last executing test programs:

2m34.960397422s ago: executing program 3 (id=787):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x81)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x20, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000006340)={0x2020}, 0x2058)
read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r5, {0x0, 0x0, 0x80003ff}}, 0x20)
getdents64(r4, 0x0, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x209200, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_gettime(r6, &(0x7f0000000280))

2m34.481149901s ago: executing program 3 (id=788):
unshare(0x60600)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4)

2m34.30009613s ago: executing program 3 (id=790):
r0 = syz_open_procfs(0x0, 0x0)
r1 = fanotify_init(0x8, 0x2)
fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0)
io_setup(0x5ff, &(0x7f0000000040)=<r2=>0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x100000001}])

2m34.116665909s ago: executing program 3 (id=795):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)

2m33.959527319s ago: executing program 3 (id=796):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x34, r1, 0x1, 0xffffffff, 0x25dfdc02, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020004)

2m33.446524777s ago: executing program 3 (id=803):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00')
preadv(r3, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0x162, 0xb)
inotify_init1(0x0)

2m33.224654806s ago: executing program 32 (id=803):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00')
preadv(r3, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0x162, 0xb)
inotify_init1(0x0)

1m56.20214216s ago: executing program 4 (id=1019):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000400)={0x1d, r3, 0x2}, 0x18)
sendmmsg(r1, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ac0)="4eb3263f43782521", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000000)

1m55.252536376s ago: executing program 4 (id=1032):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xeb, 0x1}}]}, 0x2c}}, 0x0)

1m55.160445586s ago: executing program 4 (id=1035):
syz_clone(0x22384500, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee00)
setpriority(0x1, 0x0, 0xff)

1m53.183091718s ago: executing program 4 (id=1057):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

1m52.630559776s ago: executing program 4 (id=1061):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/50, 0x32}], 0x3}, 0x12)

1m51.656397183s ago: executing program 4 (id=1073):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x2000140d)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x9)

1m51.459601712s ago: executing program 33 (id=1073):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x2000140d)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x9)

3.598455844s ago: executing program 5 (id=1767):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r0, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='{'}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x170c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x240008d4)

3.516052363s ago: executing program 6 (id=1769):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000280)={0xffffffffffffffff, 0x1}, 0x0)

3.503938993s ago: executing program 6 (id=1770):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3.449235143s ago: executing program 5 (id=1773):
r0 = socket(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000300), 0x10)
connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10)
recvmmsg$unix(r0, &(0x7f0000000100)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3ffffffffffffd2, 0x0, 0x0)
connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2710, @hyper}, 0x10)

3.350555653s ago: executing program 2 (id=1775):
r0 = openat(0xffffffffffffff9c, 0x0, 0x600100, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, 0xfffffffffffffffe, 0x29)
recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

3.331316803s ago: executing program 6 (id=1777):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001b40)=ANY=[@ANYBLOB="02c9200c0008000200"], 0x11)

3.231961362s ago: executing program 5 (id=1779):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

3.195922892s ago: executing program 0 (id=1780):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004000000080000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x2000, 0x2, @local, 0x4}, 0x1c)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

3.069797891s ago: executing program 2 (id=1782):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x4, 0x0, 0x0, {{{@in6=@loopback, @in6=@mcast1}, {@in=@broadcast}, @in=@dev={0xac, 0x14, 0x14, 0x12}, {}, {0x0, 0x48a9, 0x0, 0x1000000000001}}, 0x0, 0x81}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28101, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb92f"], 0xfdef)

760.905753ms ago: executing program 0 (id=1783):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x0)

757.998193ms ago: executing program 5 (id=1784):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800)
recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x8}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/107, 0x65}, {0x0, 0x35}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/255, 0xfb}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000480)=""/78, 0xfffffffffffffefa}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f0000000940)=""/245, 0xf5}], 0x7}, 0xee8a}], 0x4, 0x40000002, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000880), 0x28802, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0xfdffffffd, 0x6930, 0x4, 0x80000003})

710.133463ms ago: executing program 0 (id=1785):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r0, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='{'}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x170c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x240008d4)

695.310803ms ago: executing program 2 (id=1786):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10)
syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0)

688.628693ms ago: executing program 1 (id=1787):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x2000000, 0x0, {{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0xe6}}, 0x0, 0x1a0b1}}, 0xf8}}, 0x20000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000"], 0x120}}, 0x0)

547.819372ms ago: executing program 2 (id=1788):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x300, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}]}, 0x2c}}, 0x0)

507.085342ms ago: executing program 0 (id=1789):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, 0x0)
syz_emit_vhci(&(0x7f00000048c0)=ANY=[@ANYBLOB="043e0b06c9000800"], 0xe)

506.717082ms ago: executing program 1 (id=1790):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

506.030192ms ago: executing program 6 (id=1791):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x590}}], 0x1, 0x28048825)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

360.023291ms ago: executing program 0 (id=1792):
r0 = openat(0xffffffffffffff9c, 0x0, 0x600100, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, 0xfffffffffffffffe, 0x29)
recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

359.828892ms ago: executing program 2 (id=1793):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = memfd_create(&(0x7f00000000c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05x\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4;\xe9u\x11\xb2(\x90\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xa8C\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4', 0x0)
ftruncate(r1, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2000005, 0x12, r1, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000030e000/0x1000)=nil, 0x1000}})
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)

359.040771ms ago: executing program 1 (id=1794):
move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

244.022631ms ago: executing program 1 (id=1795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x0)

238.274381ms ago: executing program 6 (id=1796):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x4, 0x0, 0x0, {{{@in6=@loopback, @in6=@mcast1}, {@in=@broadcast}, @in=@dev={0xac, 0x14, 0x14, 0x12}, {}, {0x0, 0x48a9, 0x0, 0x1000000000001}}, 0x0, 0x81}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28101, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb92f"], 0xfdef)

234.517951ms ago: executing program 5 (id=1797):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180))

165.810241ms ago: executing program 1 (id=1798):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10)
syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0)

102.59808ms ago: executing program 2 (id=1799):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090800000000fddbdf25021f00cb", @ANYRES32=r2, @ANYBLOB="08000100ac14144108000200ff"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)

101.379831ms ago: executing program 0 (id=1800):
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = openat$vnet(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
connect$inet6(r0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f0000002500)={0xa, 0xfffd, 0x92, @loopback, 0x2}, 0x1c)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0)

54.23735ms ago: executing program 1 (id=1801):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x2000000, 0x0, {{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0xe6}}, 0x0, 0x1a0b1}}, 0xf8}}, 0x20000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028"], 0x120}}, 0x0)

943.851µs ago: executing program 5 (id=1802):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x300, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}]}, 0x2c}}, 0x0)

0s ago: executing program 6 (id=1803):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0)
syz_emit_vhci(&(0x7f00000048c0)=ANY=[@ANYBLOB="043e0b06c9000800"], 0xe)

kernel console output (not intermixed with test programs):

[  117.806677][ T6088] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  117.824459][ T6088] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  117.947521][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  117.983481][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.995336][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.201703][ T6112] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  118.208603][ T6113] loop2: detected capacity change from 0 to 256
[  118.221616][ T6113] exfat: Deprecated parameter 'utf8'
[  118.222802][ T6113] exfat: Deprecated parameter 'namecase'
[  118.224057][ T6113] exfat: Deprecated parameter 'utf8'
[  118.241592][ T6113] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  118.277114][ T6113] exFAT-fs (loop2): hint_cluster is invalid (1)
[  118.288660][ T6113] syz.2.526: attempt to access beyond end of device
[  118.288660][ T6113] loop2: rw=2049, sector=34359738488, nr_sectors = 8 limit=256
[  118.372595][ T6121] device sit1 entered promiscuous mode
[  118.458056][ T6128] loop2: detected capacity change from 0 to 164
[  118.526078][ T6131] loop1: detected capacity change from 0 to 2048
[  118.534338][ T6131] EXT4-fs: Ignoring removed mblk_io_submit option
[  118.536935][ T6131] EXT4-fs: Ignoring removed bh option
[  118.664160][ T6131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  119.178773][ T6131] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  119.182105][ T6131] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  120.130406][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  120.343504][ T6151] netlink: 88 bytes leftover after parsing attributes in process `syz.1.539'.
[  120.349623][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'.
[  120.351042][ T4294] EXT4-fs (loop3): unmounting filesystem.
[  120.353371][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'.
[  120.357643][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'.
[  120.438953][ T6154] loop2: detected capacity change from 0 to 256
[  120.469888][ T6150] loop4: detected capacity change from 0 to 4096
[  120.480756][ T6154] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  120.487918][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.489823][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.504062][ T6150] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  120.532471][ T6150] overlayfs: missing 'workdir'
[  120.575730][ T4307] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22.
[  120.579795][ T4307] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  120.584002][ T4307] ntfs3: loop4: ntfs_set_state r=3 failed, -22.
[  120.759237][ T6169] loop3: detected capacity change from 0 to 512
[  122.508291][ T6169] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  122.510741][ T6169] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  122.512589][ T6169] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.544: Failed to acquire dquot type 0
[  122.570697][ T6176] loop4: detected capacity change from 0 to 2048
[  122.603220][ T6169] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  122.605707][ T6169] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  122.607722][ T6169] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.544: Failed to acquire dquot type 0
[  122.633044][ T6169] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  122.635491][ T6169] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  122.637745][ T6169] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.544: Failed to acquire dquot type 0
[  122.645429][ T6169] EXT4-fs (loop3): 1 orphan inode deleted
[  122.646766][ T6169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  122.694209][ T6169] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  122.696670][ T6169] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  122.939186][ T6176] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18881, location=18881
[  123.251874][ T6184] loop1: detected capacity change from 0 to 2048
[  123.274292][ T6184] EXT4-fs: Ignoring removed mblk_io_submit option
[  123.280866][ T6184] EXT4-fs: Ignoring removed bh option
[  123.339455][ T6184] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  123.350884][ T6184] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  123.352724][ T6184] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  123.396335][ T4294] EXT4-fs (loop3): unmounting filesystem.
[  123.623504][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  124.543255][ T6215] loop2: detected capacity change from 0 to 8
[  124.564532][ T6213] loop0: detected capacity change from 0 to 256
[  124.613740][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.625002][ T6207] loop1: detected capacity change from 0 to 4096
[  124.630858][ T6207] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  124.635082][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.685599][ T6207] overlayfs: missing 'workdir'
[  124.720478][ T6222] loop0: detected capacity change from 0 to 2048
[  124.735305][ T6222] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18881, location=18881
[  124.738978][ T4297] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22.
[  124.740322][ T4297] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  124.741769][ T4297] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[  124.762732][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.770380][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.895880][ T6231] loop0: detected capacity change from 0 to 2048
[  124.897855][ T6231] EXT4-fs: Ignoring removed mblk_io_submit option
[  124.899164][ T6231] EXT4-fs: Ignoring removed bh option
[  124.941910][ T6231] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  124.974946][ T6231] overlayfs: missing 'workdir'
[  125.046610][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  125.132230][ T6239] input: syz0 as /devices/virtual/input/input2
[  125.145039][ T6239] input: failed to attach handler leds to device input2, error: -6
[  125.403625][ T6250] binder: 6247:6250 tried to acquire reference to desc 0, got 1 instead
[  125.414269][ T4342] binder: undelivered TRANSACTION_COMPLETE
[  125.449284][ T4342] binder: undelivered transaction 5, process died.
[  125.514570][ T6220] loop3: detected capacity change from 0 to 65536
[  125.558929][ T6254] loop1: detected capacity change from 0 to 2048
[  125.571344][ T6254] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881
[  125.599990][ T6220] XFS (loop3): Mounting V5 Filesystem
[  125.636833][ T4517] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  125.645559][ T6264] loop2: detected capacity change from 0 to 2048
[  125.647250][ T6264] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.648722][ T6264] EXT4-fs: Ignoring removed bh option
[  125.679879][ T6220] XFS (loop3): Ending clean mount
[  125.686109][ T6220] XFS (loop3): Quotacheck needed: Please wait.
[  125.706303][ T6264] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  125.719963][ T6220] XFS (loop3): Quotacheck: Done.
[  125.720384][   T24] kernel write not supported for file /snd/seq (pid: 24 comm: kworker/1:1)
[  125.728804][ T6264] overlayfs: missing 'workdir'
[  125.791548][ T4296] EXT4-fs (loop2): unmounting filesystem.
[  125.843903][ T4517] usb 1-1: Using ep0 maxpacket: 8
[  125.854206][ T4517] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  125.854266][ T4294] XFS (loop3): Unmounting Filesystem
[  125.874307][ T4517] usb 1-1: config 179 has no interface number 0
[  125.876487][ T4517] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  125.878889][ T4517] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  125.881409][ T4517] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  125.898663][ T4517] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  125.901051][ T4517] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  125.920584][ T4517] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  125.923033][ T4517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.935548][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  125.936943][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  125.964233][ T6249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  125.977640][ T6285] af_packet: tpacket_rcv: packet too big, clamped from 3953 to 3952. macoff=96
[  126.144220][ T6295] loop4: detected capacity change from 0 to 128
[  126.162255][ T6295] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  126.189254][ T4517] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input3
[  126.225100][ T6295] syz.4.590: attempt to access beyond end of device
[  126.225100][ T6295] loop4: rw=2051, sector=104, nr_sectors = 937 limit=128
[  126.392285][ T4517] usb 1-1: USB disconnect, device number 2
[  126.395663][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  126.404721][ T4517] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  126.447430][ T6303] loop4: detected capacity change from 0 to 2048
[  126.449126][ T6303] EXT4-fs: Ignoring removed mblk_io_submit option
[  126.452595][ T6303] EXT4-fs: Ignoring removed bh option
[  126.523145][ T6303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  126.536489][ T6303] overlayfs: missing 'workdir'
[  126.597580][ T6312] loop3: detected capacity change from 0 to 1764
[  126.633874][ T6060] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  126.656393][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  126.809626][ T6317] device syzkaller0 entered promiscuous mode
[  127.159917][ T6301] loop2: detected capacity change from 0 to 65536
[  127.219281][ T6301] XFS (loop2): Mounting V5 Filesystem
[  127.246526][ T6301] XFS (loop2): Ending clean mount
[  127.249251][ T6301] XFS (loop2): Quotacheck needed: Please wait.
[  127.269954][ T6301] XFS (loop2): Quotacheck: Done.
[  127.314658][ T6301] overlayfs: failed to resolve './file4': -2
[  127.325329][ T6342] loop3: detected capacity change from 0 to 2048
[  127.334717][ T6342] EXT4-fs: Ignoring removed mblk_io_submit option
[  127.336356][ T6342] EXT4-fs: Ignoring removed bh option
[  127.364282][ T6342] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  127.374730][ T4296] XFS (loop2): Unmounting Filesystem
[  127.414685][ T4294] EXT4-fs (loop3): unmounting filesystem.
[  139.039407][ T6372] usb usb4: usbfs: process 6372 (syz.1.616) did not claim interface 0 before use
[  139.189539][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.618'.
[  139.277802][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'.
[  139.294627][ T6380] loop0: detected capacity change from 0 to 4096
[  139.317535][ T6380] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  140.233775][ T4295] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22.
[  140.235206][ T4295] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  140.236654][ T4295] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[  140.503048][ T6407] loop3: detected capacity change from 0 to 256
[  140.709920][ T6419] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  140.781531][ T6420] loop3: detected capacity change from 0 to 4096
[  140.794019][ T6420] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  140.926293][ T4294] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22.
[  140.928057][ T4294] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  140.929453][ T4294] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  140.986378][ T6374] loop1: detected capacity change from 0 to 65536
[  141.027176][ T6374] XFS (loop1): Mounting V5 Filesystem
[  141.033172][ T6438] loop3: detected capacity change from 0 to 64
[  141.073473][ T6438] overlayfs: unrecognized mount option "/" or missing value
[  141.079280][ T6374] XFS (loop1): Ending clean mount
[  141.082545][ T6374] XFS (loop1): Quotacheck needed: Please wait.
[  141.127861][ T6374] XFS (loop1): Quotacheck: Done.
[  141.154187][ T6374] overlayfs: failed to resolve './file4': -2
[  141.248231][ T4297] XFS (loop1): Unmounting Filesystem
[  141.303163][ T6452] loop0: detected capacity change from 0 to 2048
[  141.305283][ T6452] EXT4-fs: Ignoring removed mblk_io_submit option
[  141.306536][ T6452] EXT4-fs: Ignoring removed bh option
[  141.355848][ T6452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  141.418229][ T6460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.420628][ T6460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.493195][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  141.610987][ T6474] loop0: detected capacity change from 0 to 64
[  141.631013][ T6474] overlayfs: unrecognized mount option "/" or missing value
[  141.834196][ T6485] binder: Bad value for 'stats'
[  142.005813][ T6493] loop2: detected capacity change from 0 to 512
[  142.043583][ T6493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  142.139268][ T4296] EXT4-fs (loop2): unmounting filesystem.
[  142.303252][ T6508] loop2: detected capacity change from 0 to 64
[  142.327013][ T6506] device wg2 entered promiscuous mode
[  142.372492][ T4296] Trying to free block not in datazone
[  142.463142][ T6510] loop3: detected capacity change from 0 to 1024
[  142.590913][ T6518] netlink: 'syz.4.677': attribute type 16 has an invalid length.
[  142.592363][ T6518] netlink: 'syz.4.677': attribute type 17 has an invalid length.
[  142.610643][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.612271][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.618079][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.619740][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.621030][ T6517] loop2: detected capacity change from 0 to 256
[  142.655572][ T6517] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  142.686103][ T6480] loop0: detected capacity change from 0 to 65536
[  142.745893][ T6523] loop1: detected capacity change from 0 to 1024
[  142.775545][ T6523] EXT4-fs (loop1): Test dummy encryption mode enabled
[  142.783152][ T6480] XFS (loop0): Mounting V5 Filesystem
[  142.788862][ T6523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  142.868268][ T6523] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[  142.889804][ T6537] loop3: detected capacity change from 0 to 64
[  142.900061][ T6480] XFS (loop0): Ending clean mount
[  142.903043][ T6480] XFS (loop0): Quotacheck needed: Please wait.
[  142.969564][ T6480] XFS (loop0): Quotacheck: Done.
[  142.995823][ T6480] overlayfs: failed to resolve './file4': -2
[  143.001077][ T4294] Trying to free block not in datazone
[  143.052401][ T4295] XFS (loop0): Unmounting Filesystem
[  143.079531][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  143.343767][ T6561] 9pnet_fd: Insufficient options for proto=fd
[  143.447741][ T6565] loop1: detected capacity change from 0 to 64
[  143.484305][ T6567] loop2: detected capacity change from 0 to 512
[  143.759369][ T6567] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  143.761664][ T6567] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  143.763694][ T6567] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.691: Failed to acquire dquot type 0
[  143.771868][ T6567] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  143.774109][ T6567] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  143.776203][ T6567] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.691: Failed to acquire dquot type 0
[  143.785195][ T6567] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  143.787430][ T6567] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  143.789406][ T6567] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.691: Failed to acquire dquot type 0
[  143.795935][ T6567] EXT4-fs (loop2): 1 orphan inode deleted
[  143.797351][ T6567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  144.350218][ T4297] Trying to free block not in datazone
[  144.557930][ T6582] loop4: detected capacity change from 0 to 512
[  144.602527][ T6582] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  144.638916][ T6582] EXT4-fs (loop4): invalid journal inode
[  144.640216][ T6582] EXT4-fs (loop4): can't get journal size
[  144.650135][ T6582] EXT4-fs (loop4): 1 truncate cleaned up
[  144.651313][ T6582] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  144.734570][ T6585] capability: warning: `syz.3.702' uses deprecated v2 capabilities in a way that may be insecure
[  145.346953][ T6594] device syzkaller0 entered promiscuous mode
[  145.537658][ T4296] EXT4-fs (loop2): unmounting filesystem.
[  145.749221][ T6602] printk: syz.2.709 (6602): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[  145.772002][ T6603] 9pnet_fd: Insufficient options for proto=fd
[  145.978577][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.996059][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.221210][ T6578] loop1: detected capacity change from 0 to 65536
[  146.312087][ T6578] XFS (loop1): Mounting V5 Filesystem
[  146.387990][ T6578] XFS (loop1): Ending clean mount
[  146.390891][ T6578] XFS (loop1): Quotacheck needed: Please wait.
[  146.425046][ T6578] XFS (loop1): Quotacheck: Done.
[  146.534500][ T6634] loop0: detected capacity change from 0 to 512
[  146.701695][ T6634] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  146.704197][ T6634] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  146.706282][ T6634] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.717: Failed to acquire dquot type 0
[  146.729678][ T6634] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  146.731871][ T6634] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  146.733929][ T6634] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.717: Failed to acquire dquot type 0
[  146.743674][ T6634] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.717: Failed to acquire dquot type 0
[  146.750225][ T6634] EXT4-fs (loop0): 1 orphan inode deleted
[  146.751489][ T6634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  147.379391][ T4297] XFS (loop1): Unmounting Filesystem
[  147.420694][ T6642] device syzkaller0 entered promiscuous mode
[  147.599072][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  148.334874][ T6664] 9pnet_fd: Insufficient options for proto=fd
[  148.596905][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  148.912413][ T6689] device syzkaller0 entered promiscuous mode
[  149.544867][ T4517] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  149.724940][ T4517] usb 1-1: Using ep0 maxpacket: 16
[  149.728596][ T4517] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  149.730521][ T4517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.745861][ T4517] usb 1-1: config 0 descriptor??
[  149.773674][ T4517] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  149.852967][ T6774] 9pnet_fd: Insufficient options for proto=fd
[  149.954711][ T4517] usb 1-1: Detected FT232B
[  150.108684][ T6670] loop4: detected capacity change from 0 to 65536
[  150.139475][ T6783] loop2: detected capacity change from 0 to 1024
[  150.154471][ T6670] XFS (loop4): Mounting V5 Filesystem
[  150.164525][ T4517] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  150.167305][ T4517] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  150.173871][ T4517] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  150.197870][ T4517] usb 1-1: USB disconnect, device number 3
[  150.208836][ T4517] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  150.211300][ T4517] ftdi_sio 1-1:0.0: device disconnected
[  150.222406][ T6795] device syzkaller0 entered promiscuous mode
[  150.230503][ T6670] XFS (loop4): Ending clean mount
[  150.232636][ T6670] XFS (loop4): Quotacheck needed: Please wait.
[  150.322608][ T6670] XFS (loop4): Quotacheck: Done.
[  150.379022][ T4307] XFS (loop4): Unmounting Filesystem
[  150.478575][ T6799] loop1: detected capacity change from 0 to 512
[  150.485301][ T6799] ext4: Unknown parameter 'noacl'
[  150.535729][ T6368] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  150.749316][ T6807] 9pnet_fd: Insufficient options for proto=fd
[  150.984211][ T6757] hfsplus: b-tree write err: -5, ino 4
[  151.094987][ T6660] Set syz1 is full, maxelem 65536 reached
[  151.101022][ T6818] device syzkaller0 entered promiscuous mode
[  151.195246][ T6823] loop3: detected capacity change from 0 to 512
[  151.200793][ T6823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  151.272323][ T4294] EXT4-fs (loop3): unmounting filesystem.
[  151.353820][ T6831] 9pnet_fd: Insufficient options for proto=fd
[  151.882652][ T6851] loop2: detected capacity change from 0 to 512
[  151.896161][ T6849] loop1: detected capacity change from 0 to 8192
[  151.898518][ T6851] EXT4-fs: inline encryption not supported
[  151.908215][ T6851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  151.910160][ T6851] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  151.933180][ T6817] loop0: detected capacity change from 0 to 65536
[  151.933362][ T6849] process 'syz.1.771' launched './file1' with NULL argv: empty string added
[  151.959390][ T6851] __quota_error: 2 callbacks suppressed
[  151.959407][ T6851] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[  151.964901][ T6817] XFS (loop0): Mounting V5 Filesystem
[  151.975170][ T6851] EXT4-fs warning (device loop2): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  151.983037][ T6851] EXT4-fs (loop2): mount failed
[  152.041666][ T6817] XFS (loop0): Ending clean mount
[  152.054286][ T6817] XFS (loop0): Quotacheck needed: Please wait.
[  152.141325][ T6817] XFS (loop0): Quotacheck: Done.
[  152.204047][ T6869] device syzkaller0 entered promiscuous mode
[  152.244010][ T4295] XFS (loop0): Unmounting Filesystem
[  152.452096][ T6882] loop4: detected capacity change from 0 to 512
[  152.598083][ T6882] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  152.600418][ T6882] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  152.602423][ T6882] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.777: Failed to acquire dquot type 0
[  152.614680][ T6882] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  152.617014][ T6882] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  152.619091][ T6882] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.777: Failed to acquire dquot type 0
[  152.649049][ T6882] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  152.651354][ T6882] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  152.653338][ T6882] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.777: Failed to acquire dquot type 0
[  152.661168][ T6882] EXT4-fs (loop4): 1 orphan inode deleted
[  152.662462][ T6882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  153.351980][   T27] audit: type=1326 audit(153.320:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd52ba8 code=0x50000
[  153.370065][   T27] audit: type=1326 audit(153.340:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd52ba8 code=0x50000
[  153.392834][   T27] audit: type=1326 audit(153.350:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd52ba8 code=0x50000
[  154.120805][ T6907] fuse: Bad value for 'fd'
[  154.420374][ T4304] Bluetooth: hci0: command 0x0401 tx timeout
[  154.517529][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  154.607834][ T6914] device syzkaller0 entered promiscuous mode
[  155.121547][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.126214][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.395695][ T6905] loop2: detected capacity change from 0 to 65536
[  155.438978][ T6905] XFS (loop2): Mounting V5 Filesystem
[  155.513357][ T6905] XFS (loop2): Ending clean mount
[  155.520631][ T6905] XFS (loop2): Quotacheck needed: Please wait.
[  155.560087][ T6905] XFS (loop2): Quotacheck: Done.
[  155.664908][   T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  155.687877][ T4296] XFS (loop2): Unmounting Filesystem
[  155.806107][ T6743] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.847525][   T14] usb 1-1: Using ep0 maxpacket: 16
[  155.850204][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.852419][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  155.858650][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  155.860428][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.892071][   T14] usb 1-1: config 0 descriptor??
[  155.966827][ T6743] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.983126][ T6954] loop4: detected capacity change from 0 to 1024
[  155.987065][ T6954] ext4: Unknown parameter 'noacl'
[  156.002635][ T4304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  156.015074][ T4304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  156.017855][ T4304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  156.021081][ T4304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  156.023322][ T4304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  156.025503][ T4306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  156.030479][ T6368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  156.111401][ T6743] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.237184][ T6743] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.468554][ T6969] device syzkaller0 entered promiscuous mode
[  156.661800][ T6979] loop4: detected capacity change from 0 to 128
[  156.662083][ T6955] chnl_net:caif_netlink_parms(): no params data found
[  156.683631][ T6979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  156.855799][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  157.115139][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.116691][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.118970][ T6955] device bridge_slave_0 entered promiscuous mode
[  157.167087][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.168722][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.170684][ T6955] device bridge_slave_1 entered promiscuous mode
[  157.279984][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.303066][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.363080][ T4412] kernel write not supported for file /408/net/rt_cache (pid: 4412 comm: kworker/1:9)
[  157.435794][ T6955] team0: Port device team_slave_0 added
[  157.439715][ T6955] team0: Port device team_slave_1 added
[  157.516858][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.525128][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.544019][ T6977] loop1: detected capacity change from 0 to 65536
[  157.553767][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.613655][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.622139][ T6977] XFS (loop1): Mounting V5 Filesystem
[  157.623417][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.634995][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.643817][ T7022] device syzkaller0 entered promiscuous mode
[  157.707651][ T6977] XFS (loop1): Ending clean mount
[  157.711069][ T6977] XFS (loop1): Quotacheck needed: Please wait.
[  157.784960][ T6977] XFS (loop1): Quotacheck: Done.
[  157.884814][ T4297] XFS (loop1): Unmounting Filesystem
[  157.977327][ T6955] device hsr_slave_0 entered promiscuous mode
[  158.014621][ T7051] loop4: detected capacity change from 0 to 512
[  158.018675][ T7051] ext4: Unknown parameter 'noacl'
[  158.027139][ T6955] device hsr_slave_1 entered promiscuous mode
[  158.036503][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.038722][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.065097][ T6955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.066849][ T6955] Cannot create hsr debugfs directory
[  158.074364][ T6368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  158.095060][ T4304] Bluetooth: hci0: command 0x0409 tx timeout
[  158.241736][ T7060] loop4: detected capacity change from 0 to 256
[  158.252636][ T7060] exFAT-fs (loop4): bogus sectors bits per cluster : 193
[  158.259942][ T7060] exFAT-fs (loop4): failed to read boot sector
[  158.261289][ T7060] exFAT-fs (loop4): failed to recognize exfat type
[  158.301867][ T6468] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  158.446996][   T14] usbhid 1-1:0.0: can't add hid device: -71
[  158.448278][   T14] usbhid: probe of 1-1:0.0 failed with error -71
[  158.455799][   T14] usb 1-1: USB disconnect, device number 4
[  158.648890][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.650771][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.682427][ T7080] loop2: detected capacity change from 0 to 512
[  158.701275][ T7081] device syzkaller0 entered promiscuous mode
[  158.734946][ T4304] Bluetooth: hci1: command 0x0406 tx timeout
[  158.736470][   T47] Bluetooth: hci4: command 0x0406 tx timeout
[  158.736565][ T4306] Bluetooth: hci2: command 0x0406 tx timeout
[  158.737900][   T47] Bluetooth: hci3: command 0x0406 tx timeout
[  158.759931][ T7080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  158.780559][ T7080] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes
[  158.811647][ T4296] EXT4-fs (loop2): unmounting filesystem.
[  158.862395][ T7093] loop2: detected capacity change from 0 to 512
[  158.864713][ T7093] ext4: Unknown parameter 'noacl'
[  159.063353][ T7104] loop2: detected capacity change from 0 to 256
[  159.065642][ T7104] exfat: Deprecated parameter 'utf8'
[  159.066851][ T7104] exfat: Deprecated parameter 'namecase'
[  159.067995][ T7104] exfat: Deprecated parameter 'utf8'
[  159.073581][ T7104] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  159.113316][ T6955] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  159.164824][ T6955] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  159.196921][ T6955] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  159.262963][ T7111] binder: 7110:7111 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  159.297103][ T6743] device hsr_slave_0 left promiscuous mode
[  159.328576][ T6743] device hsr_slave_1 left promiscuous mode
[  159.395910][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.397634][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.400579][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.402071][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.403923][ T7118] loop0: detected capacity change from 0 to 128
[  159.407516][ T6743] device bridge_slave_1 left promiscuous mode
[  159.410080][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.426507][ T7118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  159.437326][ T6743] device bridge_slave_0 left promiscuous mode
[  159.438671][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.493283][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  159.551840][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'.
[  159.605427][ T6743] device veth1_macvtap left promiscuous mode
[  159.607073][ T6743] device veth0_macvtap left promiscuous mode
[  159.608922][ T6743] device veth1_vlan left promiscuous mode
[  159.610298][ T6743] device veth0_vlan left promiscuous mode
[  160.245143][ T4310] Bluetooth: hci0: command 0x041b tx timeout
[  160.553498][ T7140] loop4: detected capacity change from 0 to 512
[  160.714604][ T7140] __quota_error: 3948 callbacks suppressed
[  160.714620][ T7140] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  160.718059][ T7140] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  160.719899][ T7140] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.857: Failed to acquire dquot type 0
[  160.722656][ T7140] EXT4-fs (loop4): Remounting filesystem read-only
[  160.724145][ T7140] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  160.726395][ T7140] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  160.728178][ T7140] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.857: Failed to acquire dquot type 0
[  160.731023][ T7140] EXT4-fs (loop4): Remounting filesystem read-only
[  160.732982][ T7140] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #16: comm syz.4.857: corrupted xattr block 8
[  160.742410][ T7140] EXT4-fs (loop4): Remounting filesystem read-only
[  160.743803][ T7140] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117)
[  160.745759][ T7140] EXT4-fs (loop4): 1 orphan inode deleted
[  160.746994][ T7140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  162.265588][ T4304] Bluetooth: hci0: command 0x040f tx timeout
[  162.270479][ T6743] team0 (unregistering): Port device team_slave_1 removed
[  162.447756][ T6743] team0 (unregistering): Port device team_slave_0 removed
[  162.626382][ T6743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.826523][ T6743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.335031][ T4304] Bluetooth: hci0: command 0x0419 tx timeout
[  165.200799][ T6743] bond0 (unregistering): Released all slaves
[  165.443247][ T6955] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  165.504458][ T7121] device syzkaller0 entered promiscuous mode
[  165.612658][ T7150] loop0: detected capacity change from 0 to 512
[  165.623661][ T7150] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  165.634643][ T7150] EXT2-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended
[  165.637505][ T7150] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  165.701142][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  165.881014][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.894501][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  165.900415][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  165.907349][ T6955] 8021q: adding VLAN 0 to HW filter on device team0
[  165.934958][ T4731] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  165.935301][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  165.938753][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  165.955728][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.957262][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.963582][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  165.970368][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  165.982123][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.983813][ T6733] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.990402][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  166.004008][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.010604][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  166.013023][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  166.024473][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  166.030630][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  166.033363][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  166.049606][ T6955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  166.052032][ T6955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.058794][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  166.064713][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  166.071476][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  166.074241][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  166.092306][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  166.103374][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  166.117265][ T4731] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  166.119521][ T4731] usb 1-1: config 0 has no interface number 0
[  166.120746][ T4731] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  166.122904][ T4731] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  166.124688][ T4731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.146320][ T4731] usb 1-1: config 0 descriptor??
[  166.150992][ T4731] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input5
[  166.425692][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.427788][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.431336][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.447223][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.467002][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.818961][ T7207] device syzkaller0 entered promiscuous mode
[  166.828878][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  166.831578][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  166.936742][ T4731] usb 1-1: USB disconnect, device number 5
[  166.941083][ T6955] device veth0_vlan entered promiscuous mode
[  166.943230][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  166.945533][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  166.947652][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  166.959711][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  166.972573][ T6955] device veth1_vlan entered promiscuous mode
[  167.070517][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  167.072791][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  167.074900][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  167.081143][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  167.084216][ T6955] device veth0_macvtap entered promiscuous mode
[  167.106200][ T6955] device veth1_macvtap entered promiscuous mode
[  167.113734][ T7220] loop4: detected capacity change from 0 to 512
[  167.137944][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.138093][ T7220] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  167.148484][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.150659][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.152733][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.165497][ T7220] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[  167.181804][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.184218][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.210301][ T7220] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.876: inode #15: comm syz.4.876: iget: illegal inode #
[  167.213283][ T7220] EXT4-fs (loop4): Remounting filesystem read-only
[  167.214603][ T7220] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.876: couldn't read orphan inode 15 (err -117)
[  167.228326][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.230495][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.233688][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.240255][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.262428][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.264542][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.278091][ T7220] EXT4-fs (loop4): Remounting filesystem read-only
[  167.279505][ T7220] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  167.287734][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.289823][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.291874][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.293780][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.348088][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.359285][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.360956][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  167.363207][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  167.365844][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  167.370128][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  167.372898][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  167.380056][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  167.397729][ T6955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.399574][ T6955] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.401419][ T6955] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.403175][ T6955] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.514333][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  167.599232][ T7243] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  167.600920][ T7243] vhci_hcd: invalid port number 110
[  167.601969][ T7243] vhci_hcd: default hub control req: 672f v7973 i006e l29487
[  167.618227][ T7242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.628170][ T6751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.629918][ T6751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.640153][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  167.686417][ T6743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.688291][ T6743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.692155][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  167.821219][ T7248] loop4: detected capacity change from 0 to 1024
[  167.822751][ T7248] tmpfs: Unknown parameter 'errors'
[  168.092523][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.100115][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.274391][ T7279] netlink: 'syz.0.891': attribute type 3 has an invalid length.
[  168.339040][ T7223] loop1: detected capacity change from 0 to 65536
[  168.425638][ T7223] XFS (loop1): Mounting V5 Filesystem
[  168.519873][ T7223] XFS (loop1): Ending clean mount
[  168.529696][ T7223] XFS (loop1): Quotacheck needed: Please wait.
[  168.565437][ T7223] XFS (loop1): Quotacheck: Done.
[  168.594801][ T7223] overlayfs: missing 'lowerdir'
[  168.655896][ T4342] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  168.692034][ T4297] XFS (loop1): Unmounting Filesystem
[  168.761872][ T7307] binder: 7305:7307 tried to acquire reference to desc 0, got 1 instead
[  168.763744][ T7307] binder: 7305:7307 got transaction with invalid offsets ptr
[  168.768139][ T7307] binder: 7305:7307 transaction async to 7305:0 failed 11/29201/-14, size 0-88 line 3278
[  168.772763][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[  168.851607][ T4342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.853901][ T4342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.860178][ T4342] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  168.867964][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.878201][ T4342] usb 1-1: config 0 descriptor??
[  168.981997][ T7323] binder: 7321:7323 tried to acquire reference to desc 0, got 1 instead
[  168.992345][ T7323] binder: 7321:7323 got transaction with invalid handle, 3
[  168.993983][ T7323] binder: 7323:7321 translate handle failed
[  169.001114][ T7323] binder: 7321:7323 transaction call to 7321:0 failed 16/29201/-22, size 72-24 line 3402
[  169.011268][ T4413] binder: undelivered TRANSACTION_ERROR: 29201
[  169.111205][ T7331] loop5: detected capacity change from 0 to 512
[  169.188610][ T7331] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  169.383988][ T6955] EXT4-fs (loop5): unmounting filesystem.
[  169.510721][ T4342] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71
[  169.521912][ T4342] usb 1-1: USB disconnect, device number 6
[  169.670180][ T7362] loop1: detected capacity change from 0 to 128
[  169.680605][ T7362] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  169.684621][ T7362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.136913][ T7392] Zero length message leads to an empty skb
[  171.269426][ T7410] loop4: detected capacity change from 0 to 164
[  171.456749][ T7418] loop4: detected capacity change from 0 to 512
[  171.471671][ T7418] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.926: casefold flag without casefold feature
[  171.489727][ T7418] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.926: couldn't read orphan inode 15 (err -117)
[  171.532799][ T7418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  171.563100][ T7356] loop5: detected capacity change from 0 to 65536
[  171.634190][ T7356] XFS (loop5): Mounting V5 Filesystem
[  171.637882][ T7430] loop0: detected capacity change from 0 to 8
[  171.674435][ T7430] SQUASHFS error: zlib decompression failed, data probably corrupt
[  171.679156][ T7430] SQUASHFS error: Failed to read block 0x9b: -5
[  171.680196][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  171.680839][ T7430] SQUASHFS error: Unable to read metadata cache entry [99]
[  171.683771][ T7430] SQUASHFS error: Unable to read inode 0x127
[  171.731435][ T7356] XFS (loop5): Ending clean mount
[  171.733696][ T7356] XFS (loop5): Quotacheck needed: Please wait.
[  171.768485][ T7430] loop0: detected capacity change from 0 to 128
[  171.784610][ T7430] EXT4-fs (loop0): Test dummy encryption mode enabled
[  171.799898][ T7356] XFS (loop5): Quotacheck: Done.
[  171.809945][ T7356] overlayfs: missing 'lowerdir'
[  171.812980][ T7430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  171.823826][ T7430] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[  171.848803][ T6955] XFS (loop5): Unmounting Filesystem
[  171.911502][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  172.050239][ T7454] loop0: detected capacity change from 0 to 256
[  172.079365][ T7454] FAT-fs (loop0): Directory bread(block 1285) failed
[  172.086374][ T7454] FAT-fs (loop0): Directory bread(block 1285) failed
[  172.090265][ T7454] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  172.601289][ T7476] loop1: detected capacity change from 0 to 4096
[  172.633397][ T7476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  172.814281][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  173.042119][ T7514] loop1: detected capacity change from 0 to 256
[  173.936213][ T7527] loop0: detected capacity change from 0 to 128
[  173.945504][ T7527] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  173.967521][ T7527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  186.322992][ T7607] loop1: detected capacity change from 0 to 512
[  187.111485][ T7607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  187.311818][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  187.453959][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  187.455400][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  187.593137][ T7633] loop0: detected capacity change from 0 to 2048
[  187.595099][ T7633] UDF-fs: bad mount option "�" or missing value
[  188.959567][ T7550] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  189.009258][ T7630] loop0: detected capacity change from 0 to 1764
[  189.269764][ T7550] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  189.296765][ T7661] loop4: detected capacity change from 0 to 1024
[  190.141160][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'.
[  190.572052][ T7693] loop2: detected capacity change from 0 to 256
[  190.584468][ T7693] FAT-fs (loop2): Unrecognized mount option "iocharset" or missing value
[  192.032101][ T7715] binder: 7715:7712 cannot find target node
[  192.033324][ T7715] binder: 7712:7715 transaction async to 0:0 failed 19/29189/-22, size 0-0 line 3054
[  192.044085][ T7714] loop0: detected capacity change from 0 to 512
[  192.114024][ T7714] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  192.123721][ T7714] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002]
[  192.125970][ T7714] System zones: 0-2, 18-18, 34-35
[  192.128815][ T7714] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  192.210616][ T7716] loop5: detected capacity change from 0 to 512
[  192.361079][ T7723] Bluetooth: MGMT ver 1.22
[  192.365287][ T7716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  192.391123][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  192.492809][ T7716] EXT4-fs (loop5): 1 truncate cleaned up
[  192.494208][ T7716] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  192.747921][ T7706] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1009: corrupted in-inode xattr
[  192.756822][ T7739] loop2: detected capacity change from 0 to 256
[  192.809985][ T7706] EXT4-fs (loop5): Remounting filesystem read-only
[  192.811441][ T7706] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1723: inode #15: comm syz.5.1009: unable to update i_inline_off
[  192.814022][ T7706] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1009: corrupted in-inode xattr
[  192.854225][ T7706] EXT4-fs (loop5): Remounting filesystem read-only
[  192.987511][ T6955] EXT4-fs (loop5): unmounting filesystem.
[  193.044874][ T4735] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  193.236532][ T4735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.239000][ T4735] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  193.241496][ T4735] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  193.246604][ T4735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.268783][ T4735] usb 1-1: config 0 descriptor??
[  193.564012][ T7782] loop2: detected capacity change from 0 to 1024
[  193.578746][ T7782] EXT4-fs: Ignoring removed nobh option
[  193.579894][ T7782] ext4: Unknown parameter 'noacl'
[  193.652096][ T7720] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  193.692337][ T4735] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  193.728742][ T4735] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  193.855851][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.857876][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.899032][ T7788] loop1: detected capacity change from 0 to 256
[  193.901022][ T7788] exfat: Bad value for 'uid'
[  193.938477][ T7802] 9pnet_fd: Insufficient options for proto=fd
[  193.978670][ T4735] usb 1-1: USB disconnect, device number 7
[  194.091950][ T7811] loop5: detected capacity change from 0 to 128
[  194.105168][ T7812] loop2: detected capacity change from 0 to 512
[  194.133249][ T7812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  194.149230][ T7812] netlink: 'syz.2.1039': attribute type 32 has an invalid length.
[  194.159331][ T7811] 9pnet: p9_errstr2errno: server reported unknown error ��'?��)mrXv��/�����ƻ�1��F�
´�hȘ�L�D�ԓW�C����
�x��E��"x)T�̤I
[  194.171271][ T7812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1039'.
[  194.577546][ T4296] EXT4-fs (loop2): unmounting filesystem.
[  195.083214][ T7859] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  195.170755][ T7866] 9pnet_fd: Insufficient options for proto=fd
[  195.562477][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.578246][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.378715][ T7868] loop1: detected capacity change from 0 to 65536
[  196.488600][ T7868] XFS (loop1): Mounting V5 Filesystem
[  196.580012][ T7926] 9pnet_fd: Insufficient options for proto=fd
[  196.580604][ T7868] XFS (loop1): Ending clean mount
[  196.583418][ T7868] XFS (loop1): Quotacheck needed: Please wait.
[  196.649194][ T7868] XFS (loop1): Quotacheck: Done.
[  196.669177][ T7868] overlayfs: missing 'workdir'
[  196.745423][ T4297] XFS (loop1): Unmounting Filesystem
[  197.205035][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'.
[  197.398994][ T5985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.537713][ T5985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.658293][ T5985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.753609][ T4310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  197.758250][ T4310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  197.767106][ T4310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  197.770069][ T4310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  197.772037][ T4310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  197.784824][ T4310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  197.842518][ T5985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.092651][ T8005] loop1: detected capacity change from 0 to 1024
[  198.110524][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.113104][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.129527][ T8005] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  198.362580][ T8016] fuse: blksize only supported for fuseblk
[  198.385635][ T8006] device bridge_slave_1 left promiscuous mode
[  198.388809][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.450570][ T8006] device bridge_slave_0 left promiscuous mode
[  198.452010][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.626284][ T7976] loop2: detected capacity change from 0 to 65536
[  198.656241][ T7976] XFS (loop2): Mounting V5 Filesystem
[  198.697560][ T7976] XFS (loop2): Ending clean mount
[  198.721866][ T7976] XFS (loop2): Quotacheck needed: Please wait.
[  198.784484][ T7976] XFS (loop2): Quotacheck: Done.
[  198.822242][ T7976] overlayfs: missing 'workdir'
[  198.952943][ T4296] XFS (loop2): Unmounting Filesystem
[  199.271166][ T7987] chnl_net:caif_netlink_parms(): no params data found
[  199.716054][ T7987] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.717544][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.719555][ T7987] device bridge_slave_0 entered promiscuous mode
[  199.722617][ T7987] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.724012][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.726500][ T7987] device bridge_slave_1 entered promiscuous mode
[  199.797264][ T7987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.801176][ T7987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.865078][ T4310] Bluetooth: hci4: command 0x0409 tx timeout
[  199.911317][ T7987] team0: Port device team_slave_0 added
[  199.915240][ T7987] team0: Port device team_slave_1 added
[  199.930765][ T8088] kernel profiling enabled (shift: 9)
[  200.048705][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.050228][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.056095][ T7987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.062211][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.063745][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.069680][ T8090] input: syz0 as /devices/virtual/input/input7
[  200.070975][ T8090] input: failed to attach handler leds to device input7, error: -6
[  200.087519][ T7987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.236788][ T7987] device hsr_slave_0 entered promiscuous mode
[  200.265204][ T7987] device hsr_slave_1 entered promiscuous mode
[  200.294869][ T7987] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.302900][ T7987] Cannot create hsr debugfs directory
[  200.921749][ T8083] loop5: detected capacity change from 0 to 65536
[  201.036608][ T8083] XFS (loop5): Mounting V5 Filesystem
[  201.069600][ T8122] loop1: detected capacity change from 0 to 512
[  201.112177][ T8083] XFS (loop5): Ending clean mount
[  201.114199][ T8083] XFS (loop5): Quotacheck needed: Please wait.
[  201.120597][ T8122] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  201.122729][ T8122] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  201.124547][ T8122] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1114: Failed to acquire dquot type 0
[  201.127516][ T8122] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  201.129566][ T8122] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  201.131406][ T8122] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1114: Failed to acquire dquot type 0
[  201.146616][ T8122] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  201.148965][ T8122] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  201.150865][ T8122] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1114: Failed to acquire dquot type 0
[  201.153509][ T8122] EXT4-fs (loop1): 1 orphan inode deleted
[  201.154599][ T8122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  201.243250][ T8083] XFS (loop5): Quotacheck: Done.
[  201.268899][ T8083] overlayfs: missing 'workdir'
[  201.353598][ T6955] XFS (loop5): Unmounting Filesystem
[  201.404631][ T8122] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  201.406837][ T8122] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  201.491784][ T5985] device hsr_slave_0 left promiscuous mode
[  201.526240][ T5985] device hsr_slave_1 left promiscuous mode
[  201.596528][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.598008][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.607548][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.608963][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.625565][ T5985] device bridge_slave_1 left promiscuous mode
[  201.627015][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.667805][ T5985] device bridge_slave_0 left promiscuous mode
[  201.669164][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.803540][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  201.816177][ T5985] device veth1_macvtap left promiscuous mode
[  201.817528][ T5985] device veth0_macvtap left promiscuous mode
[  201.818810][ T5985] device veth1_vlan left promiscuous mode
[  201.820105][ T5985] device veth0_vlan left promiscuous mode
[  201.934883][ T4310] Bluetooth: hci4: command 0x041b tx timeout
[  202.192790][ T8164] binder: 8163:8164 BC_INCREFS_DONE u0000000000000001 no match
[  202.194440][ T8164] binder: 8163:8164 BC_ACQUIRE_DONE u0000000000000000 no match
[  202.526408][ T4735] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  202.642565][ T8193] loop1: detected capacity change from 0 to 512
[  202.678441][ T8193] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  202.680780][ T8193] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  202.682766][ T8193] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1133: Failed to acquire dquot type 0
[  202.686737][ T8193] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  202.688898][ T8193] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  202.690831][ T8193] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1133: Failed to acquire dquot type 0
[  202.695579][ T8193] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1133: Failed to acquire dquot type 0
[  202.698411][ T8193] EXT4-fs (loop1): 1 orphan inode deleted
[  202.699632][ T8193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  202.724969][ T4735] usb 1-1: Using ep0 maxpacket: 8
[  202.728748][ T4735] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  202.730669][ T4735] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  202.732818][ T4735] usb 1-1: config 179 has no interface number 0
[  202.734292][ T4735] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  202.742073][ T4735] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  202.744646][ T4735] usb 1-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  202.748620][ T4735] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  202.750520][ T4735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.755252][ T8171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  202.977298][ T8171] loop0: detected capacity change from 0 to 256
[  203.019628][ T4735] usb 1-1: USB disconnect, device number 8
[  203.846440][ T8200] binder: 8197:8200 got transaction to context manager from process owning it
[  203.848553][ T8200] binder: 8197:8200 transaction call to 8197:0 failed 21/29201/-22, size 0-0 line 3043
[  204.036102][ T4304] Bluetooth: hci4: command 0x040f tx timeout
[  204.447288][ T4735] binder: undelivered TRANSACTION_ERROR: 29201
[  204.568565][ T5985] team0 (unregistering): Port device team_slave_1 removed
[  204.697402][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'.
[  204.766022][ T5985] team0 (unregistering): Port device team_slave_0 removed
[  204.769623][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'.
[  204.771300][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'.
[  204.866592][ T8214] 9pnet_fd: Insufficient options for proto=fd
[  204.966578][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.235883][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.484898][ T4452] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  205.673158][ T4452] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  205.675337][ T4452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.681690][ T4452] usb 1-1: config 0 descriptor??
[  205.685848][ T4452] cp210x 1-1:0.0: cp210x converter detected
[  206.092961][ T4452] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  206.095064][ T4310] Bluetooth: hci4: command 0x0419 tx timeout
[  206.106824][ T4452] usb 1-1: cp210x converter now attached to ttyUSB0
[  206.300005][ T4342] usb 1-1: USB disconnect, device number 9
[  206.312764][ T4342] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  206.324569][ T4342] cp210x 1-1:0.0: device disconnected
[  207.114958][ T4452] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  207.296609][ T4452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.298952][ T4452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.300921][ T4452] usb 1-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.00
[  207.303043][ T4452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.310811][ T4452] usb 1-1: config 0 descriptor??
[  207.606606][ T5985] bond0 (unregistering): Released all slaves
[  207.722149][ T4452] apple 0003:05AC:0216.0003: hidraw0: USB HID v0.80 Device [HID 05ac:0216] on usb-dummy_hcd.0-1/input0
[  207.840982][ T8183] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  207.843319][ T8183] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  207.882549][ T7987] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  207.922590][ T4606] usb 1-1: USB disconnect, device number 10
[  207.922812][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  207.941351][ T7987] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  207.979187][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.981116][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.996887][ T7987] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  208.024215][ T8240] loop1: detected capacity change from 0 to 256
[  208.052830][ T8240] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  208.055365][ T8240] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  208.066278][ T8240] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  208.151949][ T8246] loop1: detected capacity change from 0 to 128
[  208.154507][ T8246] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  208.164534][ T8246] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  208.190495][ T8246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1152'.
[  208.190516][ T7987] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  208.220492][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  208.235972][ T8241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.308002][ T8250] device syzkaller0 entered promiscuous mode
[  208.387510][ T7987] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.394443][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  208.396554][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  208.404273][ T7987] 8021q: adding VLAN 0 to HW filter on device team0
[  208.418563][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  208.421014][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  208.423042][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.424476][ T6757] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.428063][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  208.430333][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  208.432476][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.433882][ T6757] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.441865][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  208.461499][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  208.463950][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  208.466692][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  208.484092][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  208.503935][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  208.531791][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  208.555822][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  208.557959][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  208.562498][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.572492][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  208.574691][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  208.583659][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  208.771768][ T8264] loop2: detected capacity change from 0 to 1764
[  208.958749][ T8285] loop5: detected capacity change from 0 to 512
[  209.013831][ T8285] __quota_error: 10 callbacks suppressed
[  209.013847][ T8285] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  209.017375][ T8285] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  209.019372][ T8285] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1158: Failed to acquire dquot type 0
[  209.022377][ T8285] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  209.024404][ T8285] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  209.026316][ T8285] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1158: Failed to acquire dquot type 0
[  209.032402][ T8285] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  209.034857][ T8285] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  209.036793][ T8285] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1158: Failed to acquire dquot type 0
[  209.047377][ T8285] EXT4-fs (loop5): 1 orphan inode deleted
[  209.048656][ T8285] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  209.407677][ T8294] loop1: detected capacity change from 0 to 256
[  209.409971][ T8294] exfat: Deprecated parameter 'namecase'
[  209.422401][ T8294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d)
[  212.111250][ T6755] wlan1: Trigger new scan to find an IBSS to join
[  215.139773][ T5983] wlan1: Trigger new scan to find an IBSS to join
[  216.105906][ T6757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.410612][ T7987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.425290][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  220.428790][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  220.430465][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  220.443194][ T8285] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  220.445456][ T8285] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  220.488256][ T6955] EXT4-fs (loop5): unmounting filesystem.
[  220.562701][ T8320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.581615][ T8320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.591016][ T8323] loop0: detected capacity change from 0 to 164
[  220.770822][ T8334] loop0: detected capacity change from 0 to 1024
[  220.829351][ T8334] EXT4-fs (loop0): Test dummy encryption mode enabled
[  220.857128][ T8334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  220.889292][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  220.891485][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  220.970358][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  220.972617][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  220.980880][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  220.982977][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  221.001337][ T7987] device veth0_vlan entered promiscuous mode
[  221.026690][ T7987] device veth1_vlan entered promiscuous mode
[  221.068888][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  221.069761][ T8354] fuse: Bad value for 'fd'
[  221.090508][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  221.092678][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  221.094654][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  221.100174][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  221.133716][ T7987] device veth0_macvtap entered promiscuous mode
[  221.147333][ T7987] device veth1_macvtap entered promiscuous mode
[  221.181138][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.183434][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.193854][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.202711][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.219646][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.227658][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.229775][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.239709][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.252044][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.253757][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  221.256054][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  221.258005][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  221.260076][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  221.281081][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.283337][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.303719][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.306328][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.308390][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.310466][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.312961][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.343821][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.349958][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.352294][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  221.354513][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  221.366934][ T7987] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.368794][ T7987] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.370641][ T7987] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.372318][ T7987] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.411794][ T8367] loop0: detected capacity change from 0 to 512
[  221.520514][ T8367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  221.622192][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  221.663489][ T6751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.665592][ T6751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.670182][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  221.744101][ T6757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.747975][ T6757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.785624][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  222.143813][ T4413] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  222.907376][ T4413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.909695][ T4413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.911699][ T4413] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  222.913510][ T4413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.936560][ T4413] usb 1-1: config 0 descriptor??
[  223.304722][ T8438] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  223.383405][ T4413] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0
[  223.575796][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1200'.
[  223.581753][ T4413] isku 0003:1E7D:319C.0004: couldn't init struct isku_device
[  223.583364][ T4413] isku 0003:1E7D:319C.0004: couldn't install keyboard
[  223.588254][ T4413] isku: probe of 0003:1E7D:319C.0004 failed with error -71
[  223.591265][ T4413] usb 1-1: USB disconnect, device number 11
[  223.793210][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.819908][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.724139][ T8484] loop0: detected capacity change from 0 to 164
[  224.938519][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'.
[  225.234400][ T8511] loop5: detected capacity change from 0 to 2048
[  225.274242][ T8511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.284003][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.310892][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.437764][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'.
[  225.573947][ T8542] loop0: detected capacity change from 0 to 512
[  225.657659][ T8542] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  225.659866][ T8542] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  225.661775][ T8542] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1227: Failed to acquire dquot type 0
[  225.664528][ T8542] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  225.666996][ T8542] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  225.668950][ T8542] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1227: Failed to acquire dquot type 0
[  225.686884][ T8542] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  225.689164][ T8542] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  225.691071][ T8542] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1227: Failed to acquire dquot type 0
[  225.693870][ T8542] EXT4-fs (loop0): 1 orphan inode deleted
[  225.695137][ T8542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  226.194079][ T8542] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  226.196292][ T8542] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  227.335464][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.337354][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.343909][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  227.381306][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.383129][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.519159][ T8612] loop6: detected capacity change from 0 to 1024
[  227.594635][ T8612] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.1252: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  227.604264][ T8612] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1252: couldn't read orphan inode 11 (err -117)
[  227.612647][ T8612] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  227.662390][ T8612] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.1252: Invalid block bitmap block 0 in block_group 0
[  227.700316][ T8612] Quota error (device loop6): write_blk: dquota write failed
[  227.702034][ T8612] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  227.704073][ T8612] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1252: Failed to acquire dquot type 0
[  228.082781][ T8655] loop0: detected capacity change from 0 to 512
[  228.137301][ T8655] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  228.139555][ T8655] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  228.141445][ T8655] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1260: Failed to acquire dquot type 0
[  228.144416][ T8655] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1260: Failed to acquire dquot type 0
[  228.155143][ T8655] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1260: Failed to acquire dquot type 0
[  228.219369][ T8655] EXT4-fs (loop0): 1 orphan inode deleted
[  228.220719][ T8655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  228.226314][ T8655] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  228.228435][ T8655] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  228.982114][ T4413] kernel write not supported for file /input/event0 (pid: 4413 comm: kworker/1:10)
[  229.406380][ T7987] EXT4-fs (loop6): unmounting filesystem.
[  229.643796][ T8706] loop5: detected capacity change from 0 to 512
[  229.670699][ T8706] EXT4-fs: Ignoring removed nobh option
[  229.682893][ T8706] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  229.734357][ T8706] EXT4-fs (loop5): 1 truncate cleaned up
[  229.735842][ T8706] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  229.861837][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  229.949181][ T6955] EXT4-fs (loop5): unmounting filesystem.
[  230.197496][ T8741] loop6: detected capacity change from 0 to 256
[  230.201277][ T8741] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119abd1)
[  230.205024][ T8741] exFAT-fs (loop6): invalid boot region
[  230.206200][ T8741] exFAT-fs (loop6): failed to recognize exfat type
[  230.382572][ T8760] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  230.384636][ T8760] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  230.420791][ T8750] loop2: detected capacity change from 0 to 512
[  230.422585][ T8750] ext4: Unknown parameter 'fsname'
[  230.624206][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.633563][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.826999][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  230.827013][   T27] audit: type=1326 audit(230.800:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8786 comm="syz.6.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91952ba8 code=0x7ffc0000
[  230.832645][   T27] audit: type=1326 audit(230.800:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8786 comm="syz.6.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffff91952ba8 code=0x7ffc0000
[  230.859583][   T27] audit: type=1326 audit(230.800:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8786 comm="syz.6.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91952ba8 code=0x7ffc0000
[  231.080448][ T8800] loop6: detected capacity change from 0 to 256
[  231.103134][ T8800] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  232.224512][ T8827] loop2: detected capacity change from 0 to 2048
[  232.279861][ T8827] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  232.281808][ T8827] UDF-fs: Scanning with blocksize 512 failed
[  232.314912][ T8827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.381307][ T8841] loop6: detected capacity change from 0 to 512
[  232.464720][ T8841] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  232.466953][ T8841] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  232.468922][ T8841] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1317: Failed to acquire dquot type 0
[  232.471719][ T8841] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  232.474428][ T8841] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  232.477829][ T8841] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1317: Failed to acquire dquot type 0
[  232.486202][ T8841] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  232.488485][ T8841] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  232.490323][ T8841] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1317: Failed to acquire dquot type 0
[  232.493005][ T8841] EXT4-fs (loop6): 1 orphan inode deleted
[  232.494181][ T8841] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  232.503156][ T8841] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  232.505239][ T8841] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  232.898411][ T8873] loop2: detected capacity change from 0 to 512
[  232.907667][ T8873] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  232.923306][ T8873] EXT4-fs (loop2): 1 truncate cleaned up
[  232.925897][ T8873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  232.963151][ T8873] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1326: corrupted in-inode xattr
[  232.979161][ T8873] EXT4-fs (loop2): Remounting filesystem read-only
[  232.982870][ T8873] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1723: inode #15: comm syz.2.1326: unable to update i_inline_off
[  233.001328][ T8873] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1326: corrupted in-inode xattr
[  233.013528][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.015809][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.019792][ T8873] EXT4-fs (loop2): Remounting filesystem read-only
[  233.028873][ T8870] loop5: detected capacity change from 0 to 256
[  233.032938][ T8870] exfat: Bad value for 'uid'
[  233.079820][ T8462] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  233.154018][ T7987] EXT4-fs (loop6): unmounting filesystem.
[  233.216434][ T4296] EXT4-fs (loop2): unmounting filesystem.
[  233.332112][ T8883] loop6: detected capacity change from 0 to 256
[  233.358985][ T8882] loop0: detected capacity change from 0 to 2048
[  233.363083][ T8882] EXT4-fs: Ignoring removed nobh option
[  233.382840][ T8883] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  233.385146][ T8883] FAT-fs (loop6): Filesystem has been set read-only
[  233.389283][ T8883] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[  233.390108][ T8882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  233.420580][ T8882] EXT4-fs (loop0): shut down requested (2)
[  233.471521][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  233.604645][ T8896] loop0: detected capacity change from 0 to 16
[  233.626677][ T8896] erofs: (device loop0): mounted with root inode @ nid 36.
[  233.657377][ T8896] syz.0.1339: attempt to access beyond end of device
[  233.657377][ T8896] loop0: rw=524288, sector=7864328, nr_sectors = 8 limit=16
[  233.660389][ T8896] syz.0.1339: attempt to access beyond end of device
[  233.660389][ T8896] loop0: rw=0, sector=7864328, nr_sectors = 8 limit=16
[  233.692218][ T8903] loop6: detected capacity change from 0 to 512
[  233.761040][ T8903] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  233.763324][ T8903] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1338: Failed to acquire dquot type 0
[  233.766205][ T8903] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1338: Failed to acquire dquot type 0
[  233.769175][ T8903] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1338: Failed to acquire dquot type 0
[  233.771850][ T8903] EXT4-fs (loop6): 1 orphan inode deleted
[  233.773073][ T8903] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  233.778291][ T8903] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  233.780143][ T8903] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  233.909045][ T8918] loop2: detected capacity change from 0 to 512
[  233.910671][ T8921] loop5: detected capacity change from 0 to 256
[  233.912286][ T8918] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  233.919784][ T8919] loop0: detected capacity change from 0 to 512
[  233.942133][ T8919] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  233.950299][ T8918] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1344: iget: bad extended attribute block 19
[  233.960946][ T8918] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1344: couldn't read orphan inode 15 (err -117)
[  233.966792][ T8919] EXT4-fs (loop0): 1 truncate cleaned up
[  233.967999][ T8919] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  233.982532][ T8918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  234.041236][ T8918] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1344: bg 0: block 65: padding at end of block bitmap is not set
[  234.129150][ T4296] EXT4-fs (loop2): unmounting filesystem.
[  234.133827][ T8913] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.1340: corrupted in-inode xattr
[  234.138500][ T8913] EXT4-fs (loop0): Remounting filesystem read-only
[  234.139942][ T8913] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1723: inode #15: comm syz.0.1340: unable to update i_inline_off
[  234.144326][ T8913] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.1340: corrupted in-inode xattr
[  234.147398][ T8913] EXT4-fs (loop0): Remounting filesystem read-only
[  234.195042][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  234.306325][ T8944] loop2: detected capacity change from 0 to 128
[  234.312501][ T8944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  234.394677][ T4296] EXT4-fs (loop2): unmounting filesystem.
[  234.453014][ T8951] loop0: detected capacity change from 0 to 256
[  234.453756][ T8952] loop2: detected capacity change from 0 to 1024
[  234.463338][ T8952] EXT4-fs: Ignoring removed nomblk_io_submit option
[  234.466543][ T8952] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  234.469093][ T8952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  234.476286][ T8952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  234.486931][ T8951] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  234.511714][ T4296] EXT4-fs (loop2): unmounting filesystem.
[  234.535333][ T7987] EXT4-fs (loop6): unmounting filesystem.
[  234.690962][ T8961] loop6: detected capacity change from 0 to 256
[  234.800622][ T8963] 9pnet_fd: Insufficient options for proto=fd
[  234.827831][ T8963] loop2: detected capacity change from 0 to 256
[  235.779795][ T8981] loop6: detected capacity change from 0 to 512
[  235.814869][ T8981] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  235.874505][ T8981] EXT4-fs (loop6): 1 truncate cleaned up
[  235.875849][ T8981] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  235.891117][ T8981] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1362: corrupted in-inode xattr
[  235.920958][ T8981] EXT4-fs (loop6): Remounting filesystem read-only
[  235.922205][ T8981] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1723: inode #15: comm syz.6.1362: unable to update i_inline_off
[  235.949004][ T8995] loop0: detected capacity change from 0 to 512
[  235.961537][ T8981] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1362: corrupted in-inode xattr
[  235.978163][ T8981] EXT4-fs (loop6): Remounting filesystem read-only
[  236.018665][ T8995] __quota_error: 5 callbacks suppressed
[  236.018680][ T8995] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  236.032919][ T8995] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  236.035533][ T8995] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1366: Failed to acquire dquot type 0
[  236.056234][ T8995] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  236.110616][ T8995] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  236.142974][ T8995] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1366: Failed to acquire dquot type 0
[  236.177287][ T8995] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  236.209595][ T8995] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  236.229655][ T8995] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1366: Failed to acquire dquot type 0
[  236.252171][ T8995] EXT4-fs (loop0): 1 orphan inode deleted
[  236.259878][ T8995] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  236.289441][ T7987] EXT4-fs (loop6): unmounting filesystem.
[  236.322767][ T8995] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  236.361192][ T8995] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  236.639957][ T8989] loop5: detected capacity change from 0 to 32768
[  236.664068][ T8989] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1369 (8989)
[  236.686501][ T8989] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.688561][ T8989] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm
[  236.690223][ T8989] BTRFS info (device loop5): using free space tree
[  236.930919][ T9017] loop6: detected capacity change from 0 to 32768
[  236.984639][ T8989] BTRFS info (device loop5): enabling ssd optimizations
[  237.032900][ T9017] XFS (loop6): Mounting V5 Filesystem
[  237.122058][ T6955] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  237.274142][ T9017] XFS (loop6): Ending clean mount
[  237.293246][ T9017] XFS (loop6): Quotacheck needed: Please wait.
[  237.350787][ T9017] XFS (loop6): Quotacheck: Done.
[  237.358120][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.359932][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.431541][ T7987] XFS (loop6): Unmounting Filesystem
[  237.507141][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.510881][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.005614][ T9072] loop6: detected capacity change from 0 to 512
[  238.025341][ T9072] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  238.040373][ T9072] EXT4-fs (loop6): 1 truncate cleaned up
[  238.041501][ T9072] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  238.056337][ T9072] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1383: corrupted in-inode xattr
[  238.059098][ T9072] EXT4-fs (loop6): Remounting filesystem read-only
[  238.060390][ T9072] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1723: inode #15: comm syz.6.1383: unable to update i_inline_off
[  238.063132][ T9072] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1383: corrupted in-inode xattr
[  238.804421][ T9072] EXT4-fs (loop6): Remounting filesystem read-only
[  238.909861][ T7987] EXT4-fs (loop6): unmounting filesystem.
[  238.912068][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.914048][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.916867][ T9076] device syzkaller0 entered promiscuous mode
[  238.966524][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.969951][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.981114][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.984064][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.122807][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.126933][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.193240][ T9090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.202838][ T9090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.597727][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.600959][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.657488][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.670332][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.711500][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.715541][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.752976][ T9102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.758625][ T9102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.920254][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.923342][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.282504][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.290115][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.294236][ T9106] device syzkaller0 entered promiscuous mode
[  240.350418][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  240.403536][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.407380][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.441446][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.445109][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.494429][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.497168][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.805019][ T4285] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  240.936306][ T9147] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  240.938288][ T9147] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  240.947681][ T9149] device syzkaller0 entered promiscuous mode
[  240.998125][ T4285] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  241.016911][ T4285] usb 1-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00
[  241.024361][ T4285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.034363][ T4285] usb 1-1: config 0 descriptor??
[  241.452513][ T4285] logitech-hidpp-device 0003:046D:C090.0005: unknown main item tag 0x0
[  241.454075][ T4285] logitech-hidpp-device 0003:046D:C090.0005: unknown main item tag 0x0
[  241.462899][ T4285] logitech-hidpp-device 0003:046D:C090.0005: unknown main item tag 0x0
[  241.471537][ T4285] logitech-hidpp-device 0003:046D:C090.0005: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.0-1/input0
[  241.652760][ T4285] usb 1-1: USB disconnect, device number 12
[  241.869033][ T9200] device syzkaller0 entered promiscuous mode
[  241.875260][ T9204] loop5: detected capacity change from 0 to 512
[  241.927197][ T9204] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  241.954603][ T9204] netlink: 'syz.5.1433': attribute type 32 has an invalid length.
[  241.963991][ T9204] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1433'.
[  242.038509][ T6955] EXT4-fs (loop5): unmounting filesystem.
[  242.060615][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.064344][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.717369][ T9248] device syzkaller0 entered promiscuous mode
[  242.773241][ T9255] loop5: detected capacity change from 0 to 1024
[  242.797661][ T9255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.830887][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1448'.
[  242.914320][ T9252] loop6: detected capacity change from 0 to 2048
[  242.920562][ T9259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1451'.
[  243.046364][ T9252] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  243.307001][ T9257] device hsr_slave_1 left promiscuous mode
[  243.408675][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.410559][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.470158][ T7987] EXT4-fs (loop6): unmounting filesystem.
[  243.582349][ T9289] device syzkaller0 entered promiscuous mode
[  243.627560][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.629296][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.269397][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.271251][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.497181][ T9337] device syzkaller0 entered promiscuous mode
[  245.099711][ T9379] binder: 9376:9379 BC_INCREFS_DONE node 22 has no pending increfs request
[  245.290734][ T9385] device syzkaller0 entered promiscuous mode
[  245.402744][ T9398] loop5: detected capacity change from 0 to 2048
[  245.419464][ T9398] EXT4-fs: Ignoring removed oldalloc option
[  245.421470][ T9398] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  245.489949][ T9398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  245.609291][ T9403] loop6: detected capacity change from 0 to 256
[  245.614627][ T9403] exfat: Bad value for 'uid'
[  246.221844][ T6955] EXT4-fs (loop5): unmounting filesystem.
[  248.832374][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  248.833742][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  257.427659][ T9436] device batadv_slave_1 entered promiscuous mode
[  257.453403][ T9436] device batadv_slave_0 entered promiscuous mode
[  257.455372][ T9430] device batadv_slave_0 left promiscuous mode
[  257.456970][ T9430] device batadv_slave_1 left promiscuous mode
[  257.556225][ T4304] Bluetooth: to_multiplier 9059 > 3200
[  257.656196][ T9446] loop0: detected capacity change from 0 to 8
[  257.834974][ T9460] mmap: syz.5.1512 (9460) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  257.886964][ T9460] binder: 9447:9460 BC_FREE_BUFFER u0000000000000000 no match
[  257.890071][ T9460] binder: 9447:9460 BC_FREE_BUFFER u0000000000000000 no match
[  257.891725][ T9460] binder: 9447:9460 BC_ACQUIRE_DONE u0000000000000001 no match
[  257.893495][ T9460] binder: 9447:9460 got reply transaction with no transaction stack
[  257.895263][ T9460] binder: 9447:9460 transaction reply to 0:0 failed 25/29201/-71, size 96-0 line 2955
[  258.435262][ T4343] binder: undelivered TRANSACTION_ERROR: 29201
[  258.537719][ T9465] loop6: detected capacity change from 0 to 512
[  258.621309][ T9465] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  258.623838][ T9465] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  258.632849][ T9465] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1509: Failed to acquire dquot type 0
[  258.683100][ T9465] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  258.700048][ T9465] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  258.731998][ T9465] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1509: Failed to acquire dquot type 0
[  258.753975][ T9465] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  258.774235][ T9465] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  258.800930][ T9465] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1509: Failed to acquire dquot type 0
[  258.806688][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.809384][ T9484] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.812805][ T9465] EXT4-fs (loop6): 1 orphan inode deleted
[  258.825617][ T9465] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  258.847382][ T9458] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  258.849423][ T9458] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  258.896832][ T9490] loop0: detected capacity change from 0 to 512
[  258.900685][ T9490] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  258.943986][ T9490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  259.150871][ T7987] EXT4-fs (loop6): unmounting filesystem.
[  259.258635][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  259.358151][ T4304] Bluetooth: to_multiplier 9059 > 3200
[  259.375229][ T9513] usb usb4: usbfs: interface 0 claimed by hub while 'syz.1.1526' sets config #0
[  259.545663][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.547164][ T9531] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.553292][   T27] audit: type=1326 audit(259.520:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd52ba8 code=0x7ffc0000
[  259.559907][   T27] audit: type=1326 audit(259.530:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=153 compat=0 ip=0xffff7fd52ba8 code=0x7ffc0000
[  259.564464][   T27] audit: type=1326 audit(259.530:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd52ba8 code=0x7ffc0000
[  259.615334][ T4310] Bluetooth: hci1: command 0x2021 tx timeout
[  260.651130][ T9560] loop5: detected capacity change from 0 to 512
[  260.726120][ T9560] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  260.728407][ T9560] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1534: Failed to acquire dquot type 0
[  260.775335][ T9560] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1534: Failed to acquire dquot type 0
[  260.814634][ T9560] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1534: Failed to acquire dquot type 0
[  260.836705][ T9560] EXT4-fs (loop5): 1 orphan inode deleted
[  260.838224][ T9560] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  260.877309][ T9560] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  260.879368][ T9560] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  260.998448][ T9593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.020363][ T9593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.191667][ T9604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  261.374896][ T4304] Bluetooth: hci4: command 0x2021 tx timeout
[  261.662211][ T9637] loop0: detected capacity change from 0 to 256
[  262.245987][ T4343] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  262.426186][ T4343] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[  262.427821][ T4343] usb 1-1: config 0 has no interface number 0
[  262.429102][ T4343] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  262.430870][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.436451][ T4343] usb 1-1: config 0 descriptor??
[  262.454032][ T4343] hub 1-1:0.3: bad descriptor, ignoring hub
[  262.459525][ T4343] hub: probe of 1-1:0.3 failed with error -5
[  262.466012][ T4343] sierra 1-1:0.3: Sierra USB modem converter detected
[  262.642198][ T9651] loop0: detected capacity change from 0 to 8
[  262.691111][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.693929][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.712485][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.714028][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.726257][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.727606][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.729642][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.742740][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.744162][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.752266][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.754483][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.762399][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.763773][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.771680][ T9651] SQUASHFS error: Failed to read block 0x4de: -5
[  262.775190][ T4343] usb 1-1: Sierra USB modem converter now attached to ttyUSB0
[  262.806349][ T4343] usb 1-1: USB disconnect, device number 13
[  262.810151][ T4343] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  262.812769][ T4343] sierra 1-1:0.3: device disconnected
[  262.839126][ T4310] Bluetooth: to_multiplier 0 < 10
[  263.125425][ T9691] loop6: detected capacity change from 0 to 512
[  263.135546][ T9691] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  263.318061][ T9699] loop6: detected capacity change from 0 to 512
[  263.363851][ T9699] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  263.374937][ T9602] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  263.415805][ T4304] Bluetooth: to_multiplier 0 < 10
[  263.582910][ T7987] EXT4-fs (loop6): unmounting filesystem.
[  263.712982][ T9714] loop0: detected capacity change from 0 to 2048
[  263.764366][ T9714] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  263.786849][ T9714] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  263.795243][ T9714] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28
[  263.798114][ T9714] EXT4-fs (loop0): This should not happen!! Data will be lost
[  263.798114][ T9714] 
[  263.800047][ T9714] EXT4-fs (loop0): Total free blocks count 0
[  263.801229][ T9714] EXT4-fs (loop0): Free/Dirty block details
[  263.802449][ T9714] EXT4-fs (loop0): free_blocks=2415919104
[  263.803557][ T9714] EXT4-fs (loop0): dirty_blocks=32
[  263.840552][ T9714] EXT4-fs (loop0): Block reservation details
[  263.845163][ T9714] EXT4-fs (loop0): i_reserved_data_blocks=2
[  263.847691][ T9719] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  263.984089][ T9723] No such timeout policy "syz0"
[  264.199850][ T9730] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1601'.
[  264.292990][ T4310] Bluetooth: to_multiplier 0 < 10
[  264.734725][ T6955] EXT4-fs (loop5): unmounting filesystem.
[  264.894883][ T4304] Bluetooth: hci4: command 0x2021 tx timeout
[  266.829293][ T9752] loop0: detected capacity change from 0 to 512
[  266.845052][ T9752] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  266.853113][ T9752] UDF-fs: Scanning with blocksize 512 failed
[  266.861127][ T9752] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  266.862921][ T9752] UDF-fs: Scanning with blocksize 1024 failed
[  266.870732][ T9752] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  266.872427][ T9752] UDF-fs: Scanning with blocksize 2048 failed
[  266.874127][ T9752] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  266.878757][ T9752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.994960][ T9756] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1612'.
[  267.037126][ T4310] Bluetooth: to_multiplier 0 < 10
[  267.334872][ T4285] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  267.516340][ T4285] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  267.518206][ T4285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.521661][ T4285] usb 1-1: config 0 descriptor??
[  267.524149][ T4285] cp210x 1-1:0.0: cp210x converter detected
[  267.931494][ T4285] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  268.137452][ T4285] usb 1-1: cp210x converter now attached to ttyUSB0
[  268.341325][ T4285] usb 1-1: USB disconnect, device number 14
[  268.348910][ T4285] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  268.353209][ T4285] cp210x 1-1:0.0: device disconnected
[  268.427356][ T4304] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  268.429468][ T4304] Bluetooth: hci1: Injecting HCI hardware error event
[  268.432433][ T4310] Bluetooth: hci1: hardware error 0x00
[  269.193101][ T9766] loop0: detected capacity change from 0 to 512
[  269.327493][ T9766] __quota_error: 5 callbacks suppressed
[  269.327531][ T9766] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  269.331409][ T9766] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  269.333427][ T9766] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1617: Failed to acquire dquot type 0
[  269.393484][ T9766] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  269.436665][ T9766] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  269.438862][ T9766] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1617: Failed to acquire dquot type 0
[  269.463994][ T9766] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  269.466265][ T9766] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  269.468167][ T9766] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1617: Failed to acquire dquot type 0
[  269.483291][ T9766] EXT4-fs (loop0): 1 orphan inode deleted
[  269.484578][ T9766] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  270.654930][ T4310] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  274.896888][ T9766] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  274.898799][ T9766] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  274.997753][ T9784] loop6: detected capacity change from 0 to 128
[  275.059095][ T4295] EXT4-fs (loop0): unmounting filesystem.
[  275.154050][ T9794] loop0: detected capacity change from 0 to 256
[  275.165886][ T9794] exfat: Deprecated parameter 'namecase'
[  275.199439][ T9794] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d)
[  275.447063][ T9796] input: syz0 as /devices/virtual/input/input9
[  277.264909][ T9802] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1623'.
[  277.758933][ T9829] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1637'.
[  278.039607][ T9849] loop5: detected capacity change from 0 to 512
[  278.047040][ T9848] usb usb7: usbfs: process 9848 (syz.2.1645) did not claim interface 0 before use
[  278.054967][ T9849] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  278.103294][ T9849] EXT4-fs (loop5): 1 truncate cleaned up
[  278.104480][ T9849] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  278.148160][ T9849] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1646: corrupted in-inode xattr
[  278.151028][ T9849] EXT4-fs (loop5): Remounting filesystem read-only
[  278.152332][ T9849] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1723: inode #15: comm syz.5.1646: unable to update i_inline_off
[  278.155533][ T9849] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1646: corrupted in-inode xattr
[  278.158508][ T9849] EXT4-fs (loop5): Remounting filesystem read-only
[  278.181758][ T6955] EXT4-fs (loop5): unmounting filesystem.
[  278.184582][ T9859] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1651'.
[  278.387875][ T9874] netlink: 'syz.1.1658': attribute type 4 has an invalid length.
[  278.517589][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.535146][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.733889][ T9898] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1667'.
[  279.253146][ T9923] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1680'.
[  290.095697][ T9949] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1691'.
[  291.177682][ T9988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1705'.
[  291.386055][ T9997] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  291.446969][ T9997] vhci_hcd: invalid port number 252
[  291.448017][ T9997] vhci_hcd: default hub control req: 8013 v02fa i00fc l0
[  292.485551][ T4310] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7
[  292.487017][ T4310] Bluetooth: hci0: unexpected event for opcode 0x042d
[  292.511771][T10019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1719'.
[  292.894322][T10046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1731'.
[  293.279861][T10073] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1745'.
[  293.703995][T10097] loop5: detected capacity change from 0 to 512
[  294.064592][T10097] loop5: detected capacity change from 0 to 2048
[  294.113920][T10109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1760'.
[  294.118975][T10097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  294.139045][T10097] fs-verity: sha512 using implementation "sha512-arm64"
[  294.284206][ T6955] EXT4-fs (loop5): unmounting filesystem.
[  294.415254][ T4310] Bluetooth: hci4: command 0x0405 tx timeout
[  295.294918][ T4304] Bluetooth: hci3: command 0x2021 tx timeout
[  297.374904][ T4304] Bluetooth: hci3: command 0x2021 tx timeout
[  305.286691][T10121] IPv6: NLM_F_REPLACE set, but no existing node found!
[  305.562607][T10140] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1772'.
[  305.721026][T10150] Bluetooth: hci0: service_discovery: too big uuid_count value 33022
[  307.621000][ T4310] Bluetooth: hci3: command 0x2021 tx timeout
[  308.364438][T10180] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1787'.
[  308.417831][T10181] loop5: detected capacity change from 0 to 512
[  308.449770][T10181] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  308.519342][T10181] EXT4-fs (loop5): 1 truncate cleaned up
[  308.520468][T10181] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  308.537612][T10177] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1784: corrupted in-inode xattr
[  308.561615][T10177] EXT4-fs (loop5): Remounting filesystem read-only
[  308.562980][T10177] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1723: inode #15: comm syz.5.1784: unable to update i_inline_off
[  308.590259][T10177] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1784: corrupted in-inode xattr
[  308.600376][T10177] EXT4-fs (loop5): Remounting filesystem read-only
[  308.651789][T10191] Bluetooth: hci0: service_discovery: too big uuid_count value 33022
[  308.800383][ T6955] EXT4-fs (loop5): unmounting filesystem.
[  308.949564][T10214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1799'.
[  308.961415][T10214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1799'.
[  309.005114][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'.
[  309.009474][ T6747] ------------[ cut here ]------------
[  309.010796][ T6747] WARNING: CPU: 1 PID: 6747 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x518/0x5b0
[  309.012761][ T6747] Modules linked in:
[  309.013646][ T6747] CPU: 1 PID: 6747 Comm: kworker/u4:20 Not tainted 6.1.124-syzkaller #0
[  309.015577][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  309.017513][ T6747] Workqueue: phy14 ieee80211_iface_work
[  309.018659][ T6747] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  309.020385][ T6747] pc : ieee80211_ibss_csa_beacon+0x518/0x5b0
[  309.021673][ T6747] lr : ieee80211_ibss_csa_beacon+0x514/0x5b0
[  309.022887][ T6747] sp : ffff8000218b7260
[  309.023754][ T6747] x29: ffff8000218b7280 x28: 1fffe0001e6552b5 x27: dfff800000000000
[  309.025252][ T6747] x26: ffff0000f32aaad7 x25: ffff0000dacd8760 x24: 0000000000000000
[  309.026867][ T6747] x23: ffff0000f32a95a8 x22: ffff0000f32a9b08 x21: 0000000000000002
[  309.028568][ T6747] x20: ffff0000f32a8c80 x19: ffff8000218b7520 x18: ffff8000218b6ea0
[  309.030287][ T6747] x17: ffff800018b7c000 x16: ffff8000084f2fe8 x15: 0000000000000002
[  309.031890][ T6747] x14: 0000000000000003 x13: ffff0000d5e71bc0 x12: 0000000000100000
[  309.033492][ T6747] x11: 0000000000001048 x10: ffff800032b9a000 x9 : ffff800011be9060
[  309.034955][ T6747] x8 : 0000000000001049 x7 : 0000000000000000 x6 : 0000000000000000
[  309.036670][ T6747] x5 : 0000000000000020 x4 : 0000000000000000 x3 : 0000000000000000
[  309.038275][ T6747] x2 : 0000000000000006 x1 : ffff80001248c5a0 x0 : 00000000ffffffea
[  309.039961][ T6747] Call trace:
[  309.040605][ T6747]  ieee80211_ibss_csa_beacon+0x518/0x5b0
[  309.041798][ T6747]  ieee80211_channel_switch+0x125c/0x21b4
[  309.042997][ T6747]  ieee80211_ibss_process_chanswitch+0x9f4/0xd68
[  309.044318][ T6747]  ieee80211_ibss_rx_queued_mgmt+0x11ec/0x27a0
[  309.045726][ T6747]  ieee80211_iface_work+0x5c4/0xa90
[  309.046910][ T6747]  process_one_work+0x7ac/0x1404
[  309.047923][ T6747]  worker_thread+0x8e4/0xfec
[  309.048972][ T6747]  kthread+0x250/0x2d8
[  309.049900][ T6747]  ret_from_fork+0x10/0x20
[  309.050887][ T6747] irq event stamp: 1992152
[  309.051770][ T6747] hardirqs last  enabled at (1992151): [<ffff8000081c24a4>] __local_bh_enable_ip+0x230/0x470
[  309.053885][ T6747] hardirqs last disabled at (1992152): [<ffff80001232af44>] el1_dbg+0x24/0x80
[  309.055945][ T6747] softirqs last  enabled at (1992150): [<ffff800011a2fd1c>] cfg80211_get_bss+0x708/0xb34
[  309.057965][ T6747] softirqs last disabled at (1992148): [<ffff800011a2f75c>] cfg80211_get_bss+0x148/0xb34
[  309.059944][ T6747] ---[ end trace 0000000000000000 ]---
[  309.196990][ T6747] wlan1: Trigger new scan to find an IBSS to join
[  310.155093][ T6733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.265733][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  310.267161][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  311.135043][ T4304] Bluetooth: hci4: command 0x2021 tx timeout