last executing test programs:

13m21.791873101s ago: executing program 32 (id=758):
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_create_resource$binfmt(0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, 0x0, 0x4003)

13m4.977939847s ago: executing program 1 (id=847):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000005c0)={0x0, 0x27, "e6ce09bbe96c68e71c6b58ffb321ad5a859efb1b7b61869c41f71bae78fa0fcc16934abdaf4910"}, &(0x7f00000003c0)=0x2f)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000820907"], 0x18}}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

13m3.789967385s ago: executing program 1 (id=852):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10002, 0x0)

13m2.94695814s ago: executing program 1 (id=855):
syz_clone(0x20082000, &(0x7f0000000040)="f7e5", 0x2, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
sendmsg$unix(r1, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x9)

13m1.460921308s ago: executing program 1 (id=863):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff8000}]})

12m56.575454078s ago: executing program 1 (id=881):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

12m55.481980343s ago: executing program 1 (id=888):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

12m40.004877081s ago: executing program 33 (id=888):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

12m24.512666789s ago: executing program 0 (id=941):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[], 0x0)

12m22.164242782s ago: executing program 0 (id=944):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d07, 0x0, 0xc}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

12m17.016873855s ago: executing program 0 (id=959):
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, &(0x7f0000000200)=@multiplanar_userptr={0xfffffffe, 0x4, 0x4, 0x100, 0x10001, {0x0, 0x2710}, {0x976ddd1c1037d5b9, 0xc, 0x4, 0xe, 0x5, 0x0, "899fe086"}, 0x9e, 0x2, {0x0}, 0x80})

12m16.421582047s ago: executing program 0 (id=961):
unshare(0x22020600)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={r2, r0, 0x4, r0}, 0x10)

12m15.079887902s ago: executing program 0 (id=965):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1}}], 0x1, 0x41, 0x0)

12m13.687826974s ago: executing program 0 (id=967):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2], 0x44}}, 0x2000800)

11m58.568475308s ago: executing program 34 (id=967):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2], 0x44}}, 0x2000800)

4m11.038850316s ago: executing program 6 (id=4356):
inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x4000423)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8)

4m10.579340462s ago: executing program 6 (id=4361):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4040)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]})

4m9.912926815s ago: executing program 6 (id=4365):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x181200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x40000100, 0x0, 0xc1d}]})

4m9.070438915s ago: executing program 6 (id=4374):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000240)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x1, 0x451, &(0x7f0000000bc0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x2400, 0x0)

4m8.72914736s ago: executing program 6 (id=4379):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xc, 0x11, r0, 0x100000000)
syz_open_procfs(0x0, &(0x7f00000015c0)='limits\x00')

4m6.945120864s ago: executing program 6 (id=4403):
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x200, 0x4000)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000780)={0x1, 0x0, 0x98, &(0x7f00000006c0)={0x7, 0xfffffffffffffff8, 0x8}})
r1 = socket(0x840000000002, 0x3, 0xff)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000))

4m6.376805058s ago: executing program 35 (id=4403):
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x200, 0x4000)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000780)={0x1, 0x0, 0x98, &(0x7f00000006c0)={0x7, 0xfffffffffffffff8, 0x8}})
r1 = socket(0x840000000002, 0x3, 0xff)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000))

3m22.566992781s ago: executing program 5 (id=4781):
r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)

3m22.296472778s ago: executing program 5 (id=4785):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000)
close(0x3)

3m21.45842522s ago: executing program 5 (id=4792):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1})

3m20.771724385s ago: executing program 5 (id=4802):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x3}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x3, {}, 0xfd}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)

3m20.599787009s ago: executing program 5 (id=4805):
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000080))
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xfb, 0xf8, 0xe6, 0x8, 0xbfd, 0x121, 0xa47d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x56, 0x3, 0x0, 0x0, "", [{{0x9, 0x4, 0x4e, 0x80, 0x2, 0x5b, 0x9d, 0x15, 0x4, [], [{{0x9, 0x5, 0xcd2fc2202b627288, 0x2, 0x400, 0x80, 0x46, 0x3}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xf0, 0x3, 0x5}}]}}]}}]}}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)={0x0, 0xf, 0x3, "ecf0a1"}, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0)

3m18.719669233s ago: executing program 5 (id=4830):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="150000006b", @ANYRES32], 0x15)

3m3.64619662s ago: executing program 36 (id=4830):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="150000006b", @ANYRES32], 0x15)

2m43.656922924s ago: executing program 7 (id=5139):
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000))
pipe(&(0x7f00000004c0))
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

2m42.565592093s ago: executing program 7 (id=5149):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000a00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c7397c88a84e070000004c5b8232acae7c966dd8449d7483ff2f47a1f42cbfc66c5003a8ab7231d672bde19aa65032e5", 0x30}], 0x1, 0x0, 0x0, 0x20000801}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

2m42.095174311s ago: executing program 7 (id=5152):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmmsg$alg(r1, &(0x7f0000002640)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}], 0x1, 0x80)

2m41.565127181s ago: executing program 7 (id=5156):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x1, 0x4a6, 0x4, 0x3, 0x7, "8c00000000000000000000ffff00", 0x4000000, 0x80})
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001280)=0xff)

2m40.997994084s ago: executing program 7 (id=5158):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x201, 0x40000036, r0, 0x0)
fanotify_mark(r1, 0x441, 0x8000001, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0)

2m40.534030166s ago: executing program 7 (id=5162):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x2)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-pids'], 0x6)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)

2m25.441079582s ago: executing program 37 (id=5162):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x2)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-pids'], 0x6)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)

1m33.063737001s ago: executing program 9 (id=5777):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
recvfrom$inet6(r0, &(0x7f0000000680)=""/53, 0xfffffffffffffe9f, 0x40000101, 0x0, 0x0)

1m32.535216845s ago: executing program 9 (id=5782):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002cc0))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2})
ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0)

1m31.53581479s ago: executing program 9 (id=5793):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x10)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x100, 0x62)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

1m30.723208745s ago: executing program 9 (id=5797):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
r0 = syz_clone(0x4100000, &(0x7f00000000c0)="0a6a1183b7a7845f3816e3c5a20b5de13f5ecc221dd0df6f8a2df09d63ae9fe7656a690c70665c20160bf4", 0x2b, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000680)="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")
getpgrp(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000088ab000000000000030000001811"], 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, r1}, 0x94)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x29f)

1m28.121790345s ago: executing program 9 (id=5817):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082)
write$P9_RREAD(r0, &(0x7f0000000180)={0xb, 0x75, 0x1}, 0xb)
r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40102, 0x0)
socket$inet(0x2, 0x2, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffdfffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

1m26.389506895s ago: executing program 4 (id=5829):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0)

1m25.947359328s ago: executing program 4 (id=5832):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840)

1m25.691618183s ago: executing program 4 (id=5837):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000000), 0x800, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000)
syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffffffffffffd, 0x2)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

1m25.444035926s ago: executing program 9 (id=5838):
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x1)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)

1m24.695481343s ago: executing program 38 (id=5838):
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x1)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)

1m23.483240939s ago: executing program 4 (id=5850):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x21021, 0x0)

1m23.025352074s ago: executing program 4 (id=5853):
r0 = fsopen(&(0x7f0000000780)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000001f80)=""/4102, 0x1006)
getdents(r2, &(0x7f0000000100)=""/155, 0x9b)

1m20.985898102s ago: executing program 4 (id=5878):
socket$inet6(0xa, 0x1, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0)

10.443556122s ago: executing program 8 (id=6432):
mknodat(0xffffffffffffff9c, 0x0, 0x20, 0x103)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001740)="8e7e2e11fc343a57a36b04eed3e7516c", 0x10)
r2 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x5000)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_read_part_table(0x5ff, &(0x7f0000000000)="$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")
futex(0xfffffffffffffffc, 0x80, 0x40, 0x0, 0x0, 0x2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
ioctl(r3, 0x541b, 0x0)

7.031449902s ago: executing program 2 (id=6455):
fsopen(0x0, 0x1)
r0 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e04803520"], 0x7)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf, 0xfc}})

5.743364656s ago: executing program 2 (id=6458):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r0, 0x0, 0x20004000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000300)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@compress_force}, {@compress_force}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000005700)='.\x00', &(0x7f0000005740)='system.posix_acl_default\x00', &(0x7f0000005780)=ANY=[@ANYBLOB="0200000001000500000014000400070000000004100002000000000020"], 0x24, 0x1)
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000040)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'maciceland'}}, {}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}, {@file_umask={'file_umask', 0x3d, 0x2}}]}, 0x2, 0x36d, &(0x7f0000000500)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000))
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)

4.933946142s ago: executing program 2 (id=6461):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000003240)='./bus\x00', 0xe, &(0x7f0000003280)={[{@init_itable}, {@stripe}, {@dioread_lock}]}, 0x3, 0x466, &(0x7f0000000800)="$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")
creat(&(0x7f0000000e40)='./file1\x00', 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x265, 0x26, 0xffffffffffffffff, 0x0)
r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x1f7)
fanotify_mark(0xffffffffffffffff, 0x21, 0x8000000, r1, 0x0)
fanotify_mark(0xffffffffffffffff, 0x441, 0x800000a, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x112)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0)

4.580383588s ago: executing program 2 (id=6463):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1db, &(0x7f0000002200)="$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")
syz_open_dev$sndctrl(0x0, 0x800000000dc3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)
r1 = creat(0x0, 0x12e)
close(r1)
mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0)
getpid()
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)

4.479526913s ago: executing program 8 (id=6465):
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000001, 0x4, 0x2, 0x31237648, 0x2, 0x2, 0x80}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x4000003, 0x25dfdbfb, {{}, {}, {0x48, 0x19, {0x7ffffffe, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x840)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0x0, 0xfffffffffffffffd, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x8, 0x100, 0xfffffffffffffffb, 0x8, 0x71dd, 0x0, 0x8, 0x8d], 0x100000, 0x2408c0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.64396074s ago: executing program 8 (id=6471):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = memfd_create(0x0, 0x3)
execveat(r1, 0x0, 0x0, 0x0, 0x1000)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write$qrtrtun(r0, &(0x7f0000000340)="ca0e808b935bd6", 0x7)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40)
syz_clone(0x80063000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0)

3.047822517s ago: executing program 2 (id=6477):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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")
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x81}}}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, 0x0, 0x20040001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)

2.879950324s ago: executing program 8 (id=6480):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
io_setup(0x9, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x24}])

2.835902074s ago: executing program 2 (id=6481):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x20, 0x2, 0x20, 0x10000000}, 0x48)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000008c0)={0x98, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x7c, 0x33, @beacon={{{}, {0xde1}, @broadcast, @device_a, @initial, {0x0, 0x200}}, 0x8000003, @random=0x1, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0xc}, @void, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x0, 0xb5, 0x7d}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x6, 0xb, 0x5}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0xffffffffffffffff, 0xf36, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x1}}, @val={0x76, 0x6, {0xfc, 0x2, 0x17, 0x5}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080)

2.835652195s ago: executing program 3 (id=6482):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x20}}}}]}]}, 0x84}}, 0x0)

2.685722681s ago: executing program 3 (id=6483):
setuid(0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_sctp(0x2, 0x1, 0x84)
listen(0xffffffffffffffff, 0x6)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10)

2.569323169s ago: executing program 3 (id=6484):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.707578561s ago: executing program 3 (id=6485):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3)
r1 = userfaultfd(0x80801)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
close_range(r1, r1, 0x0)

1.62097416s ago: executing program 3 (id=6486):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
landlock_restrict_self(r0, 0x1)
r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000000)={0x80a, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r1, 0x8)
landlock_restrict_self(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
r3 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

1.503276977s ago: executing program 8 (id=6487):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, 0x0, 0x1)
keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d)
syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0)

1.379642026s ago: executing program 3 (id=6488):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x5435, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r2=>0x0})
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fgetxattr(r4, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c8d6a340ac050a038c65000000010902240001000000000904000002039d0200090509ffe700000000090503", @ANYRES16], 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000000060000000c00000002000013030000000a000000ead5ce59000000000c00000008000000020000000d00000000000002040000000300000000000002050000000b0000000000000e050000000100000001000000000000110400000005000000910200100000000e0200000000000000002e2e000000"], &(0x7f0000000380)=""/177, 0x8a, 0xb1, 0x1, 0x2800, 0x10000, @value=r0}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', r5, r6, 0x0, 0x2, 0x2}, 0x50)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

0s ago: executing program 8 (id=6489):
socket$netlink(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'xfrm0\x00'}}, 0x1e)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0)
ioctl$RTC_ALM_SET(r3, 0x40247007, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

kernel console output (not intermixed with test programs):

686.986671][T14874] bridge_slave_1: entered promiscuous mode
[  687.624892][T14874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.736044][T14874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  688.098898][ T5623] Bluetooth: hci4: command tx timeout
[  688.281895][T14874] team0: Port device team_slave_0 added
[  688.290644][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.290665][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  688.388854][T14874] team0: Port device team_slave_1 added
[  688.555386][ T1185] bridge_slave_1: left allmulticast mode
[  688.555426][ T1185] bridge_slave_1: left promiscuous mode
[  688.555767][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.735730][ T1185] bridge_slave_0: left allmulticast mode
[  688.735771][ T1185] bridge_slave_0: left promiscuous mode
[  688.736056][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.996270][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  690.075724][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  690.124191][ T1185] bond0 (unregistering): Released all slaves
[  690.455159][T14874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  690.455179][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  690.455212][T14874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  690.571068][T14874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  690.571088][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  690.571119][T14874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  690.711466][ T3360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.711489][ T3360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.001854][ T1185] hsr_slave_0: left promiscuous mode
[  691.068489][ T1185] hsr_slave_1: left promiscuous mode
[  691.070321][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  691.070351][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0
[  691.117621][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  691.117667][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1
[  691.468036][ T1185] veth1_macvtap: left promiscuous mode
[  691.483053][ T1185] veth0_macvtap: left promiscuous mode
[  691.483360][ T1185] veth1_vlan: left promiscuous mode
[  691.483560][ T1185] veth0_vlan: left promiscuous mode
[  692.689792][ T1185] team0 (unregistering): Port device team_slave_1 removed
[  692.775364][ T1185] team0 (unregistering): Port device team_slave_0 removed
[  693.330143][T14874] hsr_slave_0: entered promiscuous mode
[  693.349170][T14874] hsr_slave_1: entered promiscuous mode
[  693.379681][T14874] debugfs: 'hsr0' already exists in 'hsr'
[  693.379712][T14874] Cannot create hsr debugfs directory
[  695.681837][T15325] netlink: 10872 bytes leftover after parsing attributes in process `syz.2.3629'.
[  698.203029][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[  699.369088][T15364] loop6: detected capacity change from 0 to 512
[  699.457106][T15364] EXT4-fs: Ignoring removed i_version option
[  699.530903][T14234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  699.611210][T15364] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  700.257965][T15364] EXT4-fs (loop6): 1 truncate cleaned up
[  700.304235][T15364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  700.728150][T13587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.082652][T15411] loop6: detected capacity change from 0 to 512
[  701.214204][T15411] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3653: iget: bad i_size value: 38620345925642
[  701.214245][T15411] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  701.214753][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  701.214775][    C0] EXT4-fs (loop6): initial error at time 1779789911: ext4_orphan_get:1397: inode 15
[  701.214806][    C0] EXT4-fs (loop6): last error at time 1779789911: ext4_orphan_get:1397: inode 15
[  701.304597][T15411] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3653: couldn't read orphan inode 15 (err -117)
[  701.304636][T15411] loop6: lost filesystem error report for type 5 error -117
[  701.338656][T15411] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  701.567068][T13587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  702.086864][T15435] loop6: detected capacity change from 0 to 256
[  702.154988][T15435] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d)
[  702.487362][T14234] veth0_vlan: entered promiscuous mode
[  702.679756][T14234] veth1_vlan: entered promiscuous mode
[  703.027860][T14234] veth0_macvtap: entered promiscuous mode
[  703.119208][T14234] veth1_macvtap: entered promiscuous mode
[  703.964603][T15476] loop6: detected capacity change from 0 to 40427
[  703.966001][T15476] F2FS-fs: heap/no_heap options were deprecated
[  704.009377][T15476] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288)
[  704.014534][T15476] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288)
[  704.030548][T15476] F2FS-fs (loop6): invalid crc value
[  704.044367][T15476] F2FS-fs (loop6): invalid crc value
[  704.044461][T15476] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  704.623240][T14234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  705.238519][T14234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  705.555597][ T1185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  705.563215][ T1185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  705.563355][ T1185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  705.563457][ T1185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  705.812153][T14874] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  705.899630][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  705.914816][T14874] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  705.948730][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  705.966094][T14874] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  706.181366][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  706.326514][T15523] netlink: 'syz.6.3695': attribute type 2 has an invalid length.
[  706.327073][T14874] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  706.535155][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  709.598419][ T3312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.598443][ T3312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.844998][T15569] loop6: detected capacity change from 0 to 40427
[  709.846211][T15569] F2FS-fs: heap/no_heap options were deprecated
[  710.065868][T15569] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288)
[  710.068561][T15569] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288)
[  710.088847][T15569] F2FS-fs (loop6): invalid crc value
[  710.095087][T15569] F2FS-fs (loop6): invalid crc value
[  710.095133][T15569] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  710.350151][ T3408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  710.350177][ T3408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  711.027650][T14874] 8021q: adding VLAN 0 to HW filter on device bond0
[  711.108150][ T5637] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[  711.261123][T14874] 8021q: adding VLAN 0 to HW filter on device team0
[  711.302571][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.302820][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  711.344223][ T5637] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  711.344264][ T5637] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  711.344310][ T5637] usb 7-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  711.344335][ T5637] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.461461][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.461633][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  711.491268][ T5637] usb 7-1: config 0 descriptor??
[  711.499855][T15580] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  712.182512][T15592] loop5: detected capacity change from 0 to 32768
[  712.183893][T15592] btrfs: Deprecated parameter 'usebackuproot'
[  712.183923][T15592] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  712.281677][ T5637] hid_parser_main: 3991 callbacks suppressed
[  712.281705][ T5637] waltop 0003:172F:0502.0004: unknown main item tag 0x3
[  712.281737][ T5637] waltop 0003:172F:0502.0004: unknown main item tag 0x0
[  712.281765][ T5637] waltop 0003:172F:0502.0004: unknown main item tag 0x0
[  712.281791][ T5637] waltop 0003:172F:0502.0004: unknown main item tag 0x0
[  712.281818][ T5637] waltop 0003:172F:0502.0004: unknown main item tag 0x0
[  712.281843][ T5637] waltop 0003:172F:0502.0004: unknown main item tag 0x0
[  712.281869][ T5637] waltop 0003:172F:0502.0004: unknown main item tag 0x0
[  712.281895][ T5637] waltop 0003:172F:0502.0004: unknown main item tag 0x0
[  712.374139][T15592] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.759 (15592)
[  712.451200][T15592] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  712.451288][T15592] BTRFS info (device loop5): using crc32c checksum algorithm
[  712.490547][ T5637] waltop 0003:172F:0502.0004: hidraw0: USB HID v0.05 Device [HID 172f:0502] on usb-dummy_hcd.6-1/input0
[  712.573438][ T5637] usb 7-1: USB disconnect, device number 2
[  712.725891][   T70] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  712.726178][T15592] BTRFS error (device loop5): failed to load root extent
[  712.729526][T15592] BTRFS warning (device loop5): try to load backup roots slot 1
[  712.765737][ T5950] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  712.766178][T15592] BTRFS warning (device loop5): couldn't read tree root
[  712.766236][T15592] BTRFS warning (device loop5): try to load backup roots slot 2
[  712.803479][ T3312] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  712.803631][T15592] BTRFS warning (device loop5): couldn't read tree root
[  712.803655][T15592] BTRFS warning (device loop5): try to load backup roots slot 3
[  712.895931][T15592] BTRFS info (device loop5): rebuilding free space tree
[  713.515732][T15620] fido_id[15620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  713.585982][T15592] BTRFS info (device loop5): checking UUID tree
[  713.626889][T15592] BTRFS info (device loop5): enabling ssd optimizations
[  713.626958][T15592] BTRFS info (device loop5): turning on async discard
[  713.626977][T15592] BTRFS info (device loop5): enabling free space tree
[  713.627018][T15592] BTRFS info (device loop5): force clearing of disk cache
[  713.627036][T15592] BTRFS info (device loop5): enabling auto defrag
[  713.627052][T15592] BTRFS info (device loop5): trying to use backup root at mount time
[  713.627147][T15592] BTRFS info (device loop5): use zstd compression, level 3
[  714.456406][T14234] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  715.712150][T14874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  716.672448][T15689] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3744'.
[  716.711453][T15692] loop5: detected capacity change from 0 to 2048
[  716.966248][T15692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  717.424473][T14874] veth0_vlan: entered promiscuous mode
[  717.487177][T14874] veth1_vlan: entered promiscuous mode
[  718.020069][T14874] veth0_macvtap: entered promiscuous mode
[  718.126536][T14874] veth1_macvtap: entered promiscuous mode
[  718.231968][T15725] tmpfs: Cannot disable swap on remount
[  718.333587][T14874] batman_adv: batadv0: Interface activated: batadv_slave_0
[  718.402735][T15731] loop6: detected capacity change from 0 to 1024
[  718.485901][T14874] batman_adv: batadv0: Interface activated: batadv_slave_1
[  718.700297][ T3360] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  718.703246][ T3360] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  718.704317][ T3360] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  718.822944][ T3360] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  719.153597][T15752] loop5: detected capacity change from 0 to 256
[  719.185249][T15752] exfat: Deprecated parameter 'utf8'
[  719.185350][T15752] exfat: Deprecated parameter 'namecase'
[  719.185403][T15752] exfat: Deprecated parameter 'namecase'
[  719.603040][T15752] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  720.309665][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.309685][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.807372][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.807396][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.627422][ T5637] kernel write not supported for file /input/mice (pid: 5637 comm: kworker/1:6)
[  721.846967][T15786] loop6: detected capacity change from 0 to 40427
[  721.848123][T15786] F2FS-fs: heap/no_heap options were deprecated
[  721.848855][T15786] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288)
[  721.851029][T15786] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288)
[  721.852266][T15786] F2FS-fs (loop6): invalid crc value
[  721.852808][T15786] F2FS-fs (loop6): invalid crc value
[  721.852839][T15786] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  722.473381][T15801] syzkaller1: entered promiscuous mode
[  722.473410][T15801] syzkaller1: entered allmulticast mode
[  723.021492][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3797'.
[  724.129381][T15843] loop6: detected capacity change from 0 to 256
[  724.136288][T15843] exfat: Deprecated parameter 'utf8'
[  724.435459][T15843] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  724.692764][T15849] loop5: detected capacity change from 0 to 256
[  724.710703][T15849] exfat: Deprecated parameter 'utf8'
[  724.710900][T15849] exfat: Deprecated parameter 'namecase'
[  724.710939][T15849] exfat: Deprecated parameter 'namecase'
[  724.898611][T15849] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  725.156698][T15860] gretap0: entered promiscuous mode
[  725.163390][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3817'.
[  725.163577][T15860] gretap0: left promiscuous mode
[  725.353908][T15856] loop7: detected capacity change from 0 to 40427
[  725.355361][T15856] F2FS-fs: heap/no_heap options were deprecated
[  725.358722][T15856] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  725.414950][T15856] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  725.443070][T15856] F2FS-fs (loop7): invalid crc value
[  725.446316][T15856] F2FS-fs (loop7): invalid crc value
[  725.446417][T15856] F2FS-fs (loop7): Failed to get valid F2FS checkpoint
[  727.487502][T15913] IPVS: nq: FWM 3 0x00000003 - no destination available
[  727.626742][ T8390] IPVS: starting estimator thread 0...
[  727.818668][T15923] capability: warning: `syz.6.3845' uses 32-bit capabilities (legacy support in use)
[  727.834888][T15923] program syz.6.3845 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  727.873944][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  727.899035][T15919] IPVS: using max 8 ests per chain, 19200 per kthread
[  728.047119][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  728.047157][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  728.047199][   T10] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  728.047225][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.051372][ T5623] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  728.103159][   T10] usb 8-1: config 0 descriptor??
[  728.605821][   T10] pyra 0003:1E7D:2CF6.0005: item fetching failed at offset 5/7
[  728.606555][   T10] pyra 0003:1E7D:2CF6.0005: parse failed
[  728.606629][   T10] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -22
[  728.734749][   T32] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  728.884634][   T32] usb 6-1: Using ep0 maxpacket: 32
[  728.891983][   T32] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  728.892020][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  728.892048][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  728.892072][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  728.892099][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  728.969733][   T32] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  728.969767][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.969788][   T32] usb 6-1: Product: syz
[  728.969805][   T32] usb 6-1: Manufacturer: syz
[  728.969821][   T32] usb 6-1: SerialNumber: syz
[  729.010624][   T32] usb 6-1: config 0 descriptor??
[  729.660465][   T32] iforce 6-1:0.0: usb_submit_urb failed: -71
[  729.660537][   T32] input input6: Device does not respond to id packet P
[  729.686876][   T32] iforce 6-1:0.0: usb_submit_urb failed: -71
[  729.686939][   T32] input input6: Device does not respond to id packet B
[  729.687413][   T32] iforce 6-1:0.0: usb_submit_urb failed: -71
[  729.687461][   T32] input input6: Device does not respond to id packet N
[  729.687909][   T32] iforce 6-1:0.0: usb_submit_urb failed: -71
[  729.731972][   T32] iforce 6-1:0.0: usb_submit_urb failed: -71
[  729.739337][   T32] iforce 6-1:0.0: usb_submit_urb failed: -71
[  729.750172][   T32] iforce 6-1:0.0: usb_submit_urb failed: -71
[  729.845206][   T32] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6
[  729.936336][   T32] usb 6-1: USB disconnect, device number 2
[  730.382466][T15979] loop6: detected capacity change from 0 to 1024
[  730.787115][   T10] usb 8-1: USB disconnect, device number 2
[  731.109259][T15990] loop5: detected capacity change from 0 to 512
[  731.157183][T15990] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.3877: corrupted in-inode xattr: e_value size too large
[  731.157223][T15990] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  731.174450][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  731.174478][    C1] EXT4-fs (loop5): initial error at time 1779789941: ext4_iget_extra_inode:5128: inode 15
[  731.174510][    C1] EXT4-fs (loop5): last error at time 1779789941: ext4_iget_extra_inode:5128: inode 15
[  731.255672][T15990] EXT4-fs (loop5): Remounting filesystem read-only
[  731.306898][T15990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  731.352784][T15987] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  731.352816][T15987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  731.384127][T15990] EXT4-fs (loop5): shut down requested (2)
[  731.668810][   T10] usb 8-1: new low-speed USB device number 3 using dummy_hcd
[  731.743183][T15987] vhci_hcd vhci_hcd.0: Device attached
[  731.754360][T14234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.888976][   T10] usb 8-1: config 0 has no interfaces?
[  731.889017][   T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  731.889049][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.927600][   T10] usb 8-1: config 0 descriptor??
[  732.009653][T16010] 9p: Bad value for 'rfdno'
[  732.165865][T15999] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  732.184818][ T8390] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[  732.389538][   T10] usb 8-1: USB disconnect, device number 3
[  732.505035][T16000] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  732.559731][ T3312] vhci_hcd vhci_hcd.7: stop threads
[  732.561144][ T3312] vhci_hcd vhci_hcd.7: release socket
[  732.646737][ T3312] vhci_hcd vhci_hcd.7: disconnect device
[  733.035332][T16034] loop5: detected capacity change from 0 to 512
[  733.051175][T16034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  733.128609][T16034] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3896: iget: bad i_size value: 38620345925642
[  733.128647][T16034] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  733.143329][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  733.143355][    C0] EXT4-fs (loop5): initial error at time 1779789943: ext4_orphan_get:1397: inode 15
[  733.143389][    C0] EXT4-fs (loop5): last error at time 1779789943: ext4_orphan_get:1397: inode 15
[  733.290186][T16034] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3896: couldn't read orphan inode 15 (err -117)
[  733.290222][T16034] loop5: lost filesystem error report for type 5 error -117
[  733.368766][T16034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  733.921622][ T3312] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:13: bg 0: block 5: invalid block bitmap
[  734.074207][ T3312] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  734.074235][ T3312] EXT4-fs (loop5): This should not happen!! Data will be lost
[  734.074235][ T3312] 
[  734.074247][ T3312] EXT4-fs (loop5): Total free blocks count 0
[  734.074256][ T3312] EXT4-fs (loop5): Free/Dirty block details
[  734.074302][ T3312] EXT4-fs (loop5): free_blocks=0
[  734.074329][ T3312] EXT4-fs (loop5): dirty_blocks=3
[  734.074361][ T3312] EXT4-fs (loop5): Block reservation details
[  734.074375][ T3312] EXT4-fs (loop5): i_reserved_data_blocks=3
[  734.243693][ T3360] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  734.359407][T14234] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  735.707110][T16103] loop5: detected capacity change from 0 to 2048
[  736.769537][T16121] loop6: detected capacity change from 0 to 128
[  738.344959][ T8390] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  738.558271][T16130] loop7: detected capacity change from 0 to 40427
[  738.560165][T16130] F2FS-fs: heap/no_heap options were deprecated
[  738.588566][T16130] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  738.597666][T16130] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  738.607532][T16130] F2FS-fs (loop7): invalid crc value
[  738.610034][T16130] F2FS-fs (loop7): invalid crc value
[  738.610069][T16130] F2FS-fs (loop7): Failed to get valid F2FS checkpoint
[  739.137393][T16103] NILFS (loop5): error -4 creating segctord thread
[  741.456271][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3968'.
[  744.026773][ T8351] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  744.186392][ T8351] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  744.186424][ T8351] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  744.186447][ T8351] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  744.186461][ T8351] usb 7-1: config 220 has no interface number 2
[  744.186516][ T8351] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  744.186537][ T8351] usb 7-1: config 220 interface 0 has no altsetting 0
[  744.186551][ T8351] usb 7-1: config 220 interface 76 has no altsetting 0
[  744.186565][ T8351] usb 7-1: config 220 interface 1 has no altsetting 0
[  744.189124][ T8351] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  744.189155][ T8351] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.189182][ T8351] usb 7-1: Product: syz
[  744.189193][ T8351] usb 7-1: Manufacturer: syz
[  744.189204][ T8351] usb 7-1: SerialNumber: syz
[  744.861718][ T8351] usb 7-1: selecting invalid altsetting 0
[  745.019885][ T8351] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  745.019934][ T8351] uvcvideo 7-1:220.0: No valid video chain found.
[  745.229961][ T8351] usb 7-1: selecting invalid altsetting 0
[  745.230003][ T8351] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  745.259723][ T8351] usb 7-1: USB disconnect, device number 3
[  745.385811][   T43] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  745.554641][   T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  745.554689][   T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  745.554713][   T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  745.554759][   T43] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  745.554783][   T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.628285][   T43] usb 8-1: config 0 descriptor??
[  745.684231][T16308] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4018'.
[  745.854212][T16291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.879037][T16311] program syz.5.4019 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  745.905361][T16291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  746.736653][   T43] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  746.819584][   T43] usb 8-1: USB disconnect, device number 4
[  747.502923][T16360] fido_id[16360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  747.542394][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  747.542482][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  747.621009][T16370] loop6: detected capacity change from 0 to 256
[  749.560582][T16422] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4055'.
[  750.384572][   T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  750.420528][T16412] can0: slcan on ttynull.
[  750.611402][   T10] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  750.611438][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.611461][   T10] usb 8-1: Product: syz
[  750.611477][   T10] usb 8-1: Manufacturer: syz
[  750.611492][   T10] usb 8-1: SerialNumber: syz
[  751.261060][   T10] rtl8150 8-1:1.0: couldn't reset the device
[  751.261538][   T10] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5
[  751.484844][   T10] usb 8-1: USB disconnect, device number 5
[  751.861656][T16420] can0 (unregistered): slcan off ttynull.
[  752.069936][T16485] loop5: detected capacity change from 0 to 512
[  752.094058][T16485] EXT4-fs (loop5): Test dummy encryption mode enabled
[  752.149117][T16485] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.4077: inode has both inline data and extents flags
[  752.149150][T16485] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  752.169301][T16485] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.4077: couldn't read orphan inode 15 (err -117)
[  752.169338][T16485] loop5: lost filesystem error report for type 5 error -117
[  752.366461][T16485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  752.726359][T14234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  753.234570][ T8351] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  753.384548][ T8351] usb 8-1: Using ep0 maxpacket: 32
[  753.386674][ T8351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  753.386703][ T8351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  753.386736][ T8351] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  753.386757][ T8351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.411137][ T8351] usb 8-1: config 0 descriptor??
[  753.998584][ T8351] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[  753.998627][ T8351] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[  753.998655][ T8351] koneplus 0003:1E7D:2D51.0007: collection stack underflow
[  753.998681][ T8351] koneplus 0003:1E7D:2D51.0007: item 0 0 0 12 parsing failed
[  753.999404][ T8351] koneplus 0003:1E7D:2D51.0007: parse failed
[  753.999479][ T8351] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -22
[  754.197209][ T8351] usb 8-1: USB disconnect, device number 6
[  756.173885][T16598] netlink: 'syz.6.4123': attribute type 14 has an invalid length.
[  756.681529][T16612] loop5: detected capacity change from 0 to 4096
[  756.735319][T16612] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  757.025741][T16612] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  757.242691][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4135'.
[  757.514168][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4139'.
[  758.487330][T16642] input: syz0 as /devices/virtual/input/input7
[  760.585579][ T5623] Bluetooth: hci3: command 0x0406 tx timeout
[  761.598705][T16699] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4168'.
[  761.768092][T16704] loop6: detected capacity change from 0 to 2048
[  761.869950][T16704] EXT4-fs: Ignoring removed bh option
[  761.957852][T16704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  761.999605][T16704] EXT4-fs (loop6): shut down requested (2)
[  762.129510][T13587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.456374][T16716] use of bytesused == 0 is deprecated and will be removed in the future,
[  762.456393][T16716] use the actual size instead.
[  763.220695][T16750] program syz.6.4190 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  763.617872][T16769] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4197'.
[  763.907734][ T5637] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  764.070035][ T5637] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  764.070073][ T5637] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  764.070097][ T5637] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  764.070143][ T5637] usb 7-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00
[  764.070169][ T5637] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.131725][ T5637] usb 7-1: config 0 descriptor??
[  765.548536][ T5637] logitech-hidpp-device 0003:046D:C090.0008: unknown main item tag 0x2
[  765.548580][ T5637] logitech-hidpp-device 0003:046D:C090.0008: unknown main item tag 0x0
[  765.548610][ T5637] logitech-hidpp-device 0003:046D:C090.0008: unknown main item tag 0x0
[  765.548640][ T5637] logitech-hidpp-device 0003:046D:C090.0008: unknown main item tag 0x0
[  765.548669][ T5637] logitech-hidpp-device 0003:046D:C090.0008: unknown main item tag 0x0
[  765.548698][ T5637] logitech-hidpp-device 0003:046D:C090.0008: unknown main item tag 0x0
[  765.548727][ T5637] logitech-hidpp-device 0003:046D:C090.0008: unknown main item tag 0x0
[  765.548755][ T5637] logitech-hidpp-device 0003:046D:C090.0008: unknown main item tag 0x0
[  765.548785][ T5637] logitech-hidpp-device 0003:046D:C090.0008: unknown main item tag 0x0
[  765.548814][ T5637] logitech-hidpp-device 0003:046D:C090.0008: unknown main item tag 0x0
[  765.650048][ T5637] logitech-hidpp-device 0003:046D:C090.0008: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.6-1/input0
[  765.764615][ T5747] usb 7-1: USB disconnect, device number 4
[  765.821544][T16789] loop7: detected capacity change from 0 to 40427
[  765.822572][T16789] F2FS-fs: heap/no_heap options were deprecated
[  765.879437][T16789] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  765.888726][T16789] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  765.914329][T16789] F2FS-fs (loop7): invalid crc value
[  765.923001][T16789] F2FS-fs (loop7): invalid crc value
[  765.923037][T16789] F2FS-fs (loop7): Failed to get valid F2FS checkpoint
[  766.019590][T16796] loop5: detected capacity change from 0 to 512
[  766.619994][T16801] fido_id[16801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  766.804600][ T5629] Bluetooth: hci3: unexpected event for opcode 0x2007
[  767.194014][T16819] loop6: detected capacity change from 0 to 512
[  768.884037][T16830] loop5: detected capacity change from 0 to 40427
[  768.885209][T16830] F2FS-fs: heap/no_heap options were deprecated
[  768.890566][T16830] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288)
[  768.915858][T16830] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288)
[  768.929105][T16830] F2FS-fs (loop5): invalid crc value
[  768.943774][T16830] F2FS-fs (loop5): invalid crc value
[  768.943810][T16830] F2FS-fs (loop5): Failed to get valid F2FS checkpoint
[  769.544559][   T43] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  769.696831][   T43] usb 7-1: Using ep0 maxpacket: 16
[  769.699563][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  769.699599][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  769.699640][   T43] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  769.699665][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.827748][   T43] usb 7-1: config 0 descriptor??
[  770.298541][   T43] apple 0003:05AC:024B.0009: fixing up MacBook JIS keyboard report descriptor
[  770.299266][   T43] apple 0003:05AC:024B.0009: unknown global tag 0xe
[  770.299286][   T43] apple 0003:05AC:024B.0009: item 0 1 1 14 parsing failed
[  770.301665][   T43] apple 0003:05AC:024B.0009: parse failed
[  770.301780][   T43] apple 0003:05AC:024B.0009: probe with driver apple failed with error -22
[  770.404849][T16857] loop7: detected capacity change from 0 to 512
[  770.406081][T16857] EXT4-fs: Ignoring removed mblk_io_submit option
[  770.431501][T16857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006]
[  770.444722][T16857] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4233: Invalid inode bitmap blk 4 in block_group 0
[  770.444759][T16857] loop7: lost filesystem error report for type 5 error -117
[  770.454423][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  770.454447][    C1] EXT4-fs (loop7): initial error at time 1779789980: ext4_read_inode_bitmap:139
[  770.454472][    C1] EXT4-fs (loop7): last error at time 1779789980: ext4_read_inode_bitmap:139
[  770.486581][T16857] EXT4-fs (loop7): Remounting filesystem read-only
[  770.535769][T16857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  770.539848][   T43] usb 7-1: USB disconnect, device number 5
[  770.745409][T14874] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  771.272261][T16880] loop7: detected capacity change from 0 to 256
[  771.527906][T16880] FAT-fs (loop7): Directory bread(block 64) failed
[  771.527952][T16880] FAT-fs (loop7): Directory bread(block 65) failed
[  771.528073][T16880] FAT-fs (loop7): Directory bread(block 66) failed
[  771.528099][T16880] FAT-fs (loop7): Directory bread(block 67) failed
[  771.528196][T16880] FAT-fs (loop7): Directory bread(block 68) failed
[  771.528221][T16880] FAT-fs (loop7): Directory bread(block 69) failed
[  771.528322][T16880] FAT-fs (loop7): Directory bread(block 70) failed
[  771.528346][T16880] FAT-fs (loop7): Directory bread(block 71) failed
[  771.528448][T16880] FAT-fs (loop7): Directory bread(block 72) failed
[  771.528472][T16880] FAT-fs (loop7): Directory bread(block 73) failed
[  771.861797][   T37] audit: type=1800 audit(1779789982.005:70): pid=16880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4243" name="file1" dev="loop7" ino=1048651 res=0 errno=0
[  772.663290][T16920] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4260'.
[  772.943367][T16931] program syz.6.4266 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  773.049670][T16926] loop5: detected capacity change from 0 to 4096
[  773.278294][T16940] loop6: detected capacity change from 0 to 128
[  774.389493][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4288'.
[  774.389519][T16979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4288'.
[  774.558142][   T32] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  774.739590][   T32] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  774.739630][   T32] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  774.739675][   T32] usb 8-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  774.739699][   T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.787328][   T32] usb 8-1: config 0 descriptor??
[  774.789615][T16976] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  775.435588][T17014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4303'.
[  775.435617][T17014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4303'.
[  775.437470][T17011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4303'.
[  775.437498][T17011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4303'.
[  775.440021][T17013] loop5: detected capacity change from 0 to 256
[  775.475741][T17013] exfat: Deprecated parameter 'namecase'
[  775.475873][T17013] exfat: Deprecated parameter 'namecase'
[  775.624933][T17013] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8300b014, utbl_chksum : 0xe619d30d)
[  775.655772][   T32] hid_parser_main: 28 callbacks suppressed
[  775.655805][   T32] logitech 0003:046D:C293.000A: unknown main item tag 0x3
[  775.655841][   T32] logitech 0003:046D:C293.000A: unknown main item tag 0x5
[  775.655869][   T32] logitech 0003:046D:C293.000A: item fetching failed at offset 36/40
[  775.658178][   T32] logitech 0003:046D:C293.000A: parse failed
[  775.658297][   T32] logitech 0003:046D:C293.000A: probe with driver logitech failed with error -22
[  775.907886][   T32] usb 8-1: USB disconnect, device number 7
[  776.086890][T17007] loop6: detected capacity change from 0 to 32768
[  776.201624][T17007] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  776.441272][T17007] XFS (loop6): Ending clean mount
[  777.619745][T13587] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  777.948216][T17042] loop7: detected capacity change from 0 to 40427
[  777.949427][T17042] F2FS-fs: heap/no_heap options were deprecated
[  777.980163][T17042] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  778.037160][T17042] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  778.038586][T17042] F2FS-fs (loop7): invalid crc value
[  778.038981][T17042] F2FS-fs (loop7): invalid crc value
[  778.039012][T17042] F2FS-fs (loop7): Failed to get valid F2FS checkpoint
[  778.113207][T17046] IPv6: NLM_F_CREATE should be specified when creating new route
[  779.183440][T17070] loop5: detected capacity change from 0 to 128
[  779.566310][T17078] loop6: detected capacity change from 0 to 256
[  779.738184][T17077] loop7: detected capacity change from 0 to 128
[  779.877502][T17077] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  780.334560][ T5629] Bluetooth: hci1: command 0x0406 tx timeout
[  780.451643][T17098] tun0: tun_chr_ioctl cmd 2148553947
[  780.518605][T17101] 9p: Bad value for 'wfdno'
[  782.695627][T17133] loop5: detected capacity change from 0 to 128
[  782.751799][   T32] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  782.906325][T17133] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  782.908721][T17133] hpfs: filesystem error: improperly stopped
[  782.908741][T17133] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  782.908758][T17133] hpfs: You really don't want any checks? You are crazy...
[  783.004708][   T32] usb 8-1: Using ep0 maxpacket: 32
[  783.015665][   T32] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  783.015698][   T32] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  783.015724][   T32] usb 8-1: config 0 interface 0 has no altsetting 0
[  783.049513][   T32] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  783.049547][   T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.049562][   T32] usb 8-1: Product: syz
[  783.049572][   T32] usb 8-1: Manufacturer: syz
[  783.049583][   T32] usb 8-1: SerialNumber: syz
[  783.171178][   T32] usb 8-1: config 0 descriptor??
[  783.370550][T17133] hpfs: hpfs_map_sector(): read error
[  783.370569][T17133] hpfs: code page support is disabled
[  783.370752][T17133] hpfs: hpfs_map_4sectors(): unaligned read
[  783.600804][T17133] hpfs: hpfs_map_4sectors(): unaligned read
[  783.600827][T17133] hpfs: filesystem error: unable to find root dir
[  783.609775][   T32] gs_usb 8-1:0.0: Configuring for 1 interfaces
[  783.641700][T17133] hpfs: hpfs_map_4sectors(): unaligned read
[  783.728460][T17133] hpfs: hpfs_map_sector(): read error
[  783.728504][T17133] hpfs: hpfs_map_sector(): read error
[  784.047395][   T32] gs_usb 8-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  784.048155][   T32] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71
[  784.243469][   T32] usb 8-1: USB disconnect, device number 8
[  784.573574][T17175] loop6: detected capacity change from 0 to 512
[  784.612274][T17175] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  784.672643][T17175] EXT4-fs (loop6): 1 truncate cleaned up
[  784.683545][T17175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  786.425346][T13587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  786.865657][ T8351] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  787.052620][ T8351] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  787.052655][ T8351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.052676][ T8351] usb 8-1: Product: syz
[  787.052693][ T8351] usb 8-1: Manufacturer: syz
[  787.052707][ T8351] usb 8-1: SerialNumber: syz
[  787.101232][ T8351] usb 8-1: config 0 descriptor??
[  787.359454][ T8351] usb 8-1: ignoring: probably an ADSL modem
[  787.771055][ T8351] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19!
[  787.787715][ T2208] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.977883][ T8351] usb 8-1: USB disconnect, device number 9
[  788.081626][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  788.163063][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  788.181579][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  788.217480][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  788.244275][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  790.191255][ T2208] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.654641][ T5629] Bluetooth: hci3: command tx timeout
[  790.970601][ T2208] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.097371][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4445'.
[  792.208274][ T2208] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.735465][ T5629] Bluetooth: hci3: command tx timeout
[  792.807325][T17366] loop7: detected capacity change from 0 to 256
[  792.887362][T17366] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d)
[  793.081099][T17345] loop5: detected capacity change from 0 to 40427
[  793.101822][T17345] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  793.101851][T17345] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  793.102282][T17345] F2FS-fs (loop5): build fault injection rate: 87
[  793.136801][T17345] F2FS-fs (loop5): invalid crc value
[  793.427869][T17245] bridge0: port 1(bridge_slave_0) entered blocking state
[  793.430161][T17245] bridge0: port 1(bridge_slave_0) entered disabled state
[  793.431851][T17245] bridge_slave_0: entered allmulticast mode
[  793.463715][T17245] bridge_slave_0: entered promiscuous mode
[  793.492404][T17245] bridge0: port 2(bridge_slave_1) entered blocking state
[  793.494334][T17245] bridge0: port 2(bridge_slave_1) entered disabled state
[  793.516017][T17245] bridge_slave_1: entered allmulticast mode
[  793.553671][T17245] bridge_slave_1: entered promiscuous mode
[  793.992130][T17345] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  794.273329][T17245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  794.348462][T17245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  794.386702][T17345] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0
[  794.394128][T17345] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  794.394238][T17345] F2FS-fs (loop5): Start checkpoint disabled!
[  794.488409][T17394] loop7: detected capacity change from 0 to 512
[  794.815225][T17345] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0
[  794.839739][ T5629] Bluetooth: hci3: command tx timeout
[  794.880709][T17399] 9p: Bad value for 'rfdno'
[  795.120164][T17245] team0: Port device team_slave_0 added
[  795.139619][T17245] team0: Port device team_slave_1 added
[  795.357658][T17245] batman_adv: batadv0: Adding interface: batadv_slave_0
[  795.357678][T17245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  795.357710][T17245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  795.453970][T17245] batman_adv: batadv0: Adding interface: batadv_slave_1
[  795.453989][T17245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  795.454020][T17245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  795.552434][T17408] sctp: [Deprecated]: syz.7.4476 (pid 17408) Use of struct sctp_assoc_value in delayed_ack socket option.
[  795.552434][T17408] Use struct sctp_sack_info instead
[  795.673286][ T2208] bridge_slave_1: left allmulticast mode
[  795.673325][ T2208] bridge_slave_1: left promiscuous mode
[  795.673625][ T2208] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.860379][ T2208] bridge_slave_0: left allmulticast mode
[  795.860420][ T2208] bridge_slave_0: left promiscuous mode
[  795.860691][ T2208] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.179811][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4477'.
[  796.894482][ T5629] Bluetooth: hci3: command tx timeout
[  798.615609][ T2208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  798.695443][ T2208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  798.741792][ T2208] bond0 (unregistering): Released all slaves
[  798.913897][T17425] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4482'.
[  798.913928][T17425] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4482'.
[  798.957591][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[  799.303206][T17245] hsr_slave_0: entered promiscuous mode
[  799.318774][T17245] hsr_slave_1: entered promiscuous mode
[  799.322424][T17245] debugfs: 'hsr0' already exists in 'hsr'
[  799.322453][T17245] Cannot create hsr debugfs directory
[  800.325270][T17542] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4533'.
[  801.162022][T17556] syzkaller1: entered promiscuous mode
[  801.162051][T17556] syzkaller1: entered allmulticast mode
[  801.272104][T17576] loop7: detected capacity change from 0 to 128
[  801.433958][T17576] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  801.434624][T17576] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  801.486156][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14
[  801.498000][T17576] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 5 (only 1 groups)
[  801.589740][T14874] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  803.581382][ T2208] hsr_slave_0: left promiscuous mode
[  803.614541][   T32] usb 8-1: new low-speed USB device number 10 using dummy_hcd
[  803.666025][ T2208] hsr_slave_1: left promiscuous mode
[  803.669079][ T2208] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  803.669115][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_0
[  803.730926][ T2208] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  803.730956][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_1
[  803.853568][   T32] usb 8-1: too many endpoints for config 0 interface 0 altsetting 8: 253, using maximum allowed: 30
[  803.853621][   T32] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  803.853652][   T32] usb 8-1: config 0 interface 0 has no altsetting 0
[  803.853689][   T32] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  803.853725][   T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.939384][ T2208] veth1_macvtap: left promiscuous mode
[  803.939493][ T2208] veth0_macvtap: left promiscuous mode
[  803.939807][ T2208] veth1_vlan: left promiscuous mode
[  803.940016][ T2208] veth0_vlan: left promiscuous mode
[  804.014221][   T32] usb 8-1: config 0 descriptor??
[  804.589231][   T32] shield 0003:0955:7214.000B: unknown main item tag 0x6
[  804.589272][   T32] shield 0003:0955:7214.000B: unknown main item tag 0x7
[  804.589300][   T32] shield 0003:0955:7214.000B: unknown main item tag 0x6
[  804.643659][T17623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  804.655106][T17623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  804.931551][   T32] input: HID 0955:7214 Haptics as /devices/virtual/input/input8
[  804.997959][T17647] loop8: detected capacity change from 0 to 7
[  805.145194][T17647] Dev loop8: unable to read RDB block 7
[  805.145256][T17647]  loop8: unable to read partition table
[  805.145481][T17647] loop8: partition table beyond EOD, truncated
[  805.145520][T17647] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  806.651329][   T32] shield 0003:0955:7214.000B: Registered Thunderstrike controller
[  806.673802][   T32] shield 0003:0955:7214.000B: : USB HID v0.20 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0
[  806.770783][ T2208] team0 (unregistering): Port device team_slave_1 removed
[  806.847153][ T2208] team0 (unregistering): Port device team_slave_0 removed
[  806.944636][ T5637] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  806.991762][ T5637] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  806.992479][ T5637] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  806.992894][ T5637] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  807.080316][   T32] usb 8-1: USB disconnect, device number 10
[  807.702807][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15
[  807.703360][T17675] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4582'.
[  808.083792][T17697] loop5: detected capacity change from 0 to 512
[  808.097405][T17697] EXT4-fs: inline encryption not supported
[  808.139295][T17697] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  808.251315][T17697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  808.251500][T17697] System zones: 1-12
[  808.283700][T17697] EXT4-fs (loop5): 1 truncate cleaned up
[  808.393906][T17697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  808.530805][T17697] EXT4-fs (loop5): shut down requested (1)
[  808.836055][T14234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.984516][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  808.988785][ T5637] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  808.998988][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  809.146370][ T5637] usb 8-1: Using ep0 maxpacket: 32
[  809.171114][ T5637] usb 8-1: unable to read config index 0 descriptor/start: -61
[  809.171159][ T5637] usb 8-1: can't read configurations, error -61
[  809.538272][ T5637] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  809.704574][ T5637] usb 8-1: Using ep0 maxpacket: 32
[  809.874861][ T5637] usb 8-1: unable to read config index 0 descriptor/start: -61
[  809.874899][ T5637] usb 8-1: can't read configurations, error -61
[  809.877269][ T5637] usb usb8-port1: attempt power cycle
[  810.483543][ T5637] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  810.518490][ T5637] usb 8-1: Using ep0 maxpacket: 32
[  810.530467][ T5637] usb 8-1: unable to read config index 0 descriptor/start: -61
[  810.530509][ T5637] usb 8-1: can't read configurations, error -61
[  810.592197][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16
[  810.654538][ T5637] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  810.732712][ T5637] usb 8-1: Using ep0 maxpacket: 32
[  810.741704][ T5637] usb 8-1: unable to read config index 0 descriptor/start: -61
[  810.741813][ T5637] usb 8-1: can't read configurations, error -61
[  810.752248][ T5637] usb usb8-port1: unable to enumerate USB device
[  810.876130][T17736] syz.5.4602 (17736) used greatest stack depth: 18528 bytes left
[  811.039375][T17245] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  811.106986][T17245] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  811.128929][T17245] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  811.436759][T17245] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  811.461420][T17245] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  811.555668][T17245] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  811.593409][T17245] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  811.641464][T17245] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  811.814199][T17772] loop7: detected capacity change from 0 to 512
[  811.876035][T17772] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  812.537862][T17772] EXT4-fs (loop7): 1 orphan inode deleted
[  812.537891][T17772] EXT4-fs (loop7): 1 truncate cleaned up
[  812.541152][T17772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  812.781200][T14874] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  812.789720][T17245] 8021q: adding VLAN 0 to HW filter on device bond0
[  812.832322][T17245] 8021q: adding VLAN 0 to HW filter on device team0
[  812.886530][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.886783][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  812.905610][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.905755][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  813.417695][T17808] loop7: detected capacity change from 0 to 256
[  813.644514][  T821] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  813.822064][T17808] FAT-fs (loop7): Directory bread(block 64) failed
[  813.822219][T17808] FAT-fs (loop7): Directory bread(block 65) failed
[  813.822330][T17808] FAT-fs (loop7): Directory bread(block 66) failed
[  813.822356][T17808] FAT-fs (loop7): Directory bread(block 67) failed
[  813.822457][T17808] FAT-fs (loop7): Directory bread(block 68) failed
[  813.822483][T17808] FAT-fs (loop7): Directory bread(block 69) failed
[  813.822588][T17808] FAT-fs (loop7): Directory bread(block 70) failed
[  813.822612][T17808] FAT-fs (loop7): Directory bread(block 71) failed
[  813.822731][T17808] FAT-fs (loop7): Directory bread(block 72) failed
[  813.822756][T17808] FAT-fs (loop7): Directory bread(block 73) failed
[  813.898608][  T821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.898646][  T821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.902263][  T821] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  813.902293][  T821] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  813.902312][  T821] usb 6-1: Manufacturer: syz
[  813.960920][  T821] usb 6-1: config 0 descriptor??
[  814.403112][  T821] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0
[  814.403147][  T821] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0
[  814.403169][  T821] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0
[  814.403191][  T821] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0
[  814.403213][  T821] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0
[  814.403235][  T821] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0
[  814.403258][  T821] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0
[  814.489907][  T821] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  814.794650][  T821] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device
[  814.794710][  T821] pyra 0003:1E7D:2CF6.000C: couldn't install mouse
[  814.853700][  T821] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71
[  814.875972][  T821] usb 6-1: USB disconnect, device number 3
[  815.208886][T17845] fido_id[17845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  815.655228][T17245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  816.724276][T17898] loop7: detected capacity change from 0 to 512
[  816.798176][T17245] veth0_vlan: entered promiscuous mode
[  816.807922][T17898] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4660: bg 0: block 5: invalid block bitmap
[  816.808018][T17898] loop7: lost filesystem error report for type 5 error -117
[  816.842755][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  816.842782][    C0] EXT4-fs (loop7): initial error at time 1779790027: ext4_validate_block_bitmap:432
[  816.842809][    C0] EXT4-fs (loop7): last error at time 1779790027: ext4_validate_block_bitmap:432
[  816.953863][T17245] veth1_vlan: entered promiscuous mode
[  817.123583][T17898] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  817.123617][T17898] loop7: lost filesystem error report for type 5 error -117
[  817.206952][T17916] program syz.5.4668 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  817.307302][T17898] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4660: invalid indirect mapped block 3 (level 2)
[  817.307340][T17898] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  817.322667][T17898] EXT4-fs (loop7): 1 orphan inode deleted
[  817.322692][T17898] EXT4-fs (loop7): 1 truncate cleaned up
[  817.363296][T17898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  817.598488][T14874] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  817.707021][T17245] veth0_macvtap: entered promiscuous mode
[  818.163445][T17245] veth1_macvtap: entered promiscuous mode
[  818.349059][T17245] batman_adv: batadv0: Interface activated: batadv_slave_0
[  818.527628][T17245] batman_adv: batadv0: Interface activated: batadv_slave_1
[  818.669316][ T3312] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  818.669593][ T3312] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  818.669637][ T3312] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  818.669677][ T3312] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  821.173861][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  821.173885][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  821.185300][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  821.337753][   T10] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  821.337785][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129
[  821.341852][   T10] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  821.341887][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.341909][   T10] usb 6-1: Product: syz
[  821.341925][   T10] usb 6-1: Manufacturer: syz
[  821.341941][   T10] usb 6-1: SerialNumber: syz
[  821.410615][   T10] usb 6-1: config 0 descriptor??
[  822.222495][   T10] mos7840 6-1:0.0: required endpoints missing
[  822.322383][   T10] usb 6-1: USB disconnect, device number 4
[  822.341506][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  822.341530][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  823.681624][T18063] loop7: detected capacity change from 0 to 128
[  824.215839][T18050] loop5: detected capacity change from 0 to 131072
[  824.373163][T18050] F2FS-fs (loop5): Test dummy encryption mode enabled
[  824.399525][T18050] F2FS-fs (loop5): invalid crc value
[  824.560984][T18050] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  824.573614][T18050] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  825.402144][ T8390] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  825.574453][ T8390] usb 8-1: Using ep0 maxpacket: 32
[  825.577066][ T8390] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  825.577097][ T8390] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.948642][ T8390] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  826.016322][ T8390] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  826.017271][ T8390] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  826.017323][ T8390] usb 8-1: media controller created
[  826.057082][ T8390] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  826.141483][T18109] loop8: detected capacity change from 0 to 512
[  826.213970][ T8390] az6027: usb out operation failed. (-71)
[  826.251588][T18109] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  826.272891][ T8390] az6027: usb out operation failed. (-71)
[  826.272912][ T8390] stb0899_attach: Driver disabled by Kconfig
[  826.272923][ T8390] az6027: no front-end attached
[  826.272923][ T8390] 
[  826.273411][ T8390] az6027: usb out operation failed. (-71)
[  826.273428][ T8390] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  826.390629][ T8390] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input9
[  826.420792][T18109] EXT4-fs (loop8): 1 truncate cleaned up
[  826.421156][ T8390] dvb-usb: schedule remote query interval to 400 msecs.
[  826.421176][ T8390] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  826.481413][ T8390] usb 8-1: USB disconnect, device number 15
[  826.508101][T18109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  826.562386][T18109] EXT4-fs (loop8): shut down requested (2)
[  826.711677][T17245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.051703][T18128] loop7: detected capacity change from 0 to 128
[  827.932598][ T8390] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  828.982539][T18160] input: syz1 as /devices/virtual/input/input10
[  829.403700][T18180] loop8: detected capacity change from 0 to 128
[  829.430953][T18180] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  830.111944][  T999] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  831.155611][T18222] loop8: detected capacity change from 0 to 1024
[  832.715090][T18261] binder: 18260:18261 ioctl c0306201 200000001a80 returned -14
[  832.820875][T18277] vxcan1: tx drop: invalid sa for name 0x0000000000000003
[  833.254545][  T821] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  833.404484][  T821] usb 6-1: Using ep0 maxpacket: 8
[  833.407846][  T821] usb 6-1: unable to get BOS descriptor or descriptor too short
[  833.409408][  T821] usb 6-1: config 86 has an invalid interface number: 78 but max is 0
[  833.409546][  T821] usb 6-1: config 86 has no interface number 0
[  833.409590][  T821] usb 6-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024
[  833.409616][  T821] usb 6-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023
[  833.409640][  T821] usb 6-1: config 86 interface 78 has no altsetting 0
[  833.413693][  T821] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d
[  833.413727][  T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.413749][  T821] usb 6-1: Product: syz
[  833.413765][  T821] usb 6-1: Manufacturer: syz
[  833.413780][  T821] usb 6-1: SerialNumber: syz
[  833.548356][T18285] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  833.548736][T18285] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  833.796676][  T821] kvaser_usb 6-1:86.78: error -EPROTO: Cannot get software info
[  833.796879][  T821] kvaser_usb 6-1:86.78: probe with driver kvaser_usb failed with error -71
[  833.826660][  T821] usb 6-1: USB disconnect, device number 5
[  835.687662][ T3408] tipc: Subscription rejected, illegal request
[  839.430475][T18469] loop7: detected capacity change from 0 to 128
[  839.945868][T18480] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  840.755582][T18502] loop7: detected capacity change from 0 to 4096
[  840.774958][T18502] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  840.916736][T18502] ntfs3(loop7): ino=1a, mi_enum_attr
[  840.916781][T18502] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  841.567947][T18529] loop8: detected capacity change from 0 to 512
[  842.047263][T18546] loop7: detected capacity change from 0 to 128
[  842.169076][T18546] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  842.934762][ T1008] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  843.624308][T18593] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4944'.
[  844.596657][T18630] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  845.584509][ T5637] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  845.767084][ T5637] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  845.767173][ T5637] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  845.767203][ T5637] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  845.770312][ T5637] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  845.770342][ T5637] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.770364][ T5637] usb 8-1: Product: syz
[  845.770379][ T5637] usb 8-1: Manufacturer: syz
[  845.770403][ T5637] usb 8-1: SerialNumber: syz
[  846.023267][T18647] loop8: detected capacity change from 0 to 32768
[  846.152252][T18647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4970 (18647)
[  846.837522][T18647] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  846.837559][T18647] BTRFS info (device loop8): using crc32c checksum algorithm
[  846.860585][ T5637] cdc_ncm 8-1:1.0: bind() failure
[  846.946257][ T5637] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71
[  846.947263][ T5637] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71
[  846.951642][ T5637] usbtest 8-1:1.1: probe with driver usbtest failed with error -71
[  847.017051][ T5637] usb 8-1: USB disconnect, device number 16
[  847.714630][T18647] BTRFS info (device loop8): enabling ssd optimizations
[  847.714658][T18647] BTRFS info (device loop8): turning on flush-on-commit
[  847.714676][T18647] BTRFS info (device loop8): turning on async discard
[  847.714694][T18647] BTRFS info (device loop8): enabling free space tree
[  847.714712][T18647] BTRFS info (device loop8): enabling auto defrag
[  847.714733][T18647] BTRFS info (device loop8): use lzo compression, level 1
[  847.714754][T18647] BTRFS info (device loop8): max_inline set to 4096
[  849.691702][T17245] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  850.946377][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  851.050582][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  851.107849][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  851.109257][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  851.142220][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  851.931663][T18778] loop7: detected capacity change from 0 to 131072
[  851.943762][T18778] F2FS-fs (loop7): invalid crc value
[  852.041954][   T61] Bluetooth: hci4: command 0x0406 tx timeout
[  852.125432][T18778] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  852.246528][T18778] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  852.292488][   T37] audit: type=1800 audit(1779790062.465:71): pid=18778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5025" name="file1" dev="loop7" ino=7 res=0 errno=0
[  853.486158][ T5629] Bluetooth: hci5: command tx timeout
[  855.415139][T18827] loop8: detected capacity change from 0 to 32768
[  855.534637][ T5629] Bluetooth: hci5: command tx timeout
[  855.705789][T18773] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.708849][T18773] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.709213][T18773] bridge_slave_0: entered allmulticast mode
[  855.754671][T18773] bridge_slave_0: entered promiscuous mode
[  855.759247][T18773] bridge0: port 2(bridge_slave_1) entered blocking state
[  855.759682][T18773] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.759991][T18773] bridge_slave_1: entered allmulticast mode
[  855.794751][T18773] bridge_slave_1: entered promiscuous mode
[  855.909378][T18773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  855.926273][T18773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  855.993107][T18773] team0: Port device team_slave_0 added
[  856.005146][T18773] team0: Port device team_slave_1 added
[  856.066752][T18773] batman_adv: batadv0: Adding interface: batadv_slave_0
[  856.066772][T18773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  856.066805][T18773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  856.070636][T18773] batman_adv: batadv0: Adding interface: batadv_slave_1
[  856.070655][T18773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  856.070687][T18773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  856.275437][T18773] hsr_slave_0: entered promiscuous mode
[  856.277722][T18773] hsr_slave_1: entered promiscuous mode
[  856.279533][T18773] debugfs: 'hsr0' already exists in 'hsr'
[  856.279591][T18773] Cannot create hsr debugfs directory
[  856.418668][T18827] (syz.8.5041,18827,1):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #66: rec_len % 4 != 0 - offset=56, inode=68, rec_len=3522, name_len=18
[  856.419335][T18827] (syz.8.5041,18827,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  856.419364][T18827] (syz.8.5041,18827,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  856.419389][T18827] (syz.8.5041,18827,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  856.419414][T18827] (syz.8.5041,18827,1):ocfs2_initialize_super:2195 ERROR: status = -22
[  856.419533][T18827] (syz.8.5041,18827,1):ocfs2_fill_super:1177 ERROR: status = -22
[  857.173586][T18869] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5057'.
[  857.250102][T18865] SQUASHFS error: Failed to read block 0x0: -5
[  857.614505][ T5629] Bluetooth: hci5: command tx timeout
[  858.632807][T18896] kernel read not supported for file /file0 (pid: 18896 comm: syz.8.5066)
[  858.648890][   T37] audit: type=1800 audit(1779790068.805:72): pid=18896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5066" name="file0" dev="mqueue" ino=54728 res=0 errno=0
[  859.496988][ T8390] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  859.657167][ T8390] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.657234][ T8390] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  859.660720][ T8390] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  859.660751][ T8390] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.660770][ T8390] usb 8-1: Product: syz
[  859.660783][ T8390] usb 8-1: Manufacturer: syz
[  859.660798][ T8390] usb 8-1: SerialNumber: syz
[  859.694475][ T5629] Bluetooth: hci5: command tx timeout
[  859.956225][T18919] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  860.590966][T18941] loop8: detected capacity change from 0 to 256
[  860.782243][ T8390] cdc_ncm 8-1:1.0: bind() failure
[  860.835215][T18941] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba999a5, utbl_chksum : 0xe619d30d)
[  860.888641][ T8390] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  860.888685][ T8390] cdc_ncm 8-1:1.1: bind() failure
[  861.299844][ T8390] usb 8-1: USB disconnect, device number 17
[  861.704850][T18773] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  861.815309][T18773] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  861.818419][T18773] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  861.872319][T18773] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  861.873824][T18773] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  861.952277][T18773] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  861.961738][T18773] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  862.102421][T18773] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  863.189576][T18773] 8021q: adding VLAN 0 to HW filter on device bond0
[  863.381181][T18773] 8021q: adding VLAN 0 to HW filter on device team0
[  863.427423][T12183] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.427683][T12183] bridge0: port 1(bridge_slave_0) entered forwarding state
[  863.493595][T12183] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.493779][T12183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  864.675240][T18990] loop7: detected capacity change from 0 to 32768
[  864.895254][T18986] loop8: detected capacity change from 0 to 131072
[  865.072956][T18986] XFS (loop8): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  865.421509][T18986] XFS (loop8): Starting recovery (logdev: internal)
[  865.602532][T18986] XFS (loop8): Ending recovery (logdev: internal)
[  866.390026][T17245] XFS (loop8): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  867.918421][T18773] 8021q: adding VLAN 0 to HW filter on device batadv0
[  868.659702][ T8364] IPVS: starting estimator thread 0...
[  868.752987][T19054] IPVS: using max 9 ests per chain, 21600 per kthread
[  869.113823][T18773] veth0_vlan: entered promiscuous mode
[  869.282887][T18773] veth1_vlan: entered promiscuous mode
[  869.369650][T19044] loop7: detected capacity change from 0 to 32768
[  869.625000][T18773] veth0_macvtap: entered promiscuous mode
[  869.665672][T18773] veth1_macvtap: entered promiscuous mode
[  869.879455][T18773] batman_adv: batadv0: Interface activated: batadv_slave_0
[  870.093714][T18773] batman_adv: batadv0: Interface activated: batadv_slave_1
[  870.282422][ T3360] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  870.298151][ T3312] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  870.298719][ T3312] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  870.301180][ T3312] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  870.438748][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  870.438862][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  872.095622][  T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  872.095644][  T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  872.254707][  T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  872.254727][  T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  872.892278][T19091] loop8: detected capacity change from 0 to 32768
[  872.908178][T19091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5146 (19091)
[  873.044550][T19091] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  873.044588][T19091] BTRFS info (device loop8): using sha256 checksum algorithm
[  873.353363][T19091] BTRFS info (device loop8): setting nodatasum
[  873.353391][T19091] BTRFS info (device loop8): enabling ssd optimizations
[  873.353409][T19091] BTRFS info (device loop8): turning on async discard
[  873.353426][T19091] BTRFS info (device loop8): enabling free space tree
[  874.811535][T17245] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  877.224485][   T10] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  877.377179][   T10] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  877.377207][   T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  877.377227][   T10] usb 10-1: config 1 has no interface number 0
[  877.377269][   T10] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  877.377296][   T10] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  877.377322][   T10] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  877.377353][   T10] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 64
[  877.377380][   T10] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  877.462915][   T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  877.462946][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.462964][   T10] usb 10-1: Product: syz
[  877.462977][   T10] usb 10-1: Manufacturer: syz
[  877.462991][   T10] usb 10-1: SerialNumber: syz
[  877.548363][T19207] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  877.807062][T19207] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  878.008586][T19207] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  878.039474][T19206] loop8: detected capacity change from 0 to 32768
[  878.261152][T19206] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  878.429064][T19207] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  878.444004][   T10] cdc_ncm 10-1:1.1: bind() failure
[  878.472807][T19206] XFS (loop8): Ending clean mount
[  878.665515][   T43] usb 10-1: USB disconnect, device number 2
[  879.155714][T17245] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  880.870427][T19305] loop9: detected capacity change from 0 to 128
[  882.285094][T19316] loop8: detected capacity change from 0 to 40427
[  882.298948][T19316] F2FS-fs: quotafile must be on filesystem root
[  883.397802][T19367] loop9: detected capacity change from 0 to 16
[  884.454846][T19362] syz.2.5253 (19362) used greatest stack depth: 18104 bytes left
[  884.590434][T19367] erofs (device loop9): mounted with root inode @ nid 36.
[  884.924475][ T5637] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  885.206331][ T5637] usb 9-1: Using ep0 maxpacket: 32
[  885.208920][ T5637] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  885.208947][ T5637] usb 9-1: config 0 has no interfaces?
[  885.208979][ T5637] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  885.209005][ T5637] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.255263][ T5637] usb 9-1: config 0 descriptor??
[  885.543937][ T8364] usb 9-1: USB disconnect, device number 2
[  886.327401][T19407] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  886.813582][T19435] loop9: detected capacity change from 0 to 4096
[  886.883681][T19435] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  887.354958][T19435] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  888.729096][   T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  888.818380][   T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  888.821889][   T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  888.849395][   T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  888.851672][   T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  888.948944][T19490] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  889.566696][T19507] fuse: fd is not a fuse device
[  890.342233][T19499] loop9: detected capacity change from 0 to 32768
[  890.740373][T19499] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  891.214731][ T5629] Bluetooth: hci6: command tx timeout
[  891.547053][   T37] audit: type=1326 audit(1779790101.725:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.8.5340" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574fd1ce59 code=0x7ffc0000
[  891.547115][   T37] audit: type=1326 audit(1779790101.725:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.8.5340" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574fd1ce59 code=0x7ffc0000
[  892.256698][T19489] bridge0: port 1(bridge_slave_0) entered blocking state
[  892.257104][T19489] bridge0: port 1(bridge_slave_0) entered disabled state
[  892.257485][T19489] bridge_slave_0: entered allmulticast mode
[  892.261259][T19489] bridge_slave_0: entered promiscuous mode
[  892.299337][T19489] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.299760][T19489] bridge0: port 2(bridge_slave_1) entered disabled state
[  892.300151][T19489] bridge_slave_1: entered allmulticast mode
[  892.304052][T19489] bridge_slave_1: entered promiscuous mode
[  892.416072][T19489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  892.423435][T19489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  892.628968][T19489] team0: Port device team_slave_0 added
[  892.669929][T19489] team0: Port device team_slave_1 added
[  892.912329][T19489] batman_adv: batadv0: Adding interface: batadv_slave_0
[  892.912351][T19489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  892.912384][T19489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  892.997899][T19499] syz.9.5317 (19499) used greatest stack depth: 18080 bytes left
[  893.079700][T19489] batman_adv: batadv0: Adding interface: batadv_slave_1
[  893.079718][T19489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  893.079743][T19489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  893.297976][ T5629] Bluetooth: hci6: command tx timeout
[  893.777055][T18773] ocfs2: Unmounting device (7,9) on (node local)
[  894.052256][T19489] hsr_slave_0: entered promiscuous mode
[  894.080362][T19489] hsr_slave_1: entered promiscuous mode
[  894.091405][T19489] debugfs: 'hsr0' already exists in 'hsr'
[  894.091435][T19489] Cannot create hsr debugfs directory
[  894.616107][T19609] loop9: detected capacity change from 0 to 128
[  895.003544][T19609] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  895.376674][ T5629] Bluetooth: hci6: command tx timeout
[  895.488620][T19609] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  895.588134][T19609] ext2 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  896.839377][T18773] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  897.466155][ T5629] Bluetooth: hci6: command tx timeout
[  897.590574][T19694] netlink: 'syz.9.5373': attribute type 8 has an invalid length.
[  897.590605][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5373'.
[  898.407451][T19711] 9p: Bad value for 'rfdno'
[  898.499232][T19694] bond0: entered promiscuous mode
[  898.499256][T19694] bond_slave_0: entered promiscuous mode
[  898.499521][T19694] bond_slave_1: entered promiscuous mode
[  898.560736][T19694] batadv0: entered promiscuous mode
[  898.563015][T19694] team0: entered promiscuous mode
[  898.563037][T19694] team_slave_0: entered promiscuous mode
[  898.563300][T19694] team_slave_1: entered promiscuous mode
[  898.662368][T19694] hsr1: entered promiscuous mode
[  898.663579][T19694] 8021q: adding VLAN 0 to HW filter on device hsr1
[  901.436294][T19786] fuse: fd is not a fuse device
[  901.863538][T19792] loop9: detected capacity change from 0 to 4096
[  902.172479][T19792] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  902.172506][T19792] EXT4-fs (loop9): Test dummy encryption mode enabled
[  902.482492][T19792] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  903.009631][T18773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  904.917997][T19893] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5459'.
[  905.853599][T19922] loop9: detected capacity change from 0 to 128
[  905.904131][T19922] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  905.924745][T19922] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  906.001065][T19922] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 63: comm syz.9.5472: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  906.189043][T19922] EXT4-fs error (device loop9) in do_split:2027: Corrupt filesystem
[  906.769821][T18773] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  907.097962][T19489] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  907.261457][T19489] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  907.275303][T19489] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  907.332907][T19489] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  907.352206][T19955] netlink: 7 bytes leftover after parsing attributes in process `syz.9.5480'.
[  907.442396][T19489] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  907.562989][T19489] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  907.579374][T19489] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  907.772749][T19489] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  909.065659][T19489] 8021q: adding VLAN 0 to HW filter on device bond0
[  909.348116][ T8351] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  909.432732][T19489] 8021q: adding VLAN 0 to HW filter on device team0
[  909.530080][ T8351] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  909.530119][ T8351] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  909.596414][ T8351] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  909.596438][ T8351] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.596453][ T8351] usb 10-1: Product: syz
[  909.596464][ T8351] usb 10-1: Manufacturer: syz
[  909.596474][ T8351] usb 10-1: SerialNumber: syz
[  909.670935][ T8351] usb 10-1: config 0 descriptor??
[  909.677011][T20009] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  909.677119][T20009] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  909.723683][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.723858][ T5950] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.933460][T20009] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  909.934113][T20009] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  910.012832][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.013082][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  910.358850][ T8351] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  910.536223][T20034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5511'.
[  910.985811][ T8351] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL
[  911.082852][ T8351] usb 10-1: USB disconnect, device number 3
[  913.456945][ T5629] Bluetooth: hci3: command 0x0406 tx timeout
[  913.585889][T20109] loop9: detected capacity change from 0 to 1024
[  914.024655][   T61] Bluetooth: hci5: command 0x0406 tx timeout
[  914.319288][T19489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  914.589416][T20134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5541'.
[  914.816032][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5543'.
[  914.816985][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5543'.
[  914.948384][T20119] hfsplus: xattr search failed
[  914.973621][T20119] hfsplus: unable to mark blocks free: error -4
[  914.973644][T20119] hfsplus: can't free extent: start 68, count 1
[  915.019042][T20119] hfsplus: found bad thread record in catalog
[  915.024073][T20119] hfsplus: found bad thread record in catalog
[  915.152222][   T70] hfsplus: found bad thread record in catalog
[  915.903605][T19489] veth0_vlan: entered promiscuous mode
[  916.062494][T19489] veth1_vlan: entered promiscuous mode
[  916.407187][T19489] veth0_macvtap: entered promiscuous mode
[  916.457818][T19489] veth1_macvtap: entered promiscuous mode
[  916.714871][T19489] batman_adv: batadv0: Interface activated: batadv_slave_0
[  916.841984][T19489] batman_adv: batadv0: Interface activated: batadv_slave_1
[  916.935799][ T5950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  916.937164][ T5950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  916.938149][ T5950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  916.938424][ T5950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  919.132333][T20230] loop9: detected capacity change from 0 to 2048
[  919.434211][T20230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  919.478317][T20230] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #12: comm syz.9.5574: corrupted in-inode xattr: e_value size too large
[  919.572736][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  919.572760][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  919.996265][T18773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  920.208226][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  920.208250][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  921.016551][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5585'.
[  921.321028][T20269] loop9: detected capacity change from 0 to 32768
[  921.496716][T20269] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  921.764192][ T5951] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  921.799264][ T5951] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  921.799322][ T5951] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  921.799362][ T5951] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  921.841110][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5585'.
[  922.987245][T18773] ocfs2: Unmounting device (7,9) on (node local)
[  923.800859][   T37] audit: type=1326 audit(1779790133.975:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.9.5589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81026ce59 code=0x7ffc0000
[  923.822944][   T37] audit: type=1326 audit(1779790133.975:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.9.5589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81026ce59 code=0x7ffc0000
[  923.888720][   T37] audit: type=1326 audit(1779790134.035:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.9.5589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81026ce59 code=0x7ffc0000
[  923.888775][   T37] audit: type=1326 audit(1779790134.045:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.9.5589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc81026e6c7 code=0x7ffc0000
[  923.888814][   T37] audit: type=1326 audit(1779790134.055:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.9.5589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81026ce59 code=0x7ffc0000
[  923.888854][   T37] audit: type=1326 audit(1779790134.055:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.9.5589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81026ce59 code=0x7ffc0000
[  923.888892][   T37] audit: type=1326 audit(1779790134.055:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.9.5589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81026ce59 code=0x7ffc0000
[  923.888931][   T37] audit: type=1326 audit(1779790134.055:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.9.5589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81026ce59 code=0x7ffc0000
[  923.892167][   T37] audit: type=1326 audit(1779790134.065:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.9.5589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fc81026ce59 code=0x7ffc0000
[  923.892216][   T37] audit: type=1326 audit(1779790134.065:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.9.5589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81026ce59 code=0x7ffc0000
[  925.608111][   T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  925.791960][   T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  925.791995][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.792017][   T43] usb 5-1: Product: syz
[  925.792033][   T43] usb 5-1: Manufacturer: syz
[  925.792049][   T43] usb 5-1: SerialNumber: syz
[  926.083349][   T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  926.083427][   T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  926.083450][   T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  926.159848][   T43] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  926.192921][   T43] usb 5-1: USB disconnect, device number 4
[  927.640532][T20444] loop9: detected capacity change from 0 to 512
[  927.865204][T20444] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  927.865241][T20444] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  927.865261][T20444] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5640: Corrupt directory, running e2fsck is recommended
[  928.333405][T20444] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  928.333554][T20444] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.5640: corrupted in-inode xattr: e_name out of bounds
[  928.333592][T20444] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  928.337326][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  928.337347][    C1] EXT4-fs (loop9): initial error at time 1779790138: ext4_iget_extra_inode:5128: inode 15
[  928.337378][    C1] EXT4-fs (loop9): last error at time 1779790138: ext4_iget_extra_inode:5128: inode 15
[  928.399097][T20444] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.5640: couldn't read orphan inode 15 (err -117)
[  928.399135][T20444] loop9: lost filesystem error report for type 5 error -117
[  928.415005][T20444] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  928.458980][T20444] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  928.459017][T20444] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  928.459036][T20444] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5640: Corrupt directory, running e2fsck is recommended
[  928.487740][T20444] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  928.487840][T20444] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  928.487892][T20444] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5640: Corrupt directory, running e2fsck is recommended
[  928.580190][T20460] fuse: Bad value for 'fd'
[  928.957524][T20468] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  928.957562][T20468] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  928.957582][T20468] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5640: Corrupt directory, running e2fsck is recommended
[  929.019815][T20463] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  929.020543][T20471] EXT4-fs error (device loop9): ext4_empty_dir:3091: inode #2: block 3: comm syz.9.5640: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  929.056460][T20448] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  929.712374][T18773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.689209][T20528] overlayfs: failed to clone upperpath
[  931.867632][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  931.867751][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  932.504523][ T8351] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  932.670551][ T8351] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  932.670583][ T8351] usb 10-1: config 1 has no interface number 0
[  932.670631][ T8351] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  932.670661][ T8351] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  932.670688][ T8351] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  932.670722][ T8351] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  932.670750][ T8351] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  932.694534][ T8351] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  932.694567][ T8351] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.694589][ T8351] usb 10-1: Product: syz
[  932.694605][ T8351] usb 10-1: Manufacturer: syz
[  932.694621][ T8351] usb 10-1: SerialNumber: syz
[  932.901760][T20574] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  933.111514][T20574] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  933.340912][T20574] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  933.755269][T20574] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  933.888471][T20611] loop4: detected capacity change from 0 to 256
[  933.925044][ T8351] cdc_ncm 10-1:1.1: bind() failure
[  934.012481][ T8351] usb 10-1: USB disconnect, device number 4
[  934.500795][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5714'.
[  935.208350][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5728'.
[  935.364664][T20648] tipc: Failed to remove unknown binding: 66,1,1/0:654656262/654656264
[  935.364700][T20648] tipc: Failed to remove unknown binding: 66,1,1/0:654656262/654656264
[  935.985508][T20664] loop9: detected capacity change from 0 to 256
[  937.508847][T20696] fuse: fd is not a fuse device
[  939.197916][T20737] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5764'.
[  939.400543][T20740] loop4: detected capacity change from 0 to 4096
[  940.274933][T20740] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  941.020859][T20740] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB
[  941.111960][T20766] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB
[  941.149229][T20771] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB
[  941.150132][T20772] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB
[  941.412367][T20791] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5785'.
[  941.445715][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5785'.
[  943.044496][   T37] kauditd_printk_skb: 19 callbacks suppressed
[  943.044520][   T37] audit: type=1800 audit(1779790153.065:104): pid=20820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5796" name="bus" dev="tmpfs" ino=5247 res=0 errno=0
[  943.171141][T20822] loop9: detected capacity change from 0 to 32768
[  943.172397][T20822] btrfs: Deprecated parameter 'usebackuproot'
[  943.172420][T20822] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  943.254949][T20822] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5797 (20822)
[  943.421085][T20822] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  943.421127][T20822] BTRFS info (device loop9): using crc32c checksum algorithm
[  943.951776][T12183] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  943.951959][T20822] BTRFS error (device loop9): failed to load root extent
[  943.952017][T20822] BTRFS warning (device loop9): try to load backup roots slot 1
[  943.956114][ T5951] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  943.957790][T20822] BTRFS warning (device loop9): couldn't read tree root
[  943.957820][T20822] BTRFS warning (device loop9): try to load backup roots slot 2
[  943.958351][ T5951] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  943.958479][T20822] BTRFS warning (device loop9): couldn't read tree root
[  943.958500][T20822] BTRFS warning (device loop9): try to load backup roots slot 3
[  944.050960][T20822] BTRFS info (device loop9): rebuilding free space tree
[  944.825310][T20822] BTRFS info (device loop9): checking UUID tree
[  944.828482][T20822] BTRFS info (device loop9): enabling ssd optimizations
[  944.828511][T20822] BTRFS info (device loop9): turning on async discard
[  944.828530][T20822] BTRFS info (device loop9): enabling free space tree
[  944.828548][T20822] BTRFS info (device loop9): force clearing of disk cache
[  944.828566][T20822] BTRFS info (device loop9): enabling auto defrag
[  944.828583][T20822] BTRFS info (device loop9): trying to use backup root at mount time
[  944.828603][T20822] BTRFS info (device loop9): use zstd compression, level 3
[  945.383281][T20879] macvlan0: entered promiscuous mode
[  945.392696][T20879] macvlan0: entered allmulticast mode
[  945.392719][T20879] veth1_vlan: entered allmulticast mode
[  945.407008][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5815'.
[  945.659746][T20879] veth1_vlan: left allmulticast mode
[  946.219830][T20879] macvlan0 (unregistering): left promiscuous mode
[  946.219885][T20879] macvlan0 (unregistering): left allmulticast mode
[  947.176729][T20911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5826'.
[  947.823822][T20875] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  949.443756][   T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  949.561137][   T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  949.563475][   T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  949.631777][   T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  949.649133][   T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  950.556862][ T1185] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  951.568908][T20997] fuse: fd is not a fuse device
[  951.741053][ T1185] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  951.835606][T21007] netlink: 'syz.2.5869': attribute type 11 has an invalid length.
[  951.861037][ T5623] Bluetooth: hci5: command tx timeout
[  953.285838][ T1185] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  953.559637][T21028] syz.2.5877 (21028) used greatest stack depth: 16824 bytes left
[  953.817600][T21029] syz.2.5877 (21029) used greatest stack depth: 16568 bytes left
[  953.863588][   T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  953.949932][ T5629] Bluetooth: hci5: command tx timeout
[  953.957556][   T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  953.981212][   T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  953.983076][   T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  954.022170][   T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  954.089261][T21045] fuse: fd is not a fuse device
[  955.446162][ T1185] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.986299][T21103] fuse: fd is not a fuse device
[  956.030295][   T61] Bluetooth: hci5: command tx timeout
[  956.414444][   T61] Bluetooth: hci6: command tx timeout
[  958.094885][   T61] Bluetooth: hci5: command tx timeout
[  958.504974][   T61] Bluetooth: hci6: command tx timeout
[  959.243270][T20951] bridge0: port 1(bridge_slave_0) entered blocking state
[  959.256849][T20951] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.257247][T20951] bridge_slave_0: entered allmulticast mode
[  959.278761][T20951] bridge_slave_0: entered promiscuous mode
[  959.561185][T20951] bridge0: port 2(bridge_slave_1) entered blocking state
[  959.561536][T20951] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.561903][T20951] bridge_slave_1: entered allmulticast mode
[  959.589733][T20951] bridge_slave_1: entered promiscuous mode
[  959.855303][T20951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  959.976034][ T1185] bridge_slave_1: left allmulticast mode
[  959.976092][ T1185] bridge_slave_1: left promiscuous mode
[  959.976412][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state
[  960.186986][ T1185] bridge_slave_0: left allmulticast mode
[  960.187034][ T1185] bridge_slave_0: left promiscuous mode
[  960.187303][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state
[  960.575458][   T61] Bluetooth: hci6: command tx timeout
[  961.631516][   T61] Bluetooth: hci3: unknown advertising packet type: 0x23
[  961.985452][   T61] Bluetooth: hci3: unexpected event for opcode 0x1004
[  962.655103][   T61] Bluetooth: hci6: command tx timeout
[  962.660257][ T1185] bond0 (unregistering): left promiscuous mode
[  962.660284][ T1185] bond_slave_0: left promiscuous mode
[  962.660543][ T1185] bond_slave_1: left promiscuous mode
[  962.732822][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  962.805769][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  962.891873][ T1185] bond0 (unregistering): Released all slaves
[  963.146129][T20951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  963.262774][T21042] bridge0: port 1(bridge_slave_0) entered blocking state
[  963.263132][T21042] bridge0: port 1(bridge_slave_0) entered disabled state
[  963.263460][T21042] bridge_slave_0: entered allmulticast mode
[  963.288243][T21042] bridge_slave_0: entered promiscuous mode
[  963.501974][T21042] bridge0: port 2(bridge_slave_1) entered blocking state
[  963.502288][T21042] bridge0: port 2(bridge_slave_1) entered disabled state
[  963.502612][T21042] bridge_slave_1: entered allmulticast mode
[  963.513090][T21042] bridge_slave_1: entered promiscuous mode
[  963.820294][T20951] team0: Port device team_slave_0 added
[  963.870266][T20951] team0: Port device team_slave_1 added
[  963.964976][T21042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  964.059274][T21042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  965.028773][T20951] batman_adv: batadv0: Adding interface: batadv_slave_0
[  965.028791][T20951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  965.028817][T20951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  965.244682][T20951] batman_adv: batadv0: Adding interface: batadv_slave_1
[  965.247823][T20951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  965.247855][T20951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  965.355505][T21042] team0: Port device team_slave_0 added
[  965.390552][T21042] team0: Port device team_slave_1 added
[  966.026496][   T61] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  966.026937][   T61] Bluetooth: hci3: Injecting HCI hardware error event
[  966.071282][ T5623] Bluetooth: hci3: hardware error 0x00
[  966.331501][T21042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  966.331519][T21042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  966.331545][T21042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  966.426022][T21042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  966.426042][T21042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  966.426074][T21042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  966.545792][T20951] hsr_slave_0: entered promiscuous mode
[  966.549236][T20951] hsr_slave_1: entered promiscuous mode
[  966.551869][T20951] debugfs: 'hsr0' already exists in 'hsr'
[  966.551898][T20951] Cannot create hsr debugfs directory
[  966.878955][ T1185] batadv0: left promiscuous mode
[  966.924608][ T1185] team0: left promiscuous mode
[  966.924633][ T1185] team_slave_0: left promiscuous mode
[  966.924890][ T1185] team_slave_1: left promiscuous mode
[  967.207988][ T1185] hsr_slave_0: left promiscuous mode
[  967.246258][ T1185] hsr_slave_1: left promiscuous mode
[  967.247518][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  967.247546][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0
[  967.307847][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  967.307877][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1
[  967.406714][ T1185] veth1_macvtap: left promiscuous mode
[  967.406820][ T1185] veth0_macvtap: left promiscuous mode
[  967.407141][ T1185] veth1_vlan: left promiscuous mode
[  967.407340][ T1185] veth0_vlan: left promiscuous mode
[  968.255218][ T5623] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  969.601551][ T1185] team0 (unregistering): Port device team_slave_1 removed
[  969.667680][T21465] fuse: fd is not a fuse device
[  969.722834][ T1185] team0 (unregistering): Port device team_slave_0 removed
[  970.213996][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1
[  970.347137][T21042] hsr_slave_0: entered promiscuous mode
[  970.351281][T21042] hsr_slave_1: entered promiscuous mode
[  970.361470][T21042] debugfs: 'hsr0' already exists in 'hsr'
[  970.361500][T21042] Cannot create hsr debugfs directory
[  971.284247][T21513] fuse: fd is not a fuse device
[  972.494207][T21548] overlayfs: failed to clone upperpath
[  972.793589][T21556] tipc: Failed to remove unknown binding: 66,0,0/0:672319610/672319611
[  972.794174][T21556] tipc: Failed to remove unknown binding: 66,0,0/0:672319610/672319611
[  973.179798][T21564] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  973.179798][T21564] Please contact the netfilter-devel mailing list or update your nftables rules.
[  974.534155][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2
[  975.939075][  T821] IPVS: starting estimator thread 0...
[  976.058245][T21639] IPVS: using max 9 ests per chain, 21600 per kthread
[  976.152511][T21644] overlayfs: failed to clone upperpath
[  976.291705][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3
[  976.993132][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6138'.
[  977.621950][ T1185] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  978.211780][T21673] vlan2: entered promiscuous mode
[  978.211804][T21673] syz_tun: entered promiscuous mode
[  978.575034][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4
[  979.932525][ T1185] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.868831][ T1185] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.357108][ T1185] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  983.865739][ T1185] bridge_slave_1: left allmulticast mode
[  983.865786][ T1185] bridge_slave_1: left promiscuous mode
[  983.866097][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state
[  984.050620][ T1185] bridge_slave_0: left allmulticast mode
[  984.050661][ T1185] bridge_slave_0: left promiscuous mode
[  984.050958][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state
[  984.701581][T21887] fuse: fd is not a fuse device
[  986.241654][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  986.342850][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  986.432351][ T1185] bond0 (unregistering): Released all slaves
[  989.347457][T22001] netlink: 'syz.2.6249': attribute type 83 has an invalid length.
[  991.024578][T22028] overlayfs: failed to clone upperpath
[  993.307079][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  993.307170][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  994.328386][T22090] fuse: fd is not a fuse device
[  994.889773][ T1185] hsr_slave_0: left promiscuous mode
[  995.129948][ T1185] hsr_slave_1: left promiscuous mode
[  995.133452][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  995.133486][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0
[  995.298002][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  995.298034][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1
[  996.113833][ T1185] veth1_macvtap: left promiscuous mode
[  996.113953][ T1185] veth0_macvtap: left promiscuous mode
[  996.115178][ T1185] veth1_vlan: left promiscuous mode
[  996.115432][ T1185] veth0_vlan: left promiscuous mode
[  997.696946][ T1185] team0 (unregistering): Port device team_slave_1 removed
[  997.804813][ T1185] team0 (unregistering): Port device team_slave_0 removed
[ 1001.534670][T20951] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1001.709853][T20951] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1001.832574][T20951] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1002.276203][T20951] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1002.282043][T20951] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1002.491760][T20951] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1002.628035][T20951] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1002.711440][T20951] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1006.257487][T21042] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1006.882715][T21042] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1006.896252][T21042] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1007.207404][T21042] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1007.218933][T21042] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1007.336426][T21042] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1007.383013][T21042] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1007.587310][T21042] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1007.821021][T20951] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1008.012582][T20951] 8021q: adding VLAN 0 to HW filter on device team0
[ 1008.168983][ T2208] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1008.169166][ T2208] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1009.261376][ T2208] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.271634][ T2208] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1010.055676][T21042] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1010.541664][T21042] 8021q: adding VLAN 0 to HW filter on device team0
[ 1010.687899][   T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1010.771410][   T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1010.801922][   T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1010.847846][   T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1010.848662][   T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1011.072492][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1011.072758][ T5950] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1011.216175][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1011.216338][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1013.070253][ T5623] Bluetooth: hci7: command tx timeout
[ 1015.137389][ T5623] Bluetooth: hci7: command tx timeout
[ 1015.392488][   T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1015.548529][   T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1015.570885][   T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1015.623399][   T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1015.648174][   T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1017.267004][   T61] Bluetooth: hci7: command tx timeout
[ 1017.843016][   T61] Bluetooth: hci5: command tx timeout
[ 1019.676831][   T61] Bluetooth: hci7: command tx timeout
[ 1019.854628][   T61] Bluetooth: hci5: command tx timeout
[ 1021.935316][   T61] Bluetooth: hci5: command tx timeout
[ 1024.023780][   T61] Bluetooth: hci5: command tx timeout
[ 1027.872412][T22403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1027.872744][T22403] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1027.873118][T22403] bridge_slave_0: entered allmulticast mode
[ 1027.878227][T22403] bridge_slave_0: entered promiscuous mode
[ 1028.325337][T22403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1028.325735][T22403] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1028.326124][T22403] bridge_slave_1: entered allmulticast mode
[ 1028.383475][T22403] bridge_slave_1: entered promiscuous mode
[ 1029.121691][T22403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1029.202786][T22403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1029.808834][ T1032] bridge_slave_1: left allmulticast mode
[ 1029.808873][ T1032] bridge_slave_1: left promiscuous mode
[ 1029.809192][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1029.979325][ T1032] bridge_slave_0: left allmulticast mode
[ 1029.979362][ T1032] bridge_slave_0: left promiscuous mode
[ 1029.979627][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1033.491824][   T38] INFO: task syz.7.5162:19143 blocked for more than 144 seconds.
[ 1033.491856][   T38]       Tainted: G             L      syzkaller #0
[ 1033.491870][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1033.491881][   T38] task:syz.7.5162      state:D stack:28032 pid:19143 tgid:19139 ppid:14874  task_flags:0x400040 flags:0x00080002
[ 1033.491967][   T38] Call Trace:
[ 1033.491980][   T38]  <TASK>
[ 1033.491994][   T38]  __schedule+0x16f9/0x5500
[ 1033.492051][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1033.492091][   T38]  ? __pfx___schedule+0x10/0x10
[ 1033.492137][   T38]  ? schedule+0x90/0x360
[ 1033.492175][   T38]  schedule+0x164/0x360
[ 1033.492211][   T38]  cgroup_lock_and_drain_offline+0x516/0x650
[ 1033.492253][   T38]  ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10
[ 1033.492281][   T38]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1033.492324][   T38]  cgroup_kn_lock_live+0x120/0x230
[ 1033.492350][   T38]  cgroup_subtree_control_write+0x4b3/0x10a0
[ 1033.492392][   T38]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[ 1033.492419][   T38]  ? kernfs_root+0x1c/0x230
[ 1033.492445][   T38]  ? kernfs_root+0x1c/0x230
[ 1033.492474][   T38]  ? kernfs_root+0x1ea/0x230
[ 1033.492504][   T38]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[ 1033.492530][   T38]  cgroup_file_write+0x331/0x8f0
[ 1033.492559][   T38]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1033.492601][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1033.492626][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1033.492665][   T38]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1033.492682][   T38]  kernfs_fop_write_iter+0x3b0/0x540
[ 1033.492714][   T38]  vfs_write+0x629/0xba0
[ 1033.492745][   T38]  ? __pfx_vfs_write+0x10/0x10
[ 1033.492774][   T38]  ? mutex_lock_nested+0x168/0x1d0
[ 1033.492796][   T38]  ? __fget_files+0x2a/0x420
[ 1033.492822][   T38]  ksys_write+0x156/0x270
[ 1033.492846][   T38]  ? __pfx_ksys_write+0x10/0x10
[ 1033.492868][   T38]  ? __pfx_kcov_ioctl+0x10/0x10
[ 1033.492894][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1033.492914][   T38]  do_syscall_64+0x15f/0x560
[ 1033.492931][   T38]  ? trace_irq_disable+0x3b/0x140
[ 1033.492951][   T38]  ? clear_bhb_loop+0x40/0x90
[ 1033.492973][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1033.492990][   T38] RIP: 0033:0x7f156358ce59
[ 1033.493007][   T38] RSP: 002b:00007f15617bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1033.493025][   T38] RAX: ffffffffffffffda RBX: 00007f1563806090 RCX: 00007f156358ce59
[ 1033.493055][   T38] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005
[ 1033.493067][   T38] RBP: 00007f1563622d6f R08: 0000000000000000 R09: 0000000000000000
[ 1033.496492][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1033.496515][   T38] R13: 00007f1563806128 R14: 00007f1563806090 R15: 00007ffeaa4ad358
[ 1033.496555][   T38]  </TASK>
[ 1033.496603][   T38] 
[ 1033.496603][   T38] Showing all locks held in the system:
[ 1033.496616][   T38] 4 locks held by rcuc/1/29:
[ 1033.496629][   T38]  #0: ffffffff8de61600 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1033.496731][   T38]  #1: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1033.496798][   T38]  #2: ffffffff8dfcace0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x205/0x1470
[ 1033.496858][   T38]  #3: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[ 1033.496923][   T38] 8 locks held by kworker/1:0/32:
[ 1033.496936][   T38]  #0: ffff88813fe4a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1033.497001][   T38]  #1: ffffc90000a6fc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1033.497068][   T38]  #2: ffffffff8de61600 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1033.497133][   T38]  #3: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 1033.497199][   T38]  #4: ffffffff8f4ade38 (&tbl->lock){+...}-{3:3}, at: neigh_periodic_work+0xc64/0xe90
[ 1033.497264][   T38]  #5: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1033.497326][   T38]  #6: ffff88803c814740 (&dir->lock#2){+.+.}-{3:3}, at: ref_tracker_free+0x13d/0x820
[ 1033.497393][   T38]  #7: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1033.497453][   T38] 1 lock held by khungtaskd/38:
[ 1033.497466][   T38]  #0: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1033.497532][   T38] 3 locks held by kworker/1:1/43:
[ 1033.497545][   T38]  #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1033.497610][   T38]  #1: ffffc90000b57c40 (rx_mode_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1033.497683][   T38]  #2: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x1c/0x460
[ 1033.497748][   T38] 3 locks held by kworker/1:2/869:
[ 1033.497760][   T38]  #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1033.497823][   T38]  #1: ffffc90005a37c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1033.497888][   T38]  #2: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[ 1033.497948][   T38] 4 locks held by kworker/u8:9/1032:
[ 1033.497961][   T38]  #0: ffff88801b68e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1033.498052][   T38]  #1: ffffc90005f4fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1033.498117][   T38]  #2: ffffffff8f370540 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1033.498180][   T38]  #3: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940
[ 1033.498260][   T38] 3 locks held by kworker/u8:15/3398:
[ 1033.498273][   T38]  #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1033.498337][   T38]  #1: ffffc9000f927c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1033.498402][   T38]  #2: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1033.498459][   T38] 2 locks held by dhcpcd/5277:
[ 1033.498471][   T38]  #0: ffff88806534e928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[ 1033.498525][   T38]  #1: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[ 1033.498588][   T38] 2 locks held by getty/5370:
[ 1033.498601][   T38]  #0: ffff8880364c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1033.498673][   T38]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[ 1033.498732][   T38] 9 locks held by syz-executor/5617:
[ 1033.498744][   T38]  #0: ffffffff8e09d1f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480
[ 1033.498794][   T38]  #1: ffff8880367e11b0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x184/0x1d70
[ 1033.498850][   T38]  #2: ffff88803ae21f30 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x272/0x1d70
[ 1033.498913][   T38]  #3: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[ 1033.498967][   T38]  #4: ffff88803953f058 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[ 1033.499024][   T38]  #5: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 1033.499083][   T38]  #6: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[ 1033.499138][   T38]  #7: ffff88805b2c6dd8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x5ae/0x5550
[ 1033.499205][   T38]  #8: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0
[ 1033.499273][   T38] 1 lock held by syz-executor/17245:
[ 1033.499285][   T38]  #0: ffff888036aae480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1033.499348][   T38] 3 locks held by kworker/1:3/17810:
[ 1033.499362][   T38]  #0: ffff88813fe4a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[ 1033.499441][   T38]  #1: ffffc90005e8fc40 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[ 1033.499501][   T38]  #2: ffffffff8dfcabc0 (rcu_read_lock){....}-{1:3}, at: wg_ratelimiter_gc_entries+0x5d/0x480
[ 1033.499570][   T38] 3 locks held by syz.7.5162/19143:
[ 1033.499583][   T38]  #0: ffff88803f953f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[ 1033.499645][   T38]  #1: ffff88803534a480 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1033.499709][   T38]  #2: ffff88803a8cf878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1033.499777][   T38] 1 lock held by syz-executor/22403:
[ 1033.499790][   T38]  #0: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[ 1033.499861][   T38] 2 locks held by syz-executor/22468:
[ 1033.499873][   T38]  #0: ffffffff8f8c0938 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1033.499931][   T38]  #1: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[ 1033.499997][   T38] 2 locks held by syz.2.6481/22717:
[ 1033.500010][   T38]  #0: ffffffff8f3f0600 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1033.500068][   T38]  #1: ffffffff8f37fa78 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8d0
[ 1033.500129][   T38] 
[ 1033.500134][   T38] =============================================
[ 1033.500134][   T38] 
[ 1033.500158][   T38] NMI backtrace for cpu 0
[ 1033.500183][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1033.500212][   T38] Tainted: [L]=SOFTLOCKUP
[ 1033.500220][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1033.500234][   T38] Call Trace:
[ 1033.500243][   T38]  <TASK>
[ 1033.500253][   T38]  dump_stack_lvl+0xe8/0x150
[ 1033.500283][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1033.500314][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1033.500345][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 1033.500381][   T38]  sys_info+0x135/0x170
[ 1033.500407][   T38]  watchdog+0xfd3/0x1030
[ 1033.500441][   T38]  ? watchdog+0x1c9/0x1030
[ 1033.500473][   T38]  kthread+0x388/0x470
[ 1033.500499][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1033.500521][   T38]  ? __pfx_kthread+0x10/0x10
[ 1033.500550][   T38]  ret_from_fork+0x514/0xb70
[ 1033.500582][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1033.500611][   T38]  ? __switch_to+0xc79/0x1410
[ 1033.500645][   T38]  ? __pfx_kthread+0x10/0x10
[ 1033.500671][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1033.500720][   T38]  </TASK>
[ 1033.500729][   T38] Sending NMI from CPU 0 to CPUs 1:
[ 1033.500758][    C1] NMI backtrace for cpu 1
[ 1033.500776][    C1] CPU: 1 UID: 0 PID: 17810 Comm: kworker/1:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1033.500801][    C1] Tainted: [L]=SOFTLOCKUP
[ 1033.500814][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1033.500826][    C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries
[ 1033.500857][    C1] RIP: 0010:lock_is_held_type+0xb7/0x150
[ 1033.500877][    C1] Code: 49 ff c7 49 63 85 f8 0b 00 00 48 83 c3 28 49 39 c7 7c d8 eb 11 48 c7 c7 10 84 e9 8d 4c 89 fe e8 ef ce bd f9 eb cb 31 db eb 1c <83> fd ff 74 12 31 c0 f6 43 22 03 0f 95 c0 31 db 39 c5 0f 94 c3 eb
[ 1033.500900][    C1] RSP: 0018:ffffc90005e8f788 EFLAGS: 00000002
[ 1033.500915][    C1] RAX: 0000000000000001 RBX: ffff88804d622b78 RCX: 0000000080000001
[ 1033.500928][    C1] RDX: 0000000000000001 RSI: ffffffff8eabf6d8 RDI: ffff88804d622b78
[ 1033.500941][    C1] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004
[ 1033.500953][    C1] R10: dffffc0000000000 R11: fffff52000bd1f30 R12: 0000000000000046
[ 1033.500966][    C1] R13: ffff88804d621f00 R14: ffffffff8eabf6d8 R15: 0000000000000003
[ 1033.500979][    C1] FS:  0000000000000000(0000) GS:ffff888125fec000(0000) knlGS:0000000000000000
[ 1033.500994][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1033.501007][    C1] CR2: 00007fb8b3892b00 CR3: 0000000051550000 CR4: 00000000003526f0
[ 1033.501023][    C1] Call Trace:
[ 1033.501030][    C1]  <TASK>
[ 1033.501038][    C1]  rtlock_slowlock_locked+0xde/0x3c80
[ 1033.501067][    C1]  ? __lock_acquire+0x6b5/0x2d10
[ 1033.501092][    C1]  ? __lock_acquire+0x6b5/0x2d10
[ 1033.501124][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1033.501143][    C1]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[ 1033.501169][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1033.501189][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1033.501211][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1033.501239][    C1]  rt_spin_lock+0x165/0x400
[ 1033.501265][    C1]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1033.501290][    C1]  ? rt_spin_unlock+0x160/0x200
[ 1033.501315][    C1]  wg_ratelimiter_gc_entries+0x5d/0x480
[ 1033.501346][    C1]  ? process_one_work+0x8be/0x1630
[ 1033.501373][    C1]  process_one_work+0x98b/0x1630
[ 1033.501410][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 1033.501435][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1033.501463][    C1]  worker_thread+0xb49/0x1140
[ 1033.501484][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1033.501509][    C1]  kthread+0x388/0x470
[ 1033.501530][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1033.501546][    C1]  ? __pfx_kthread+0x10/0x10
[ 1033.501567][    C1]  ret_from_fork+0x514/0xb70
[ 1033.501591][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1033.501614][    C1]  ? __switch_to+0xc79/0x1410
[ 1033.501633][    C1]  ? __pfx_kthread+0x10/0x10
[ 1033.501656][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1033.501690][    C1]  </TASK>
[ 1033.501762][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1033.501785][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1033.501814][   T38] Tainted: [L]=SOFTLOCKUP
[ 1033.501823][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1033.501836][   T38] Call Trace:
[ 1033.501845][   T38]  <TASK>
[ 1033.501853][   T38]  vpanic+0x56c/0xa60
[ 1033.501890][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1033.501932][   T38]  panic+0xc5/0xd0
[ 1033.501963][   T38]  ? __pfx_panic+0x10/0x10
[ 1033.501991][   T38]  ? __x2apic_send_IPI_mask+0x158/0x190
[ 1033.502020][   T38]  ? wq_watchdog_touch+0xf9/0x160
[ 1033.502052][   T38]  ? nmi_trigger_cpumask_backtrace+0x247/0x380
[ 1033.502088][   T38]  watchdog+0x102c/0x1030
[ 1033.502122][   T38]  ? watchdog+0x1c9/0x1030
[ 1033.502153][   T38]  kthread+0x388/0x470
[ 1033.502181][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1033.502205][   T38]  ? __pfx_kthread+0x10/0x10
[ 1033.502233][   T38]  ret_from_fork+0x514/0xb70
[ 1033.502265][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1033.502294][   T38]  ? __switch_to+0xc79/0x1410
[ 1033.502322][   T38]  ? __pfx_kthread+0x10/0x10
[ 1033.502350][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1033.502400][   T38]  </TASK>
[ 1033.503021][   T38] Kernel Offset: disabled