last executing test programs:

6m37.328857143s ago: executing program 0 (id=109):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x1, 0x4, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000050"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

6m36.279648565s ago: executing program 0 (id=110):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', <r1=>0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

6m36.034557768s ago: executing program 0 (id=111):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1d, &(0x7f0000000640)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x2, 0x2, 0xffffffffffffffff}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6m35.540978054s ago: executing program 0 (id=112):
socket$inet6(0xa, 0x3, 0x87)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x8001, "efb6c8557a062d0dd6cf00e47ad80c3b9e18584316687a020000000000000026"})
socket$inet(0xa, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00')
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, 0x0, 0x0)

6m34.99955572s ago: executing program 0 (id=113):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06, 0xec000000, 0x80000000}]})

6m33.616363476s ago: executing program 0 (id=116):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="7e4173edf6b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}}}, 0x0)

6m18.120706533s ago: executing program 32 (id=116):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="7e4173edf6b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}}}, 0x0)

6m16.540096291s ago: executing program 1 (id=144):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4)
r1 = dup(r0)
write$binfmt_elf32(r1, &(0x7f00000004c0)=ANY=[], 0x258)
read$FUSE(r1, &(0x7f0000002a00)={0x2020}, 0x2020)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)

6m14.206117048s ago: executing program 1 (id=146):
unshare(0x64000600)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB="6653525fac72000000000000000000a8000000000000008766000000000000000400"], &(0x7f0000000bc0)=0x2c)

6m4.688109647s ago: executing program 1 (id=158):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gretap0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

6m3.502098781s ago: executing program 1 (id=160):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x110)
mmap(&(0x7f0000670000/0x3000)=nil, 0x3000, 0x3000002, 0x12012, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_clone(0xc4000911, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000010000000000000000000000000000000900000000000000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x7ffffffe)

6m0.680680913s ago: executing program 1 (id=165):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0x2202, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0x1e)

5m59.438803877s ago: executing program 1 (id=167):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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")
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x42)
io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="47c7", 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x129, r1, 0x0, 0x0, 0x7}])
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, 0x0, 0x67)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mount$cgroup(0x0, 0x0, 0x0, 0x2010042, &(0x7f0000000000))
syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @multicast, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@can={0xc, {{0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "232108c36e43fe15"}}}}, 0x0)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
r7 = syz_io_uring_setup(0x370a, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2bf}, &(0x7f0000000500), 0x0, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)

5m43.43226129s ago: executing program 33 (id=167):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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")
io_setup(0x3ff, &(0x7f00000000c0)=<r0=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x42)
io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="47c7", 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x129, r1, 0x0, 0x0, 0x7}])
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, 0x0, 0x67)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mount$cgroup(0x0, 0x0, 0x0, 0x2010042, &(0x7f0000000000))
syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @multicast, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@can={0xc, {{0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "232108c36e43fe15"}}}}, 0x0)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
r7 = syz_io_uring_setup(0x370a, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2bf}, &(0x7f0000000500), 0x0, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)

5m38.470883127s ago: executing program 3 (id=186):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfd, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x80, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)

5m35.976699895s ago: executing program 3 (id=188):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10040c0, &(0x7f0000000040), 0xf3, 0x4a4, &(0x7f0000000b40)="$eJzs3E9sFNUfAPDvbLct/9sfP/wDolbRSPzTQkHl4EFNTDxgYqIHPK5tIchCDa2JJUSqIXgxERLvxsSLiWcPnjwZ9WTixYPeDQkxXERPa2Z3ts5ut3TZLt3Cfj7Jsu913u5735l5M2/mMRtA3xpL/0kitkXEbxExEhGF5gJjtbcb189P/X19ICIqlTf+TNKPxV/Xz0/ViybZ+9Zappi+FS4m8WKLeucWzp0qlcszZ7P8xPzpdyfmFs49c/J06cTMiZkzk0eOHD508PnnJp/tSpz/S9u654PZvbtffevKa1PHrrz949dJrtH5OLpjMBZz66TZ492trOe259JJsWHR9Ehj0cL6tIh2DEdUO+pgtf+PxMDFHUvLRuKVj3raOOC2qlQqlcmVFy9WgLtYEr1uAdAb9RN9ev1bf63T0GNDuPZS7QIojftG9qotKS5dqA42Xd920/mIOLb4z+fpK27LfQgAgEbfpeOfp1uN/wpxb67cjmxuaDSbS9kZEf+PiF0RcU9Etex9EXH/LdY/1pRfPv4pXO0osDal478XsrmtxvHf0jTF6ECW216NfzA5frI8cyBbJ/tjcDjNH2z57UlUJ4Hil09Xqn8sN/5LX2n99bFg1o6rxeHGz0yX5ktrDjxz7cOIPcUW8RcboojdEbGnwzpOPvnV3sa/DCylVo//JoodNiin8kXEE7XtvxgN2/+/mbskNz+Z7v9N85MTm6I8c2Civlcs99PPl15fqf41xd8F6fbf0rz/b4p8/KNJfr52btlXDK1Wx6XfP17xmqbT/X8oebOh8vdL8/NnD0YMJUeX/z13g7uer5dP49+/r3X/35l9Jo3/gYhId+IHI+KhiHg4a/sjEfFoROy7Sfw/vPzYO53Fv+km39odafxHWx7/Vtr+t54YOPX9t8tr3txG/JFt/8PV1P7smNzO8a/dBq59DQIAAMDGl15Rb4ukML6ULhTGx2v/h39XbCmUZ+fmnzo++96Z6dozAqMxWKjf6RrJ8pHd/xzN3R+drM6aR1zI8oey+8afDWyu5senZsvTvQ4e+tzW6j305f0/9cdAjxsH3H5dmEcD7lD6P/Svzvu/Iwfc6VbpxX6wAe5izuLQv1r1/ws9aAew/pz/oX8t9f/LbRTOPe7V/PAmcOdx/of+pf9DX5pbOHdqOCI6ea5/QyTiy9Uan2yUpt5S4pN1r/Ram4WP13abKGyMFdWQiEiizcKlVovi8oqfSntLJw0b6lqAxbZ/1WKhcqFULv/6zVoq7fWRCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DQAA//+On96k")
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = semget$private(0x0, 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
semctl$IPC_RMID(r3, 0x1000000, 0x0)

5m33.74750985s ago: executing program 3 (id=190):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

5m31.17172919s ago: executing program 3 (id=193):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
pivot_root(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00')

5m30.927628503s ago: executing program 3 (id=194):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000004c0)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@uid}, {@numtail}, {@utf8no}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@quiet}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_mixed}, {@utf8no}, {@fat=@dos1xfloppy}]}, 0x3, 0x27b, &(0x7f0000000640)="$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")
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)

5m28.067230375s ago: executing program 3 (id=195):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00'})
modify_ldt$write2(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0xffffffc5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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")
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x800)
splice(r4, 0x0, r4, &(0x7f0000000500)=0x8, 0x23c1056a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, 0x0, 0x300, 0xce5ba66a3b447375}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0)
io_setup(0x2e, &(0x7f0000000200))

5m27.544880942s ago: executing program 34 (id=195):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00'})
modify_ldt$write2(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0xffffffc5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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")
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x800)
splice(r4, 0x0, r4, &(0x7f0000000500)=0x8, 0x23c1056a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, 0x0, 0x300, 0xce5ba66a3b447375}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0)
io_setup(0x2e, &(0x7f0000000200))

2m57.415382414s ago: executing program 2 (id=462):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x21)
close(r0)
socket(0x1e, 0x4, 0x0)
r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x14c98, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2m56.552865604s ago: executing program 2 (id=464):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800004, &(0x7f0000000180), 0x3, 0x7c1, &(0x7f0000000dc0)="$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")
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0)
keyctl$clear(0x7, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.redirect\x00', &(0x7f00000003c0)=""/86, 0x56)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000840)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

2m50.971030458s ago: executing program 2 (id=467):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_socket_connect_nvme_tcp()
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r4}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880)

2m47.426697148s ago: executing program 2 (id=475):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@errors_remount}, {@nomblk_io_submit}]}, 0x4, 0x50a, &(0x7f00000018c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
readahead(r0, 0x8, 0x3ae3)
r1 = openat(0xffffffffffffff9c, 0x0, 0x80642, 0x150)
pwrite64(r1, 0x0, 0x0, 0xfecc)
fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402)

2m46.145024643s ago: executing program 2 (id=476):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'macsec0\x00'})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
dup(0xffffffffffffffff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)

2m43.419631744s ago: executing program 2 (id=480):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r6)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x882010}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
writev(r6, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r6)
chdir(&(0x7f0000000100)='./file0\x00')
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r8, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

2m42.06848957s ago: executing program 5 (id=484):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x101001, 0x200)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'tunl0\x00', <r4=>0x0})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/route\x00')
preadv(r5, &(0x7f0000000100)=[{0x0}], 0x1, 0xffffbdea, 0x9)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, &(0x7f0000003c00)="0f673ce98193b7ca290c1d19287f46be7c9c05adf05a8ff8747d161fe0a1a17e2c812c36df0f5a52fb0e2d39cb3b42582f5a06fd4978d92c51ab0129be2a444914df3daf82b9b90ff5083a2e668fe29801b104f60c5361cd4ac747f218f644c55b143c4d191ab9b8d8429ac6769c9e7d5ddb0c84c23325ac2e47b2cce28e0ef2c80af8ff2e854eb29869aa10f5b1cf1bb43a99b9e814441db64ccb3c7844881e9028a6a655e2af5e30e7db23ee274743f951dcbdbe56b626c361")
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x10004000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054)

2m39.441340049s ago: executing program 5 (id=488):
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

2m34.960027811s ago: executing program 5 (id=494):
listen(0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000500)=@req={0x0, 0xfffffff8, 0x2b, 0xa16}, 0x10)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000a00)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c5}, 0x8094)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r1, 0x0, 0xff2e)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
dup3(0xffffffffffffffff, r1, 0x80000)
io_setup(0x2e, 0x0)
inotify_init()
getresgid(0x0, &(0x7f0000000180), &(0x7f0000000240))
llistxattr(&(0x7f0000000400)='./file1\x00', 0x0, 0xfffffffffffffe12)

2m33.203561771s ago: executing program 5 (id=497):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES16=0x0], 0x3, 0x248, &(0x7f0000000880)="$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")
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

2m32.942504114s ago: executing program 5 (id=498):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000001c0)='GPL\x00'}, 0x94)

2m32.352379511s ago: executing program 5 (id=501):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r2)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})

2m30.191785696s ago: executing program 35 (id=501):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r2)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})

2m27.130995271s ago: executing program 36 (id=480):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r6)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x882010}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
writev(r6, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r6)
chdir(&(0x7f0000000100)='./file0\x00')
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r8, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

36.82324591s ago: executing program 6 (id=758):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071106c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

36.631448503s ago: executing program 6 (id=760):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})

35.769094733s ago: executing program 6 (id=762):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448de, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x388, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x4, 0x7ffc0001}]})
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="08000000040000000400000026bf000000000000", @ANYRES32, @ANYBLOB="000017e9e956eb00000000000000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000030400"], 0x50)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x288}, 0x20000004)

34.131566221s ago: executing program 6 (id=764):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711816000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

33.944055263s ago: executing program 6 (id=765):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0xc8, 0x6, 0x7}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})

33.461164529s ago: executing program 6 (id=768):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x388)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400c0c1)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)

17.451507231s ago: executing program 37 (id=768):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x388)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400c0c1)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)

12.373500599s ago: executing program 4 (id=823):
r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a2000057f0009040100000102200009040101010102200009050109"], 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xe7c)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

10.067459875s ago: executing program 4 (id=830):
r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@noblock_validity}, {@test_dummy_encryption}, {@errors_continue}, {@nolazytime}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
fstat(r0, 0x0)
quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, 0x0, &(0x7f0000000240)={0x2700000, 0x8001, 0x0, 0x2})

9.140801356s ago: executing program 4 (id=832):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getgroups(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfd, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x80, 0x50}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)

9.087499137s ago: executing program 8 (id=833):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(0x0, r4)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0, 0x2fa, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

7.942097039s ago: executing program 8 (id=835):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc)

6.882714212s ago: executing program 4 (id=836):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x88c0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_AIE_OFF(r5, 0x7002)
msgctl$IPC_RMID(0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

5.166918181s ago: executing program 4 (id=837):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x0)
io_setup(0x10000, &(0x7f0000000180))
io_setup(0x7, &(0x7f0000000380))
socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)=0x1b, 0x4)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2000, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r4, 0x5407, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

5.060518082s ago: executing program 7 (id=838):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x200000000000000, &(0x7f0000000240)='uQ'})

4.770025686s ago: executing program 7 (id=839):
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)

4.225043692s ago: executing program 8 (id=840):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000008500000076000000950000000000000028"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000"], 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r5=>0x0})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000001980))
r7 = msgget(0x1, 0x762)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setreuid(0x0, r8)
msgctl$IPC_SET(r7, 0x1, &(0x7f0000000480)={{0x0, r8, 0x0, 0x0, 0x0, 0x21, 0x54}, 0x0, 0x0, 0x6, 0x4, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfff8})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

3.114157894s ago: executing program 8 (id=841):
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getgroups(0x9, &(0x7f00000000c0)=[0xee00, <r3=>0xee01, 0xee01, 0xee01, 0x0, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff])
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r0, 0xee01, r3}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')

3.051235795s ago: executing program 7 (id=842):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001780)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@noload}, {@bh}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noblock_validity}, {@bh}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mlockall(0x5)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000000c0)={0x3, 0x201, 0xfffffff7, 0xf, 0x7f, 0x4})

1.839491489s ago: executing program 7 (id=843):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getgroups(0x0, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfd, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x80, 0x50}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)

576.743803ms ago: executing program 7 (id=844):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa0040, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
close_range(r0, r1, 0x2)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

355.678376ms ago: executing program 8 (id=845):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

287.209547ms ago: executing program 4 (id=846):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x451, &(0x7f0000000f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f0000000180)='./bus\x00')
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x51500430, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x4, 0x8}}, 0x50)
r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x40000000)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0)

262.579317ms ago: executing program 7 (id=847):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

0s ago: executing program 8 (id=848):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x200000000000000, &(0x7f0000000240)='uQ'})

kernel console output (not intermixed with test programs):

pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input6
[  267.012702][ T7117] loop4: detected capacity change from 0 to 256
[  267.067044][ T7117] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d)
[  267.144098][   T28] audit: type=1326 audit(1778191290.255:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  267.278609][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.317149][   T28] audit: type=1326 audit(1778191290.255:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dbf99ca6b code=0x7ffc0000
[  267.371397][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.426555][ T7120] loop4: detected capacity change from 256 to 1
[  267.436905][   T28] audit: type=1326 audit(1778191290.264:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dbf95d60e code=0x7ffc0000
[  267.517868][ T7117] syz.4.285: attempt to access beyond end of device
[  267.517868][ T7117] loop4: rw=2049, sector=160, nr_sectors = 1 limit=1
[  267.546652][   T28] audit: type=1326 audit(1778191290.486:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  267.607199][ T7117] Buffer I/O error on dev loop4, logical block 160, lost sync page write
[  267.636962][ T7117] syz.4.285: attempt to access beyond end of device
[  267.636962][ T7117] loop4: rw=2049, sector=161, nr_sectors = 1 limit=1
[  267.674560][ T7117] Buffer I/O error on dev loop4, logical block 161, lost sync page write
[  267.701936][   T28] audit: type=1326 audit(1778191290.486:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  267.738263][    T8] usb 7-1: USB disconnect, device number 2
[  267.738280][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  267.753223][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  267.779727][ T7117] syz.4.285: attempt to access beyond end of device
[  267.779727][ T7117] loop4: rw=0, sector=160, nr_sectors = 1 limit=1
[  267.807913][    T8] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  267.921984][   T28] audit: type=1326 audit(1778191290.551:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dbf95d60e code=0x7ffc0000
[  267.951670][ T7120] syz.4.285: attempt to access beyond end of device
[  267.951670][ T7120] loop4: rw=524288, sector=160, nr_sectors = 1 limit=1
[  267.998726][ T7120] syz.4.285: attempt to access beyond end of device
[  267.998726][ T7120] loop4: rw=524288, sector=161, nr_sectors = 1 limit=1
[  268.027024][   T28] audit: type=1326 audit(1778191290.551:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  268.903480][ T7120] syz.4.285: attempt to access beyond end of device
[  268.903480][ T7120] loop4: rw=0, sector=160, nr_sectors = 1 limit=1
[  268.917894][   T28] audit: type=1326 audit(1778191290.551:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  269.040302][ T7124] syz.4.285: attempt to access beyond end of device
[  269.040302][ T7124] loop4: rw=524288, sector=160, nr_sectors = 1 limit=1
[  269.068366][ T7124] syz.4.285: attempt to access beyond end of device
[  269.068366][ T7124] loop4: rw=524288, sector=161, nr_sectors = 1 limit=1
[  269.087324][   T28] audit: type=1326 audit(1778191290.579:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dbf95d60e code=0x7ffc0000
[  269.151245][ T7137] loop6: detected capacity change from 0 to 256
[  269.159929][ T7124] syz.4.285: attempt to access beyond end of device
[  269.159929][ T7124] loop4: rw=0, sector=160, nr_sectors = 1 limit=1
[  269.221839][ T7130] syz.4.285: attempt to access beyond end of device
[  269.221839][ T7130] loop4: rw=524288, sector=160, nr_sectors = 1 limit=1
[  269.329728][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.289'.
[  269.374695][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.289'.
[  270.257765][ T7137] FAT-fs (loop6): Directory bread(block 64) failed
[  270.264820][ T7137] FAT-fs (loop6): Directory bread(block 65) failed
[  270.345791][ T7137] FAT-fs (loop6): Directory bread(block 66) failed
[  270.356678][ T7137] FAT-fs (loop6): Directory bread(block 67) failed
[  270.370339][ T7137] FAT-fs (loop6): Directory bread(block 68) failed
[  270.405263][ T7137] FAT-fs (loop6): Directory bread(block 69) failed
[  270.421051][ T7137] FAT-fs (loop6): Directory bread(block 70) failed
[  270.448009][ T7137] FAT-fs (loop6): Directory bread(block 71) failed
[  270.475315][ T7137] FAT-fs (loop6): Directory bread(block 72) failed
[  270.482731][ T7137] FAT-fs (loop6): Directory bread(block 73) failed
[  272.133457][ T7157] loop5: detected capacity change from 0 to 2048
[  272.240777][ T7157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  272.700713][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  274.612646][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[  274.628518][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[  274.640215][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[  274.651321][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[  274.661383][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[  274.672198][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[  274.682240][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[  274.696101][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[  276.747415][ T7198] loop4: detected capacity change from 0 to 4096
[  276.837595][ T7198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.869440][ T7203] loop5: detected capacity change from 0 to 512
[  277.075674][ T7207] loop6: detected capacity change from 0 to 2048
[  277.095191][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  277.095206][   T28] audit: type=1800 audit(1778191299.627:250): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.299" name="file1" dev="loop4" ino=15 res=0 errno=0
[  277.155330][ T7207] EXT4-fs: Ignoring removed i_version option
[  277.255625][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.266799][ T7207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.380779][ T7207] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.467690][ T7207] EXT4-fs (loop6): shut down requested (0)
[  277.575690][ T7215] __nla_validate_parse: 12 callbacks suppressed
[  277.575708][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.303'.
[  277.772539][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.056699][ T7227] loop4: detected capacity change from 0 to 16
[  278.086379][ T7227] erofs: (device loop4): mounted with root inode @ nid 36.
[  278.130904][ T7227] bio_check_eod: 2 callbacks suppressed
[  278.130952][ T7227] syz.4.304: attempt to access beyond end of device
[  278.130952][ T7227] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  278.259495][ T7227] syz.4.304: attempt to access beyond end of device
[  278.259495][ T7227] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16
[  278.291405][ T7227] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  278.345466][   T28] audit: type=1800 audit(1778191300.772:251): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.304" name="file2" dev="loop4" ino=89 res=0 errno=0
[  278.817188][ T7227] syz.4.304 (7227) used greatest stack depth: 18792 bytes left
[  279.462238][ T7240] binder: BINDER_SET_CONTEXT_MGR already set
[  279.469222][ T7240] binder: 7238:7240 ioctl 4018620d 200000000040 returned -16
[  280.033193][ T7255] loop6: detected capacity change from 0 to 512
[  280.085494][ T7255] EXT4-fs: Ignoring removed mblk_io_submit option
[  280.128935][ T7255] EXT4-fs (loop6): orphan cleanup on readonly fs
[  280.142929][ T7255] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[  280.191612][ T7255] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.314: attempt to clear invalid blocks 2 len 1
[  280.239213][ T7255] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  280.259796][ T7255] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.314: invalid indirect mapped block 1819239214 (level 0)
[  280.279474][ T7255] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.314: invalid indirect mapped block 1819239214 (level 1)
[  280.382260][ T7255] EXT4-fs (loop6): 1 truncate cleaned up
[  280.446747][ T7255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  280.553644][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.471470][ T7285] binder: BINDER_SET_CONTEXT_MGR already set
[  281.503411][ T7285] binder: 7284:7285 ioctl 4018620d 200000000040 returned -16
[  286.581414][ T7325] binder: 7322:7325 ioctl c0306201 200000000180 returned -14
[  286.595406][ T7326] binder: BINDER_SET_CONTEXT_MGR already set
[  286.611277][ T7326] binder: 7324:7326 ioctl 4018620d 200000000040 returned -16
[  287.115121][ T7337] loop4: detected capacity change from 0 to 512
[  287.130621][ T7337] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  287.162743][ T7337] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.331: invalid indirect mapped block 9 (level 0)
[  287.314550][ T7337] EXT4-fs (loop4): 1 truncate cleaned up
[  287.351177][ T7337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.619732][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.171148][ T7357] serio: Serial port ttyS3
[  289.906387][ T7371] binder: 7370:7371 ioctl c0306201 200000000180 returned -14
[  290.004785][ T7366] loop4: detected capacity change from 0 to 8192
[  296.597940][ T7419] binder: 7416:7419 ioctl c0306201 200000000180 returned -14
[  298.415615][ T7440] loop4: detected capacity change from 0 to 512
[  298.483838][ T7440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  298.687314][ T7440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[  298.717881][ T7440] System zones: 1-2, 4-12, 8-8
[  298.783703][ T7440] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.354: iget: bad i_size value: 38620345925642
[  298.875982][ T7440] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.354: couldn't read orphan inode 15 (err -117)
[  298.962089][ T7440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.726416][ T5824] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  299.958405][ T5824] usb 5-1: Using ep0 maxpacket: 32
[  300.002308][ T5824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  300.044547][ T5824] usb 5-1: config 0 has no interfaces?
[  300.050279][ T5824] usb 5-1: New USB device found, idVendor=07c0, idProduct=1525, bcdDevice= 0.00
[  300.103518][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.135198][ T5824] usb 5-1: config 0 descriptor??
[  302.239782][ T7443] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  302.321253][ T1192] usb 5-1: USB disconnect, device number 2
[  302.619931][ T2955] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  302.687359][ T2955] EXT4-fs (loop4): This should not happen!! Data will be lost
[  302.687359][ T2955] 
[  302.757181][ T2955] EXT4-fs (loop4): Total free blocks count 0
[  302.796178][ T2955] EXT4-fs (loop4): Free/Dirty block details
[  302.823924][ T2955] EXT4-fs (loop4): free_blocks=0
[  302.829279][ T2955] EXT4-fs (loop4): dirty_blocks=7460
[  302.843320][ T2955] EXT4-fs (loop4): Block reservation details
[  302.854746][ T2955] EXT4-fs (loop4): i_reserved_data_blocks=7460
[  302.984095][ T7462] loop6: detected capacity change from 0 to 40427
[  303.008670][ T2955] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  303.045457][ T7462] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  303.080973][ T7462] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  303.117016][ T7462] F2FS-fs (loop6): invalid crc value
[  303.148218][ T7462] F2FS-fs (loop6): Found nat_bits in checkpoint
[  303.305429][ T7462] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  303.334376][ T7462] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  306.471516][ T7510] loop4: detected capacity change from 0 to 4096
[  306.657466][ T6883] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  309.765037][ T7546] loop6: detected capacity change from 0 to 256
[  309.951957][ T7546] FAT-fs (loop6): Directory bread(block 64) failed
[  309.984834][ T7546] FAT-fs (loop6): Directory bread(block 65) failed
[  310.006335][ T7546] FAT-fs (loop6): Directory bread(block 66) failed
[  310.013237][ T7546] FAT-fs (loop6): Directory bread(block 67) failed
[  310.038915][ T7546] FAT-fs (loop6): Directory bread(block 68) failed
[  310.056650][ T7546] FAT-fs (loop6): Directory bread(block 69) failed
[  310.068643][ T7546] FAT-fs (loop6): Directory bread(block 70) failed
[  310.085650][ T7546] FAT-fs (loop6): Directory bread(block 71) failed
[  310.155364][ T7546] FAT-fs (loop6): Directory bread(block 72) failed
[  310.173670][ T7546] FAT-fs (loop6): Directory bread(block 73) failed
[  312.997401][ T7572] loop5: detected capacity change from 0 to 1024
[  313.075671][ T7572] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  313.198284][ T7572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  313.266746][ T7572] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.536262][ T7572] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm syz.5.380: lblock 0 mapped to illegal pblock 0 (length 1)
[  313.608769][ T7572] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  313.658047][ T7572] EXT4-fs (loop5): This should not happen!! Data will be lost
[  313.658047][ T7572] 
[  313.830934][ T2955] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm kworker/u4:7: lblock 0 mapped to illegal pblock 0 (length 1)
[  313.907783][ T2955] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  313.985717][ T2955] EXT4-fs (loop5): This should not happen!! Data will be lost
[  313.985717][ T2955] 
[  314.027400][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  314.261559][ T7588] loop4: detected capacity change from 0 to 256
[  314.333562][ T7588] exfat: Deprecated parameter 'utf8'
[  314.356542][ T7588] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  314.756313][ T7600] loop6: detected capacity change from 0 to 128
[  314.937889][   T28] audit: type=1804 audit(1778191334.553:252): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.386" name="/newroot/30/file0/bus" dev="loop6" ino=1048611 res=1 errno=0
[  315.560727][   T28] audit: type=1804 audit(1778191334.571:253): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.386" name="/newroot/30/file0/bus" dev="loop6" ino=1048611 res=1 errno=0
[  315.761122][   T28] audit: type=1804 audit(1778191334.617:254): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.386" name="/newroot/30/file0/bus" dev="loop6" ino=1048611 res=1 errno=0
[  316.731616][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'.
[  316.742277][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'.
[  316.752892][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'.
[  316.763312][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'.
[  316.773377][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'.
[  316.783751][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'.
[  316.794683][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'.
[  316.805677][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'.
[  316.816695][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'.
[  316.877536][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'.
[  320.479148][ T7637] loop5: detected capacity change from 0 to 16
[  320.901105][ T7637] erofs: (device loop5): mounted with root inode @ nid 36.
[  321.243255][ T7637] erofs: (device loop5): z_erofs_readahead: readahead error at folio 3 @ nid 89
[  321.604039][ T7637] syz.5.394: attempt to access beyond end of device
[  321.604039][ T7637] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  321.755853][ T7637] erofs: (device loop5): z_erofs_readahead: readahead error at folio 4 @ nid 89
[  321.829323][ T7637] syz.5.394: attempt to access beyond end of device
[  321.829323][ T7637] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16
[  321.915429][   T28] audit: type=1800 audit(1778191341.024:255): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.394" name="file2" dev="loop5" ino=89 res=0 errno=0
[  322.640764][ T7659] loop6: detected capacity change from 0 to 4096
[  322.649182][ T7659] EXT4-fs: Ignoring removed orlov option
[  322.717859][ T7659] EXT4-fs (loop6): Test dummy encryption mode enabled
[  322.819602][ T1192] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  322.833928][ T7659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.005330][   T28] audit: type=1800 audit(1778191342.040:256): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.400" name="file1" dev="loop6" ino=15 res=0 errno=0
[  323.031199][ T1192] usb 5-1: Using ep0 maxpacket: 8
[  323.063610][ T1192] usb 5-1: config 1 has an invalid interface number: 244 but max is 2
[  323.090271][ T1192] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  323.126893][ T1192] usb 5-1: config 1 has no interface number 2
[  323.158475][ T1192] usb 5-1: too many endpoints for config 1 interface 244 altsetting 255: 255, using maximum allowed: 30
[  323.214464][ T1192] usb 5-1: config 1 interface 244 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  323.254753][ T1192] usb 5-1: config 1 interface 244 has no altsetting 0
[  323.282897][ T1192] usb 5-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice= 0.40
[  323.293745][ T1192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.313841][ T1192] usb 5-1: Product: syz
[  323.325870][ T1192] usb 5-1: Manufacturer: syz
[  323.339453][ T1192] usb 5-1: SerialNumber: syz
[  323.451354][ T7668] loop5: detected capacity change from 0 to 8192
[  323.646120][ T7667] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  323.822160][ T1192] usb 5-1: USB disconnect, device number 3
[  323.942995][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.139351][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  327.189156][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  328.861574][ T7741] loop4: detected capacity change from 0 to 512
[  329.412259][ T7741] EXT4-fs error (device loop4): ext4_find_extent:909: inode #4: comm syz.4.414: inode has invalid extent depth: 7
[  329.786422][ T7741] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117
[  329.826377][ T7741] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  329.917572][ T7751] netlink: 'syz.6.415': attribute type 46 has an invalid length.
[  329.928293][ T7751] netlink: 'syz.6.415': attribute type 46 has an invalid length.
[  329.946296][ T7741] EXT4-fs (loop4): mount failed
[  331.564022][ T7767] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  332.250444][ T7775] loop4: detected capacity change from 0 to 256
[  332.300973][ T7775] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  332.311858][ T7775] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  332.370854][ T7775] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xaaf53d22, utbl_chksum : 0xe619d30d)
[  337.668963][ T7806] loop4: detected capacity change from 0 to 512
[  337.940320][ T7806] EXT4-fs: Ignoring removed nomblk_io_submit option
[  338.208370][ T7806] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  338.234210][ T7806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  338.242792][ T7806] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  338.337608][ T7806] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  338.387672][ T7806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  338.429283][ T7819] input: syz1 as /devices/virtual/input/input7
[  340.768069][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.209652][ T7895] loop5: detected capacity change from 0 to 1024
[  351.844232][ T7895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  351.857123][ T7895] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.576822][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  353.289140][ T7914] loop6: detected capacity change from 0 to 1024
[  353.397811][ T7914] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  353.535243][ T7914] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002]
[  353.601475][ T7914] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102
[  353.698244][ T7914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  355.782234][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.216987][ T1192] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  358.556639][ T7956] loop5: detected capacity change from 0 to 512
[  358.602020][ T7956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  358.655145][ T1192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.691526][ T1192] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  358.749164][ T7956] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.454: iget: bad i_size value: 38620345925642
[  358.773612][ T1192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.835708][ T1192] usb 5-1: config 0 descriptor??
[  358.841182][ T7956] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.454: couldn't read orphan inode 15 (err -117)
[  359.002584][ T7956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.389555][ T1192] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  360.399195][ T1192] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  360.409382][ T1192] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  360.417049][ T1192] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  360.460525][ T1192] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  360.985202][ T7966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.078322][ T7966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.220941][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.775502][ T1192] cp2112 0003:10C4:EA90.0002: error requesting version
[  361.811851][ T1192] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32
[  361.936046][ T1192] usb 5-1: USB disconnect, device number 4
[  362.692307][ T7984] loop5: detected capacity change from 0 to 1024
[  363.940130][ T7991] loop5: detected capacity change from 0 to 4096
[  364.120269][ T7991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.384522][   T28] audit: type=1800 audit(1778191380.721:257): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.459" name="file1" dev="loop5" ino=15 res=0 errno=0
[  364.874476][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.514800][ T8065] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  377.547481][ T8073] x_tables: duplicate underflow at hook 1
[  379.177850][ T4506] Bluetooth: hci2: Frame reassembly failed (-84)
[  380.436783][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.453439][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.265817][ T8107] loop6: detected capacity change from 0 to 256
[  381.300711][ T8107] exfat: Deprecated parameter 'namecase'
[  381.374602][ T8107] exfat: Deprecated parameter 'namecase'
[  381.381098][ T8107] exfat: Deprecated parameter 'namecase'
[  381.406962][ T5789] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  381.414971][ T5786] Bluetooth: hci2: command 0x1003 tx timeout
[  381.620706][ T8107] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d)
[  383.448809][ T8122] loop4: detected capacity change from 0 to 512
[  383.472815][ T8122] EXT4-fs: Ignoring removed nomblk_io_submit option
[  383.565322][ T8122] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  384.117799][ T8122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  384.482383][ T8122] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  384.726900][ T8122] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  384.786078][ T8122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  385.963434][ T8134] loop6: detected capacity change from 0 to 256
[  386.027977][ T8134] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d)
[  386.392097][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.617011][ T8146] loop5: detected capacity change from 0 to 16
[  386.632862][ T8146] erofs: (device loop5): mounted with root inode @ nid 36.
[  388.428722][ T8161] loop5: detected capacity change from 0 to 128
[  388.437734][ T8157] loop6: detected capacity change from 0 to 4096
[  388.455389][ T8157] EXT4-fs: inline encryption not supported
[  388.484470][ T8157] EXT4-fs (loop6): Test dummy encryption mode enabled
[  388.572104][ T8157] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  388.606496][ T8157] System zones: 0-5
[  388.665246][ T8157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.752006][   T28] audit: type=1804 audit(1778191409.517:258): pid=8157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.496" name="/newroot/55/file0/file0/file0" dev="loop6" ino=13 res=1 errno=0
[  389.128897][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.373915][   T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.233622][   T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.631963][   T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.690411][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  391.715135][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  392.613658][   T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.658098][ T8194] loop4: detected capacity change from 0 to 256
[  392.685441][ T8194] exfat: Deprecated parameter 'namecase'
[  392.875759][ T8194] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  393.186021][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  393.232694][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  393.245841][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  393.304112][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  393.327295][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  393.337209][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  393.358184][ T8207] loop4: detected capacity change from 0 to 512
[  393.366516][ T8207] EXT4-fs: Ignoring removed orlov option
[  393.372548][ T8207] EXT4-fs: Ignoring removed mblk_io_submit option
[  393.421691][ T8207] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.509: corrupted in-inode xattr: e_value size too large
[  393.481051][ T8207] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.509: couldn't read orphan inode 15 (err -117)
[  393.579294][ T8207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.657116][ T8215] loop6: detected capacity change from 0 to 256
[  393.706688][ T8215] exfat: Deprecated parameter 'utf8'
[  393.767018][ T8215] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  393.884127][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.132834][ T8218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  394.862870][ T8237] kvm: emulating exchange as write
[  394.922513][ T8203] chnl_net:caif_netlink_parms(): no params data found
[  395.650236][ T5789] Bluetooth: hci2: command tx timeout
[  396.624378][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.632484][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.641349][ T8203] bridge_slave_0: entered allmulticast mode
[  396.641468][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  396.649386][ T8203] bridge_slave_0: entered promiscuous mode
[  396.662344][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  396.665181][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.677493][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.679362][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  396.684971][ T8203] bridge_slave_1: entered allmulticast mode
[  396.718845][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  396.729562][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  396.739585][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  396.753549][ T8203] bridge_slave_1: entered promiscuous mode
[  397.120387][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.225390][ T8269] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  397.309973][   T59] hsr_slave_0: left promiscuous mode
[  397.380733][   T59] hsr_slave_1: left promiscuous mode
[  397.433124][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  397.447287][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.474670][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  397.516785][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  397.538559][   T59] bridge_slave_1: left allmulticast mode
[  397.550910][   T59] bridge_slave_1: left promiscuous mode
[  397.563343][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.576911][   T59] bridge_slave_0: left allmulticast mode
[  397.593963][   T59] bridge_slave_0: left promiscuous mode
[  397.600579][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.665202][   T59] veth1_macvtap: left promiscuous mode
[  397.679445][   T59] veth0_macvtap: left promiscuous mode
[  397.712603][   T59] veth1_vlan: left promiscuous mode
[  397.723545][   T59] veth0_vlan: left promiscuous mode
[  397.797940][ T5789] Bluetooth: hci2: command tx timeout
[  398.552479][ T8285] loop4: detected capacity change from 0 to 40427
[  398.592804][ T8285] F2FS-fs (loop4): inline encryption not supported
[  398.612207][ T8285] F2FS-fs (loop4): invalid crc value
[  398.638910][ T8285] F2FS-fs (loop4): Found nat_bits in checkpoint
[  398.759295][ T8285] F2FS-fs (loop4): Start checkpoint disabled!
[  398.773800][ T8285] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  399.004200][ T5789] Bluetooth: hci3: command tx timeout
[  399.098384][   T59] team0 (unregistering): Port device team_slave_1 removed
[  399.187207][   T59] team0 (unregistering): Port device team_slave_0 removed
[  399.302857][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.422629][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.468884][ T8300] loop4: detected capacity change from 0 to 512
[  399.549626][ T8300] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  399.565583][ T8300] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  399.575958][ T8300] System zones: 0-1, 15-15, 18-18, 34-34
[  399.583248][ T8300] EXT4-fs (loop4): orphan cleanup on readonly fs
[  399.590154][ T8300] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  399.609550][ T8300] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  399.625428][ T8300] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  399.646260][ T8300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.530: bg 0: block 40: padding at end of block bitmap is not set
[  399.670984][ T8300] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  399.682434][ T8300] EXT4-fs (loop4): 1 truncate cleaned up
[  399.692013][ T8300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  399.800464][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.031336][ T5789] Bluetooth: hci2: command tx timeout
[  400.225400][ T8310] loop4: detected capacity change from 0 to 512
[  400.236054][   T59] bond0 (unregistering): Released all slaves
[  400.240660][ T8310] EXT4-fs: Ignoring removed nomblk_io_submit option
[  400.264473][ T8310] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  400.274434][ T8310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  400.283467][ T8310] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  400.293897][ T8310] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  400.310669][ T8310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  400.543743][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.625944][ T8281] __nla_validate_parse: 10 callbacks suppressed
[  400.626094][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.6.525'.
[  400.766293][ T8203] team0: Port device team_slave_0 added
[  400.817519][ T8203] team0: Port device team_slave_1 added
[  401.012785][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.026049][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.085345][ T8203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.119292][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.150020][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.226147][ T5789] Bluetooth: hci3: command tx timeout
[  401.245405][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.247851][ T8203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.675141][ T8203] hsr_slave_0: entered promiscuous mode
[  401.724948][ T8203] hsr_slave_1: entered promiscuous mode
[  401.897216][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.950545][ T8257] chnl_net:caif_netlink_parms(): no params data found
[  402.275445][ T5789] Bluetooth: hci2: command tx timeout
[  402.581200][ T8345] loop4: detected capacity change from 0 to 4096
[  402.596834][ T8345] EXT4-fs: Ignoring removed bh option
[  402.733190][ T8345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.453309][ T5789] Bluetooth: hci3: command tx timeout
[  403.510605][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.196685][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.013324][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.023893][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.096179][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.118829][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.126560][ T8257] bridge_slave_0: entered allmulticast mode
[  405.188409][ T8257] bridge_slave_0: entered promiscuous mode
[  405.218660][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.307600][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.336880][ T8257] bridge_slave_1: entered allmulticast mode
[  405.354611][ T8257] bridge_slave_1: entered promiscuous mode
[  405.689268][ T5789] Bluetooth: hci3: command tx timeout
[  406.835487][ T8370] loop6: detected capacity change from 0 to 512
[  406.851024][ T8370] EXT4-fs: Ignoring removed nomblk_io_submit option
[  406.913696][ T8370] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  406.935072][ T8370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  406.943625][ T8370] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80)
[  406.992575][ T8257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.031697][ T8370] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features
[  407.060424][ T8257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.080394][ T8370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  407.950635][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.065619][ T8257] team0: Port device team_slave_0 added
[  408.079755][ T8379] loop4: detected capacity change from 0 to 512
[  408.100851][ T8379] EXT4-fs: Ignoring removed nobh option
[  408.102511][ T8257] team0: Port device team_slave_1 added
[  408.200124][ T8379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.238448][ T8379] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  408.322398][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.344990][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.368786][ T8379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  408.403173][ T8379] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  408.409419][ T8257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.467666][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.675732][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.693383][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.736421][ T8257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  408.763803][ T8203] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  408.786783][ T8203] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  408.888994][ T8203] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  408.945052][ T8203] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  409.047597][ T8257] hsr_slave_0: entered promiscuous mode
[  409.064177][ T8257] hsr_slave_1: entered promiscuous mode
[  409.084363][ T8257] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  409.102389][ T8257] Cannot create hsr debugfs directory
[  410.599910][ T8410] loop4: detected capacity change from 0 to 8192
[  410.629968][ T8410] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  410.977032][ T8421] loop4: detected capacity change from 0 to 512
[  411.013840][ T8421] EXT4-fs: Ignoring removed nomblk_io_submit option
[  411.055795][ T8421] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  411.065757][ T8421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  411.082137][ T8421] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  411.140952][ T8421] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  411.153172][ T8421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  411.565672][   T59] hsr_slave_0: left promiscuous mode
[  411.580824][   T59] hsr_slave_1: left promiscuous mode
[  411.590664][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.606479][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.616986][   T59] bridge_slave_1: left allmulticast mode
[  411.622881][   T59] bridge_slave_1: left promiscuous mode
[  411.629833][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.642021][   T59] bridge_slave_0: left allmulticast mode
[  411.652221][   T59] bridge_slave_0: left promiscuous mode
[  411.660779][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.694635][   T59] veth1_macvtap: left promiscuous mode
[  411.700840][   T59] veth0_macvtap: left promiscuous mode
[  411.707008][   T59] veth1_vlan: left promiscuous mode
[  411.717427][   T59] veth0_vlan: left promiscuous mode
[  411.962230][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.138656][ T8427] loop4: detected capacity change from 0 to 512
[  412.180617][ T8427] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  412.235508][ T8427] EXT4-fs (loop4): 1 truncate cleaned up
[  412.244431][ T8427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  412.358488][ T8430] netlink: 44 bytes leftover after parsing attributes in process `syz.6.552'.
[  412.451049][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.969180][   T59] team0 (unregistering): Port device team_slave_1 removed
[  413.031013][   T59] team0 (unregistering): Port device team_slave_0 removed
[  413.095951][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  413.163699][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  413.740691][   T59] bond0 (unregistering): Released all slaves
[  414.785814][ T8257] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  414.943449][ T8442] loop4: detected capacity change from 0 to 256
[  414.948282][ T8257] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  415.003087][ T8442] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  415.020493][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.081343][ T8257] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  415.274463][ T8257] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  415.298480][ T8447] loop4: detected capacity change from 0 to 512
[  415.310728][ T8447] EXT4-fs: quotafile must be on filesystem root
[  416.037891][ T8203] 8021q: adding VLAN 0 to HW filter on device team0
[  416.204567][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.212381][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.291888][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.299646][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.797232][ T8257] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.889585][ T8257] 8021q: adding VLAN 0 to HW filter on device team0
[  417.942342][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.949812][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.028287][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.035816][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.815596][ T8203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.414152][ T8257] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.887437][ T8203] veth0_vlan: entered promiscuous mode
[  419.922928][ T8203] veth1_vlan: entered promiscuous mode
[  420.050695][ T8203] veth0_macvtap: entered promiscuous mode
[  420.073125][ T8203] veth1_macvtap: entered promiscuous mode
[  420.139240][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  420.169764][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.185013][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  420.228351][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.291307][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.335951][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  420.367855][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.389844][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  420.420120][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.432929][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.505053][ T8203] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.538700][ T8203] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.548028][ T8203] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.591545][ T8203] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.881102][ T8257] veth0_vlan: entered promiscuous mode
[  421.013869][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.184043][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.664844][ T8257] veth1_vlan: entered promiscuous mode
[  421.837669][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.852106][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.968709][ T8257] veth0_macvtap: entered promiscuous mode
[  422.011657][ T8257] veth1_macvtap: entered promiscuous mode
[  422.080601][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.111423][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.132735][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.156733][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.179328][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  422.207948][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.228599][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.234023][   T28] audit: type=1326 audit(1778191440.847:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.6.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  422.251047][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.293956][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.309702][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.319543][   T28] audit: type=1326 audit(1778191440.885:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.6.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  422.331321][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.356060][ T5764] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  422.380079][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  422.383677][   T28] audit: type=1326 audit(1778191440.885:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.6.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  422.401068][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  422.454586][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.489059][ T8257] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.490273][   T28] audit: type=1326 audit(1778191440.885:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.6.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  422.506033][ T8257] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.557549][ T5764] usb 8-1: Using ep0 maxpacket: 32
[  422.565817][ T5764] usb 8-1: unable to get BOS descriptor or descriptor too short
[  422.569744][   T28] audit: type=1326 audit(1778191440.885:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.6.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  422.581480][ T5764] usb 8-1: config 251 has an invalid interface number: 19 but max is 0
[  422.615100][ T8257] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.635162][   T28] audit: type=1326 audit(1778191440.885:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.6.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  422.638175][ T5764] usb 8-1: config 251 has no interface number 0
[  422.662146][ T8257] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.701779][ T5764] usb 8-1: config 251 interface 19 has no altsetting 0
[  422.739999][   T28] audit: type=1326 audit(1778191440.885:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.6.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  422.743464][ T5764] usb 8-1: New USB device found, idVendor=04e6, idProduct=0001, bcdDevice= 2.00
[  422.817525][ T5764] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.830781][   T28] audit: type=1326 audit(1778191440.885:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.6.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  422.846421][ T5764] usb 8-1: Product: syz
[  422.910342][ T5764] usb 8-1: Manufacturer: syz
[  422.915116][ T5764] usb 8-1: SerialNumber: syz
[  422.974178][   T28] audit: type=1326 audit(1778191440.885:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.6.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  423.060177][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.068213][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.090713][   T28] audit: type=1326 audit(1778191440.904:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.6.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  423.183596][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.195755][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.209570][ T5764] usb-storage 8-1:251.19: USB Mass Storage device detected
[  423.260280][ T5764] usb-storage 8-1:251.19: This device (04e6,0001,0200 S 02 P 84) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  423.260280][ T5764]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  423.483356][ T5764] usb 8-1: USB disconnect, device number 2
[  423.815636][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.830746][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.835805][ T8556] loop4: detected capacity change from 0 to 512
[  424.896843][ T8556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.947089][ T8556] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  425.188176][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.662202][ T8579] loop7: detected capacity change from 0 to 512
[  427.854447][ T8587] loop8: detected capacity change from 0 to 128
[  427.865495][ T8579] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  427.965466][ T8579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  427.973887][ T8579] System zones: 1-12
[  427.978134][ T7967] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  428.116667][ T8579] EXT4-fs (loop7): 1 truncate cleaned up
[  428.159122][ T8579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.087719][ T8614] loop4: detected capacity change from 0 to 512
[  430.138628][ T8614] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  430.198281][ T8614] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.574: bad orphan inode 131083
[  430.268859][ T8614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.502052][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.651133][ T8203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.841244][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  430.841266][   T28] audit: type=1326 audit(1778191448.895:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.8.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  430.928381][   T28] audit: type=1326 audit(1778191448.895:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.8.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  431.010565][   T28] audit: type=1326 audit(1778191448.895:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.8.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  431.127555][   T28] audit: type=1326 audit(1778191448.895:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.8.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  431.200930][   T28] audit: type=1326 audit(1778191448.895:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.8.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  431.260563][   T28] audit: type=1326 audit(1778191448.895:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.8.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  431.337673][   T28] audit: type=1326 audit(1778191448.895:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.8.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  431.391609][   T28] audit: type=1326 audit(1778191448.895:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.8.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  431.442257][   T28] audit: type=1326 audit(1778191448.895:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.8.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  431.496457][   T28] audit: type=1326 audit(1778191448.989:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.8.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  431.925543][ T8623] loop4: detected capacity change from 0 to 40427
[  431.969113][ T8623] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  431.988008][ T8623] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  432.008137][ T8623] F2FS-fs (loop4): invalid crc value
[  432.018999][ T8623] F2FS-fs (loop4): Found nat_bits in checkpoint
[  432.203639][ T8623] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  432.245368][ T8623] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  435.131717][ T8656] loop6: detected capacity change from 0 to 40427
[  435.142285][ T8656] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x7ffff
[  435.187905][ T8656] F2FS-fs (loop6): invalid crc value
[  435.231769][ T8656] F2FS-fs (loop6): Found nat_bits in checkpoint
[  435.389277][ T8656] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  435.534888][   T72] kworker/u4:5: attempt to access beyond end of device
[  435.534888][   T72] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  435.610951][   T72] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  435.613112][ T8679] loop4: detected capacity change from 0 to 256
[  435.665176][ T8679] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  436.550878][ T8689] loop6: detected capacity change from 0 to 512
[  436.571465][ T8689] EXT4-fs: Ignoring removed nomblk_io_submit option
[  436.635889][ T8689] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  436.646597][ T8689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  436.656254][ T8689] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80)
[  436.670541][ T8689] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features
[  436.682963][ T8689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  437.628611][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.657445][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  437.657466][   T28] audit: type=1326 audit(1778191455.277:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.8.594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  437.755010][   T28] audit: type=1326 audit(1778191455.334:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.8.594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  437.780535][   T28] audit: type=1326 audit(1778191455.334:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.8.594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  437.864404][   T28] audit: type=1326 audit(1778191455.334:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.8.594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  437.968773][   T28] audit: type=1326 audit(1778191455.334:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.8.594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  437.997723][   T28] audit: type=1326 audit(1778191455.334:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.8.594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  438.065948][   T28] audit: type=1326 audit(1778191455.334:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.8.594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  438.134151][   T28] audit: type=1326 audit(1778191455.418:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.8.594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  438.244601][   T28] audit: type=1326 audit(1778191455.474:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.8.594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  438.330317][   T28] audit: type=1326 audit(1778191455.474:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.8.594" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  438.396574][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.600'.
[  438.629435][    T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  438.827526][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 64
[  438.865464][    T9] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  438.891298][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.961499][    T9] usb 8-1: config 0 descriptor??
[  438.982678][ T8711] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  439.447210][    T9] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  439.476368][    T9] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  439.490433][    T9] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  439.508991][    T9] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  439.515971][    T9] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  439.577845][    T9] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0
[  439.664681][    T9] usb 8-1: USB disconnect, device number 3
[  439.763216][ T8735] fido_id[8735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  441.350056][ T8755] loop7: detected capacity change from 0 to 512
[  441.387525][ T8755] EXT4-fs: Ignoring removed nomblk_io_submit option
[  441.407350][ T8755] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  441.425026][ T8755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  441.434153][ T8755] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80)
[  441.444197][ T8755] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features
[  441.454669][ T8755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  442.353557][ T8203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.624835][ T8764] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  442.635863][ T8764] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  442.719591][ T8764] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  442.736355][ T8764] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  442.938118][ T8764] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  443.158212][ T8764] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  443.316021][ T8764] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  443.587744][ T8764] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  443.697927][ T8786] loop7: detected capacity change from 0 to 256
[  444.474554][ T5789] Bluetooth: hci4: command 0x0c1a tx timeout
[  444.823924][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout
[  444.902699][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout
[  444.989340][ T8801] loop6: detected capacity change from 0 to 512
[  445.180865][ T8801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.496043][ T8801] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.526851][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout
[  446.185314][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.410386][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  446.410988][   T28] audit: type=1326 audit(1778191463.400:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.8.623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  447.109357][   T28] audit: type=1326 audit(1778191463.400:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.8.623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  447.145527][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout
[  447.152028][   T28] audit: type=1326 audit(1778191463.400:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.8.623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  447.304763][   T28] audit: type=1326 audit(1778191463.400:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.8.623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  447.352492][   T28] audit: type=1326 audit(1778191463.400:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.8.623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  447.593518][ T8825] loop7: detected capacity change from 0 to 16
[  448.185264][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout
[  448.211342][ T8825] erofs: (device loop7): mounted with root inode @ nid 36.
[  448.261090][   T28] audit: type=1326 audit(1778191463.400:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.8.623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  448.306037][ T8832] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  448.486885][   T28] audit: type=1326 audit(1778191463.410:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.8.623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  448.689764][   T28] audit: type=1326 audit(1778191463.410:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.8.623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  448.806467][   T28] audit: type=1326 audit(1778191463.410:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.8.623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  449.385058][   T51] Bluetooth: hci2: command 0x0c1a tx timeout
[  449.466381][   T28] audit: type=1326 audit(1778191463.447:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.8.623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  450.091417][ T8853] loop4: detected capacity change from 0 to 1024
[  450.127980][ T8853] EXT4-fs: Ignoring removed nomblk_io_submit option
[  450.219993][ T8853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  450.373178][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  450.487921][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.371029][ T8876] loop7: detected capacity change from 0 to 512
[  452.423412][ T8876] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[  452.451409][ T8876] EXT4-fs (loop7): group descriptors corrupted!
[  453.604466][ T8889] loop4: detected capacity change from 0 to 128
[  453.924427][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.019065][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.096278][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.284608][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.320073][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.336013][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.363415][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.423401][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.453254][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.469073][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.486091][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.496982][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.517068][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.558194][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  454.691348][ T8892] 9pnet_fd: p9_fd_create_tcp (8892): problem connecting socket to 127.0.0.1
[  456.014253][ T8917] loop7: detected capacity change from 0 to 512
[  456.033832][ T8917] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  456.161352][ T8917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  456.258666][ T8917] System zones: 1-12
[  456.324976][ T8917] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  456.520326][ T8917] EXT4-fs (loop7): 1 truncate cleaned up
[  456.770742][ T8917] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.142666][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  457.156224][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  458.680820][ T8946] loop4: detected capacity change from 0 to 512
[  458.715144][ T8946] EXT4-fs: Ignoring removed nomblk_io_submit option
[  458.748149][ T8946] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  458.764126][ T8946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  458.777686][ T8946] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  458.788272][ T8946] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  458.799411][ T8946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  458.909557][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.294018][ T8958] loop6: detected capacity change from 0 to 512
[  459.344032][ T8958] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  459.386700][ T8958] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.656: iget: bad i_size value: 38620345925642
[  459.460229][ T8958] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.656: couldn't read orphan inode 15 (err -117)
[  459.543301][ T8958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.703542][ T8958] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.656: bg 0: block 5: invalid block bitmap
[  459.791853][ T8958] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  459.820883][ T8958] EXT4-fs (loop6): This should not happen!! Data will be lost
[  459.820883][ T8958] 
[  459.832775][ T8958] EXT4-fs (loop6): Total free blocks count 0
[  459.859490][ T8958] EXT4-fs (loop6): Free/Dirty block details
[  459.882215][ T8958] EXT4-fs (loop6): free_blocks=0
[  459.892862][ T8958] EXT4-fs (loop6): dirty_blocks=1
[  459.909139][ T8958] EXT4-fs (loop6): Block reservation details
[  459.924831][ T8958] EXT4-fs (loop6): i_reserved_data_blocks=1
[  460.060610][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.473995][ T8203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.452134][ T8954] loop4: detected capacity change from 0 to 40427
[  461.524916][ T8954] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  461.553822][ T8954] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  461.702145][ T8954] F2FS-fs (loop4): Found nat_bits in checkpoint
[  461.758350][ T8982] loop6: detected capacity change from 0 to 1024
[  461.860002][ T8982] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  461.926172][ T8954] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  461.951952][ T8954] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  462.037633][ T8982] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.659: lblock 2 mapped to illegal pblock 2 (length 1)
[  462.119951][ T8982] __quota_error: 4 callbacks suppressed
[  462.119972][ T8982] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  462.179025][ T8982] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.659: lblock 0 mapped to illegal pblock 48 (length 1)
[  462.235803][ T8982] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  462.287623][ T8982] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.659: Failed to acquire dquot type 0
[  462.338255][ T8982] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  462.366255][ T8982] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.659: mark_inode_dirty error
[  462.415544][ T8982] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  462.495062][ T8982] EXT4-fs (loop6): 1 orphan inode deleted
[  462.520028][   T72] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  462.663440][ T8982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  462.766135][   T72] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  462.913168][   T72] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0
[  463.078764][ T8998] loop7: detected capacity change from 0 to 512
[  463.086742][ T8998] EXT4-fs: Ignoring removed nomblk_io_submit option
[  463.172123][ T8998] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  463.245684][ T8998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  463.319156][ T8998] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80)
[  463.421127][ T8998] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features
[  463.493961][ T8998] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  463.550942][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.749619][   T72] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  463.776916][ T8203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.829069][   T72] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  463.894321][   T72] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0
[  464.041913][ T6667] EXT4-fs error (device loop6): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0
[  464.125710][ T6667] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  464.163667][ T9006] loop4: detected capacity change from 0 to 128
[  464.184540][ T6667] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[  466.728888][ T9028] xt_TPROXY: Can be used only with -p tcp or -p udp
[  468.873522][ T5842] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  469.083580][ T5842] usb 5-1: Using ep0 maxpacket: 8
[  469.127659][ T5842] usb 5-1: unable to get BOS descriptor or descriptor too short
[  469.156220][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  469.261862][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  469.317931][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  469.349533][ T5842] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  469.388707][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  469.474809][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  469.504000][ T5842] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  469.577519][ T5842] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  469.589079][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.618013][ T5842] usb 5-1: Product: syz
[  469.632274][ T5842] usb 5-1: Manufacturer: syz
[  469.646434][ T5842] usb 5-1: SerialNumber: syz
[  469.672897][ T5842] usb 5-1: config 0 descriptor??
[  469.718128][ T9052] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  469.730400][ T5842] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  470.019749][ T5842] snd-usb-audio: probe of 5-1:0.0 failed with error -12
[  470.068551][ T5842] usb 5-1: USB disconnect, device number 5
[  470.253834][ T9072] udevd[9072]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  470.324881][ T9075] loop6: detected capacity change from 0 to 512
[  470.349136][ T9059] loop7: detected capacity change from 0 to 40427
[  470.361923][ T9075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  470.418815][ T9059] F2FS-fs (loop7): heap/no_heap options were deprecated
[  470.446172][ T9059] F2FS-fs (loop7): build fault injection attr: rate: 19, type: 0x7ffff
[  470.469569][ T9075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  470.498370][ T9075] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  471.511451][ T9099] loop4: detected capacity change from 0 to 256
[  471.532224][ T9099] exfat: Deprecated parameter 'namecase'
[  471.573455][ T9099] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d)
[  471.667914][   T28] audit: type=1800 audit(1778191488.268:322): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.683" name="file1" dev="loop4" ino=1048644 res=0 errno=0
[  471.886482][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.992020][    T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  475.220986][    T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  475.241056][    T8] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.292091][    T8] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  475.336377][    T8] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  475.397556][    T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  475.426206][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.435107][    T8] usb 8-1: Product: syz
[  475.445538][    T8] usb 8-1: Manufacturer: syz
[  475.467076][    T8] usb 8-1: SerialNumber: syz
[  475.512832][    T8] cdc_mbim 8-1:1.0: skipping garbage
[  475.744578][ T9147] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  477.849222][ T9179] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  478.052189][    T8] cdc_mbim 8-1:1.0: bind() failure
[  478.071248][    T8] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  478.093900][    T8] cdc_ncm 8-1:1.1: bind() failure
[  478.127277][    T8] usb 8-1: USB disconnect, device number 4
[  478.265447][ T9196] loop7: detected capacity change from 0 to 512
[  478.272853][ T9196] EXT4-fs: Ignoring removed nomblk_io_submit option
[  478.375367][ T9196] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  478.401968][ T9196] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  478.496218][ T9196] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80)
[  478.548478][ T9196] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features
[  478.586478][ T9196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  478.802293][ T9205] loop6: detected capacity change from 0 to 512
[  478.921384][ T9205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.947395][ T9205] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  479.796425][ T6667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.977505][ T8203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.281351][ T5842] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  482.871573][ T5842] usb 5-1: config 0 has an invalid interface number: 175 but max is 0
[  482.891543][ T5842] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  482.908563][ T9252] overlayfs: failed to clone upperpath
[  482.983343][ T5842] usb 5-1: config 0 has no interface number 0
[  483.016961][ T5842] usb 5-1: config 0 interface 175 altsetting 0 has an invalid endpoint with address 0xBC, skipping
[  483.042493][ T5842] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  483.063970][ T5842] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[  483.079936][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.096415][ T5842] usb 5-1: Product: syz
[  483.109108][ T5842] usb 5-1: Manufacturer: syz
[  483.113808][ T5842] usb 5-1: SerialNumber: syz
[  483.129437][   T23] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  483.140637][ T5842] usb 5-1: config 0 descriptor??
[  483.157883][ T5842] symbolserial 5-1:0.175: required endpoints missing
[  483.341574][   T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  483.369594][   T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  483.382960][ T5842] usb 5-1: USB disconnect, device number 6
[  483.860798][ T5824] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  483.951950][   T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  483.961908][   T23] usb 8-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  483.971235][   T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.996689][   T23] usb 8-1: config 0 descriptor??
[  484.082479][ T5824] usb 7-1: Using ep0 maxpacket: 8
[  484.105876][ T5824] usb 7-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.135396][ T5824] usb 7-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  484.432320][   T23] hid (null): report_id 0 is invalid
[  484.515614][   T23] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[  484.570040][   T23] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[  484.620992][   T23] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[  484.682320][   T23] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[  484.717409][   T23] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[  484.765511][   T23] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0
[  484.793624][   T23] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x4
[  484.820696][   T23] magicmouse 0003:05AC:0324.0004: report_id 0 is invalid
[  484.848483][   T23] magicmouse 0003:05AC:0324.0004: item 0 0 1 8 parsing failed
[  484.874329][   T23] magicmouse 0003:05AC:0324.0004: magicmouse hid parse failed
[  484.903601][   T23] magicmouse: probe of 0003:05AC:0324.0004 failed with error -22
[  484.957645][   T23] usb 8-1: USB disconnect, device number 5
[  485.002003][ T5842] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  485.230828][ T5842] usb 5-1: Using ep0 maxpacket: 16
[  485.258072][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.311589][ T9296] overlayfs: failed to clone upperpath
[  485.433690][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.503417][ T5842] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  485.588535][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.651888][ T5842] usb 5-1: config 0 descriptor??
[  485.736393][ T5824] usb 7-1: config 0 interface 0 has no altsetting 0
[  485.743121][ T5824] usb 7-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  485.763862][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.888797][ T5824] usb 7-1: config 0 descriptor??
[  486.424317][ T1192] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  486.752568][ T5842] usb 5-1: string descriptor 0 read error: -71
[  486.811382][ T5842] usb 5-1: Max retries (5) exceeded reading string descriptor 200
[  486.819386][ T5842] letsketch: probe of 0003:6161:4D15.0005 failed with error -32
[  486.879433][ T5842] usb 5-1: USB disconnect, device number 7
[  486.899462][ T1192] usb 8-1: Using ep0 maxpacket: 8
[  486.944556][ T1192] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  486.978237][ T1192] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  487.015197][ T1192] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  487.054625][ T1192] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  487.103210][ T1192] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  487.128145][ T9309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.192822][ T9309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.202754][ T1192] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  487.262261][ T1192] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.783514][ T1192] usb 8-1: usb_control_msg returned -32
[  487.797812][ T1192] usbtmc 8-1:16.0: can't read capabilities
[  488.037126][ T5824] usbhid 7-1:0.0: can't add hid device: -71
[  488.043231][ T5824] usbhid: probe of 7-1:0.0 failed with error -71
[  488.053411][ T5824] usb 7-1: USB disconnect, device number 3
[  488.248775][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.258919][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.271016][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.284690][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.296663][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.306590][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.421547][ T9327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.443641][ T9327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.704197][   T28] audit: type=1326 audit(1778191504.857:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.8.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  488.746297][   T28] audit: type=1326 audit(1778191504.857:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.8.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  489.238804][   T28] audit: type=1326 audit(1778191504.857:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.8.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  489.331653][   T28] audit: type=1326 audit(1778191504.857:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.8.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  489.386347][ T9306] usbtmc 8-1:16.0: usb_control_msg returned -71
[  489.387380][    T9] usb 8-1: USB disconnect, device number 6
[  489.399162][ T9322] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -19
[  489.399297][   T28] audit: type=1326 audit(1778191504.857:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.8.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  490.109263][   T28] audit: type=1326 audit(1778191504.866:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.8.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  490.289876][   T28] audit: type=1326 audit(1778191504.866:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.8.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  490.443550][   T28] audit: type=1326 audit(1778191504.866:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.8.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  490.595267][   T28] audit: type=1326 audit(1778191504.866:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.8.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  490.632340][   T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  490.727259][   T28] audit: type=1326 audit(1778191504.915:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.8.722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  490.850316][   T23] usb 7-1: Using ep0 maxpacket: 32
[  490.873660][   T23] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  490.911860][   T23] usb 7-1: config 0 has no interface number 0
[  490.952412][   T23] usb 7-1: config 0 interface 184 has no altsetting 0
[  491.003983][   T23] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  491.070414][   T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.142346][   T23] usb 7-1: Product: syz
[  491.146639][   T23] usb 7-1: Manufacturer: syz
[  491.187809][   T23] usb 7-1: SerialNumber: syz
[  491.234192][   T23] usb 7-1: config 0 descriptor??
[  491.286041][   T23] smsc75xx v1.0.0
[  491.515547][ T9355] loop7: detected capacity change from 0 to 4096
[  491.866892][ T7904] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  491.984373][   T23] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  492.005533][   T23] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  494.043918][    T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  495.105889][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  495.105907][   T28] audit: type=1326 audit(1778191511.147:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.8.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  495.138789][    T8] usb 5-1: Using ep0 maxpacket: 16
[  495.295462][   T28] audit: type=1326 audit(1778191511.147:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.8.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  495.400674][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  495.413138][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  495.424007][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  495.436954][   T23] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71
[  495.437016][   T23] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71
[  495.448229][    T8] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  495.448265][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.485090][   T28] audit: type=1326 audit(1778191511.147:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.8.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  495.515689][    T8] usb 5-1: config 0 descriptor??
[  495.591209][   T23] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  495.600694][   T28] audit: type=1326 audit(1778191511.147:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.8.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  495.611402][   T23] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  496.304509][   T28] audit: type=1326 audit(1778191511.147:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.8.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  496.351642][   T23] smsc75xx: probe of 7-1:0.184 failed with error -71
[  496.516855][   T23] usb 7-1: USB disconnect, device number 4
[  496.611786][   T28] audit: type=1326 audit(1778191511.147:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.8.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  496.898351][   T28] audit: type=1326 audit(1778191511.147:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.8.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  497.210155][    T8] usbhid 5-1:0.0: can't add hid device: -71
[  497.216250][    T8] usbhid: probe of 5-1:0.0 failed with error -71
[  497.225442][    T8] usb 5-1: USB disconnect, device number 8
[  497.736844][ T9413] loop6: detected capacity change from 0 to 4096
[  497.800537][   T28] audit: type=1326 audit(1778191511.147:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.8.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  497.863804][   T28] audit: type=1326 audit(1778191511.156:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.8.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  497.920933][   T28] audit: type=1326 audit(1778191511.194:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.8.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  498.149273][ T5823] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  498.185323][ T7904] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  499.358149][ T5823] usb 8-1: Using ep0 maxpacket: 8
[  499.368814][ T5823] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  499.377097][ T5823] usb 8-1: config 0 has no interface number 0
[  499.383261][ T5823] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  500.723878][ T5823] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  500.893603][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  500.893778][   T28] audit: type=1326 audit(1778191516.771:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.6.742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  501.181977][ T5823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.198121][ T5823] usb 8-1: config 0 descriptor??
[  501.205857][ T5823] usb 8-1: can't set config #0, error -71
[  501.213662][ T5823] usb 8-1: USB disconnect, device number 7
[  501.223447][   T28] audit: type=1326 audit(1778191516.771:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.6.742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  501.280233][   T28] audit: type=1326 audit(1778191516.771:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.6.742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  501.371125][   T28] audit: type=1326 audit(1778191516.771:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.6.742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  501.486235][   T28] audit: type=1326 audit(1778191516.771:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.6.742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  501.576758][   T28] audit: type=1326 audit(1778191516.781:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.6.742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  501.657553][   T28] audit: type=1326 audit(1778191516.781:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.6.742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  501.717147][   T28] audit: type=1326 audit(1778191516.781:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.6.742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  501.763762][ T5823] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  501.787654][   T28] audit: type=1326 audit(1778191516.781:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.6.742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  501.867064][   T28] audit: type=1326 audit(1778191516.822:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.6.742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  502.011448][ T5823] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  502.034642][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.059645][ T5823] usb 8-1: Product: syz
[  502.074627][ T5823] usb 8-1: Manufacturer: syz
[  502.090755][ T5823] usb 8-1: SerialNumber: syz
[  502.125621][ T5823] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  502.224030][    T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  502.590520][ T9468] loop6: detected capacity change from 0 to 4096
[  502.637000][   T27] usb 8-1: USB disconnect, device number 8
[  502.963956][ T9074] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  504.313977][    T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  504.352868][    T9] ath9k_htc: Failed to initialize the device
[  504.371998][   T27] usb 8-1: ath9k_htc: USB layer deinitialized
[  504.797794][ T9491] loop4: detected capacity change from 0 to 512
[  504.826003][ T9491] EXT4-fs: Ignoring removed nomblk_io_submit option
[  505.025097][ T9491] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  505.048518][ T9491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  505.057054][ T9491] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  505.066764][ T9491] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  505.077521][ T9491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  505.178506][ T9501] syzkaller0: entered promiscuous mode
[  505.412690][ T9501] syzkaller0: entered allmulticast mode
[  505.889878][ T9514] loop7: detected capacity change from 0 to 4096
[  505.963610][ T9074] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  507.248359][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  507.248379][   T28] audit: type=1326 audit(1778191522.469:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  507.306761][   T28] audit: type=1326 audit(1778191522.469:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  507.424694][   T28] audit: type=1326 audit(1778191522.479:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  507.547862][   T28] audit: type=1326 audit(1778191522.479:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  507.650842][   T28] audit: type=1326 audit(1778191522.479:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  507.779855][   T28] audit: type=1326 audit(1778191522.490:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  507.901400][   T28] audit: type=1326 audit(1778191522.490:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  507.975416][   T28] audit: type=1326 audit(1778191522.490:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  508.073421][   T28] audit: type=1326 audit(1778191522.490:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  508.170053][   T28] audit: type=1326 audit(1778191522.574:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbf99cdd9 code=0x7ffc0000
[  508.638558][ T9548] syz.8.770[9548] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  508.638812][ T9548] syz.8.770[9548] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  508.819508][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.897584][ T9553] overlayfs: failed to clone upperpath
[  509.373976][ T9566] loop7: detected capacity change from 0 to 512
[  509.439604][ T9566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  509.499962][ T9566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  509.546495][ T9566] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  510.146132][ T8203] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.482466][ T9605] loop7: detected capacity change from 0 to 128
[  512.667898][ T9605] EXT4-fs (loop7): Test dummy encryption mode enabled
[  514.431982][ T9605] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  514.446549][ T9605] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  514.732132][ T8203] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  514.853856][ T9621] loop4: detected capacity change from 0 to 4096
[  514.955687][ T9074] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  516.569847][ T9646] binder: 9645:9646 ioctl c0306201 200000000180 returned -14
[  516.627764][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  516.627782][   T28] audit: type=1326 audit(1778191532.111:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.8.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  516.712593][   T28] audit: type=1326 audit(1778191532.120:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.8.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  516.838435][   T28] audit: type=1326 audit(1778191532.120:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.8.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  516.966933][   T28] audit: type=1326 audit(1778191532.120:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.8.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  517.658709][   T28] audit: type=1326 audit(1778191532.120:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.8.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  517.737840][   T28] audit: type=1326 audit(1778191532.120:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.8.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  517.917163][   T28] audit: type=1326 audit(1778191532.120:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.8.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  518.056671][   T28] audit: type=1326 audit(1778191532.120:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.8.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  518.156330][   T28] audit: type=1326 audit(1778191532.148:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.8.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  518.360903][ T9671] loop7: detected capacity change from 0 to 128
[  518.406364][   T28] audit: type=1326 audit(1778191532.166:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.8.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101b19cdd9 code=0x7ffc0000
[  518.591064][ T9671] EXT4-fs (loop7): Test dummy encryption mode enabled
[  518.765562][ T9671] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  518.779883][ T9671] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  519.862101][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  519.872570][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  520.781622][ T8203] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  520.997498][ T9700] loop4: detected capacity change from 0 to 4096
[  521.146614][ T9074] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  523.893087][ T9735] loop4: detected capacity change from 0 to 2048
[  523.976156][ T9735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.238932][ T9748] binder: 9747:9748 ioctl c0306201 0 returned -14
[  524.265486][ T9748] binder: 9747:9748 ioctl c0306201 200000000180 returned -14
[  527.770599][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  527.785216][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  527.797305][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  527.830229][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  527.896673][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  527.906794][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  528.804913][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.973979][   T23] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  529.059488][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  529.059504][   T28] audit: type=1326 audit(1778191543.615:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6add9cdd9 code=0x7ffc0000
[  529.121050][   T28] audit: type=1326 audit(1778191543.661:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6add9cdd9 code=0x7ffc0000
[  529.171186][ T9796] netlink: 'syz.8.822': attribute type 2 has an invalid length.
[  529.179178][   T28] audit: type=1326 audit(1778191543.661:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6add9cdd9 code=0x7ffc0000
[  529.200849][   T23] usb 8-1: Using ep0 maxpacket: 16
[  529.229543][   T28] audit: type=1326 audit(1778191543.661:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6add9cdd9 code=0x7ffc0000
[  529.254064][   T28] audit: type=1326 audit(1778191543.679:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc6add9cdd9 code=0x7ffc0000
[  529.259667][   T23] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  529.281890][   T28] audit: type=1326 audit(1778191543.679:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6add9cdd9 code=0x7ffc0000
[  529.281941][   T28] audit: type=1326 audit(1778191543.679:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6add9cdd9 code=0x7ffc0000
[  529.282204][   T28] audit: type=1326 audit(1778191543.679:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc6add9cdd9 code=0x7ffc0000
[  529.417389][   T28] audit: type=1326 audit(1778191543.679:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9797 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc6add9cdd9 code=0x7ffc0000
[  529.439166][   T23] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  529.488461][   T23] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  529.522735][   T23] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  529.533015][   T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.548079][   T23] usb 8-1: Product: syz
[  529.552497][   T23] usb 8-1: Manufacturer: syz
[  529.554228][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.568368][   T23] usb 8-1: SerialNumber: syz
[  529.647139][ T1192] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  529.861758][ T1192] usb 5-1: Using ep0 maxpacket: 8
[  529.952452][ T1192] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  530.301504][ T1192] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  530.309100][ T9782] chnl_net:caif_netlink_parms(): no params data found
[  530.316664][ T5789] Bluetooth: hci0: command tx timeout
[  530.354762][ T1192] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  530.382042][ T1192] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  530.491833][ T1192] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  530.511610][   T23] usb 8-1: 0:2 : does not exist
[  530.518169][ T1192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.526655][ T1192] usb 5-1: Product: syz
[  530.530943][ T1192] usb 5-1: Manufacturer: syz
[  530.536350][ T1192] usb 5-1: SerialNumber: syz
[  530.624773][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.746620][ T5789] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  530.799452][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.978580][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.090931][ T9782] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.102938][ T9782] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.116129][ T9782] bridge_slave_0: entered allmulticast mode
[  531.137443][ T9782] bridge_slave_0: entered promiscuous mode
[  531.150348][ T9782] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.157682][ T9782] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.166089][ T9782] bridge_slave_1: entered allmulticast mode
[  531.174793][ T9782] bridge_slave_1: entered promiscuous mode
[  531.274519][ T9782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  531.327150][ T9782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  531.621134][ T9782] team0: Port device team_slave_0 added
[  531.758925][ T9782] team0: Port device team_slave_1 added
[  531.778112][ T9844] loop4: detected capacity change from 0 to 4096
[  531.845725][ T9844] EXT4-fs (loop4): Test dummy encryption mode enabled
[  531.857159][   T23] usb 8-1: 1:0: failed to get current value for ch 0 (-22)
[  531.911779][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.923805][ T9844] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003]
[  531.940243][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.966667][   T23] usb 8-1: USB disconnect, device number 9
[  532.027074][ T9844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.068230][ T9782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.112173][ T1192] usb 5-1: USB disconnect, device number 9
[  532.149098][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.156124][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.188432][ T9844] EXT4-fs (loop4): shut down requested (0)
[  532.241746][ T9855] udevd[9855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  532.266289][ T9782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.359231][ T9856] udevd[9856]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  532.476473][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.590533][ T5789] Bluetooth: hci0: command tx timeout
[  533.197243][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  534.824787][ T5789] Bluetooth: hci0: command tx timeout
[  536.429870][ T9782] hsr_slave_0: entered promiscuous mode
[  536.479454][ T9782] hsr_slave_1: entered promiscuous mode
[  536.554831][ T9782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  536.562488][ T9782] Cannot create hsr debugfs directory
[  536.640802][ T9886] binder: 9885:9886 ioctl c0306201 200000000180 returned -14
[  537.079039][ T5789] Bluetooth: hci0: command tx timeout
[  538.615035][ T9909] loop7: detected capacity change from 0 to 1024
[  538.661001][ T9909] EXT4-fs: Ignoring removed orlov option
[  538.686500][ T9909] EXT4-fs: inline encryption not supported
[  538.710972][ T9909] EXT4-fs: Ignoring removed bh option
[  538.716613][ T9909] EXT4-fs: Ignoring removed bh option
[  538.763714][ T9909] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block
[  538.763714][ T9909] 
[  538.916433][ T9074] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  539.008919][ T9912] loop4: detected capacity change from 0 to 2048
[  539.158997][ T9912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  539.265764][ T9912] Bluetooth: MGMT ver 1.22
[  539.363865][ T9782] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  539.390645][ T9782] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  539.424922][ T9782] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  539.685102][ T9782] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  539.879677][   T11] hsr_slave_0: left promiscuous mode
[  539.893705][   T11] hsr_slave_1: left promiscuous mode
[  539.909267][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.918210][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.929856][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.938900][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.947313][   T11] bridge_slave_1: left allmulticast mode
[  539.953136][   T11] bridge_slave_1: left promiscuous mode
[  539.960496][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.970296][   T11] bridge_slave_0: left allmulticast mode
[  539.976296][   T11] bridge_slave_0: left promiscuous mode
[  539.983484][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.035106][   T11] veth1_macvtap: left promiscuous mode
[  540.053854][   T11] veth0_macvtap: left promiscuous mode
[  540.067263][   T11] veth1_vlan: left promiscuous mode
[  540.096467][   T11] veth0_vlan: left promiscuous mode
[  540.629609][ T9918] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  541.208728][ T6370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.450374][ T9947] loop4: detected capacity change from 0 to 512
[  541.484722][ T9947] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  541.523179][ T9947] EXT4-fs (loop4): 1 truncate cleaned up
[  541.546732][ T9947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  541.732385][ T9074] udevd[9074]: incorrect ext4 checksum on /dev/loop4
[  541.740450][ T9947] general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN
[  541.752287][ T9947] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[  541.760755][ T9947] CPU: 0 PID: 9947 Comm: syz.4.846 Not tainted syzkaller #0
[  541.768218][ T9947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  541.778504][ T9947] RIP: 0010:utf8nlookup+0x39/0xa50
[  541.783759][ T9947] Code: 89 44 24 10 49 89 ce 48 89 14 24 89 f5 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 c2 56 f4 fe 49 8d 5d 18 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 d8 8d 4c ff 48 8b 1b 48 83 c3 30
[  541.803676][ T9947] RSP: 0018:ffffc9000393f420 EFLAGS: 00010206
[  541.809881][ T9947] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000080000
[  541.817889][ T9947] RDX: ffffc90019ba0000 RSI: 000000000000048d RDI: 000000000000048e
[  541.825931][ T9947] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  541.833925][ T9947] R10: ffffc9000393f5b8 R11: fffff52000727eba R12: dffffc0000000000
[  541.842088][ T9947] R13: 0000000000000000 R14: ffff888077957678 R15: dffffc0000000000
[  541.850072][ T9947] FS:  00007fc6aebe96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  541.859026][ T9947] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  541.865618][ T9947] CR2: 00007f8448762000 CR3: 0000000030d78000 CR4: 00000000003506f0
[  541.873722][ T9947] Call Trace:
[  541.877103][ T9947]  <TASK>
[  541.880073][ T9947]  ? __kasan_kmalloc+0x8f/0xa0
[  541.884894][ T9947]  ? ext4_fname_prepare_lookup+0x230/0x3d0
[  541.890720][ T9947]  ? ext4_lookup+0x125/0x710
[  541.895337][ T9947]  ? __lookup_slow+0x2a1/0x400
[  541.900125][ T9947]  ? lookup_slow+0x53/0x70
[  541.904554][ T9947]  utf8byte+0x34f/0x1370
[  541.908812][ T9947]  ? utf8ncursor+0x170/0x210
[  541.913411][ T9947]  utf8_casefold+0x146/0x260
[  541.918024][ T9947]  ? utf8_strncasecmp_folded+0x280/0x280
[  541.923677][ T9947]  ext4_fname_setup_ci_filename+0x1d5/0x430
[  541.929615][ T9947]  ext4_fname_prepare_lookup+0x230/0x3d0
[  541.935285][ T9947]  ? ext4_fname_free_filename+0xb0/0xb0
[  541.940853][ T9947]  ? d_alloc_parallel+0x13f6/0x1530
[  541.946070][ T9947]  ext4_lookup+0x125/0x710
[  541.950520][ T9947]  ? d_alloc_parallel+0x33e/0x1530
[  541.955643][ T9947]  ? ext4_add_entry+0xd90/0xd90
[  541.960540][ T9947]  ? __init_waitqueue_head+0xa9/0x150
[  541.965932][ T9947]  __lookup_slow+0x2a1/0x400
[  541.970636][ T9947]  ? lookup_one_len+0x2e0/0x2e0
[  541.975523][ T9947]  ? try_to_unlazy+0x34c/0x5a0
[  541.980300][ T9947]  ? down_read+0x1ac/0x2e0
[  541.984730][ T9947]  lookup_slow+0x53/0x70
[  541.988983][ T9947]  link_path_walk+0x990/0xe30
[  541.993689][ T9947]  ? handle_lookup_down+0x130/0x130
[  541.998997][ T9947]  ? verify_lock_unused+0x140/0x140
[  542.004314][ T9947]  __filename_parentat+0x22a/0x650
[  542.009470][ T9947]  ? vfs_path_parent_lookup+0x50/0x50
[  542.014899][ T9947]  ? __might_fault+0xaa/0x120
[  542.019693][ T9947]  do_unlinkat+0xfa/0x590
[  542.024042][ T9947]  ? fsnotify_link_count+0xf0/0xf0
[  542.029189][ T9947]  ? getname_flags+0x20a/0x500
[  542.033983][ T9947]  __x64_sys_unlinkat+0xd5/0xe0
[  542.038852][ T9947]  do_syscall_64+0x55/0xa0
[  542.043283][ T9947]  ? clear_bhb_loop+0x40/0x90
[  542.047973][ T9947]  ? clear_bhb_loop+0x40/0x90
[  542.052689][ T9947]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.058642][ T9947] RIP: 0033:0x7fc6add9cdd9
[  542.063160][ T9947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.083072][ T9947] RSP: 002b:00007fc6aebe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  542.091602][ T9947] RAX: ffffffffffffffda RBX: 00007fc6ae015fa0 RCX: 00007fc6add9cdd9
[  542.099945][ T9947] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  542.107939][ T9947] RBP: 00007fc6ade32d69 R08: 0000000000000000 R09: 0000000000000000
[  542.115935][ T9947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.123926][ T9947] R13: 00007fc6ae016038 R14: 00007fc6ae015fa0 R15: 00007fff97afb968
[  542.131926][ T9947]  </TASK>
[  542.134987][ T9947] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  542.229543][ T9947] ---[ end trace 0000000000000000 ]---
[  542.284749][ T9947] RIP: 0010:utf8nlookup+0x39/0xa50
[  542.289983][ T9947] Code: 89 44 24 10 49 89 ce 48 89 14 24 89 f5 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 c2 56 f4 fe 49 8d 5d 18 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 d8 8d 4c ff 48 8b 1b 48 83 c3 30
[  542.334294][ T9947] RSP: 0018:ffffc9000393f420 EFLAGS: 00010206
[  542.343209][ T9947] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000080000
[  542.351692][ T9947] RDX: ffffc90019ba0000 RSI: 000000000000048d RDI: 000000000000048e
[  542.359731][ T9947] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[  542.369317][ T9947] R10: ffffc9000393f5b8 R11: fffff52000727eba R12: dffffc0000000000
[  542.401035][ T9947] R13: 0000000000000000 R14: ffff888077957678 R15: dffffc0000000000
[  542.411484][ T9947] FS:  00007fc6aebe96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  542.421263][ T9947] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  542.429559][ T9947] CR2: 000000110c2df89b CR3: 0000000030d78000 CR4: 00000000003506f0
[  542.438518][ T9947] Kernel panic - not syncing: Fatal exception
[  542.445258][ T9947] Kernel Offset: disabled
[  542.449593][ T9947] Rebooting in 86400 seconds..