448023][ T7214] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  157.520337][ T7220] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  157.526389][ T7214] EXT4-fs (loop7): group descriptors corrupted!
[  157.618291][ T7220] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  158.208116][ T1108] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  158.415370][ T7258] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.721'.
[  158.468085][ T1108] usb 8-1: Using ep0 maxpacket: 32
[  158.598260][ T1108] usb 8-1: config 0 has an invalid interface number: 188 but max is 0
[  158.606674][ T1108] usb 8-1: config 0 has no interface number 0
[  158.654396][ T1108] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  158.838514][ T1108] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  158.879367][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.905813][ T1108] usb 8-1: Product: syz
[  158.919516][ T1108] usb 8-1: Manufacturer: syz
[  158.924250][ T1108] usb 8-1: SerialNumber: syz
[  158.970729][ T1108] usb 8-1: config 0 descriptor??
[  159.007206][ T7276] loop4: detected capacity change from 0 to 64
[  159.018484][ T7238] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  159.260141][ T7238] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  159.456468][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.731'.
[  159.756844][ T7304] fuse: Bad value for 'fd'
[  159.909897][ T7307] overlayfs: failed to clone upperpath
[  160.564174][ T7327] loop6: detected capacity change from 0 to 512
[  160.631956][ T7327] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  160.702732][ T7327] EXT4-fs (loop6): 1 truncate cleaned up
[  160.735474][ T7327] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  160.864872][   T26] audit: type=1804 audit(1774282533.264:71): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.737" name="/newroot/60/file0/bus" dev="loop6" ino=18 res=1 errno=0
[  161.035610][ T7336] loop4: detected capacity change from 0 to 8192
[  161.038202][ T1108] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  161.088453][ T1108] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  161.159379][ T1108] asix: probe of 8-1:0.188 failed with error -71
[  161.180034][ T1108] usb 8-1: USB disconnect, device number 2
[  161.238588][ T7336]  loop4: p1 p2[DM] p4
[  161.258375][ T7336] loop4: p1 size 196608 extends beyond EOD, truncated
[  161.307570][ T7336] loop4: p2 start 4292936063 is beyond EOD, truncated
[  161.334713][ T7336] loop4: p4 size 50331648 extends beyond EOD, truncated
[  161.749555][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  161.759576][ T5016] udevd[5016]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  161.816144][ T7361] device macvlan2 entered promiscuous mode
[  161.871495][ T7361] device bond1 entered promiscuous mode
[  161.877802][ T7361] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  161.912573][ T7361] device bond1 left promiscuous mode
[  162.004382][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.8.744'.
[  162.053955][ T7364] netlink: 'syz.8.744': attribute type 2 has an invalid length.
[  162.768132][   T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  163.140519][   T23] usb 5-1: config 0 has no interfaces?
[  163.146373][   T23] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  163.187001][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.257859][   T23] usb 5-1: config 0 descriptor??
[  163.356888][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.365888][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.395776][ T7419] loop6: detected capacity change from 0 to 128
[  163.544003][ T7386] kvm [7383]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00
[  163.617593][ T7386] kvm [7383]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00
[  163.683430][ T7386] APIC base relocation is unsupported by KVM
[  163.814573][    T7] usb 5-1: USB disconnect, device number 5
[  164.511732][ T7398] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.550906][ T7398] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.153440][ T7434] loop3: detected capacity change from 0 to 32768
[  165.197608][ T7398] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.206954][ T7398] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.231297][ T7398] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.257819][ T7398] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.268138][   T26] audit: type=1800 audit(1774282537.674:72): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.765" name="file1" dev="loop3" ino=7 res=0 errno=0
[  165.618910][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'.
[  165.719185][ T7452] tipc: Enabled bearer <udp:syz2>, priority 10
[  166.369286][ T7476] tipc: Cannot configure node identity twice
[  166.430452][ T7482] device batadv_slave_0 entered promiscuous mode
[  166.674267][ T7454] loop7: detected capacity change from 0 to 32768
[  166.736444][ T7454] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 scanned by syz.7.770 (7454)
[  166.802154][ T5032] tipc: Node number set to 1511108745
[  166.857593][ T7454] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  166.876416][ T7502] loop2: detected capacity change from 0 to 7
[  166.883027][ T7454] BTRFS info (device loop7): using free space tree
[  166.914294][ T7454] BTRFS info (device loop7): has skinny extents
[  166.925175][ T7502]  loop2: [POWERTEC] p1 p2
[  166.943993][ T7502] loop2: p1 size 393216 extends beyond EOD, truncated
[  166.995481][ T7502] loop2: p2 start 1717991472 is beyond EOD, truncated
[  167.039720][ T7454] BTRFS info (device loop7): enabling ssd optimizations
[  167.176082][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  167.247450][   T26] audit: type=1800 audit(1774282539.644:73): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.775" name="/" dev="fuse" ino=4 res=0 errno=0
[  167.362333][   T26] audit: type=1800 audit(1774282539.754:74): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.770" name="bus" dev="loop7" ino=263 res=0 errno=0
[  167.476872][   T26] audit: type=1804 audit(1774282539.874:75): pid=7454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.770" name="/newroot/39/file0/file1" dev="loop7" ino=261 res=1 errno=0
[  168.540078][ T7570] xt_recent: Unsupported userspace flags (000000b1)
[  168.621943][ T7552] loop6: detected capacity change from 0 to 40427
[  168.664594][ T7552] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  168.674985][ T7552] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  168.711945][ T7552] F2FS-fs (loop6): invalid crc value
[  168.737272][ T7552] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  168.795685][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.803501][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.836588][ T7552] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  168.857121][ T7552] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  169.127009][ T7552] overlayfs: conflicting lowerdir path
[  169.212773][ T5833] attempt to access beyond end of device
[  169.212773][ T5833] loop6: rw=2049, want=45120, limit=40427
[  169.317768][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.355812][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.994814][ T7557] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.011128][ T7557] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.025195][ T7557] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.037946][ T7557] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.190325][ T7540] netlink: 'syz.3.790': attribute type 5 has an invalid length.
[  170.311736][   T26] audit: type=1800 audit(1774282542.714:76): pid=7583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.801" name="/" dev="fuse" ino=4 res=0 errno=0
[  170.768120][   T13] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  170.793508][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.811'.
[  170.892729][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.811'.
[  171.158606][   T13] usb 8-1: config 0 has no interfaces?
[  171.338548][   T13] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  171.358406][   T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.375399][   T13] usb 8-1: Product: syz
[  171.385406][   T13] usb 8-1: Manufacturer: syz
[  171.395799][   T13] usb 8-1: SerialNumber: syz
[  171.421692][   T13] usb 8-1: config 0 descriptor??
[  171.603628][ T7622] loop3: detected capacity change from 0 to 32768
[  171.697237][ T7622] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.815 (7622)
[  171.779221][ T7622] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  171.812960][   T13] usb 8-1: USB disconnect, device number 3
[  171.845045][ T7622] BTRFS info (device loop3): using free space tree
[  171.853469][ T7622] BTRFS info (device loop3): has skinny extents
[  172.008227][ T4797] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  172.098166][ T7622] BTRFS info (device loop3): enabling ssd optimizations
[  172.305331][   T26] audit: type=1800 audit(1774282544.704:77): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.815" name="bus" dev="loop3" ino=263 res=0 errno=0
[  172.329789][ T4797] usb 5-1: Using ep0 maxpacket: 32
[  172.463887][   T26] audit: type=1804 audit(1774282544.864:78): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.815" name="/newroot/177/file0/file1" dev="loop3" ino=261 res=1 errno=0
[  172.488455][ T4797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.529956][ T4797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.579148][ T4797] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  172.609944][ T4797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.684977][ T4797] usb 5-1: config 0 descriptor??
[  173.252475][ T4797] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  173.692106][ T4820] usb 5-1: USB disconnect, device number 6
[  173.984698][   T26] audit: type=1326 audit(1774282546.384:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.6.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b085a3799 code=0x7ffc0000
[  174.084431][   T26] audit: type=1326 audit(1774282546.424:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.6.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b085a3799 code=0x7ffc0000
[  174.196876][   T26] audit: type=1326 audit(1774282546.424:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.6.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b085a3799 code=0x7ffc0000
[  174.266266][   T26] audit: type=1326 audit(1774282546.424:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.6.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b085a3799 code=0x7ffc0000
[  174.388135][   T26] audit: type=1326 audit(1774282546.424:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.6.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0b085a3799 code=0x7ffc0000
[  174.482836][   T26] audit: type=1326 audit(1774282546.424:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.6.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b085a3799 code=0x7ffc0000
[  174.549787][   T26] audit: type=1326 audit(1774282546.424:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.6.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b085a3799 code=0x7ffc0000
[  174.585248][   T26] audit: type=1326 audit(1774282546.424:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.6.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b085a3799 code=0x7ffc0000
[  174.761088][ T7706] loop3: detected capacity change from 0 to 32768
[  174.864900][ T7747] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  174.924480][ T7706] find_entry called with index = 0
[  174.939053][ T7706] find_entry called with index = 0
[  175.475314][ T7765] device batadv_slave_0 entered promiscuous mode
[  175.560696][ T7770] loop7: detected capacity change from 0 to 128
[  175.847748][ T1108] Bluetooth: hci2: command 0x0406 tx timeout
[  176.498095][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  176.948288][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.981563][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.020922][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  177.054666][ T1108] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.094753][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.122011][ T1108] usb 4-1: config 0 descriptor??
[  177.630196][ T1108] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd
[  177.653256][ T1108] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  177.674171][ T7821] loop6: detected capacity change from 0 to 512
[  177.719604][ T5032] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  177.739568][ T1108] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  177.849705][ T7821] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  177.863995][ T7821] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  177.881389][ T7821] xt_hashlimit: max too large, truncated to 1048576
[  177.905353][ T1108] usb 4-1: USB disconnect, device number 3
[  177.995683][ T5032] usb 8-1: Using ep0 maxpacket: 32
[  178.119449][ T5032] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.158111][ T5032] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.199965][ T5032] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  178.251745][ T5032] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.307158][ T7828] fido_id[7828]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  178.339576][ T5032] usb 8-1: config 0 descriptor??
[  178.410778][ T5032] hub 8-1:0.0: USB hub found
[  178.629238][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'.
[  178.633606][ T5032] hub 8-1:0.0: 1 port detected
[  178.830693][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.8.866'.
[  178.832674][ T7850] loop6: detected capacity change from 0 to 256
[  178.915369][ T7854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  178.923432][ T7854] IPv6: NLM_F_CREATE should be set when creating new route
[  179.018856][ T7858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  179.026152][ T7858] IPv6: NLM_F_CREATE should be set when creating new route
[  179.358162][   T23] hub 8-1:0.0: activate --> -90
[  179.768274][ T5032] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  179.784713][ T5031] usb 8-1: USB disconnect, device number 4
[  180.038290][ T5032] usb 7-1: Using ep0 maxpacket: 32
[  180.106073][ T7885] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  180.122860][ T7885] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  180.188383][ T5032] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.206083][ T5032] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.369291][ T5032] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  180.383836][ T5032] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  180.397445][ T5032] usb 7-1: Product: syz
[  180.406666][ T5032] usb 7-1: Manufacturer: syz
[  180.459318][ T5032] hub 7-1:4.0: USB hub found
[  180.678313][ T5032] hub 7-1:4.0: 2 ports detected
[  180.778250][ T7924] netlink: 'syz.3.881': attribute type 10 has an invalid length.
[  180.787705][ T7924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.881'.
[  180.799906][ T7924] device team0 entered promiscuous mode
[  180.825826][ T7924] device team_slave_1 entered promiscuous mode
[  180.874444][ T7924] bridge0: port 3(team0) entered blocking state
[  180.914589][ T7924] bridge0: port 3(team0) entered disabled state
[  180.955657][ T7924] bridge0: port 3(team0) entered blocking state
[  180.962178][ T7924] bridge0: port 3(team0) entered forwarding state
[  181.173457][ T7936] loop4: detected capacity change from 0 to 64
[  181.369146][ T5031] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  181.729985][ T5032] usb 7-1: USB disconnect, device number 3
[  181.738536][ T5031] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  181.759975][ T5031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.782579][ T5031] usb 4-1: config 0 descriptor??
[  182.014154][ T7936] 
[  182.016520][ T7936] ============================================
[  182.022673][ T7936] WARNING: possible recursive locking detected
[  182.028834][ T7936] syzkaller #0 Not tainted
[  182.033251][ T7936] --------------------------------------------
[  182.039403][ T7936] syz.4.885/7936 is trying to acquire lock:
[  182.045293][ T7936] ffff88807dda00b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  182.054913][ T7936] 
[  182.054913][ T7936] but task is already holding lock:
[  182.062276][ T7936] ffff88807dda00b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  182.071793][ T7936] 
[  182.071793][ T7936] other info that might help us debug this:
[  182.079853][ T7936]  Possible unsafe locking scenario:
[  182.079853][ T7936] 
[  182.087305][ T7936]        CPU0
[  182.090583][ T7936]        ----
[  182.093875][ T7936]   lock(&tree->tree_lock#2/1);
[  182.098823][ T7936]   lock(&tree->tree_lock#2/1);
[  182.103691][ T7936] 
[  182.103691][ T7936]  *** DEADLOCK ***
[  182.103691][ T7936] 
[  182.111836][ T7936]  May be due to missing lock nesting notation
[  182.111836][ T7936] 
[  182.120167][ T7936] 6 locks held by syz.4.885/7936:
[  182.125196][ T7936]  #0: ffff888079b054f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370
[  182.134618][ T7936]  #1: ffff88807c40a460 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x295/0xd60
[  182.143697][ T7936]  #2: ffff88805c321628 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: generic_file_write_iter+0x7e/0x1b0
[  182.155028][ T7936]  #3: ffff88805c321478 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0
[  182.165754][ T7936]  #4: ffff88807dda00b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  182.176062][ T7936]  #5: ffff88805c3200f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0
[  182.187314][ T7936] 
[  182.187314][ T7936] stack backtrace:
[  182.193226][ T7936] CPU: 0 PID: 7936 Comm: syz.4.885 Not tainted syzkaller #0
[  182.200520][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  182.210686][ T7936] Call Trace:
[  182.213984][ T7936]  <TASK>
[  182.216926][ T7936]  dump_stack_lvl+0x188/0x250
[  182.222268][ T7936]  ? show_regs_print_info+0x20/0x20
[  182.227499][ T7936]  ? load_image+0x400/0x400
[  182.232021][ T7936]  __lock_acquire+0x1236/0x7d10
[  182.236907][ T7936]  ? mark_lock+0x94/0x320
[  182.241641][ T7936]  ? verify_lock_unused+0x140/0x140
[  182.246943][ T7936]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  182.252952][ T7936]  ? lock_chain_count+0x20/0x20
[  182.257829][ T7936]  ? __rwlock_init+0x140/0x140
[  182.262708][ T7936]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  182.268614][ T7936]  ? lockdep_hardirqs_on+0x94/0x140
[  182.273845][ T7936]  lock_acquire+0x19e/0x400
[  182.278510][ T7936]  ? hfs_find_init+0x15b/0x1d0
[  182.283379][ T7936]  ? __might_sleep+0xf0/0xf0
[  182.287977][ T7936]  ? read_lock_is_recursive+0x10/0x10
[  182.293373][ T7936]  ? __kasan_kmalloc+0xcc/0xf0
[  182.298150][ T7936]  ? __kasan_kmalloc+0xb5/0xf0
[  182.303020][ T7936]  ? hfs_find_init+0x84/0x1d0
[  182.307798][ T7936]  ? hfs_bmap_reserve+0x103/0x420
[  182.312931][ T7936]  ? __hfs_ext_write_extent+0x1fa/0x470
[  182.318629][ T7936]  ? __hfs_ext_cache_extent+0x6b/0x9b0
[  182.324199][ T7936]  ? hfs_get_block+0x40f/0xc50
[  182.328983][ T7936]  ? hfs_find_init+0x15b/0x1d0
[  182.333755][ T7936]  __mutex_lock_common+0x1e3/0x2400
[  182.338967][ T7936]  ? hfs_find_init+0x15b/0x1d0
[  182.343755][ T7936]  ? mutex_lock_io_nested+0x60/0x60
[  182.348976][ T7936]  mutex_lock_nested+0x17/0x20
[  182.353850][ T7936]  hfs_find_init+0x15b/0x1d0
[  182.358466][ T7936]  hfs_extend_file+0x35d/0x13f0
[  182.363333][ T7936]  ? hfs_bnode_read+0x48d/0x920
[  182.368373][ T7936]  ? hfs_ext_keycmp+0x1c3/0x310
[  182.373237][ T7936]  ? hfs_get_block+0xc50/0xc50
[  182.378013][ T7936]  ? hfs_rename+0x320/0x320
[  182.382613][ T7936]  ? hfs_find_exit+0xa0/0xa0
[  182.387219][ T7936]  ? hfs_brec_find+0x3c9/0x500
[  182.392089][ T7936]  hfs_bmap_reserve+0x103/0x420
[  182.396961][ T7936]  __hfs_ext_write_extent+0x1fa/0x470
[  182.402371][ T7936]  __hfs_ext_cache_extent+0x6b/0x9b0
[  182.407687][ T7936]  ? mutex_lock_nested+0x17/0x20
[  182.412650][ T7936]  ? hfs_find_init+0x15b/0x1d0
[  182.417434][ T7936]  hfs_extend_file+0x39c/0x13f0
[  182.422323][ T7936]  ? hfs_get_block+0xc50/0xc50
[  182.427194][ T7936]  ? hfs_get_block+0x985/0xc50
[  182.431978][ T7936]  ? pagevec_lookup_range+0x30/0x70
[  182.437280][ T7936]  ? clean_bdev_aliases+0x762/0x8a0
[  182.442845][ T7936]  hfs_get_block+0x40f/0xc50
[  182.447460][ T7936]  ? hfs_free_extents+0x430/0x430
[  182.452513][ T7936]  ? do_raw_spin_unlock+0x11d/0x230
[  182.457728][ T7936]  ? create_page_buffers+0x238/0x320
[  182.463038][ T7936]  __block_write_begin_int+0x565/0x15d0
[  182.468692][ T7936]  ? hfs_free_extents+0x430/0x430
[  182.473738][ T7936]  ? page_zero_new_buffers+0x490/0x490
[  182.479229][ T7936]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  182.485224][ T7936]  ? lock_chain_count+0x20/0x20
[  182.490094][ T7936]  ? do_user_addr_fault+0x694/0xc80
[  182.495309][ T7936]  ? wait_for_stable_page+0xd9/0x110
[  182.500615][ T7936]  cont_write_begin+0x598/0x7b0
[  182.505478][ T7936]  ? lockdep_hardirqs_on+0x94/0x140
[  182.510693][ T7936]  ? generic_cont_expand_simple+0x1a0/0x1a0
[  182.516602][ T7936]  ? __get_user_nocheck_1+0x6/0x10
[  182.521730][ T7936]  hfs_write_begin+0x92/0xe0
[  182.526334][ T7936]  ? hfs_free_extents+0x430/0x430
[  182.531371][ T7936]  generic_perform_write+0x2b6/0x550
[  182.536679][ T7936]  ? atime_needs_update+0x780/0x780
[  182.541901][ T7936]  ? grab_cache_page_write_begin+0xa0/0xa0
[  182.547727][ T7936]  ? file_remove_privs+0x5d0/0x5d0
[  182.552893][ T7936]  ? rwsem_write_trylock+0x135/0x1c0
[  182.558196][ T7936]  ? clear_nonspinnable+0x60/0x60
[  182.563278][ T7936]  __generic_file_write_iter+0x25f/0x4e0
[  182.568933][ T7936]  generic_file_write_iter+0xa6/0x1b0
[  182.574323][ T7936]  vfs_write+0x745/0xd60
[  182.578584][ T7936]  ? file_end_write+0x250/0x250
[  182.583450][ T7936]  ? __fget_files+0x40f/0x480
[  182.588168][ T7936]  ? mutex_lock_nested+0x17/0x20
[  182.593127][ T7936]  ? __fdget_pos+0x2bf/0x370
[  182.597740][ T7936]  ? ksys_write+0x71/0x260
[  182.602180][ T7936]  ksys_write+0x152/0x260
[  182.606530][ T7936]  ? __ia32_sys_read+0x80/0x80
[  182.611321][ T7936]  ? lockdep_hardirqs_on+0x94/0x140
[  182.616536][ T7936]  do_syscall_64+0x4c/0xa0
[  182.620966][ T7936]  ? clear_bhb_loop+0x30/0x80
[  182.625656][ T7936]  ? clear_bhb_loop+0x30/0x80
[  182.630354][ T7936]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  182.636271][ T7936] RIP: 0033:0x7f4565db6799
[  182.640760][ T7936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.660577][ T7936] RSP: 002b:00007f4564010028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  182.669012][ T7936] RAX: ffffffffffffffda RBX: 00007f456602ffa0 RCX: 00007f4565db6799
[  182.676997][ T7936] RDX: 00000000ffffff20 RSI: 00002000000000c0 RDI: 0000000000000004
[  182.684996][ T7936] RBP: 00007f4565e4cc99 R08: 0000000000000000 R09: 0000000000000000
[  182.693075][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.701060][ T7936] R13: 00007f4566030038 R14: 00007f456602ffa0 R15: 00007ffd67327e08
[  182.709059][ T7936]  </TASK>
[  183.578218][ T5031] usb 4-1: Cannot set autoneg
[  183.582989][ T5031] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71
[  183.596757][ T5031] usb 4-1: USB disconnect, device number 4
[  186.278942][  T145] attempt to access beyond end of device
[  186.278942][  T145] loop4: rw=1048577, want=66, limit=64
[  186.291861][  T145] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  186.300736][  T145] attempt to access beyond end of device
[  186.300736][  T145] loop4: rw=1048577, want=67, limit=64
[  186.311924][  T145] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  186.321021][  T145] attempt to access beyond end of device
[  186.321021][  T145] loop4: rw=1048577, want=68, limit=64
[  186.332074][  T145] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  186.340610][  T145] attempt to access beyond end of device
[  186.340610][  T145] loop4: rw=1048577, want=69, limit=64
[  186.351686][  T145] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  186.360383][  T145] attempt to access beyond end of device
[  186.360383][  T145] loop4: rw=1048577, want=73, limit=64
[  186.371444][  T145] Buffer I/O error on dev loop4, logical block 72, lost async page write
[  186.381844][  T145] attempt to access beyond end of device
[  186.381844][  T145] loop4: rw=1048577, want=74, limit=64
[  186.392876][  T145] Buffer I/O error on dev loop4, logical block 73, lost async page write
[  186.401406][  T145] attempt to access beyond end of device
[  186.401406][  T145] loop4: rw=1048577, want=77, limit=64
[  186.412409][  T145] Buffer I/O error on dev loop4, logical block 76, lost async page write
[  186.420932][  T145] attempt to access beyond end of device
[  186.420932][  T145] loop4: rw=1048577, want=78, limit=64
[  186.432658][  T145] Buffer I/O error on dev loop4, logical block 77, lost async page write
[  186.444825][  T145] attempt to access beyond end of device
[  186.444825][  T145] loop4: rw=1048577, want=278, limit=64
[  186.456062][  T145] attempt to access beyond end of device
[  186.456062][  T145] loop4: rw=1048577, want=279, limit=64
[  186.467187][  T145] Buffer I/O error on dev loop4, logical block 278, lost async page write
[  186.475800][  T145] Buffer I/O error on dev loop4, logical block 279, lost async page write