last executing test programs:

2m28.479403012s ago: executing program 32 (id=698):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0xffffffff}, 0x4)
sendmsg$inet_sctp(r0, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1}], 0x1, 0x0, 0x0, 0x20000080}, 0x10)

2m17.291710557s ago: executing program 0 (id=745):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x800)
r2 = dup3(r1, r0, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e)

2m17.021538103s ago: executing program 0 (id=746):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084)

2m16.645949093s ago: executing program 0 (id=750):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc)

2m16.37258263s ago: executing program 0 (id=753):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

2m16.142033535s ago: executing program 3 (id=754):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000040)={0x19980330}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)

2m15.968006899s ago: executing program 0 (id=756):
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

2m15.684453066s ago: executing program 3 (id=758):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x650, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x624, 0x2, [@TCA_BPF_ACT={0x620, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x80, 0x8, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0xb6, 0x6, 0xfffffffa}, {0x7ff, 0x7, 0x2, 0x3}, {0x2, 0x6, 0x0, 0xedc}, {0x10, 0xb, 0x6, 0x9}, {0x0, 0x1, 0x40, 0x4}]}]}, {0x29, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x440, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x7, 0x6, 0x1000, 0x613, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0xd, 0x6, "94cedea66d85e9b70c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2m15.51983086s ago: executing program 0 (id=759):
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
recvmsg$unix(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1, &(0x7f0000001500)}, 0x20)

2m14.920779695s ago: executing program 33 (id=759):
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
recvmsg$unix(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1, &(0x7f0000001500)}, 0x20)

2m14.904302245s ago: executing program 3 (id=764):
chdir(&(0x7f0000000640)='./cgroup\x00')
r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
close(0x3)

2m14.642239402s ago: executing program 3 (id=765):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

2m13.982345528s ago: executing program 3 (id=770):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
write$eventfd(r0, &(0x7f0000000040)=0x4, 0x8)

2m13.459694311s ago: executing program 3 (id=771):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
getdents(r0, &(0x7f0000000140)=""/235, 0xeb)

2m13.055743411s ago: executing program 34 (id=771):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
getdents(r0, &(0x7f0000000140)=""/235, 0xeb)

2m12.631744361s ago: executing program 1 (id=776):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x4)
read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020)

2m12.471726875s ago: executing program 1 (id=778):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x1], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000007f000000010001004900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)

2m12.200199782s ago: executing program 1 (id=780):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x475}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8)
close(r0)

2m12.064361635s ago: executing program 1 (id=781):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

2m10.499092634s ago: executing program 1 (id=788):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0))

2m8.172487201s ago: executing program 1 (id=783):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000002440)="c4", 0x1}], 0x1, 0x0)

2m7.840059959s ago: executing program 35 (id=783):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000002440)="c4", 0x1}], 0x1, 0x0)

1m30.275771912s ago: executing program 7 (id=1001):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

1m28.121739245s ago: executing program 7 (id=1021):
r0 = io_uring_setup(0x46ef, &(0x7f0000000100)={0x0, 0x3157, 0x800, 0xfffffffd, 0x7f})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r1, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x4, 0x5)

1m27.483229221s ago: executing program 7 (id=1024):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x92c9, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004})

1m26.781648408s ago: executing program 7 (id=1029):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000013c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='./file0\x00')

1m25.803585442s ago: executing program 7 (id=1032):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='-b', 0x2)

1m23.507815218s ago: executing program 7 (id=1045):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x4, 0x9}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000900", 0x33fe0}], 0x1}, 0x0)

1m22.886228263s ago: executing program 36 (id=1045):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x4, 0x9}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000900", 0x33fe0}], 0x1}, 0x0)

58.275548138s ago: executing program 4 (id=1161):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0x0, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x5c, 0xa, 0x3, 0x8, 0x4, {0x40, 0x7, 0x1, 0x66}, 0x0, 0x0}})

55.509522156s ago: executing program 4 (id=1174):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x7000000)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
pipe2$9p(&(0x7f0000000140), 0x4080)

55.188031494s ago: executing program 4 (id=1175):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000400)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f00000002c0)=0x5})

54.665777247s ago: executing program 4 (id=1180):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

53.869316987s ago: executing program 4 (id=1185):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4)
syz_emit_ethernet(0xaf, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08"], 0x0)

51.69987398s ago: executing program 4 (id=1193):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
tee(r0, r1, 0x1, 0xc)

50.999015687s ago: executing program 37 (id=1193):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
tee(r0, r1, 0x1, 0xc)

42.817820578s ago: executing program 8 (id=1220):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x2, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0)

42.502615456s ago: executing program 8 (id=1223):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xff, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000))

41.655280287s ago: executing program 8 (id=1228):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x8, 0x2})
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r0, 0x5, &(0x7f0000000280)={0x1, 0x1, 0x2f, 0x200400a})

41.231164777s ago: executing program 8 (id=1229):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8)

40.908378595s ago: executing program 8 (id=1231):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4)

40.359544728s ago: executing program 8 (id=1235):
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$eJzs3U9v2/Ydx/EPZdmWPSAotqEIgjT+NVkBB8sUSW5cGNlhGkXZ7CRRIOXBPhVZY3dB5HRLsmHxpfWl27DtCezWSw/bcxiwc897AjsOKLbbgF008J/+Upbt2E62vl9Gy5/JL8kv/5Tf0hJ/FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkGXXSqWypYbb2t4x09k132seMz1e2rxux43bM9crWeE/KhR0NR519duDyW+G/7qp6/Fv11UIBwUdfuPNN+5/K59L5z8mobPQaRf47MXh4wfd7t7Ts62tZ51lvgsxkYlyJ5hr02m5gec2q5uOcQPPbKyvl+5u1QNTdxtOsBt0nKaxfSfX8Xyzat825Y2NNeMUd73t1mat2nDSke99r1IqrZv3F5PDf/f9YmBvuY2G29qMYsLJYcxi/wxxqk1j9h9199ZmJRkGlU8SVJkVVClVKuVypVJev7dx771SKT8xojRGExGDk/b1Ofi4TOd05QZeXi6s/3+3pIYKamlbOzKZP7Zq8uWpOWV6Iq3/79x1jl3vcP1Pq/zVweRriur/jfi3G9Pq/+9+OSUbE82QNcX6afb4s/080wsd6rEeqKuu9vT0fJa7cn4ZXuzPppSXXAXy5KqpqjblyCRjjDa0rnWV9IG2VFcgo7pcNeQo0K4CdeSoGR5M+XJUVUeefBmtytZtGZW1oQ2tychRUbvytK2WNlVTVf/u9Xr7ehTt97VjclQaVJ4ZtDx8ik4GTav/P/kknuN09R//f/rnjjH5QTM7Bnjlesn9/3RzWSNXLi4jAAAAAABw3qzor+9W9Nn9W5J6qrsNp/Sq0wIAAAAAAOco+uT/ejiYD1tvyZpy/9+7/NwAAAAAAMD5sKJn7CxJy9GX+q3B41In+RJA5sMBAAAAAADg9RJ9/n9jQepFXautyDrV/T8AAAAAAPgf8JuhPvbzaR+7vfRj/ZykoL1o/eWfi/LnraP2znesg2o4pXqQxEx8A6BTv2blFXXU+9mfw8GC9EbUba/tXLeS/oGTTjCtuGNf6av9WX39W/5YAgtz6Z8vMhK4kswdDdbzyW/6vd6OY95O1vvwMKdoSryW5brbcIq217hfVrV6Jddxdjq/ePLoV5Lf3879R9294ocfdx9GuRyFo44Owjw+GUknNyuX51F/C9EzF1lbvKR6usrftprLVrTeUrr9c6oe5IZXdLLt/0w345ibSU+3y4fpEZD1adIoF8NDpsHWR71DWIMsyuNbnnUgpmRRiLK4FcfcWr0VD9L84qNQ+O6cVClOHgN/OIvKcBaz94X1r4l9MSOL8FxYC7P4a7igKVmsnS6LiSMCAK/K/qAKRZ2YT/axP153M65yS8lw6lVudnX/wehanv+xFz9wOCfl1VtMyktvel1ReEVfjcMWFF1Y89cyruilpK4UNOWKXjpbdZtPJ/1p8A6k5G01SVy+n8V/er3e/XK03j+MVdXPwxk+n7reoFGZC3fh3ecHP4s6wA99tPfR3pNKZW299G6pdK+i+WgzkgG1BwCQYfY7dkYjCoN61q/d7/bvqh/+4524NVJ3v9n/SkFRH+pjdfVQd9JXCKxkr3d56GsIdybvWsPY6P86RmPLujP1ri6qpUOxlX5sWrrH7wAHsWsXfRgAALhUN2fU4fH6n3Xvfie97169lnnfPVrLx98QPC22fMl7AgCArw/H/8pa7vza8n23/UF5Y6Nc7Ww5xvfsHxnfrW06xm11HN/eqrY2HdP2vY5new3T9rXo1pzABNvttud3TN3zTdsL3J3oze8mefV74DSrrY5rB+2GUw0cY3utTtXumJob2Ka9/cOGG2w5fjRz0HZst+7a1Y7rtUzgLcl2isYEjjMU6NacVsetu2GzZdq+26z6u+bHXmO76ZiaE9i+2+548QLTdbmtuuc3o8UW1TvuRYcAAHxtPHtx+PhBt7v3dKixkExLxxwpbqTfR0uCvxydK2osZC3wFW4eAADIQJUGAAAAAAAAAAAAAAAAAAAAAOD1l/X836ka6UOB6Zh5ZQRL/TE/v3KiJVsajPniby+V4RkaufExSU+7vdmzfxk38lkxS2FjQVI33f3DMUczE5vLmGtaY+VEW6q4kT//fbgkZZ0JZ2x8OjPm+/uj5+FETDgxc9Jif6/mX/4/h6zGky+mTJp2RhX6W7E4ug8XjtvA0UZe0tOFlzgE41eK5Qu/FgG4XP8NAAD//w3ZNWg=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000001f80)=""/4093, 0xffd)

39.785236193s ago: executing program 38 (id=1235):
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000001f80)=""/4093, 0xffd)

6.394039453s ago: executing program 9 (id=1452):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000280)="e9", 0x0}, 0x20)

6.11732689s ago: executing program 9 (id=1455):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
close(r0)

4.950618718s ago: executing program 6 (id=1467):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, 0x0)

4.416253531s ago: executing program 9 (id=1472):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000080200000000020000000002000000000200000000040900", 0x52)

4.06370036s ago: executing program 9 (id=1474):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x11, 0x72, 0x80000}, 0x20)

4.020618381s ago: executing program 2 (id=1475):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x2000000000000, 0x200000, &(0x7f0000200000/0x200000)=nil})

3.792001417s ago: executing program 9 (id=1477):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
mlock(&(0x7f00002ec000/0x1000)=nil, 0x1000)
munlockall()

3.495648934s ago: executing program 2 (id=1480):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f0000000140))

3.345053098s ago: executing program 2 (id=1481):
syz_mount_image$xfs(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x1a00c4e, &(0x7f0000000480), 0x4, 0x96ec, &(0x7f000000c7c0)="$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")
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x1100, 0x402000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

3.243922351s ago: executing program 6 (id=1483):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x2, 0x6, 0xc0f, 0x83, 0xffffffff})
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10)

3.243768331s ago: executing program 9 (id=1484):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f0000000140)=[{0x4, 0x7}]})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8})

2.639187095s ago: executing program 5 (id=1485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2.638997105s ago: executing program 6 (id=1486):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f)

2.397287271s ago: executing program 5 (id=1487):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000004c0)="02155e650962", 0x6, 0x2)

2.171751977s ago: executing program 6 (id=1488):
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7ff, 0x20c, 0x100, 0x978c, r1}, &(0x7f0000000140)=0x10)

2.070179299s ago: executing program 5 (id=1489):
syz_mount_image$ext4(&(0x7f0000001a80)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0x210040, &(0x7f0000000380)={[{@inlinecrypt}, {@dioread_lock}]}, 0xfc, 0x5c8, &(0x7f0000002780)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
rmdir(&(0x7f0000000100)='./bus\x00')

1.794758806s ago: executing program 6 (id=1490):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1880762622185341, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1)

1.139142322s ago: executing program 5 (id=1491):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0xffffffffffffff20, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0), 0x4)

1.132601942s ago: executing program 2 (id=1492):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180400001700020000000000ef000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc)

671.475814ms ago: executing program 5 (id=1493):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1500, &(0x7f00000002c0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$tipc(0x1e, 0x2, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

279.968293ms ago: executing program 2 (id=1494):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfffffc00, 0x4, 0xfdfc0000, 0x7, 0x4, "0c41920887e8d2b791f800000000000000006b", 0x6, 0x1fe})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xd)

230.370914ms ago: executing program 6 (id=1495):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x22400)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0xc})

88.513418ms ago: executing program 2 (id=1496):
pipe2$watch_queue(&(0x7f0000000680)={<r0=>0xffffffffffffffff}, 0x80)
r1 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x87)
keyctl$set_timeout(0xf, r1, 0x0)

0s ago: executing program 5 (id=1497):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)

kernel console output (not intermixed with test programs):

ave bond_slave_1): Releasing backup interface
[  194.928521][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.115239][ T5780] Bluetooth: hci1: command tx timeout
[  195.404316][   T32] bond0 (unregistering): Released all slaves
[  195.827634][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.936820][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.132360][ T7834] 8021q: adding VLAN 0 to HW filter on device team0
[  196.178005][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.185289][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.256427][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.263797][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.597457][ T7913] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  196.632314][ T7913] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  196.698144][ T7913] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  196.730489][ T7913] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  196.983056][ T7798] veth0_vlan: entered promiscuous mode
[  197.037294][ T7798] veth1_vlan: entered promiscuous mode
[  197.190612][ T5780] Bluetooth: hci1: command tx timeout
[  197.212106][ T7913] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.224034][ T7798] veth0_macvtap: entered promiscuous mode
[  197.246752][ T7834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.277549][ T7798] veth1_macvtap: entered promiscuous mode
[  197.309880][ T7913] 8021q: adding VLAN 0 to HW filter on device team0
[  197.349533][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.356811][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.386522][ T7798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.399336][ T7798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.410792][ T7798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.422171][ T7798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.446286][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.508247][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.515451][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.541717][ T7798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.557572][ T7798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.568712][ T7798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.579620][ T7798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.593030][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.646221][ T7798] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.657178][ T7798] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.668951][ T7798] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.692488][ T7798] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.032688][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.060320][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.140640][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.148549][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.302780][ T7834] veth0_vlan: entered promiscuous mode
[  198.356614][ T8070] loop4: detected capacity change from 0 to 4096
[  198.367753][ T7834] veth1_vlan: entered promiscuous mode
[  198.486158][ T7834] veth0_macvtap: entered promiscuous mode
[  198.507672][ T8075] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.541367][ T7834] veth1_macvtap: entered promiscuous mode
[  198.615074][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.670416][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.701367][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.738249][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.760921][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.777873][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.842344][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.938666][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.969853][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.994838][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.015746][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.046763][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.078269][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.105788][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.163979][ T7834] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.187105][ T7834] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.207168][ T7834] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.226487][ T7834] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.235713][ T5839] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  199.298797][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.445495][ T5839] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  199.464992][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.521943][ T5839] usb 6-1: Product: syz
[  199.528501][ T5839] usb 6-1: Manufacturer: syz
[  199.545981][ T5839] usb 6-1: SerialNumber: syz
[  199.592484][ T5839] usb 6-1: config 0 descriptor??
[  199.608845][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.638379][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.759985][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.803726][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.880489][ T5839] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  200.485470][ T7913] veth0_vlan: entered promiscuous mode
[  200.509029][ T5839] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  200.547637][ T5839] usb 6-1: USB disconnect, device number 2
[  200.557275][ T7913] veth1_vlan: entered promiscuous mode
[  200.678871][ T7913] veth0_macvtap: entered promiscuous mode
[  200.733197][ T7913] veth1_macvtap: entered promiscuous mode
[  200.792491][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.811163][ T8128] tmpfs: Too few inodes for current use
[  200.826749][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.847626][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.849161][ T8125] loop6: detected capacity change from 0 to 2048
[  200.875181][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.893151][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.904228][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.930768][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.942042][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.985966][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.034982][ T8125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.081788][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.113318][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.123954][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.155897][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.196683][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.248177][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.273399][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.300094][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.332356][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.379349][ T7834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.405286][ T7913] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.419121][ T7913] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.429698][ T7913] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.438968][ T7913] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.782832][ T8147] Bluetooth: MGMT ver 1.22
[  201.808276][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.824979][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.971858][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.979778][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.380545][ T8163] Bluetooth: MGMT ver 1.22
[  202.605062][ T8168] zram0: detected capacity change from 0 to 8
[  203.024811][ T8182] loop6: detected capacity change from 0 to 1024
[  203.049422][ T8182] EXT4-fs: Ignoring removed nobh option
[  203.090430][ T8182] EXT4-fs: Ignoring removed bh option
[  203.096573][ T8152] loop4: detected capacity change from 0 to 32768
[  203.120966][ T8182] EXT4-fs: Ignoring removed nobh option
[  203.138529][ T8182] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  203.219365][ T8182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.231886][ T8152] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  203.292114][ T8152] XFS (loop4): Ending clean mount
[  203.471720][   T27] audit: type=1800 audit(1788632218.140:37): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.848" name="file1" dev="loop6" ino=15 res=0 errno=0
[  203.597228][ T7544] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  203.703035][ T7834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.845719][ T8208] loop4: detected capacity change from 0 to 1024
[  203.900435][ T8208] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  203.941005][ T8208] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  203.980237][ T8208] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  204.031699][ T8208] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #32: comm syz.4.852: iget: special inode unallocated
[  204.125381][ T8208] EXT4-fs (loop4): no journal found
[  204.151267][ T8208] EXT4-fs (loop4): can't get journal size
[  204.186600][ T8208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  204.280331][  T787] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  204.338173][ T8220] loop7: detected capacity change from 0 to 256
[  204.428624][ T7544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.481071][  T787] usb 7-1: Using ep0 maxpacket: 32
[  204.526755][  T787] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  204.538957][  T787] usb 7-1: config 0 has no interface number 0
[  204.583333][  T787] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  204.613770][  T787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.642366][  T787] usb 7-1: Product: syz
[  204.646646][  T787] usb 7-1: Manufacturer: syz
[  204.686407][  T787] usb 7-1: SerialNumber: syz
[  204.711909][  T787] usb 7-1: config 0 descriptor??
[  204.728328][  T787] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  205.023319][  T787] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  205.079411][  T787] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  205.512234][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  205.551278][   T28] usb 7-1: USB disconnect, device number 2
[  205.560174][  T787] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  205.596544][   T28] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  205.638235][   T28] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  205.659335][   T28] quatech2 7-1:0.51: device disconnected
[  205.772361][  T787] usb 8-1: Using ep0 maxpacket: 32
[  205.784834][  T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.810159][  T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.830807][  T787] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  205.854165][  T787] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  205.878821][  T787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.931532][  T787] usb 8-1: config 0 descriptor??
[  206.140258][ T8260] loop5: detected capacity change from 0 to 1024
[  206.160312][   T27] audit: type=1326 audit(1788632220.820:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.4.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  206.194440][   T27] audit: type=1326 audit(1788632220.820:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.4.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  206.253099][   T27] audit: type=1326 audit(1788632220.820:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.4.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  206.282321][   T27] audit: type=1326 audit(1788632220.820:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.4.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  206.362249][   T27] audit: type=1326 audit(1788632220.820:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.4.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  206.491414][   T27] audit: type=1326 audit(1788632220.850:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.4.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  206.534866][  T787] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.000B/input/input17
[  206.599972][   T27] audit: type=1326 audit(1788632220.850:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.4.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  206.715011][   T27] audit: type=1326 audit(1788632220.850:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.4.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  206.809717][  T787] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.000B/input/input18
[  206.856839][   T27] audit: type=1326 audit(1788632220.850:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.4.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  206.988164][  T787] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.7-1/input0
[  207.100609][  T787] usb 8-1: USB disconnect, device number 2
[  207.185366][ T8277] binder: 8276:8277 ioctl c0306201 0 returned -14
[  207.406209][ T8275] fido_id[8275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  207.793557][ T8288] netlink: 136 bytes leftover after parsing attributes in process `syz.7.877'.
[  207.830403][ T8288] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  208.199445][ T5839] IPVS: starting estimator thread 0...
[  208.320479][ T8297] IPVS: using max 18 ests per chain, 43200 per kthread
[  209.289124][ T8339] loop5: detected capacity change from 0 to 128
[  209.383960][ T8339] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  209.420183][ T8339] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  209.587638][ T8339] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  209.765266][ T8350] loop7: detected capacity change from 0 to 256
[  209.808191][ T7798] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  209.819388][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  209.819406][   T27] audit: type=1800 audit(1788632224.480:52): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.893" name="file1" dev="loop7" ino=1048638 res=0 errno=0
[  209.867513][ T8354] loop6: detected capacity change from 0 to 256
[  209.903040][ T8350] FAT-fs (loop7): error, clusters badly computed (0 != 128)
[  209.920848][ T8354] exfat: Deprecated parameter 'utf8'
[  209.926278][ T8354] exfat: Deprecated parameter 'namecase'
[  209.943302][ T8350] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  209.977247][ T8354] exfat: Deprecated parameter 'namecase'
[  210.012890][ T8354] exfat: Deprecated parameter 'utf8'
[  210.077513][ T8354] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d)
[  210.147075][ T8357] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  210.563019][ T8373] netlink: 'syz.5.900': attribute type 12 has an invalid length.
[  210.598983][ T8373] netlink: 'syz.5.900': attribute type 29 has an invalid length.
[  210.620539][ T8373] netlink: 148 bytes leftover after parsing attributes in process `syz.5.900'.
[  210.664698][ T8373] netlink: 'syz.5.900': attribute type 1 has an invalid length.
[  210.702419][ T8373] netlink: 'syz.5.900': attribute type 2 has an invalid length.
[  212.046720][ T8370] loop7: detected capacity change from 0 to 40427
[  212.064976][ T8402] loop4: detected capacity change from 0 to 8
[  212.106679][ T8370] F2FS-fs (loop7): build fault injection attr: rate: 14, type: 0x7ffff
[  212.139031][ T8370] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x30e4
[  212.161536][ T8370] F2FS-fs (loop7): invalid crc value
[  212.204477][ T8370] F2FS-fs (loop7): Found nat_bits in checkpoint
[  212.354513][ T8370] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  212.442544][ T8370] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  212.616656][ T8370] F2FS-fs (loop7): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  212.762143][ T8370] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0
[  212.903818][ T7913] syz-executor: attempt to access beyond end of device
[  212.903818][ T7913] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  212.924146][ T7913] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  213.060209][  T787] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  213.100391][   T27] audit: type=1326 audit(1788632227.760:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  213.170520][   T27] audit: type=1326 audit(1788632227.760:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  213.262023][   T27] audit: type=1326 audit(1788632227.770:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  213.310182][  T787] usb 6-1: Using ep0 maxpacket: 16
[  213.331048][  T787] usb 6-1: config 0 interface 0 has no altsetting 0
[  213.337806][  T787] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  213.353106][   T27] audit: type=1326 audit(1788632227.770:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  213.400497][  T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.446115][  T787] usb 6-1: config 0 descriptor??
[  213.448872][   T27] audit: type=1326 audit(1788632227.770:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  213.558048][   T27] audit: type=1326 audit(1788632227.770:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  213.649578][   T27] audit: type=1326 audit(1788632227.770:59): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  213.716260][   T27] audit: type=1326 audit(1788632227.770:60): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  213.767294][ T8441] loop4: detected capacity change from 0 to 64
[  213.804687][   T27] audit: type=1326 audit(1788632227.770:61): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5ff9e159 code=0x7ffc0000
[  213.959178][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x1
[  213.987575][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.017778][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.038191][ T8441] syz.4.921: attempt to access beyond end of device
[  214.038191][ T8441] loop4: rw=2049, sector=153, nr_sectors = 8 limit=64
[  214.052960][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.059872][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.078344][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.101099][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.111914][ T8441] syz.4.921: attempt to access beyond end of device
[  214.111914][ T8441] loop4: rw=2049, sector=161, nr_sectors = 1 limit=64
[  214.127367][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.140580][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.150330][ T8441] buffer_io_error: 10 callbacks suppressed
[  214.150348][ T8441] Buffer I/O error on dev loop4, logical block 161, lost async page write
[  214.183259][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.197120][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.206563][ T8441] syz.4.921: attempt to access beyond end of device
[  214.206563][ T8441] loop4: rw=2049, sector=162, nr_sectors = 1 limit=64
[  214.221883][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.228653][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.237062][ T8441] Buffer I/O error on dev loop4, logical block 162, lost async page write
[  214.246326][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.253742][ T8441] syz.4.921: attempt to access beyond end of device
[  214.253742][ T8441] loop4: rw=2049, sector=163, nr_sectors = 1 limit=64
[  214.267301][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.294663][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.307766][ T8441] Buffer I/O error on dev loop4, logical block 163, lost async page write
[  214.317372][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.327635][ T8441] syz.4.921: attempt to access beyond end of device
[  214.327635][ T8441] loop4: rw=2049, sector=167, nr_sectors = 1 limit=64
[  214.350176][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.357072][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.370186][ T8441] Buffer I/O error on dev loop4, logical block 167, lost async page write
[  214.378933][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.411999][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.440263][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.465403][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.491378][  T787] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[  214.540603][  T787] elo 0003:04E7:0009.000C: hidraw0: USB HID v0.c1 Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0
[  214.593194][  T787] usb 6-1: USB disconnect, device number 3
[  214.768356][ T8457] loop4: detected capacity change from 0 to 512
[  214.777563][ T8453] fido_id[8453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  214.795504][    T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  214.825303][ T8457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  214.906310][ T8457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.013044][ T8457] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.023705][    T8] usb 8-1: Using ep0 maxpacket: 32
[  215.060359][    T8] usb 8-1: unable to get BOS descriptor or descriptor too short
[  215.078336][    T8] usb 8-1: config 7 has an invalid interface number: 4 but max is 0
[  215.100073][    T8] usb 8-1: config 7 has no interface number 0
[  215.134375][    T8] usb 8-1: config 7 interface 4 has no altsetting 0
[  215.182152][    T8] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=49.e2
[  215.226687][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.267252][    T8] usb 8-1: Product: syz
[  215.280309][    T8] usb 8-1: Manufacturer: syz
[  215.304412][    T8] usb 8-1: SerialNumber: syz
[  215.398702][ T7544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.740880][ T8448] loop6: detected capacity change from 0 to 32768
[  215.812144][ T8448] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  215.987004][    T8] RobotFuzz Open Source InterFace, OSIF 8-1:7.4: version 49.e2 found at bus 008 address 003
[  216.042822][ T8448] XFS (loop6): Ending clean mount
[  216.215704][ T5839] usb 8-1: USB disconnect, device number 3
[  216.229183][ T7834] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  216.888180][ T8475] loop4: detected capacity change from 0 to 40427
[  216.950649][ T8475] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  216.991284][ T8475] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  217.067134][ T8499] sd 0:0:1:0: PR command failed: 1026
[  217.083545][ T8499] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  217.089871][ T8475] F2FS-fs (loop4): invalid crc_offset: 33558524
[  217.120629][ T8499] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  217.128085][ T8502] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  217.172429][ T8475] F2FS-fs (loop4): Found nat_bits in checkpoint
[  217.203197][ T8502] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  217.329040][ T8506] loop5: detected capacity change from 0 to 2048
[  217.443708][ T8506] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  217.460306][ T8475] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  217.468115][ T8475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  217.512091][ T8506] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  217.519823][ T8506] UDF-fs: Scanning with blocksize 512 failed
[  217.615159][ T8506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  219.548949][ T8561] loop5: detected capacity change from 0 to 1024
[  219.716923][ T8565] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  219.736009][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  219.736026][   T27] audit: type=1800 audit(1788632234.400:63): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.951" name="file1" dev="loop5" ino=20 res=0 errno=0
[  219.845397][ T8561] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.878596][ T8561] hfsplus: request for non-existent node 16777216 in B*Tree
[  220.105720][   T27] audit: type=1400 audit(1788632234.770:64): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=8573 comm="syz.6.956" name="//o" offset=35
[  220.410341][ T8581] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring
[  220.471404][ T5820] kernel write not supported for file /sg0 (pid: 5820 comm: kworker/0:4)
[  220.716661][ T8586] loop6: detected capacity change from 0 to 1024
[  220.758567][ T8586] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  220.857069][ T8586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.055210][ T8557] loop7: detected capacity change from 0 to 40427
[  221.120219][ T8557] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[  221.127625][ T8557] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  221.147384][ T7834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.174162][ T8598] loop5: detected capacity change from 0 to 1024
[  221.183334][ T8557] F2FS-fs (loop7): Image doesn't support compression
[  221.200872][ T8557] F2FS-fs (loop7): Image doesn't support compression
[  221.256801][ T8557] F2FS-fs (loop7): invalid crc value
[  221.421734][ T8598] hfsplus: xattr searching failed
[  221.446611][ T8605] loop4: detected capacity change from 0 to 256
[  221.476292][ T8598] hfsplus: xattr searching failed
[  221.572469][ T8598] hfsplus: b-tree write err: -5, ino 3
[  221.605270][   T27] audit: type=1800 audit(1788632236.260:65): pid=8605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.964" name="file1" dev="loop4" ino=1048640 res=0 errno=0
[  221.796648][ T8557] F2FS-fs (loop7): Start checkpoint disabled!
[  221.845942][   T32] hfsplus: b-tree write err: -5, ino 3
[  221.886061][ T8557] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  221.921201][ T8557] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  222.128980][ T8618] netlink: 'syz.6.968': attribute type 5 has an invalid length.
[  222.250502][  T993] kworker/u4:5: attempt to access beyond end of device
[  222.250502][  T993] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  222.319629][  T993] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  222.330451][ T5820] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  222.423995][ T8622] program syz.6.969 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.522858][ T5820] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  222.545754][ T5820] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  222.587864][ T5820] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  222.614568][ T5820] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  222.626090][ T5820] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  222.669272][ T5820] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  222.693774][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  222.730737][ T5820] usb 6-1: Product: syz
[  222.752764][ T5820] usb 6-1: Manufacturer: syz
[  222.768253][ T5820] cdc_wdm 6-1:1.0: skipping garbage
[  222.775921][ T5820] cdc_wdm 6-1:1.0: skipping garbage
[  222.813103][ T5820] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  222.829781][ T5820] cdc_wdm 6-1:1.0: Unknown control protocol
[  223.059493][ T5762] usb 6-1: USB disconnect, device number 4
[  223.238850][ T8638] loop4: detected capacity change from 0 to 512
[  223.293938][ T8638] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  223.345831][ T8638] EXT4-fs (loop4): 1 truncate cleaned up
[  223.403233][ T8638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.549259][ T7544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.886183][ T8658] tipc: Started in network mode
[  223.902072][ T8658] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  223.909697][ T8658] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  224.798577][ T8693] netlink: 27 bytes leftover after parsing attributes in process `syz.4.994'.
[  225.023642][ T5839] tipc: Node number set to 43690
[  225.760193][ T5839] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  225.932948][ T8730] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1007'.
[  225.971964][ T5839] usb 8-1: Using ep0 maxpacket: 32
[  226.000645][ T5839] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  226.009831][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.064454][ T5839] usb 8-1: config 0 descriptor??
[  226.112921][ T5839] gspca_main: sq930x-2.14.0 probing 041e:403c
[  226.537615][ T8747] loop6: detected capacity change from 0 to 512
[  226.610068][ T8747] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  226.641145][ T8747] EXT4-fs (loop6): 1 truncate cleaned up
[  226.651298][ T8747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.758979][ T7834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.940193][ T5839] gspca_sq930x: reg_w 0105 bf00 failed -71
[  227.011493][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1014'.
[  227.030515][ T5839] sq930x: probe of 8-1:0.0 failed with error -71
[  227.049465][ T5839] usb 8-1: USB disconnect, device number 4
[  228.357527][ T8792] loop7: detected capacity change from 0 to 512
[  228.391833][ T8792] EXT4-fs: Ignoring removed nobh option
[  228.415959][ T8792] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  228.499445][ T8802] loop5: detected capacity change from 0 to 512
[  228.516305][ T8802] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  228.524166][ T8792] EXT4-fs (loop7): 1 truncate cleaned up
[  228.581506][ T8792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.603855][ T8802] EXT4-fs (loop5): 1 truncate cleaned up
[  228.621828][ T8802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.825877][ T7798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.907765][ T7913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.972355][ T8783] loop6: detected capacity change from 0 to 32768
[  229.214062][ T8813] loop7: detected capacity change from 0 to 512
[  229.252434][   T27] audit: type=1800 audit(1788632243.920:66): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1022" name="file1" dev="loop6" ino=4 res=0 errno=0
[  229.347846][ T8813] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -13
[  229.408029][ T8813] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1029: inode #15: comm syz.7.1029: iget: illegal inode #
[  229.468834][ T8813] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1029: couldn't read orphan inode 15 (err -117)
[  229.570289][ T8813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.907684][ T7913] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  230.033909][ T7913] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  230.122010][ T7913] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  230.162578][ T7913] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  230.182885][ T7913] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  230.206462][ T7913] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  230.229034][ T7913] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  230.280401][ T8827] netlink: 209832 bytes leftover after parsing attributes in process `syz.5.1034'.
[  230.284929][ T7913] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  230.329071][ T7913] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  230.359050][ T7913] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  230.851223][ T8097] kernel write not supported for file /input/event2 (pid: 8097 comm: kworker/1:7)
[  231.047010][ T8849] loop8: detected capacity change from 0 to 7
[  231.075428][ T8849] Dev loop8: unable to read RDB block 7
[  231.093305][ T8849]  loop8: unable to read partition table
[  231.107973][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1039'.
[  231.121325][ T8849] loop8: partition table beyond EOD, truncated
[  231.137029][ T8849] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  231.168002][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1039'.
[  231.202360][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1039'.
[  231.240537][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1039'.
[  231.290598][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1039'.
[  231.331428][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1039'.
[  231.388614][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1039'.
[  231.421051][ T8850] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check.
[  231.460266][ T8853] loop5: detected capacity change from 0 to 512
[  231.481351][ T8853] EXT4-fs: Ignoring removed nobh option
[  231.523278][ T8853] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  231.588027][ T8853] EXT4-fs (loop5): 1 truncate cleaned up
[  231.626466][ T8853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.856440][ T7798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.913776][ T8864] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  231.997315][ T7913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.226503][ T1146] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.524049][ T1146] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.713433][ T1146] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.898281][ T1146] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.930701][ T8881] loop9: detected capacity change from 0 to 524287998
[  233.086246][ T8870] loop4: detected capacity change from 0 to 32768
[  233.150296][  T787] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  233.217970][ T8885] input: syz0 as /devices/virtual/input/input19
[  233.297704][ T8870] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  233.361893][  T787] usb 6-1: Using ep0 maxpacket: 16
[  233.397148][  T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.466577][  T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.500220][  T787] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  233.516772][  T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.604491][  T787] usb 6-1: config 0 descriptor??
[  233.701011][ T7544] ocfs2: Unmounting device (7,4) on (node local)
[  234.085905][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'.
[  234.113307][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  234.126069][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  234.136818][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  234.145688][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'.
[  234.159123][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  234.164757][  T787] hid (null): unknown global tag 0x57
[  234.176408][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  234.184199][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  234.185412][ T8892] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check.
[  234.286294][  T787] usb 6-1: string descriptor 0 read error: -71
[  234.326641][  T787] usb 6-1: Max retries (5) exceeded reading string descriptor 200
[  234.350123][  T787] letsketch: probe of 0003:6161:4D15.000D failed with error -32
[  234.380426][  T787] usb 6-1: USB disconnect, device number 5
[  235.957714][ T8893] chnl_net:caif_netlink_parms(): no params data found
[  236.312548][ T5780] Bluetooth: hci1: command tx timeout
[  236.326911][ T8917] loop4: detected capacity change from 0 to 32768
[  236.455278][   T27] audit: type=1800 audit(1788632251.120:67): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1056" name="file1" dev="loop4" ino=4 res=0 errno=0
[  236.478331][ T1146] hsr_slave_0: left promiscuous mode
[  236.537033][ T1146] hsr_slave_1: left promiscuous mode
[  236.602288][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.609813][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.630731][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  236.638303][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.678572][ T1146] bridge_slave_1: left allmulticast mode
[  236.690042][ T1146] bridge_slave_1: left promiscuous mode
[  236.696038][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.725010][ T1146] bridge_slave_0: left allmulticast mode
[  236.731369][ T1146] bridge_slave_0: left promiscuous mode
[  236.737184][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.836291][ T1146] veth1_macvtap: left promiscuous mode
[  236.850422][ T1146] veth0_macvtap: left promiscuous mode
[  236.859276][ T1146] veth1_vlan: left promiscuous mode
[  236.884188][ T1146] veth0_vlan: left promiscuous mode
[  237.169282][ T8942] loop4: detected capacity change from 0 to 1024
[  237.217011][ T8942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.453162][ T7544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.680733][ T8949] loop4: detected capacity change from 0 to 16
[  237.702558][ T8949] erofs: (device loop4): mounted with root inode @ nid 36.
[  237.717165][ T8949] syz.4.1065: attempt to access beyond end of device
[  237.717165][ T8949] loop4: rw=0, sector=15300821024, nr_sectors = 8 limit=16
[  237.744924][ T8949] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 72 of nid 36
[  238.289309][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  238.352501][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  238.390386][ T5780] Bluetooth: hci1: command tx timeout
[  238.421844][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.496259][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.976390][ T1146] bond0 (unregistering): Released all slaves
[  239.100674][ T8936] __nla_validate_parse: 5 callbacks suppressed
[  239.100693][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1059'.
[  239.127109][ T8936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.142909][ T8951] netlink: 'syz.4.1066': attribute type 10 has an invalid length.
[  239.176365][ T8951] 8021q: adding VLAN 0 to HW filter on device team0
[  239.198534][ T8951] bond0: (slave team0): Enslaving as an active interface with an up link
[  239.215207][ T8952] netlink: 'syz.4.1066': attribute type 10 has an invalid length.
[  239.229291][ T8952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1066'.
[  239.239020][ T8952] team0: entered promiscuous mode
[  239.260345][ T8952] team_slave_0: entered promiscuous mode
[  239.276081][ T8952] team_slave_1: entered promiscuous mode
[  239.301688][ T8952] team0: entered allmulticast mode
[  239.306908][ T8952] team_slave_0: entered allmulticast mode
[  239.319549][ T8952] team_slave_1: entered allmulticast mode
[  239.327654][ T8952] bond0: (slave team0): Releasing backup interface
[  239.352258][ T8952] bridge0: port 3(team0) entered blocking state
[  239.364935][ T8952] bridge0: port 3(team0) entered disabled state
[  239.377147][ T8893] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.395198][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.410517][ T8893] bridge_slave_0: entered allmulticast mode
[  239.426793][ T8893] bridge_slave_0: entered promiscuous mode
[  239.440416][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.447778][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.455220][ T8893] bridge_slave_1: entered allmulticast mode
[  239.463559][ T8893] bridge_slave_1: entered promiscuous mode
[  239.583172][ T8893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.633912][ T8893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.739278][ T8893] team0: Port device team_slave_0 added
[  239.766947][ T8893] team0: Port device team_slave_1 added
[  239.897464][ T8893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.907039][ T8893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.969038][ T8893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.990547][ T8893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.008161][ T8893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.037976][ T8893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.285254][ T8893] hsr_slave_0: entered promiscuous mode
[  240.314395][ T8963] "syz.6.1070" (8963) uses obsolete ecb(arc4) skcipher
[  240.324501][ T8954] loop5: detected capacity change from 0 to 40427
[  240.341287][ T8893] hsr_slave_1: entered promiscuous mode
[  240.360996][ T8954] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff
[  240.369124][ T8893] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.369454][ T8893] Cannot create hsr debugfs directory
[  240.395297][ T8954] F2FS-fs (loop5): invalid crc value
[  240.469215][ T8954] F2FS-fs (loop5): Found nat_bits in checkpoint
[  240.476343][ T5780] Bluetooth: hci1: command tx timeout
[  240.589838][ T8969] tun0: tun_chr_ioctl cmd 1074812117
[  240.680110][ T5820] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  240.691812][ T8954] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  240.893915][ T5820] usb 5-1: Using ep0 maxpacket: 16
[  240.914530][ T5820] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  240.929502][ T5820] usb 5-1: config 0 has no interface number 0
[  240.943461][ T7798] syz-executor: attempt to access beyond end of device
[  240.943461][ T7798] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  240.956312][ T8893] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  240.966458][ T5820] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.979283][ T5820] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.993426][ T7798] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  241.001202][ T5820] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  241.016522][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.039585][ T8893] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  241.049392][ T5820] usb 5-1: config 0 descriptor??
[  241.065793][ T8893] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  241.087621][ T8893] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  241.391045][ T8893] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.485301][ T8893] 8021q: adding VLAN 0 to HW filter on device team0
[  241.553568][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.560816][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.662734][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.670131][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.773998][ T5820] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000E/input/input20
[  241.916160][ T5820] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000E/input/input21
[  242.009125][ T5820] uclogic 0003:28BD:0071.000E: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1
[  242.094058][ T5820] usb 5-1: USB disconnect, device number 2
[  242.377317][ T8983] fido_id[8983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  242.551284][ T5780] Bluetooth: hci1: command tx timeout
[  242.605777][ T8893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.981663][ T8996] loop4: detected capacity change from 0 to 1024
[  243.501190][ T9009] loop6: detected capacity change from 0 to 256
[  243.671997][ T8893] veth0_vlan: entered promiscuous mode
[  243.700704][   T28] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  243.735820][ T8893] veth1_vlan: entered promiscuous mode
[  243.846407][ T8893] veth0_macvtap: entered promiscuous mode
[  243.877118][ T8989] loop5: detected capacity change from 0 to 32768
[  243.889212][ T9013] loop6: detected capacity change from 0 to 164
[  243.896528][ T8893] veth1_macvtap: entered promiscuous mode
[  243.910201][   T28] usb 5-1: Using ep0 maxpacket: 32
[  243.929306][   T28] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  243.951914][   T28] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  243.970413][   T28] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  243.989872][   T28] usb 5-1: config 1 has no interface number 0
[  243.996158][ T8989] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  244.010601][   T28] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  244.021861][   T28] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  244.035086][   T28] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  244.046990][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.100200][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.128932][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.149351][ T8989] XFS (loop5): Ending clean mount
[  244.193007][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.208089][   T28] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  244.224519][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.246317][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.267363][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.279821][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.311657][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.349035][ T8893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.374589][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.433833][   T28] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  244.441046][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.463325][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.517929][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.558597][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.600224][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.640195][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.678974][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.718264][ T8893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.731602][ T7798] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  244.761719][ T8893] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.772616][ T8893] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.782338][ T8893] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.793455][ T8893] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.942919][ T5839] usb 5-1: USB disconnect, device number 3
[  244.964606][ T5839] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  245.206547][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.233746][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.323290][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.366502][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.738500][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1087'.
[  246.343778][ T9057] loop6: detected capacity change from 0 to 1024
[  246.714051][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1097'.
[  246.971060][  T787] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  247.114886][ T9078] loop8: detected capacity change from 0 to 256
[  247.160186][  T787] usb 6-1: Using ep0 maxpacket: 32
[  247.189441][  T787] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  247.219759][  T787] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  247.259235][  T787] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  247.299097][  T787] usb 6-1: config 1 has no interface number 0
[  247.321623][  T787] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  247.356632][  T787] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  247.396542][  T787] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  247.416558][  T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.457972][  T787] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  247.692222][  T787] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  247.847192][ T9066] loop4: detected capacity change from 0 to 32768
[  247.937837][ T9066] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  248.021822][ T9066] XFS (loop4): Ending clean mount
[  248.156983][ T7383] usb 6-1: USB disconnect, device number 6
[  248.171853][ T7383] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  248.299604][ T9106] loop8: detected capacity change from 0 to 1024
[  248.302491][ T7544] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  248.879163][ T9113] loop4: detected capacity change from 0 to 164
[  248.970617][ T9115] syzkaller0: tun_chr_ioctl cmd 1074025677
[  248.980738][ T9115] syzkaller0: linktype set to 0
[  250.080265][    T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  250.282551][    T9] usb 9-1: Using ep0 maxpacket: 16
[  250.300656][    T9] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.323590][    T9] usb 9-1: config 0 interface 0 has no altsetting 0
[  250.340901][    T9] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  250.363315][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.382557][    T9] usb 9-1: config 0 descriptor??
[  250.470394][ T5839] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  250.671857][ T5839] usb 6-1: Using ep0 maxpacket: 8
[  250.686824][ T5839] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  250.700440][ T5839] usb 6-1: config 179 has no interface number 0
[  250.735106][ T5839] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  250.767559][ T5839] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  250.799762][ T5839] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  250.832612][    T9] mcp2221 0003:04D8:00DD.000F: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[  250.854319][ T5839] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  250.900113][ T5839] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  250.933946][ T5839] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  250.964472][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.024481][ T9148] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  251.380620][    T9] usb 9-1: USB disconnect, device number 2
[  251.392451][ T9150] loop6: detected capacity change from 0 to 32768
[  251.505813][ T9150] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  251.652997][ T9150] XFS (loop6): Ending clean mount
[  251.827499][ T5839] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input22
[  251.963340][ T7834] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  252.379360][    T8] usb 6-1: USB disconnect, device number 7
[  252.379442][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  252.394721][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  252.421704][    T8] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  253.006967][ T9189] loop6: detected capacity change from 0 to 4096
[  253.080950][ T9189] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  254.166046][ T9226] loop6: detected capacity change from 0 to 256
[  254.196893][ T9226] exfat: Deprecated parameter 'utf8'
[  254.250286][ T9226] exfat: Deprecated parameter 'utf8'
[  254.324888][ T9226] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  255.126750][ T9212] loop4: detected capacity change from 0 to 32768
[  255.168390][ T9251] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  255.243033][ T9212] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  255.419338][ T9212] XFS (loop4): Ending clean mount
[  255.477472][ T9264] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  255.497483][ T9212] XFS (loop4): Quotacheck needed: Please wait.
[  255.636199][ T9212] XFS (loop4): Quotacheck: Done.
[  255.873038][ T9275] loop5: detected capacity change from 0 to 256
[  255.903974][ T9275] exfat: Deprecated parameter 'utf8'
[  255.909469][ T9275] exfat: Deprecated parameter 'utf8'
[  256.003715][ T9275] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  256.079860][ T7544] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  256.158712][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  256.165261][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  256.821759][ T9293] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  257.810724][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  258.021052][    T9] usb 5-1: Using ep0 maxpacket: 8
[  258.035630][    T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  258.064724][    T9] usb 5-1: config 179 has no interface number 0
[  258.082930][ T9339] loop8: detected capacity change from 0 to 256
[  258.111022][ T9339] exfat: Deprecated parameter 'utf8'
[  258.116769][ T9339] exfat: Deprecated parameter 'utf8'
[  258.120180][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  258.158572][ T9340] loop5: detected capacity change from 0 to 512
[  258.175314][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  258.202426][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  258.225026][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  258.252567][ T9339] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  258.275224][    T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  258.290554][    T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  258.372293][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.394680][ T9340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.438797][ T9340] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  258.480571][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  258.559790][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1164'.
[  258.638656][ T9349] ipvlan2: entered allmulticast mode
[  258.644807][ T9349] syz_tun: entered allmulticast mode
[  258.791629][ T7798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.087827][ T5762] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input23
[  259.360300][   T28] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  259.509854][ T5839] usb 5-1: USB disconnect, device number 4
[  259.510078][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  259.524966][    C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[  259.540792][ T5839] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  259.569941][ T9362] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1168'.
[  259.579451][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1168'.
[  259.597224][   T28] usb 9-1: config 0 has an invalid interface number: 251 but max is 0
[  259.620380][   T28] usb 9-1: config 0 has no interface number 0
[  259.642206][   T28] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  259.685641][   T28] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.716092][   T28] usb 9-1: Product: syz
[  259.730175][   T28] usb 9-1: Manufacturer: syz
[  259.735233][   T28] usb 9-1: SerialNumber: syz
[  259.761168][   T28] usb 9-1: config 0 descriptor??
[  259.800904][   T27] audit: type=1326 audit(1788632274.460:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.6.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b40b9e159 code=0x7ffc0000
[  259.839289][   T27] audit: type=1326 audit(1788632274.470:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.6.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b40b9e159 code=0x7ffc0000
[  259.883683][   T27] audit: type=1326 audit(1788632274.500:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.6.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b40b9e159 code=0x7ffc0000
[  259.927891][   T27] audit: type=1326 audit(1788632274.550:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.6.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b40b9e159 code=0x7ffc0000
[  259.927971][ T9363] loop5: detected capacity change from 0 to 4096
[  259.987699][   T27] audit: type=1326 audit(1788632274.550:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.6.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6b40b9e159 code=0x7ffc0000
[  260.014576][ T9363] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  260.063323][   T27] audit: type=1326 audit(1788632274.550:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.6.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b40b9e159 code=0x7ffc0000
[  260.180191][   T27] audit: type=1326 audit(1788632274.550:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.6.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b40b9e159 code=0x7ffc0000
[  260.372599][   T27] audit: type=1326 audit(1788632274.550:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.6.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b40b9e159 code=0x7ffc0000
[  260.471426][   T28] asix 9-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  260.485533][   T27] audit: type=1326 audit(1788632274.550:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.6.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b40b9e159 code=0x7ffc0000
[  260.521612][   T28] asix: probe of 9-1:0.251 failed with error -524
[  260.555297][   T27] audit: type=1326 audit(1788632274.550:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.6.1172" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b40b9e159 code=0x7ffc0000
[  260.728816][   T28] usb 9-1: USB disconnect, device number 3
[  261.162485][ T9391] loop4: detected capacity change from 0 to 2048
[  261.220725][ T9391] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  261.259792][ T9391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.388121][ T9391] overlayfs: upper fs needs to support d_type.
[  261.430923][ T9391] overlayfs: cleanup of 'work/#7' failed (-2)
[  261.470732][ T9391] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  261.500769][ T9391] overlayfs: failed to set xattr on upper
[  261.513457][ T9391] overlayfs: ...falling back to redirect_dir=nofollow.
[  261.529719][ T9391] overlayfs: ...falling back to metacopy=off.
[  261.537731][ T9391] overlayfs: ...falling back to index=off.
[  261.544176][ T9391] overlayfs: ...falling back to uuid=null.
[  261.846663][ T9409] loop8: detected capacity change from 0 to 256
[  261.908799][ T7544] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh
[  261.931586][ T7544] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh
[  262.800411][ T7544] tipc: Resetting bearer <eth:syz_tun>
[  263.719116][ T7544] tipc: Disabling bearer <eth:syz_tun>
[  263.946716][ T5839] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  264.197300][ T5839] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  264.224940][  T993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.240319][ T5839] usb 7-1: config 0 has no interface number 0
[  264.259216][ T5839] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  264.287836][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.300530][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  264.352653][ T5839] usb 7-1: Product: syz
[  264.356911][ T5839] usb 7-1: Manufacturer: syz
[  264.372905][ T5839] usb 7-1: SerialNumber: syz
[  264.405214][ T5839] usb 7-1: config 0 descriptor??
[  264.540073][    T9] usb 6-1: Using ep0 maxpacket: 16
[  264.555411][  T993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.581654][    T9] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.604512][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  264.630480][    T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  264.639611][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.712915][    T9] usb 6-1: config 0 descriptor??
[  264.773267][  T993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.923679][  T993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.116004][ T5839] asix 7-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  265.156337][    T9] mcp2221 0003:04D8:00DD.0010: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  265.167176][ T5839] asix: probe of 7-1:0.251 failed with error -524
[  265.450380][ T5839] usb 7-1: USB disconnect, device number 3
[  265.507125][  T993] tipc: Left network mode
[  265.643363][    T9] usb 6-1: USB disconnect, device number 8
[  265.778875][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  265.799767][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  265.819459][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  265.847989][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  265.861065][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  265.868618][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  266.533480][ T9506] netlink: 552 bytes leftover after parsing attributes in process `syz.6.1203'.
[  266.766895][ T9487] chnl_net:caif_netlink_parms(): no params data found
[  266.840432][   T28] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  267.013737][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.032850][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.045470][   T28] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  267.047889][ T9487] bridge_slave_0: entered allmulticast mode
[  267.062949][ T9487] bridge_slave_0: entered promiscuous mode
[  267.071667][   T28] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.079390][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.087933][   T28] usb 6-1: Product: syz
[  267.088215][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.099757][ T9487] bridge_slave_1: entered allmulticast mode
[  267.105814][   T28] usb 6-1: Manufacturer: syz
[  267.105841][   T28] usb 6-1: SerialNumber: syz
[  267.123619][   T28] usb 6-1: config 0 descriptor??
[  267.134234][ T9487] bridge_slave_1: entered promiscuous mode
[  267.348325][ T9487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.417993][  T993] hsr_slave_0: left promiscuous mode
[  267.482463][  T993] hsr_slave_1: left promiscuous mode
[  267.508986][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.528448][ T5842] usb 6-1: USB disconnect, device number 9
[  267.530677][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.571541][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.579044][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.621009][  T993] bridge0: port 3(team0) entered disabled state
[  267.641163][  T993] bridge_slave_1: left allmulticast mode
[  267.647047][  T993] bridge_slave_1: left promiscuous mode
[  267.656680][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.667650][  T993] bridge_slave_0: left allmulticast mode
[  267.674419][  T993] bridge_slave_0: left promiscuous mode
[  267.680931][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.712980][  T993] veth1_macvtap: left promiscuous mode
[  267.718599][  T993] veth0_macvtap: left promiscuous mode
[  267.724723][  T993] veth1_vlan: left promiscuous mode
[  267.730501][  T993] veth0_vlan: left promiscuous mode
[  267.918987][ T5780] Bluetooth: hci2: command tx timeout
[  268.746045][  T993] team_slave_1 (unregistering): left promiscuous mode
[  268.753806][  T993] team_slave_1 (unregistering): left allmulticast mode
[  268.774148][  T993] team0 (unregistering): Port device team_slave_1 removed
[  268.839653][  T993] team_slave_0 (unregistering): left promiscuous mode
[  268.852110][  T993] team_slave_0 (unregistering): left allmulticast mode
[  268.867271][  T993] team0 (unregistering): Port device team_slave_0 removed
[  268.934568][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.012334][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.545998][  T993] bond0 (unregistering): Released all slaves
[  269.667276][ T9487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.690483][ T9532] netlink: 552 bytes leftover after parsing attributes in process `syz.8.1212'.
[  269.882663][ T9487] team0: Port device team_slave_0 added
[  269.944676][ T9487] team0: Port device team_slave_1 added
[  269.998579][ T5780] Bluetooth: hci2: command tx timeout
[  270.092136][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.099405][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.185860][ T9487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.215405][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.233015][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.308503][ T9487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.348870][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1218'.
[  270.609179][ T9487] hsr_slave_0: entered promiscuous mode
[  270.633401][ T8097] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  270.640964][ T9487] hsr_slave_1: entered promiscuous mode
[  270.647088][ T9487] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  270.668499][ T9487] Cannot create hsr debugfs directory
[  270.720194][ T5842] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  270.853056][ T8097] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  270.865344][ T8097] usb 6-1: config 0 has no interface number 0
[  270.893978][ T8097] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  270.907071][ T8097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.926213][ T8097] usb 6-1: Product: syz
[  270.930230][ T5842] usb 7-1: Using ep0 maxpacket: 16
[  270.936309][ T8097] usb 6-1: Manufacturer: syz
[  270.942480][ T5842] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.946712][ T8097] usb 6-1: SerialNumber: syz
[  270.970045][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0
[  270.978328][ T5842] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  270.988346][ T8097] usb 6-1: config 0 descriptor??
[  271.009813][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.040954][ T5842] usb 7-1: config 0 descriptor??
[  271.307789][ T9487] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  271.329905][ T9487] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  271.345262][ T9487] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  271.365469][ T9487] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  271.478284][ T5842] mcp2221 0003:04D8:00DD.0011: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  271.594662][ T9487] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.675640][ T8097] asix 6-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  271.699131][ T9487] 8021q: adding VLAN 0 to HW filter on device team0
[  271.715435][ T8097] asix: probe of 6-1:0.251 failed with error -524
[  271.758575][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.765832][  T993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.845733][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.853029][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.941558][ T5842] usb 6-1: USB disconnect, device number 10
[  271.996649][ T5820] usb 7-1: USB disconnect, device number 4
[  272.070542][ T5780] Bluetooth: hci2: command tx timeout
[  272.504048][ T9487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.369781][ T9612] loop8: detected capacity change from 0 to 2048
[  273.463257][ T9612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.495427][ T9612] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  273.736627][ T9487] veth0_vlan: entered promiscuous mode
[  273.793669][ T9612] fs-verity: sha512 using implementation "sha512-avx2"
[  273.804677][ T9487] veth1_vlan: entered promiscuous mode
[  273.906298][ T9487] veth0_macvtap: entered promiscuous mode
[  273.919212][ T9487] veth1_macvtap: entered promiscuous mode
[  273.968249][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.996795][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.008603][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.019767][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.030351][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.041332][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.055771][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.066944][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.092301][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.112903][ T8893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.121245][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.139815][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.149985][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.160664][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.170694][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.182850][ T5780] Bluetooth: hci2: command tx timeout
[  274.206091][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.227168][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.275311][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.322166][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.367038][ T9487] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.387215][ T9487] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.407567][ T9487] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.432411][ T9487] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.722157][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.748437][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.917437][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.986047][ T9650] loop6: detected capacity change from 0 to 512
[  274.996217][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.084395][ T9650] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #2: comm syz.6.1233: corrupted xattr block 255: invalid header
[  275.126310][ T9650] EXT4-fs (loop6): Remounting filesystem read-only
[  275.165292][ T9650] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  275.207970][ T9650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.471972][  T993] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.496129][ T7834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.766164][  T993] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.973138][ T9670] loop9: detected capacity change from 0 to 256
[  275.989443][ T9672] loop5: detected capacity change from 0 to 512
[  275.998798][  T993] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.060959][ T9672] EXT4-fs (loop5): Test dummy encryption mode enabled
[  276.120203][ T9672] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1237: inode has both inline data and extents flags
[  276.211621][ T9672] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1237: couldn't read orphan inode 15 (err -117)
[  276.288589][ T9672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.373253][  T993] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.819506][ T9672] fscrypt (loop5): Error allocating 'xts(aes)' transform: -4
[  276.913439][ T9682] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  277.162992][ T7798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.251991][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  277.273322][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  277.284347][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  277.330157][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  277.343399][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  277.353492][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  277.632653][ T9708] loop5: detected capacity change from 0 to 4096
[  277.661733][ T9708] __ntfs_error: 27 callbacks suppressed
[  277.661755][ T9708] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  277.745599][ T9709] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1246'.
[  277.860404][ T9708] ntfs: volume version 3.1.
[  278.969427][ T9744] loop6: detected capacity change from 0 to 2048
[  279.031738][ T9744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.079469][ T9753] loop9: detected capacity change from 0 to 512
[  279.102048][ T9753] EXT4-fs (loop9): Test dummy encryption mode enabled
[  279.102614][ T9744] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  279.165605][ T9753] EXT4-fs error (device loop9): ext4_orphan_get:1408: inode #15: comm syz.9.1258: inode has both inline data and extents flags
[  279.211969][ T9754] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1259'.
[  279.258335][ T9753] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.1258: couldn't read orphan inode 15 (err -117)
[  279.317712][ T9753] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.411598][ T9753] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  279.450647][ T5788] Bluetooth: hci1: command tx timeout
[  279.457191][ T7834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.870485][ T9753] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  280.007929][ T9702] chnl_net:caif_netlink_parms(): no params data found
[  280.084792][ T9487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.292317][ T9782] loop9: detected capacity change from 0 to 512
[  280.364300][ T9782] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #2: comm syz.9.1263: corrupted xattr block 255: invalid header
[  280.428969][ T9782] EXT4-fs (loop9): Remounting filesystem read-only
[  280.482443][ T9782] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  280.526287][ T9782] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.543137][  T993] hsr_slave_0: left promiscuous mode
[  280.590677][  T993] hsr_slave_1: left promiscuous mode
[  280.626973][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.640325][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.654949][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.662531][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.671590][  T993] bridge_slave_1: left allmulticast mode
[  280.677387][  T993] bridge_slave_1: left promiscuous mode
[  280.683392][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.696688][  T993] bridge_slave_0: left allmulticast mode
[  280.703150][  T993] bridge_slave_0: left promiscuous mode
[  280.710765][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.723515][ T9487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.876608][  T993] veth1_macvtap: left promiscuous mode
[  280.893055][  T993] veth0_macvtap: left promiscuous mode
[  280.898795][  T993] veth1_vlan: left promiscuous mode
[  280.930510][  T993] veth0_vlan: left promiscuous mode
[  281.520566][ T5788] Bluetooth: hci1: command tx timeout
[  281.842386][   T28] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  282.077641][   T28] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.102153][   T28] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  282.103406][ T9809] loop9: detected capacity change from 0 to 32768
[  282.112031][   T28] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  282.132911][   T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.177486][   T28] usb 7-1: config 0 descriptor??
[  282.194825][   T28] gspca_main: spca561-2.14.0 probing abcd:cdee
[  282.211503][ T9809] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  282.233612][ T9809] (syz.9.1274,9809,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  282.367728][ T9487] ocfs2: Unmounting device (7,9) on (node local)
[  282.816876][   T28] spca561: probe of 7-1:0.0 failed with error -22
[  282.850876][   T28] usb 7-1: USB disconnect, device number 5
[  282.884765][  T993] team0 (unregistering): Port device team_slave_1 removed
[  282.979850][  T993] team0 (unregistering): Port device team_slave_0 removed
[  283.051916][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  283.123098][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  283.600259][ T5788] Bluetooth: hci1: command tx timeout
[  283.819682][  T993] bond0 (unregistering): Released all slaves
[  284.117890][ T9702] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.190316][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.197738][ T9702] bridge_slave_0: entered allmulticast mode
[  284.247421][ T9702] bridge_slave_0: entered promiscuous mode
[  284.278632][ T9702] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.307199][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.340380][ T9702] bridge_slave_1: entered allmulticast mode
[  284.347970][ T9702] bridge_slave_1: entered promiscuous mode
[  284.476516][ T9827] loop9: detected capacity change from 0 to 4096
[  284.485727][ T9702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.548877][ T9702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.568113][ T9827] ntfs3: loop9: Different NTFS sector size (2048) and media sector size (512).
[  284.787863][ T9702] team0: Port device team_slave_0 added
[  284.819894][ T9702] team0: Port device team_slave_1 added
[  284.898995][ T9827] ntfs3: loop9: Failed to initialize $Extend/$ObjId.
[  285.006183][ T9702] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.040300][ T9702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.092255][ T9702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.156174][   T27] audit: type=1800 audit(1788632299.820:105): pid=9827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1279" name="file1" dev="loop9" ino=30 res=0 errno=0
[  285.171434][ T9702] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.207958][ T9702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.237214][ T9702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.564712][ T9702] hsr_slave_0: entered promiscuous mode
[  285.651087][ T9702] hsr_slave_1: entered promiscuous mode
[  285.670316][ T5788] Bluetooth: hci1: command tx timeout
[  285.692819][ T9702] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  285.720286][ T9702] Cannot create hsr debugfs directory
[  286.310010][    C0] sched: RT throttling activated
[  286.598526][ T9850] loop6: detected capacity change from 0 to 131072
[  286.629223][ T9850] F2FS-fs (loop6): invalid crc value
[  286.677935][ T9850] F2FS-fs (loop6): Found nat_bits in checkpoint
[  286.739351][ T9850] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  286.849150][ T9850] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  286.963468][ T5820] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  287.173157][ T5820] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.204324][ T5820] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[  287.220732][ T5820] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  287.245261][ T5820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.284543][ T5820] usb 10-1: config 0 descriptor??
[  287.313790][ T5820] gspca_main: spca561-2.14.0 probing abcd:cdee
[  287.970421][ T5820] spca561: probe of 10-1:0.0 failed with error -22
[  288.002311][ T5820] usb 10-1: USB disconnect, device number 2
[  288.255196][ T9702] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  288.269321][ T9702] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  288.281576][ T9702] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  288.294365][ T9702] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  288.425856][ T9702] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.459769][ T9702] 8021q: adding VLAN 0 to HW filter on device team0
[  288.479451][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.486694][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.521523][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.528823][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.660535][ T9702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  289.016441][ T9901] vxcan2: entered allmulticast mode
[  289.352880][ T9702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.549268][ T9702] veth0_vlan: entered promiscuous mode
[  289.584341][ T9702] veth1_vlan: entered promiscuous mode
[  289.687344][ T9702] veth0_macvtap: entered promiscuous mode
[  289.749800][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1299'.
[  289.814713][ T9702] veth1_macvtap: entered promiscuous mode
[  289.883230][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.912358][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.937406][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.962826][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.003779][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.022902][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.050018][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.080546][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.111938][ T9702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.147056][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.163945][ T9926] input: syz1 as /devices/virtual/input/input24
[  290.196643][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.226761][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.245155][ T9928] loop9: detected capacity change from 0 to 512
[  290.270064][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.279949][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.293656][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.325084][ T9928] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  290.356159][ T9928] EXT4-fs (loop9): can't mount with commit=33527, fs mounted w/o journal
[  290.382834][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.424468][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.459044][ T9702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.508619][ T9702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.537508][ T9702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.568253][ T9702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.579855][ T9702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.687470][ T9915] loop5: detected capacity change from 0 to 32768
[  290.777195][ T9932] loop9: detected capacity change from 0 to 512
[  290.833206][ T9915] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  291.007843][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.032331][ T9915] (syz.5.1296,9915,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  291.066347][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.261549][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.288162][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.434615][ T7798] ocfs2: Unmounting device (7,5) on (node local)
[  292.166748][ T9964] loop5: detected capacity change from 0 to 4096
[  292.244279][ T9972] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  292.435523][ T9974] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1314'.
[  292.577412][ T7798] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  292.610681][ T7798] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12)
[  292.666705][ T7798] Remounting filesystem read-only
[  292.681045][ T7798] NILFS (loop5): error -5 truncating bmap (ino=12)
[  292.753828][ T7798] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  292.793298][ T7798] NILFS (loop5): discard dirty page: offset=0, ino=2
[  292.821317][ T7798] NILFS (loop5): discard dirty block: blocknr=14, size=4096
[  292.852232][ T7798] NILFS (loop5): discard dirty page: offset=0, ino=6
[  292.863589][ T7798] NILFS (loop5): discard dirty block: blocknr=23, size=4096
[  292.880385][ T7798] NILFS (loop5): discard dirty page: offset=4096, ino=6
[  292.894216][ T7798] NILFS (loop5): discard dirty block: blocknr=24, size=4096
[  292.910869][ T7798] NILFS (loop5): discard dirty page: offset=8192, ino=6
[  292.926207][ T7798] NILFS (loop5): discard dirty block: blocknr=25, size=4096
[  294.981433][T10016] loop2: detected capacity change from 0 to 32768
[  295.151124][T10016] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  295.267116][T10016] (syz.2.1326,10016,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  295.574424][ T9702] ocfs2: Unmounting device (7,2) on (node local)
[  296.058474][T10079] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1356'.
[  296.335001][T10088] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1359'.
[  296.858252][T10103] loop6: detected capacity change from 0 to 512
[  297.502190][T10126] loop2: detected capacity change from 0 to 512
[  299.192342][T10171] loop9: detected capacity change from 0 to 4096
[  299.294558][T10178] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  299.648093][ T9487] NILFS (loop9): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  299.673527][ T9487] NILFS error (device loop9): nilfs_bmap_truncate: broken bmap (inode number=12)
[  299.736526][ T9487] Remounting filesystem read-only
[  299.747681][ T9487] NILFS (loop9): error -5 truncating bmap (ino=12)
[  299.806131][ T9487] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer
[  299.833653][T10191] loop2: detected capacity change from 0 to 512
[  299.841152][ T9487] NILFS (loop9): discard dirty page: offset=0, ino=2
[  299.847912][ T9487] NILFS (loop9): discard dirty block: blocknr=14, size=4096
[  299.877248][ T9487] NILFS (loop9): discard dirty page: offset=0, ino=6
[  299.916009][ T9487] NILFS (loop9): discard dirty block: blocknr=23, size=4096
[  299.928075][ T9487] NILFS (loop9): discard dirty page: offset=4096, ino=6
[  299.965521][ T9487] NILFS (loop9): discard dirty block: blocknr=24, size=4096
[  300.020057][ T9487] NILFS (loop9): discard dirty page: offset=8192, ino=6
[  300.027101][ T9487] NILFS (loop9): discard dirty block: blocknr=25, size=4096
[  300.045783][T10191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.110251][T10191] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.316965][T10201] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.326901][T10201] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.335793][T10201] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  300.344715][T10201] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  300.402362][ T9702] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.473565][T10201] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.483034][T10201] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.492408][T10201] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.501538][T10201] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.073105][T10216] base or size exceeds the MTRR width
[  301.146530][T10184] loop6: detected capacity change from 0 to 40427
[  301.182304][T10184] F2FS-fs (loop6): invalid crc value
[  301.208289][T10184] F2FS-fs (loop6): Found nat_bits in checkpoint
[  301.381951][T10184] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  302.004486][T10237] loop9: detected capacity change from 0 to 128
[  302.099144][T10240] netlink: 'syz.5.1394': attribute type 11 has an invalid length.
[  302.105311][T10237] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  302.170566][T10240] netlink: 184116 bytes leftover after parsing attributes in process `syz.5.1394'.
[  302.183636][T10237] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  302.378773][ T9487] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  302.394799][T10244] loop6: detected capacity change from 0 to 4096
[  302.516424][T10250] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  302.832211][ T7834] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  302.880165][ T7834] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=12)
[  302.979483][ T7834] Remounting filesystem read-only
[  303.010225][ T7834] NILFS (loop6): error -5 truncating bmap (ino=12)
[  303.047221][T10262] loop5: detected capacity change from 0 to 512
[  303.073058][ T7834] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer
[  303.115591][ T7834] NILFS (loop6): discard dirty page: offset=0, ino=2
[  303.138233][T10262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.164639][ T7834] NILFS (loop6): discard dirty block: blocknr=14, size=4096
[  303.185463][T10262] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.195489][ T7834] NILFS (loop6): discard dirty page: offset=0, ino=6
[  303.220207][ T7834] NILFS (loop6): discard dirty block: blocknr=23, size=4096
[  303.227619][ T7834] NILFS (loop6): discard dirty page: offset=4096, ino=6
[  303.285730][T10262] EXT4-fs error (device loop5): ext4_group_add:1745: inode #7: comm syz.5.1403: iget: checksum invalid
[  303.307598][ T7834] NILFS (loop6): discard dirty block: blocknr=24, size=4096
[  303.325493][T10262] EXT4-fs warning (device loop5): ext4_group_add:1747: Error opening resize inode
[  303.338909][ T7834] NILFS (loop6): discard dirty page: offset=8192, ino=6
[  303.350824][ T7834] NILFS (loop6): discard dirty block: blocknr=25, size=4096
[  303.532908][ T7798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.178448][T10296] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1411'.
[  304.310396][ T5780] Bluetooth: hci0: command 0x0406 tx timeout
[  304.694700][T10276] loop9: detected capacity change from 0 to 32768
[  304.771541][T10276] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  305.008363][T10276] XFS (loop9): Ending clean mount
[  305.060986][T10276] XFS (loop9): Quotacheck needed: Please wait.
[  305.245683][T10276] XFS (loop9): Quotacheck: Done.
[  305.647415][ T9487] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  306.724892][T10376] bridge0: port 3(syz_tun) entered blocking state
[  306.790327][T10376] bridge0: port 3(syz_tun) entered disabled state
[  306.833944][T10376] syz_tun: entered allmulticast mode
[  306.851729][T10376] syz_tun: entered promiscuous mode
[  306.870707][T10376] bridge0: port 3(syz_tun) entered blocking state
[  306.878216][T10376] bridge0: port 3(syz_tun) entered forwarding state
[  307.062913][T10382] loop9: detected capacity change from 0 to 4096
[  307.146698][T10356] loop5: detected capacity change from 0 to 32768
[  307.201850][T10382] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  307.234969][T10356] JBD2: Ignoring recovery information on journal
[  307.431789][T10382] ntfs3: loop9: Failed to initialize $Extend/$Reparse.
[  307.504297][T10356] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  307.676956][ T5762] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  307.925666][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.940417][ T7798] ocfs2: Unmounting device (7,5) on (node local)
[  307.985126][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.045009][ T5762] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  308.129312][ T5762] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[  308.163442][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.225991][ T5762] usb 3-1: config 0 descriptor??
[  308.381296][T10418] dvmrp31: entered allmulticast mode
[  308.412793][T10418] dvmrp31: left allmulticast mode
[  308.706779][ T5762] wacom 0003:056A:002A.0012: unknown main item tag 0x2
[  308.744395][ T5762] wacom 0003:056A:002A.0012: unknown main item tag 0x0
[  308.771850][ T5762] wacom 0003:056A:002A.0012: unknown main item tag 0x2
[  308.790061][ T5762] wacom 0003:056A:002A.0012: unknown main item tag 0xe
[  308.798228][ T5762] wacom 0003:056A:002A.0012: Unknown device_type for 'HID 056a:002a'. Assuming pen.
[  308.868665][ T5762] wacom 0003:056A:002A.0012: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.2-1/input0
[  308.903880][ T5762] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:002A.0012/input/input25
[  308.983900][T10428] 9p: Unknown access argument 18446744073709551615: -34
[  309.120365][ T5762] usb 3-1: USB disconnect, device number 6
[  309.329053][T10436] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1451'.
[  309.390242][T10436] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1451'.
[  309.430780][ T5780] Bluetooth: hci3: command 0x0406 tx timeout
[  309.478543][T10440] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1453'.
[  309.593205][T10440] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.896641][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1457'.
[  309.950742][ T9578] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  309.985856][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1458'.
[  310.165302][ T9578] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  310.226681][ T9578] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.257901][ T9578] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  310.280615][ T9578] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.305363][ T9578] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  310.315652][ T9578] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  310.323948][ T9578] usb 10-1: Product: syz
[  310.328716][ T9578] usb 10-1: Manufacturer: syz
[  310.394191][ T9578] cdc_wdm 10-1:1.0: skipping garbage
[  310.404456][ T9578] cdc_wdm 10-1:1.0: skipping garbage
[  310.416310][ T9578] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  310.448011][ T9578] cdc_wdm 10-1:1.0: Unknown control protocol
[  310.657572][T10469] loop2: detected capacity change from 0 to 128
[  310.661945][   T28] usb 10-1: USB disconnect, device number 3
[  310.763070][T10469] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  310.823891][T10469] hpfs: filesystem error: improperly stopped
[  310.861853][T10469] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  310.913144][T10469] hpfs: You really don't want any checks? You are crazy...
[  310.932160][T10469] hpfs: hpfs_map_sector(): read error
[  310.942236][T10469] hpfs: code page support is disabled
[  310.958079][T10469] hpfs: hpfs_map_4sectors(): unaligned read
[  310.977121][T10469] hpfs: hpfs_map_4sectors(): unaligned read
[  310.986765][T10469] hpfs: filesystem error: unable to find root dir
[  311.047336][T10469] hpfs: hpfs_map_4sectors(): unaligned read
[  311.068677][T10469] hpfs: hpfs_map_sector(): read error
[  311.100362][ T5822] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  311.310357][ T5822] usb 7-1: Using ep0 maxpacket: 8
[  311.322393][ T5822] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  311.334990][ T5822] usb 7-1: config 0 has no interface number 0
[  311.348062][ T5822] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  311.382775][T10481] loop2: detected capacity change from 0 to 256
[  311.395957][ T5822] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  311.422356][   T27] audit: type=1400 audit(1788632326.090:106): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=10482 comm="syz.9.1472" name="p" offset=79
[  311.459912][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.503622][ T5822] usb 7-1: config 0 descriptor??
[  311.540409][ T5822] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  311.735299][   T28] usb 7-1: USB disconnect, device number 6
[  312.701741][   T32] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.908242][   T32] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.074132][   T32] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.323153][   T32] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.688143][T10510] loop2: detected capacity change from 0 to 32768
[  313.817582][T10510] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  313.833342][T10537] loop5: detected capacity change from 0 to 1024
[  313.904979][T10537] EXT4-fs: inline encryption not supported
[  314.031702][T10537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.166475][T10537] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.5.1489: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0
[  314.208966][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.238729][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.248537][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.248934][T10510] XFS (loop2): Ending clean mount
[  314.273809][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.290190][ T5839] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  314.314197][T10537] EXT4-fs error (device loop5) in ext4_delete_inline_entry:1802: Corrupt filesystem
[  314.332480][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  314.344198][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.484839][ T5839] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  314.502929][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.513963][ T5839] usb 7-1: Product: syz
[  314.518601][ T5839] usb 7-1: Manufacturer: syz
[  314.523880][ T5839] usb 7-1: SerialNumber: syz
[  314.546090][ T5839] usb 7-1: config 0 descriptor??
[  314.556183][ T7798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.584433][ T9702] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  314.870656][ T5839] usb 7-1: USB disconnect, device number 7
[  315.118284][T10566] loop5: detected capacity change from 0 to 256
[  315.353372][T10566] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[  315.892295][T10554] chnl_net:caif_netlink_parms(): no params data found
[  316.110330][T10554] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.117565][T10554] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.134167][T10554] bridge_slave_0: entered allmulticast mode
[  316.145881][T10554] bridge_slave_0: entered promiscuous mode
[  316.228486][T10554] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.236292][T10554] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.244337][T10554] bridge_slave_1: entered allmulticast mode
[  316.252640][T10554] bridge_slave_1: entered promiscuous mode
[  316.325661][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.343434][   T32] hsr_slave_0: left promiscuous mode
[  316.349914][   T32] hsr_slave_1: left promiscuous mode
[  316.361715][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.369547][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.378903][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.388722][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.390651][ T5780] Bluetooth: hci2: command tx timeout
[  316.403881][   T32] bridge_slave_1: left allmulticast mode
[  316.409811][   T32] bridge_slave_1: left promiscuous mode
[  316.416348][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.442269][   T32] bridge_slave_0: left allmulticast mode
[  316.448185][   T32] bridge_slave_0: left promiscuous mode
[  316.461864][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.526338][   T32] veth1_macvtap: left promiscuous mode
[  316.545928][   T32] veth0_macvtap: left promiscuous mode
[  316.551852][   T32] veth1_vlan: left promiscuous mode
[  316.561538][   T32] veth0_vlan: left promiscuous mode
[  317.611700][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  317.618091][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  318.016655][   T32] team0 (unregistering): Port device team_slave_1 removed
[  318.099507][   T32] team0 (unregistering): Port device team_slave_0 removed
[  318.170789][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  318.232769][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  318.479796][ T5780] Bluetooth: hci2: command tx timeout
[  318.674982][   T32] bond0 (unregistering): Released all slaves
[  318.817144][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.905679][T10554] team0: Port device team_slave_0 added
[  318.953732][T10554] team0: Port device team_slave_1 added
[  319.009089][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.027542][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.079281][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.092991][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.102407][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.130002][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.257591][T10554] hsr_slave_0: entered promiscuous mode
[  319.275392][T10554] hsr_slave_1: entered promiscuous mode
[  319.290670][T10554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  319.298328][T10554] Cannot create hsr debugfs directory
[  320.014944][T10554] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  320.033070][T10554] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  320.051699][T10554] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  320.071685][T10554] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  320.228541][T10554] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.276404][T10554] 8021q: adding VLAN 0 to HW filter on device team0
[  320.305961][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.313243][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.364543][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.371809][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.550309][ T5780] Bluetooth: hci2: command tx timeout
[  320.780423][T10554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.210166][T10554] veth0_vlan: entered promiscuous mode
[  321.238738][T10554] veth1_vlan: entered promiscuous mode
[  321.322625][T10554] veth0_macvtap: entered promiscuous mode
[  321.344111][T10554] veth1_macvtap: entered promiscuous mode
[  321.381848][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.405992][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.418836][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.440030][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.455370][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.466015][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.480338][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.496578][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.521347][T10554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.556872][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.567641][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.586249][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.597097][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.621167][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.637111][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.648315][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.666512][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.689449][T10554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.731466][T10554] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.748421][T10554] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.758274][T10554] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.776023][T10554] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.977693][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.992240][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.067999][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.085862][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.630275][ T5780] Bluetooth: hci2: command tx timeout
[  379.035479][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  379.042428][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  401.590445][T11515] Bluetooth: hci1: command 0x0406 tx timeout
[  437.437622][T11515] Bluetooth: hci2: command 0x0406 tx timeout
[  440.476014][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  440.482728][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  474.390178][   T29] INFO: task kworker/u4:6:1034 blocked for more than 143 seconds.
[  474.398081][   T29]       Not tainted syzkaller #0
[  474.403180][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  474.411976][   T29] task:kworker/u4:6    state:D stack:21520 pid:1034  ppid:2      flags:0x00004000
[  474.421321][   T29] Workqueue: writeback wb_workfn (flush-8:0)
[  474.427512][   T29] Call Trace:
[  474.431022][   T29]  <TASK>
[  474.434086][   T29]  __schedule+0x15ae/0x4660
[  474.438792][   T29]  ? blk_mq_start_stopped_hw_queues+0x260/0x260
[  474.445512][   T29]  ? blk_mq_start_stopped_hw_queues+0x260/0x260
[  474.451887][   T29]  ? mark_lock+0x94/0x320
[  474.456349][   T29]  ? asan.module_dtor+0x20/0x20
[  474.461444][   T29]  ? blk_check_plugged+0x250/0x250
[  474.466615][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  474.472667][   T29]  ? wq_worker_sleeping+0x63/0x240
[  474.477910][   T29]  schedule+0xbd/0x170
[  474.482183][   T29]  io_schedule+0x80/0xd0
[  474.487130][   T29]  bit_wait_io+0x11/0xd0
[  474.493968][   T29]  __wait_on_bit+0x9f/0x2c0
[  474.498612][   T29]  ? bit_wait+0xd0/0xd0
[  474.511009][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  474.516571][   T29]  ? bit_wait+0xd0/0xd0
[  474.525333][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  474.532290][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  474.537415][   T29]  ? bit_waitqueue+0x30/0x30
[  474.546472][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  474.555166][   T29]  do_get_write_access+0x5c9/0xe00
[  474.565185][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  474.572522][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  474.578885][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  474.585357][   T29]  ? ext4_get_group_desc+0x10e/0x4d0
[  474.595366][   T29]  ext4_mb_mark_diskspace_used+0x27c/0x14b0
[  474.601634][   T29]  ? _raw_read_unlock+0x28/0x40
[  474.606541][   T29]  ? ext4_discard_allocated_blocks+0x620/0x620
[  474.612992][   T29]  ext4_mb_new_blocks+0x105b/0x42f0
[  474.618257][   T29]  ? __es_insert_extent+0x17b0/0x17b0
[  474.623763][   T29]  ? ext4_find_extent+0x1f5/0xcd0
[  474.628841][   T29]  ? ext4_ext_search_right+0x376/0x800
[  474.634481][   T29]  ? __asan_memcpy+0x40/0x70
[  474.639163][   T29]  ? ext4_mb_release_inode_pa+0xa30/0xa30
[  474.645066][   T29]  ? ext4_ext_find_goal+0xed/0x1d0
[  474.650487][   T29]  ext4_ext_map_blocks+0x1811/0x68c0
[  474.655873][   T29]  ? __might_sleep+0xe0/0xe0
[  474.660866][   T29]  ? ext4_ext_release+0x10/0x10
[  474.665793][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  474.671207][   T29]  ? ext4_es_lookup_extent+0x601/0x9f0
[  474.676720][   T29]  ext4_map_blocks+0x9db/0x1a90
[  474.681950][   T29]  ? ext4_issue_zeroout+0x250/0x250
[  474.687216][   T29]  ? rcu_is_watching+0x15/0xb0
[  474.692733][   T29]  ? ext4_inode_journal_mode+0x376/0x460
[  474.698445][   T29]  ext4_do_writepages+0x1463/0x3990
[  474.703859][   T29]  ? ext4_normal_submit_inode_data_buffers+0x240/0x240
[  474.711308][   T29]  ? rcu_read_lock_any_held+0xb4/0x140
[  474.716839][   T29]  ? __lock_acquire+0x1336/0x7d80
[  474.723195][   T29]  ext4_writepages+0x1dd/0x350
[  474.728016][   T29]  ? ext4_read_folio+0x2f0/0x2f0
[  474.734410][   T29]  ? reacquire_held_locks+0x31f/0x5c0
[  474.739845][   T29]  ? writeback_sb_inodes+0x35e/0x1020
[  474.745381][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  474.750707][   T29]  ? ext4_read_folio+0x2f0/0x2f0
[  474.755692][   T29]  do_writepages+0x351/0x590
[  474.760710][   T29]  ? folio_clear_dirty_for_io+0xca0/0xca0
[  474.766518][   T29]  ? writeback_sb_inodes+0x4bd/0x1020
[  474.772019][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  474.777103][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  474.782652][   T29]  __writeback_single_inode+0x14e/0xee0
[  474.788279][   T29]  writeback_sb_inodes+0x813/0x1020
[  474.795003][   T29]  ? queue_io+0x530/0x530
[  474.799454][   T29]  __writeback_inodes_wb+0x114/0x240
[  474.806182][   T29]  wb_writeback+0x472/0xbe0
[  474.811031][   T29]  ? queue_io+0x391/0x530
[  474.815433][   T29]  ? percpu_ref_tryget+0x250/0x250
[  474.821087][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  474.827118][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  474.832522][   T29]  wb_workfn+0xad7/0xe60
[  474.836838][   T29]  ? inode_wait_for_writeback+0x230/0x230
[  474.842920][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  474.848951][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  474.854297][   T29]  ? read_lock_is_recursive+0x20/0x20
[  474.859766][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  474.865375][   T29]  ? process_scheduled_works+0x975/0x1600
[  474.871438][   T29]  ? process_scheduled_works+0x975/0x1600
[  474.877256][   T29]  process_scheduled_works+0xa60/0x1600
[  474.883203][   T29]  ? worker_attach_to_pool+0x370/0x370
[  474.888744][   T29]  ? assign_work+0x3cc/0x5d0
[  474.893521][   T29]  worker_thread+0xa5e/0xfe0
[  474.898756][   T29]  kthread+0x2fa/0x390
[  474.902954][   T29]  ? pr_cont_work+0x550/0x550
[  474.907700][   T29]  ? kthread_blkcg+0xd0/0xd0
[  474.912417][   T29]  ret_from_fork+0x48/0x80
[  474.916924][   T29]  ? kthread_blkcg+0xd0/0xd0
[  474.921846][   T29]  ret_from_fork_asm+0x11/0x20
[  474.926733][   T29]  </TASK>
[  474.930432][   T29] INFO: task jbd2/sda1-8:5102 blocked for more than 143 seconds.
[  474.938198][   T29]       Not tainted syzkaller #0
[  474.943279][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  474.952035][   T29] task:jbd2/sda1-8     state:D stack:25736 pid:5102  ppid:2      flags:0x00004000
[  474.961654][   T29] Call Trace:
[  474.964985][   T29]  <TASK>
[  474.967969][   T29]  __schedule+0x15ae/0x4660
[  474.972620][   T29]  ? asan.module_dtor+0x20/0x20
[  474.977516][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  474.983080][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  474.989041][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  474.995842][   T29]  schedule+0xbd/0x170
[  475.000764][   T29]  io_schedule+0x80/0xd0
[  475.005098][   T29]  bit_wait_io+0x11/0xd0
[  475.009402][   T29]  __wait_on_bit+0x9f/0x2c0
[  475.014030][   T29]  ? bit_wait+0xd0/0xd0
[  475.018246][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  475.023847][   T29]  ? bit_wait+0xd0/0xd0
[  475.028059][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  475.034033][   T29]  ? do_raw_write_lock+0x11e/0x260
[  475.039229][   T29]  ? bit_waitqueue+0x30/0x30
[  475.044505][   T29]  ? do_raw_read_unlock+0x3d/0x80
[  475.049753][   T29]  jbd2_journal_commit_transaction+0x2e8d/0x5ad0
[  475.056523][   T29]  ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0
[  475.063608][   T29]  ? lock_chain_count+0x20/0x20
[  475.068543][   T29]  ? _raw_spin_unlock+0x40/0x40
[  475.073832][   T29]  ? __try_to_del_timer_sync+0x1c2/0x280
[  475.079535][   T29]  ? __timer_delete_sync+0x23d/0x2e0
[  475.086584][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  475.091922][   T29]  ? timer_delete_sync+0x20/0x20
[  475.096910][   T29]  ? do_raw_read_unlock+0x80/0x80
[  475.102716][   T29]  ? prepare_to_wait+0x1aa/0x200
[  475.107723][   T29]  kjournald2+0x40f/0x810
[  475.112299][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  475.117594][   T29]  ? wake_bit_function+0x200/0x200
[  475.123603][   T29]  ? _raw_spin_unlock+0x40/0x40
[  475.128514][   T29]  ? __kthread_parkme+0x71/0x1c0
[  475.133781][   T29]  ? __kthread_parkme+0x15b/0x1c0
[  475.138870][   T29]  kthread+0x2fa/0x390
[  475.144354][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  475.149704][   T29]  ? kthread_blkcg+0xd0/0xd0
[  475.154825][   T29]  ret_from_fork+0x48/0x80
[  475.159330][   T29]  ? kthread_blkcg+0xd0/0xd0
[  475.164226][   T29]  ret_from_fork_asm+0x11/0x20
[  475.169055][   T29]  </TASK>
[  475.172178][   T29] INFO: task syz-executor:5760 blocked for more than 144 seconds.
[  475.180095][   T29]       Not tainted syzkaller #0
[  475.185079][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  475.193879][   T29] task:syz-executor    state:D stack:21912 pid:5760  ppid:5759   flags:0x00004002
[  475.205214][   T29] Call Trace:
[  475.208561][   T29]  <TASK>
[  475.211615][   T29]  __schedule+0x15ae/0x4660
[  475.216185][   T29]  ? mark_lock+0x94/0x320
[  475.220727][   T29]  ? asan.module_dtor+0x20/0x20
[  475.225642][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  475.230920][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  475.236873][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  475.242402][   T29]  schedule+0xbd/0x170
[  475.246540][   T29]  io_schedule+0x80/0xd0
[  475.250882][   T29]  bit_wait_io+0x11/0xd0
[  475.255193][   T29]  __wait_on_bit+0x9f/0x2c0
[  475.259766][   T29]  ? bit_wait+0xd0/0xd0
[  475.266185][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  475.271858][   T29]  ? bit_wait+0xd0/0xd0
[  475.276078][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  475.281113][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  475.286202][   T29]  ? bit_waitqueue+0x30/0x30
[  475.290917][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  475.296196][   T29]  do_get_write_access+0x5c9/0xe00
[  475.301470][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  475.308139][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  475.314662][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  475.325422][   T29]  ? __might_sleep+0xe0/0xe0
[  475.330132][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  475.336415][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  475.342167][   T29]  ext4_dirty_inode+0xcb/0x110
[  475.347003][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  475.353082][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  475.358620][   T29]  file_update_time+0x187/0x1a0
[  475.364690][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  475.369776][   T29]  ? do_wp_page+0x4ce/0x34d0
[  475.374687][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  475.381134][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  475.386234][   T29]  do_page_mkwrite+0x153/0x3f0
[  475.391140][   T29]  do_wp_page+0xd4d/0x34d0
[  475.395625][   T29]  ? folio_put+0xd0/0xd0
[  475.400110][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  475.405204][   T29]  ? __rwlock_init+0x150/0x150
[  475.410701][   T29]  handle_mm_fault+0x1306/0x4a50
[  475.415701][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  475.420828][   T29]  ? numa_migrate_prep+0x350/0x350
[  475.426026][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  475.431474][   T29]  do_user_addr_fault+0x736/0x12d0
[  475.436671][   T29]  exc_page_fault+0x64/0x100
[  475.442822][   T29]  ? clear_bhb_loop+0x40/0x90
[  475.447704][   T29]  asm_exc_page_fault+0x26/0x30
[  475.452947][   T29] RIP: 0033:0x7f4fd767c6e2
[  475.457417][   T29] RSP: 002b:00007ffce9db9020 EFLAGS: 00010202
[  475.463730][   T29] RAX: 00007f4fd5548000 RBX: 0000555584ea33e0 RCX: 0000000000000003
[  475.472960][   T29] RDX: 0000000000000cf8 RSI: 0000555584e2d2e8 RDI: 0000000000000008
[  475.482410][   T29] RBP: 00007ffce9db9520 R08: 0000555584e2d2e8 R09: 0000000000000091
[  475.490477][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffce9db9360
[  475.498491][   T29] R13: 00007ffce9db9150 R14: 585858582e7a7973 R15: 00007ffce9db90a0
[  475.508400][   T29]  </TASK>
[  475.513626][   T29] INFO: task syz-executor:10554 blocked for more than 144 seconds.
[  475.524628][   T29]       Not tainted syzkaller #0
[  475.529760][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  475.538589][   T29] task:syz-executor    state:D stack:21800 pid:10554 ppid:10518  flags:0x00004000
[  475.547939][   T29] Call Trace:
[  475.551337][   T29]  <TASK>
[  475.554321][   T29]  __schedule+0x15ae/0x4660
[  475.558916][   T29]  ? mark_lock+0x94/0x320
[  475.564426][   T29]  ? asan.module_dtor+0x20/0x20
[  475.569353][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  475.574501][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  475.581513][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  475.586774][   T29]  schedule+0xbd/0x170
[  475.591272][   T29]  io_schedule+0x80/0xd0
[  475.596643][   T29]  bit_wait_io+0x11/0xd0
[  475.601082][   T29]  __wait_on_bit+0x9f/0x2c0
[  475.605654][   T29]  ? bit_wait+0xd0/0xd0
[  475.609986][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  475.617984][   T29]  ? bit_wait+0xd0/0xd0
[  475.622298][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  475.627117][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  475.632239][   T29]  ? bit_waitqueue+0x30/0x30
[  475.636874][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  475.642228][   T29]  do_get_write_access+0x5c9/0xe00
[  475.647420][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  475.653561][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  475.659814][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  475.666156][   T29]  __ext4_new_inode+0x140c/0x3aa0
[  475.672212][   T29]  ? ext4_has_group_desc_csum+0x1f0/0x1f0
[  475.678002][   T29]  ? dquot_initialize+0x20/0x20
[  475.683294][   T29]  ext4_mkdir+0x40b/0xc90
[  475.687713][   T29]  ? ext4_symlink+0x940/0x940
[  475.692603][   T29]  ? inode_permission+0xf3/0x480
[  475.697596][   T29]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  475.703024][   T29]  ? security_inode_mkdir+0xb7/0x100
[  475.708401][   T29]  vfs_mkdir+0x2a5/0x470
[  475.712785][   T29]  do_mkdirat+0x1dc/0x450
[  475.717755][   T29]  ? vfs_mkdir+0x470/0x470
[  475.722393][   T29]  __x64_sys_mkdirat+0x89/0xa0
[  475.727229][   T29]  do_syscall_64+0x55/0xb0
[  475.731740][   T29]  ? clear_bhb_loop+0x40/0x90
[  475.736473][   T29]  ? clear_bhb_loop+0x40/0x90
[  475.741308][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.747284][   T29] RIP: 0033:0x7f829859cfc7
[  475.751884][   T29] RSP: 002b:00007ffd61e3abd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102
[  475.760454][   T29] RAX: ffffffffffffffda RBX: 00007f8298634a68 RCX: 00007f829859cfc7
[  475.768477][   T29] RDX: 00000000000001ff RSI: 00007f8298634a68 RDI: 00000000ffffff9c
[  475.776581][   T29] RBP: 00007f82988267b8 R08: 0000000000000000 R09: 0000000000000000
[  475.784672][   T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  475.792754][   T29] R13: 0000000000000003 R14: 00007ffd61e3ae48 R15: 0000000000000000
[  475.800910][   T29]  </TASK>
[  475.804262][   T29] INFO: task syz.6.1495:10576 blocked for more than 144 seconds.
[  475.812266][   T29]       Not tainted syzkaller #0
[  475.817669][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  475.826654][   T29] task:syz.6.1495      state:D stack:27560 pid:10576 ppid:7834   flags:0x00004004
[  475.836356][   T29] Call Trace:
[  475.839685][   T29]  <TASK>
[  475.848539][   T29]  __schedule+0x15ae/0x4660
[  475.854076][   T29]  ? mark_lock+0x94/0x320
[  475.858458][   T29]  ? asan.module_dtor+0x20/0x20
[  475.863613][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  475.868703][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  475.875043][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  475.880595][   T29]  schedule+0xbd/0x170
[  475.884737][   T29]  io_schedule+0x80/0xd0
[  475.889038][   T29]  bit_wait_io+0x11/0xd0
[  475.893703][   T29]  __wait_on_bit+0x9f/0x2c0
[  475.898277][   T29]  ? bit_wait+0xd0/0xd0
[  475.902798][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  475.908323][   T29]  ? bit_wait+0xd0/0xd0
[  475.912764][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  475.917596][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  475.923776][   T29]  ? bit_waitqueue+0x30/0x30
[  475.928445][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  475.934981][   T29]  do_get_write_access+0x5c9/0xe00
[  475.940389][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  475.946428][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  475.952784][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  475.958997][   T29]  ? __might_sleep+0xe0/0xe0
[  475.963749][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  475.969384][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  475.975962][   T29]  ext4_dirty_inode+0xcb/0x110
[  475.981415][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  475.987356][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  475.992577][   T29]  file_update_time+0x187/0x1a0
[  475.997719][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  476.002941][   T29]  ? filemap_fault+0x103c/0x1540
[  476.007963][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  476.013804][   T29]  ? pte_alloc_one+0x3b6/0x540
[  476.018641][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  476.026145][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  476.032575][   T29]  do_page_mkwrite+0x153/0x3f0
[  476.037415][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  476.042582][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  476.047615][   T29]  ? numa_migrate_prep+0x350/0x350
[  476.052873][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  476.058208][   T29]  do_user_addr_fault+0x736/0x12d0
[  476.065295][   T29]  exc_page_fault+0x64/0x100
[  476.073109][   T29]  ? clear_bhb_loop+0x40/0x90
[  476.077884][   T29]  asm_exc_page_fault+0x26/0x30
[  476.082859][   T29] RIP: 0033:0x7f6b40a6baa3
[  476.087326][   T29] RSP: 002b:00007ffdae0223e0 EFLAGS: 00010246
[  476.094108][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d564000
[  476.103336][   T29] RDX: 0000001b2d524000 RSI: 0000000000400000 RDI: 00007f6b40de0708
[  476.111821][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  476.119849][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  476.129622][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdae022670
[  476.138200][   T29]  </TASK>
[  476.141687][   T29] INFO: task syz.2.1496:10578 blocked for more than 145 seconds.
[  476.149458][   T29]       Not tainted syzkaller #0
[  476.155339][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  476.164382][   T29] task:syz.2.1496      state:D stack:27560 pid:10578 ppid:9702   flags:0x00004004
[  476.174000][   T29] Call Trace:
[  476.177326][   T29]  <TASK>
[  476.181081][   T29]  __schedule+0x15ae/0x4660
[  476.185699][   T29]  ? mark_lock+0x94/0x320
[  476.191210][   T29]  ? asan.module_dtor+0x20/0x20
[  476.196144][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  476.201681][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  476.207626][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  476.213317][   T29]  schedule+0xbd/0x170
[  476.217447][   T29]  io_schedule+0x80/0xd0
[  476.222220][   T29]  bit_wait_io+0x11/0xd0
[  476.227861][   T29]  __wait_on_bit+0x9f/0x2c0
[  476.232941][   T29]  ? bit_wait+0xd0/0xd0
[  476.237171][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  476.243314][   T29]  ? bit_wait+0xd0/0xd0
[  476.247520][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  476.253731][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  476.258871][   T29]  ? bit_waitqueue+0x30/0x30
[  476.264033][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  476.269310][   T29]  do_get_write_access+0x5c9/0xe00
[  476.274974][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  476.282636][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  476.288917][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  476.298752][   T29]  ? __might_sleep+0xe0/0xe0
[  476.303750][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  476.309391][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  476.317467][   T29]  ext4_dirty_inode+0xcb/0x110
[  476.322618][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  476.329775][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  476.335172][   T29]  file_update_time+0x187/0x1a0
[  476.341777][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  476.346894][   T29]  ? filemap_fault+0x103c/0x1540
[  476.352051][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  476.357980][   T29]  ? pte_alloc_one+0x3b6/0x540
[  476.363834][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  476.374234][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  476.379310][   T29]  do_page_mkwrite+0x153/0x3f0
[  476.384177][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  476.389172][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  476.402262][   T29]  ? numa_migrate_prep+0x350/0x350
[  476.407489][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  476.413980][   T29]  do_user_addr_fault+0x736/0x12d0
[  476.419151][   T29]  exc_page_fault+0x64/0x100
[  476.423870][   T29]  ? clear_bhb_loop+0x40/0x90
[  476.428617][   T29]  asm_exc_page_fault+0x26/0x30
[  476.434199][   T29] RIP: 0033:0x7fdd18e6baa3
[  476.438678][   T29] RSP: 002b:00007ffe293545e0 EFLAGS: 00010246
[  476.446484][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b30c64000
[  476.454617][   T29] RDX: 0000001b30c24000 RSI: 0000000000400000 RDI: 00007fdd191e0708
[  476.463789][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  476.472011][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  476.481469][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe29354870
[  476.489540][   T29]  </TASK>
[  476.492707][   T29] INFO: task syz.5.1497:10581 blocked for more than 145 seconds.
[  476.500660][   T29]       Not tainted syzkaller #0
[  476.506599][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  476.515467][   T29] task:syz.5.1497      state:D stack:27560 pid:10581 ppid:7798   flags:0x00004004
[  476.526090][   T29] Call Trace:
[  476.529422][   T29]  <TASK>
[  476.532456][   T29]  __schedule+0x15ae/0x4660
[  476.539010][   T29]  ? mark_lock+0x94/0x320
[  476.543501][   T29]  ? asan.module_dtor+0x20/0x20
[  476.548403][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  476.554713][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  476.562142][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  476.567412][   T29]  schedule+0xbd/0x170
[  476.571924][   T29]  io_schedule+0x80/0xd0
[  476.576230][   T29]  bit_wait_io+0x11/0xd0
[  476.581841][   T29]  __wait_on_bit+0x9f/0x2c0
[  476.586428][   T29]  ? bit_wait+0xd0/0xd0
[  476.591049][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  476.596585][   T29]  ? bit_wait+0xd0/0xd0
[  476.601253][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  476.606086][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  476.611642][   T29]  ? bit_waitqueue+0x30/0x30
[  476.616293][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  476.622284][   T29]  do_get_write_access+0x5c9/0xe00
[  476.627487][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  476.634489][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  476.642844][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  476.649101][   T29]  ? __might_sleep+0xe0/0xe0
[  476.654272][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  476.659991][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  476.667153][   T29]  ext4_dirty_inode+0xcb/0x110
[  476.672111][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  476.678010][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  476.683201][   T29]  file_update_time+0x187/0x1a0
[  476.688117][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  476.693614][   T29]  ? filemap_fault+0x103c/0x1540
[  476.698629][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  476.704451][   T29]  ? pte_alloc_one+0x3b6/0x540
[  476.709513][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  476.715920][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  476.721275][   T29]  do_page_mkwrite+0x153/0x3f0
[  476.726113][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  476.732556][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  476.737561][   T29]  ? numa_migrate_prep+0x350/0x350
[  476.745578][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  476.751015][   T29]  do_user_addr_fault+0x736/0x12d0
[  476.756337][   T29]  exc_page_fault+0x64/0x100
[  476.761082][   T29]  ? clear_bhb_loop+0x40/0x90
[  476.765825][   T29]  asm_exc_page_fault+0x26/0x30
[  476.770926][   T29] RIP: 0033:0x7fa36166baa3
[  476.775399][   T29] RSP: 002b:00007ffdcea3f340 EFLAGS: 00010246
[  476.781588][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32c64000
[  476.789612][   T29] RDX: 0000001b32c24000 RSI: 0000000000400000 RDI: 00007fa3619e0708
[  476.797977][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  476.806055][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  476.814314][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdcea3f5d0
[  476.822412][   T29]  </TASK>
[  476.825642][   T29] 
[  476.825642][   T29] Showing all locks held in the system:
[  476.833479][   T29] 1 lock held by khungtaskd/29:
[  476.838555][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  476.852879][   T29] 4 locks held by kworker/u4:2/32:
[  476.858083][   T29] 6 locks held by kworker/u4:6/1034:
[  476.863491][   T29]  #0: ffff888142251d38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  476.875688][   T29]  #1: ffffc9000439fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  476.888589][   T29]  #2: ffff8880209700e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  476.899279][   T29]  #3: ffff888020972c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  476.909859][   T29]  #4: ffff888020974990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  476.919647][   T29]  #5: ffff88807f18e688 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90
[  476.929577][   T29] 2 locks held by kworker/u4:10/3495:
[  476.935023][   T29] 2 locks held by getty/5528:
[  476.939733][   T29]  #0: ffff88802cfe30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  476.952407][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  476.964191][   T29] 3 locks held by syz-executor/5760:
[  476.969544][   T29]  #0: ffff88802e71baa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  476.979665][   T29]  #1: ffff888020970510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  476.989533][   T29]  #2: ffff888020974990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  476.999331][   T29] 3 locks held by syz-executor/10554:
[  477.005894][   T29]  #0: ffff888020970418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  477.015248][   T29]  #1: ffff8880581f0410 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450
[  477.026035][   T29]  #2: ffff888020974990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  477.035885][   T29] 3 locks held by syz.6.1495/10576:
[  477.041282][   T29]  #0: ffff88807e7673a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  477.053362][   T29]  #1: ffff888020970510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  477.063402][   T29]  #2: ffff888020974990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  477.073506][   T29] 3 locks held by syz.2.1496/10578:
[  477.078747][   T29]  #0: ffff88807e764da0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  477.088859][   T29]  #1: ffff888020970510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  477.098769][   T29]  #2: ffff888020974990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  477.108543][   T29] 3 locks held by syz.5.1497/10581:
[  477.113887][   T29]  #0: ffff88805a7a1e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  477.123989][   T29]  #1: ffff888020970510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  477.133890][   T29]  #2: ffff888020974990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  477.143739][   T29] 
[  477.146107][   T29] =============================================
[  477.146107][   T29] 
[  477.156923][   T29] NMI backtrace for cpu 1
[  477.161322][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  477.168550][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  477.178632][   T29] Call Trace:
[  477.181932][   T29]  <TASK>
[  477.184877][   T29]  dump_stack_lvl+0x18c/0x250
[  477.189580][   T29]  ? __wake_up_klogd+0xd9/0x100
[  477.194474][   T29]  ? show_regs_print_info+0x20/0x20
[  477.199687][   T29]  ? load_image+0x420/0x420
[  477.204233][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  477.209255][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  477.215438][   T29]  ? load_image+0x420/0x420
[  477.219962][   T29]  ? wq_watchdog_touch+0xef/0x170
[  477.225029][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  477.231138][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  477.237156][   T29]  watchdog+0xf59/0xfa0
[  477.241367][   T29]  ? watchdog+0x1e1/0xfa0
[  477.245734][   T29]  kthread+0x2fa/0x390
[  477.249836][   T29]  ? hungtask_pm_notify+0x50/0x50
[  477.254920][   T29]  ? kthread_blkcg+0xd0/0xd0
[  477.259574][   T29]  ret_from_fork+0x48/0x80
[  477.264036][   T29]  ? kthread_blkcg+0xd0/0xd0
[  477.268645][   T29]  ret_from_fork_asm+0x11/0x20
[  477.273471][   T29]  </TASK>
[  477.277695][   T29] Sending NMI from CPU 1 to CPUs 0:
[  477.283162][    C0] NMI backtrace for cpu 0
[  477.283175][    C0] CPU: 0 PID: 32 Comm: kworker/u4:2 Not tainted syzkaller #0
[  477.283192][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  477.283202][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  477.283274][    C0] RIP: 0010:page_ext_get+0x1ae/0x2b0
[  477.283300][    C0] Code: 89 ff e8 45 10 f5 ff 4d 8b 3f e8 dd 2c 85 ff 89 c5 31 ff 89 c6 e8 62 92 9c ff 85 ed 0f 84 ef 00 00 00 e8 a5 8e 9c ff 4d 85 ff <40> 0f 95 c5 4c 89 fe 48 83 e6 01 41 0f 94 c4 31 ff e8 cc 92 9c ff
[  477.283370][    C0] RSP: 0018:ffffc90000a8f570 EFLAGS: 00000286
[  477.283384][    C0] RAX: ffffffff81eaf3cb RBX: ffffffff81eaf242 RCX: ffff888018a98000
[  477.283398][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  477.283407][    C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223dea0
[  477.283418][    C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000
[  477.283430][    C0] R13: 00000000000001c0 R14: 0000000000077df0 R15: ffff888019880000
[  477.283442][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  477.283455][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  477.283467][    C0] CR2: 00005624b9028660 CR3: 000000007d148000 CR4: 00000000003506f0
[  477.283482][    C0] Call Trace:
[  477.283488][    C0]  <TASK>
[  477.283497][    C0]  __set_page_owner+0x28/0x60
[  477.283516][    C0]  post_alloc_hook+0x1c1/0x200
[  477.283545][    C0]  get_page_from_freelist+0x2181/0x22a0
[  477.283565][    C0]  ? arch_stack_walk+0x16e/0x190
[  477.283593][    C0]  ? __next_zones_zonelist+0x9d/0x130
[  477.283634][    C0]  __alloc_pages+0x1f0/0x460
[  477.283652][    C0]  ? zone_statistics+0x170/0x170
[  477.283673][    C0]  ? alloc_pages+0x4e1/0x740
[  477.283692][    C0]  alloc_slab_page+0x5d/0x180
[  477.283710][    C0]  new_slab+0x87/0x2d0
[  477.283726][    C0]  ___slab_alloc+0xc5c/0x12f0
[  477.283744][    C0]  ? __alloc_skb+0x138/0x2c0
[  477.283794][    C0]  __kmem_cache_alloc_node+0x11f/0x250
[  477.283819][    C0]  ? __alloc_skb+0x138/0x2c0
[  477.283838][    C0]  ? __alloc_skb+0x138/0x2c0
[  477.283854][    C0]  __kmalloc_node_track_caller+0xa4/0x230
[  477.283879][    C0]  ? rcu_is_watching+0x15/0xb0
[  477.283904][    C0]  ? __alloc_skb+0x138/0x2c0
[  477.283920][    C0]  kmalloc_reserve+0x116/0x240
[  477.283940][    C0]  __alloc_skb+0x138/0x2c0
[  477.283959][    C0]  nsim_dev_trap_report_work+0x253/0xa90
[  477.283984][    C0]  ? process_scheduled_works+0x975/0x1600
[  477.284008][    C0]  process_scheduled_works+0xa60/0x1600
[  477.284046][    C0]  ? worker_attach_to_pool+0x370/0x370
[  477.284071][    C0]  ? assign_work+0x3cc/0x5d0
[  477.284095][    C0]  worker_thread+0xa5e/0xfe0
[  477.284123][    C0]  ? _raw_spin_unlock+0x40/0x40
[  477.284140][    C0]  ? __kthread_parkme+0x71/0x1c0
[  477.284162][    C0]  kthread+0x2fa/0x390
[  477.284178][    C0]  ? pr_cont_work+0x550/0x550
[  477.284199][    C0]  ? kthread_blkcg+0xd0/0xd0
[  477.284215][    C0]  ret_from_fork+0x48/0x80
[  477.284235][    C0]  ? kthread_blkcg+0xd0/0xd0
[  477.284252][    C0]  ret_from_fork_asm+0x11/0x20
[  477.284283][    C0]  </TASK>
[  477.289393][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  477.594522][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  477.601747][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  477.611867][   T29] Call Trace:
[  477.615182][   T29]  <TASK>
[  477.618152][   T29]  dump_stack_lvl+0x18c/0x250
[  477.622886][   T29]  ? show_regs_print_info+0x20/0x20
[  477.628114][   T29]  ? load_image+0x420/0x420
[  477.632672][   T29]  panic+0x2ca/0x720
[  477.636608][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  477.641141][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  477.646727][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  477.652136][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  477.658330][   T29]  watchdog+0xf98/0xfa0
[  477.662526][   T29]  ? watchdog+0x1e1/0xfa0
[  477.666935][   T29]  kthread+0x2fa/0x390
[  477.671043][   T29]  ? hungtask_pm_notify+0x50/0x50
[  477.676116][   T29]  ? kthread_blkcg+0xd0/0xd0
[  477.680748][   T29]  ret_from_fork+0x48/0x80
[  477.685207][   T29]  ? kthread_blkcg+0xd0/0xd0
[  477.689834][   T29]  ret_from_fork_asm+0x11/0x20
[  477.694651][   T29]  </TASK>
[  477.698286][   T29] Kernel Offset: disabled
[  477.702628][   T29] Rebooting in 86400 seconds..