last executing test programs:

4m26.17088832s ago: executing program 0 (id=363):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4ef, &(0x7f0000000b00)="$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")
r0 = syz_open_procfs(0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x1, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844)
r1 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000000000)={[0xffffffffffffffff]})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
syz_open_dev$MSR(&(0x7f0000000180), 0x8, 0x0)
sendmsg$inet6(r5, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1e, 0x80000, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x33}}}], 0x18}, 0xc4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080010000000000005001600fe000000040012"], 0x48}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0)
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203)

4m24.480588609s ago: executing program 0 (id=365):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001300050027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001060400140003007665746830000000000000000000030014001680100001800c0009"], 0x50}}, 0x4048000)

4m23.915165687s ago: executing program 0 (id=367):
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x4)
syz_usb_connect$cdc_ncm(0x3, 0x9c, &(0x7f00000008c0)={{0x12, 0x1, 0x210, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x18, 0x90, 0xa8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'U'}, {0x5, 0x24, 0x0, 0xb7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x5}, {0x6, 0x24, 0x1a, 0xfffc, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x76, 0x8, 0x1, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xa, 0xa}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x9, 0x101}, @obex={0xfffffffffffffdb8, 0x24, 0x15, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x8, 0x40, 0x8, 0x7, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x0, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x40, 0x9d, 0x5b}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xa, 0xa9, 0x2}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xe, 0x2, 0x8, 0x8, 0x3e}, 0x2a, &(0x7f00000001c0)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x6b, 0x1, 0x1000}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x9, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "5a3f2c7563170f6e8381f6133d5e4438"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40a}}, {0x7e, &(0x7f0000000280)=@string={0x7e, 0x3, "0e13090cce649b3e05ef6655b617f3d9d36f39e12110947d7cd9b671b5fb83884bc10638a7fbdc85655e38394a21a87e494de5748d3aee66475611707224506d481c65f9dfd111519149a147bd0ad12b629a841ffdfc650329adf026009164166ea43586772aa5ea23b86f6b2b3e1fff850ddfda7242c11d7985f7d0"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x457}}]})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nospace_cache}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) (async)
r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$unlink(0x9, r1, r2)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1)

4m20.684755206s ago: executing program 0 (id=372):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x29, 0x8, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0)
ppoll(&(0x7f0000000500)=[{r1, 0x40}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = getpid()
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x0, 0x0, 0x15, 0x0, "49c866f2599164ec9f2adb18cf6053cd3fbde4afbad1df6c40998f704f9bde91cff97877f391f2703651536d14e4d3e8576c1c1590bbe69e43443a9374fba52f177594ac705f39b66cb39576521ad84c"}, 0xd8)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newae={0x5c, 0x1e, 0xff01f7747ae9d38d, 0x70bd2d, 0x25dfdbfc, {{@in=@broadcast, 0x4d4, 0x2, 0x33}, @in6=@loopback, 0xffffffff, 0x3504}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2b, 0x70bd2a, 0x70bd2c, 0x40}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004850}, 0x40054)
landlock_restrict_self(0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x4}, 0x8)
io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0x1000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m19.320029552s ago: executing program 0 (id=374):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xffffffffffffffff}}, './file0\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @jmp={0x5, 0x1, 0xb, 0x4, 0xb, 0xffffffffffffff9e, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf87}, 0x94)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040))

4m15.349745066s ago: executing program 0 (id=382):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
kexec_load(0x0, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0)
close(0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0x14cc0, 0x40000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x400)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pwrite64(r2, 0x0, 0x0, 0x8000)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000325bd7000fcdbdf25090000000800030004000000040001800800030003000000080003000300000004000180"], 0x34}, 0x1, 0x0, 0x0, 0x488c8}, 0x2000c000)

2m44.287527486s ago: executing program 4 (id=528):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x114, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x2, 0x1, 0xa, 0x20, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x7, 0x5, 0xc}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x69, 0x1, 0x1, 0x1000, 0xd7}, @mdlm_detail={0x59, 0x24, 0x13, 0xff, "a8bb7e88a48a1913e3df789c5673354c6c1b7fefcd3262a7f7860b9116f4e0e826d46105d8a656a05b747bce8724ef7392befdd28dd74b69e954643a8d99546b76937d642647fde8260b8a80dfe8063df1f420d4d8"}, @mdlm_detail={0x3c, 0x24, 0x13, 0x1, "2a5f39c2d634a4f9107374d2b4e91039bbad0a6a3c9583ede49593344fa7f365ed0507318e34d0245d740bc8bff7f3f81064c3ea8f0bb020"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x24, 0x9, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xfb, 0x7d, 0x7}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x10, 0x2, 0x5, 0xff, 0x9}, 0x66, &(0x7f0000000680)={0x5, 0xf, 0x66, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x30, 0x5, 0x3, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xc7, "f1b4c189a3bfeb8b0ea24654e0c728b6"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x1, 0x6d}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x72, 0x6, 0x3, 0xee00, 0xa47b, [0xff0000, 0xffc0c0, 0xff30, 0xff0000, 0xff00cf, 0xff00c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2d7785903f12c00ed76e2985eb32fde6"}]}, 0x8, [{0x93, &(0x7f0000000700)=@string={0x93, 0x3, "c7445248732e7692ee65dd4a306c1644c487509cf71072f40147beedef39220e7cc543c53eb7ff6237cf64b506de7664adc200c7b75ec54e467f61ceb813e433d507923eae89b20e1efddd6e9d42a51da3be4eb4d4579b108baa4b445128dd5712577ea7aaf7b293468c2beadffadb0b96a80b68965b23c35fb4f067a7d81a44aa56124cbba3d0675d626d609826d2f331"}}, {0x5b, &(0x7f00000007c0)=@string={0x5b, 0x3, "2975a4e1cce566e026e1ca6e4f40c7c771c70d559e2d81a4d44198e8cf88341494c59b2c40326cda1bc88faf0c6b81e439c67e1a0935be21080672ce340f06303d059dda70469eaefbc5ccf388ef1269557c3653e1a192201a"}}, {0xa2, &(0x7f0000000880)=@string={0xa2, 0x3, "c1fe6e99e36ec93927a5f3f802b86eb9fd012cf2315fde6486c8a5b2facb771f09649c2f863632ddd032d1fe4221dbe3b891ce469f3954a1d7ad3f6a8bfefea0f0645f8e8632f364a46a56bff1b818e90b12136f32fd23fc11d5be169d87319313df87cc90c2bf80be1262af2be5e4c222f894a1ed7fc920348c144b4031713d74493f21dcc8e39181dd2dfbf0c009acfcc02d6c44d5697b49069452f74932e2"}}, {0xcd, &(0x7f0000000940)=@string={0xcd, 0x3, "2639db7b7531eb29550fdc7e26eb09f1662449c2f80a18968bf7f3ffb252806954aa7ff5a95a04b0aa0bf55f8b58c8c636a1b6a5b9fe6649c577ce54c26d3a2e050dda6856de645068719cc4e91621fff4690503962404da7f20fbf563e32db63d8d888dadae79b6044471b494a57a053c41313a9324a32d9561f6c8644685263379065c19c6a0311fc16ea061f60c633751f3f4006b90378a40e04a2ec0f1990dfb505ecafd6f0ef1cc04fe2584e3c8b4a979f5e47d16cec927416ef7441156046fbd69019c855aefd0a5"}}, {0xc6, &(0x7f0000000a40)=@string={0xc6, 0x3, "6e0df0edd45626367c82dbd295ed96e9ac6db95a569b911184f6aff573ab76f1417de96ff742dabef188c10bc20f73eca5a4218f2e396a598987e16b19979b794e95d61d2192d4aa7709e433193677b33caa7571a0501c6f1432a1ebb246990c943e8979d1b5f0acbb13a250834eb87cb69d488fbffea9bc5c113271252aca9c9b65a6003a49103c68e539f4ee5fbb02ccd9d0e52a78ee722ac0e8c3672af083556a0e2c62ee4661858d7885485a41a6456eae0b555cb4533901e3db022bc4a030683728"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x43f}}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRESOCT], 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000200))
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000004c0)={@mcast1, 0x68})
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14)
bind(r1, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f00000000c0)="4b0003000000", 0x6)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424750a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

2m39.897853014s ago: executing program 4 (id=537):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}, @RTA_OIF={0x8, 0x4, r3}]}, 0x38}, 0x1, 0x11}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000380)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x48d4}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x377})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r7, 0xfffffffc)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fadbdf2527000000180001801400020065727370616e30"], 0x2c}}, 0x4)

2m38.355289166s ago: executing program 4 (id=540):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xa, [{0xf, 0x2}, {0x11, 0x5}, {0xc, 0x5}]}, @union={0x6, 0x0, 0x0, 0x5, 0x0, 0xfff}]}, {0x0, [0x2e, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000f00)=""/4075, 0x4f, 0xfeb, 0xb, 0x5}, 0x28)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x3, 0x12, r0, 0x0)

2m38.015332209s ago: executing program 4 (id=541):
syz_usb_connect(0x5, 0x3b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbe, 0x50, 0xe6, 0x20, 0x12d1, 0xcedf, 0xfc28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x5, 0x9, 0x50, 0x4, "", [{{0x9, 0x4, 0x7, 0x3c, 0x0, 0xff, 0x1, 0x69, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xe, 0x6, 0x1}}]}}]}}]}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x9})
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x3}) (async)
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x3})
sendmmsg$alg(r0, &(0x7f0000001e00)=[{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000d40)="0d6d451929d43bd6ddb01f857c3147084d61da67ed9875d3b98f0af6a3868df1006fe9a1b2f5dba0b5d096ccc3c6cdade01ff71a62e9d387b88b562e4711f1a6eebeb273f0cc23c07a91a15c843105ba256865ac443d1603c9b449559b9081ea92a7ee71bdc25f2799be2b53c4228700a1", 0x71}, {&(0x7f0000000dc0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40000}], 0x1, 0x40000c6) (async)
sendmmsg$alg(r0, &(0x7f0000001e00)=[{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000d40)="0d6d451929d43bd6ddb01f857c3147084d61da67ed9875d3b98f0af6a3868df1006fe9a1b2f5dba0b5d096ccc3c6cdade01ff71a62e9d387b88b562e4711f1a6eebeb273f0cc23c07a91a15c843105ba256865ac443d1603c9b449559b9081ea92a7ee71bdc25f2799be2b53c4228700a1", 0x71}, {&(0x7f0000000dc0)="954bdb59603aeafb1fec534f7e6527e88960fca195623d6f92d95940d3c9d562132edd5de726c4043fc320a0950762f4b932c4dd45917cb5f13321c72d705d51ad0d534a4664a7df011169f3d8dca2c64187beb192e2d945f31d7ea67024c3661bb4bef893d1aa1f95c31415bd2260e0be080a9885549dda01340bbd2328c52cf5b4dc30e9f99de85c80daa3f37fcbdeae0420921643b4e8bda755f165ed76b8172d8d171c666dcce09b161a4f6980defa443e1958338261e712815e5457b14f5d41629f593cdea6bbec34ad0721a74d79e744643e08096dcbb9b03f1da8cc6f29779e1179b51b3b7d0f3dab5fb1014ec9b454071237db2246ce33cd1dafc052da5ce83a43372455e793d5d56a7b868192dd809b46b51dc87ada339c99e2e502f5941f06ff0c712d7674b355c9c5eadccf40e51215482eebeaf2e62114a8785d6bf3e7b941d8284b6e2b98a1d79c64a2911cc156ebcf5f1128ac16d68345192bc0d8a0f7ec6ab3c986ca4562f4b6c0b2ac26168bef5ac7c0cceaea884061dda93a376d8d65bd1d77e9f92abcc63318d04e4e67e72dc37f7245f9ceb9c54d67318348dffe7c9aa95d49862ac2db3dbef76dbc55c6e6390f4b7193dd833aad88520c5c63715af5609853b5df36732b5b6b1653f6b8fa321aae2aa95a9c9aa2f8b8faf0a7d02ca03d63705a2bbdad62c1f644644e7bc1993b986dc5188a0d3a18eee73e870d961c2d7fa9d4c0343d06507248b6fd9d0ada04e81cb441b6f56195e96a656539279de364d96c81225a4c56d6cf18549a98a068f55f7b2ed8be2e712e19e644aec65e9dca7b6cdd79c903193520cb1b80776c2cec6df62b3a20cd0bfaee6d752191d6ca7ffe7bfc953baa2ea28bbc7a35592ad946a2df0a192cc918d4e18984feb1b35e0784ec8b8090a35597dcfe15b31fe1730eab0ac0582c2485c5dda199ae4bd4a28083afeda7956714a9b942fa71e056e09c7ac72c9ae69ea3d9ab2cb5e9989059a40e86a89ba69a8d465b16f4e9c6f8cf61cd5f73035e3957501ff383e0b1981a772f054c4d1b6580a6bc1b82bd14e088fb0ac54c91ab241bd823d27c6be22f661b3483df68f48d1813332557df41187e15922a32148bef56aeb3aa5557d9e980bfd4506148d79daf0ed0afcaa441310aae1e8aab9eca27bb7f4e6d29ce50b3dce6059d268e8abf7d3ae36ded56e5a281e499ae3afa288955f49208055fb89cc1148043cc95b5a74e9ed86e09bcd6ae9e455a3217957721ad2337abc37942cb584fba5634d4de17a6e815c69c9946e09e49f96a0e9f280900c18bc3b7568c472de23a43ab97f591c717e29ef8847dabe6ca2d998570ecaf92d4815a39e6dc941f6667c02a2150a7515000c2b8a4436051258ff90ee9fd8344c77ec9a45aa7e36fb85bf81b3937760aa69f87dab1a3300a5f70fdbe129b839703ef9c19ff58bd3ed181348828ce6a1c8994799962a4f17ad8af12061a157ce0256f9797b1d5a1b1d2cb7161a640e75a6d01aa625089f498aa682eedfceacf56aaff787ff6447e947a09494859018b1dffe49de9eb678b4c49ab1e2834c8a2ae65786a7b847313222ab859e3780178fc9eaa8fa51039bc84dec8c2f9c2f74a90b9033ea73059ba1277b1db5472e1cdf87c3b8b455b19abc1b7cbe92ef2034f45c0ce597463f8e4ab19b6d7e4d8a2423f208ca6442ec3b8339bd8667ecc64008cb68458c0895a482be445292ec11b1a511e91fb909311b6dbc24672d957ea697c32d984c16a57a267d5121a799f8c531b20c6947cc33c1af21bc31b51485ebc3ce7473836258546b18d0f5ea55379af2c5045e90efa553959b899aece6ec77244c8b64a6231f3fd96885e57adacb4a2c33b3c64805da9a5037f313e75bfe098377a60848a13e8a36bc7b0b57c09616b7513c5823593d7cd7a9f4056daf37d1c6341d16008cb1bcda780cc8b861cc2e1b5e18ad04abd9cf229b455eb6e6e675726af4800e67ffab97c592e2a0ad15fa7596168cee2e862636830025d7a1e999d4d46ea6559950ef691c655f277b8b2808a292dbcb05a0579c844c8f0d10c62f836d2299206fdca85ccb4dea4fc3373b39e64248d149637f98e85175dbea6e3c83d88c95474d25e690595187b46b86e905291f9761e084bf6eb614021b9a2a88c14a6e47dea090b6afc2c5e6eb346d925d31e8640bdb4d16c11de2795ce91030c84aeaa7fd0ea8f759fc179c4d01f1618c2448a6eeea691442225826d41ab30f96a4105e0be2740195e5e784d77ac36ea3ed6023a352e44f303dcc56fc7188cf86f64afdf818d50159ffcd3c87ea95d99a5f8bb6ac2acbc95a55692d3a59c98a206247822821f5f4ec4f426b692ae56c2c52759ab5070739264e5881c26f5a0b55158d9e7c42767f6de727a4ab67baab69d31e3d351c1215a403de47d263f5b60e50294a940236e28a3819eab69d3845e96e161cea33fba4f639576d866f37e036ca2a2ccbe6d504a7140616bcfa074db4579140faf8e7e1f21d17e476d4907b45020ea6ed916ecf60fa13824f95ce4e8ada14d29acaec13f05d593dd3a184766db587646ca18fcfc5156075656e9ac552a15aa3b12e1a06a38e633531bba88924b9cc84cd84648f919353ffb0ccdfe4b1a30d581a4fb423334217ac995d66873d2860f3860bb74f580133a6ac241c8b949b54ebddad7c6aace39aaa237451ca2615b421e9cb6aa521e04ae40805a3e5bde4288f97f2bc562cef6329b7672468d3c25ace4bf3913df59149a0425886016c817db0f7b9bf4e1951ec8543e34980df86e92ec9e6c8ec8da0dc86b99e821104170d3de67dd1598dcf96d0c1ad02aab0edfe1484d9df936a891c081a9c69bd764d57085b520d0b97a739ddb8a693ec2222fdf6ea5be8510e676c3f6001fca92dd7edd9ac9df8fb43bd8920a305c551bbad634532677338ef3e37a8f10aecbe6cb00e68bdd02118b8168b4c6fc3ab2eadef4691f0d714ba60051617a0b894bdb234513e654243c345a5956f99db55a12f2ffaec08aaf653f6093902d0f6efb3c9158c6cdec312785d4a8a809fcc64d4c68f4341ea8694d666b47fd7bc24d5edee6ecca31c42efbcd78a071efebb053a99de4234720c04523c14643aa48ac5d85643e60e212042c17bb1e83611db181d07b78f75c9dcbb194dd69e747fd9cce3d05b3d955985b02341f6de06d07328b2735ba9255fec62cda8c03afffbb7092f0d3688b32b8c1305d1b30ade6764a7bed303ebd35ac1c16af2bf4bd54573420dbf30602302fc618c54dcbf4ea365b80b09571281dbe37073335da83fbddb5baebfd1ca5d793e1c796246abce0828eb138886ecda4f82e4c82cbe2d383677115f763f20319ae8c906d787f99cfc4133e9cfb0eb3ecfd401a4cd5927e5056829d08b440285b6f4cee6b14f370cb4557d5d795089f90e5e92e78dcdcfefff3a81b7861122f470049d4854d9e9b19354be0a97baf38a2780c271402b89c7dbdeafc6eda7365c84362f37a443b10d880b0202f0b7477c19e87f9ad2af68946a3e56bca85c936d13464767fcd880b1f8c193e309948d1760b43ae2039cdad61c7468e6a6abdb31281c328fad1bf9e267202fecf15804c4a6bcca08a72b635d36fd76144040b4d38d1a0feaccdf449fb89ef42184a86f2a19cbe8ef3d215378dd3576cc12068508ffbd4d0e42ca3e79ecb0760c9cbdf65f3758c177028e4ec65a61e66160ef9f382c5c9e8c7f569be5eeca53337264260a8d7339c77e33b7599ee8ea51b1bd8a97ccc8cf45624679caeacab9d58dee8934fd3a2dbe24f8e828179113da0d87b937d92f674afe190a2fb39a592f96ccb313db84bf0d4d7ae18a6a3812603ee8e968cc6b541826e59b2393317fcef6d8834f078a8a1530ed46820477cedb288d14164f3c60cce55d2ff850cf032d3bfbae8de3a81cae1c7cb03ce6debf8241c637a96a4061026c1aabd99111bf02c4e8e05d4d2c6e6e941156ae6d3cf87630d76625f4e97e45ba9f6185384f0a8dcbdfb68ea048235dc15b53b4797572d48cb24db8bfc9ff3ad61b3833ec05e7fa17cb3bd4e5627ae5de7dca2a20e5ef7343156111db4a5e933a1d6cb62b0220b9654cb2f9f9fdc7813bbb3bd15930d81273e29738f6ef0f9e942d725abf56f3e3a8d43f667b4d3bf2a30a8627a6367979b7484c027309a39004d0b6f050f2a4ac60ea5208cabde794092b4140a6c4f9cf6eb6fe5dfc949b86853707ddcb9e11d2112a27b93cde1011615eda908bcd11fb12f96e4a33d6714b6467f9fad771d5482ba2862274d213ee9aa53d2f22e276993e5ee02e8280e07188062e439194d9474d35506f2a3cc1b12df5d287a830e89caa0b4564837c5412b2451edeb97f3ff92d7853800e648450e52323dbb38f0bb2da6f3cd9d4e7a01026421d5c861d687c6909d9ae7ceabbf2c7b0e144b854ec9ea5f2fc53e127e22801c860215a50c2d0db47da17cea552f5cead7a93a3a116710a2a20400409d88460805af4704d525cbad30ca104efde4ccff7965f80362305fa3ddd3f23c84b8eccd17462e81c430627ad97735b3480b62e439711623764058bf0228e65593a56fa9501301b09f87c3394c17bc1265c19ca4c9096c6b5ffc38fabb1f471fc138257eb29b56b45a29fe99c3e5b74619496345c80018bfb4bd2dfe4ea5f51ec2d11f7a4d4e0b98c120d55f172cba3318e3dec6990887ba3f5183026ae2cda7e44f8a6b91965b9280fdf652d4a5cef1d9194f008d72356885a5876419e92bc6f3169ae151b74aac6ac37ae88ed2071e195bc8ce68ef42b35afaa42a0b333feeded180d638a72666757b187864049705f9686395876dd5e52c703b8417dcf014cfb1d852022a2e2be2ee250c0b8c0882757a9efb434c479e311df1ef89bbc6af41ab457f82b825578303ad13612c2919eae1a0c870ba548d79f862b98bf72cdb9c7cac38b09c21392e0c9523eea1c7c2cda761226665a60e31c6c5ecacdc85ac0c4f0374c974ffdbaa9a897cf123d41bdfec68cee12cffbe4bf59d8359ea16528019976eb4cd1043097bccd21fda51d4970263d48e57bb5b35b70c4444f6f504ec81364e4476c268d86163267dfdafaea9fa6477159a532cb1312d8c3678e335058f5fce9f3be952bc0860afc640364d05dcc1eeb444e67115fea969ea77fb162631dc2ab3a2089047cecef930fdd60c0af1b1ddfeb22a35f03f1bcdcead3b5d46258db5837205c8e4bf47c0bc18c33859dd030b8fbe621ee6109418d9a8db828378dec0d00bad1d26f7ae8e8a7189716e6d265394cd3d74216d63dcd8a03ea83c6afe26ca865f61bb87addf5a08e1820bf96683e2ead633a13faf3727eee2654b13b067d2ae697b33fd74f5b6bc2a8390d84f7dd9c278610c093d6750e35f59d3cbba80140faec3efae6f76fa8f9d5f5de2fed0e0cbf18684613bcefa0530e57a07abb4e88f085ae2f8f0585c01095bc58925ff58b0e12265115b1f45c51c71e6cf7816136b4ead56b0cbf072eebffc7f69d528cfb8fa9e10e907ae55bb5ef91e25560e3dc0dca792ea5ec095a5ab14fa05f875333a5d48e1cbd038dbfda5ba5b955d42745a45aa33e692f0729d9f147696251a27b8da8a6d6c2361aae8dfb64ff4bf54c3d96acde260f923ebe1c7f4de4c4747b013be0717ca22b9c2ca5f6843ef445ffbbb34b3ef39e6c7e070a538119f008694a06b8cd1f60cc4bc4a1db033e44b69ad1116b921c64bbbc4307158dfe90ff3b3194c9b9925ecfeb07d6b6b2ed658d136ff1afb65b91c9f93", 0x1000}], 0x2, 0x0, 0x0, 0x40000}], 0x1, 0x40000c6)
syz_usb_connect$uac1(0x6, 0xb6, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x31b2, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x7, 0x60, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x27}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x400, 0x3, 0x2, 0xe}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x4, "c2ee1b2f759c"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x3, 0x5, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0x5c, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0xe4, 0x67, {0x7, 0x25, 0x1, 0x8, 0x1, 0x4400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x2, 0x1c, 0xe, "2b701f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x1, 0x5, 0xa}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x8, 0x7, 0x79, 0x20}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x10, 0x5, {0x7, 0x25, 0x1, 0xc, 0x2, 0x7}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xfa, 0x2, 0x1, 0x40, 0x7}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9}, @ptm_cap={0x3}]}, 0x9, [{0xe1, &(0x7f0000000180)=@string={0xe1, 0x3, "635f244e8a67945a930076f0ded27502314edc6efe7656c9a9f17c82c1f617852b146b1a4367004fff4223e31d11524b0f82f928dc46ed0f6679eb165878d9941e074b2912b18780d583615d3de433ccf2dcae3cf76ec90f503dd151213e8c8f74cd0208c0a6b71ebbd2ae7341fef36b301b6159ede8ce715a73dbc3c3a114f0506d21d3bc4b286fb23ac327e40c5b59ce4bebe212b75d82a00207ad2f7b332015ab421237b2ec57bafb8e6342c0a724fad21d5e635d1a194e15787182a215928a28de5b0756e7c1385d7e4874b0eda1846e927eb82bbca93aef6882235737"}}, {0xce, &(0x7f0000000280)=@string={0xce, 0x3, "6961a34958fee76e1e35d6d65eaaadae39f326446f212527c6f1d4cea74a10775c5eb038013fc0c00708e58e81cfeb5dd9a3a903bf4ee6a05861849cd5ee434874449b47bc2200cd0e09d6c4471a309a90e0e6b8a2b2d8a30528247f7e8b72a0c1eb6ec0f658c420bb00ac63e49de6e47026a0e65e5df5b3836b2314c93a4360dcf4e8c7fa69fd2c92ad553173305e728cf8e3ba66adbc55e3f976568ba10a20cc64845a0c4807e20df920db1c4754ca1cbed97d0078322c450426fa90a94fc08f1d46353951070e1a108ed2"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1401}}, {0x41, &(0x7f0000000400)=@string={0x41, 0x3, "01b39a6b7d269719f140e891122d8161a9a63e8663cd4a78b7d3298da5026f9a6732a9931ecf51595621e29235fc13750ad8b3a1566e20a5aeb7306f4f5682"}}, {0xb0, &(0x7f0000000480)=@string={0xb0, 0x3, "a121d92ef479ebc9df4b7031d87e04b10e192a835d8cad7cccef4945416001b1d847bd178334690a138dc3bab15b02f1ce9ed004a125c1f149536ad79dd4e4421b1ab3695c1a8dc7c7feee888ac8ae55b463012e1b7599270ceb10c308eb704c058133e7d54ed485f96e5563a6a941d632be92b976ebbf22aa338045de4ba2da8c47e2fc8a91d966364586d985c9e766ba74ead3f85f605ae68e3fe26770667ca33fae0162d56f1078d118d63fe6"}}, {0xad, &(0x7f0000000540)=@string={0xad, 0x3, "730ba3294ca6a002a00e4cdfaa331e785e960ae81a313e33a8675aa0823aee810bf5b50489a5037eef827d628aaed380843bdeb736e8fed0bb864a4560f1a070536103515dc65512beb81c10668dad281b3412faf0177351551f2982a7b5bb6fefa666fc8ede72d6980f33865a99d0528702a6015d6a6e74b7d7bf182c6e8182ac800658c141e2313548a9c5639517f6ceec1044f6c820b215854c0ed8696089d48f83e17e9b96a5389902"}}, {0xc3, &(0x7f0000000600)=@string={0xc3, 0x3, "41eedc7ca20c9b6cdfae66c414f5084082ce76a73509954344a6ee1d8671797ab5b944fac8f96e7b9b7679dc82c145ea95d52d96018ab5c4114b258bd3d47b6b4397181a60074972dcc84be18d1d899e0cf71558db348d9a53199fc23b17202600703735d7a2d81333fe81d9d88ded84261aebeee29188cad5b38727050694fbca12d7c2feaa811fc5434d9921632cd3f8b66824bb5ce28f7a0a46d962a726dac15b701e61ec986056ddbc980f231a95bfc35050cdf3a5795209ba95ffcd4dd561"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x401}}]})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
lseek(r1, 0x40000000007, 0x0)
syz_usb_connect$uac3(0x3, 0xcc, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x9, 0xc0, 0x10, {0x8, 0xb, 0x2, 0x0, 0x1, 0x20, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x15, 0xfffffffa}, [@multiply_unit={0xb, 0x24, 0xd, 0x2, 0x1, 0x7fffffff, 0x4d}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xeb, 0x7, 0x8bcc, 0x1002, 0x9, 0x4, 0x2, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x40, 0x34, 0x0, 0xff, 0x37}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0x5, 0x1, 0x9, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0x9c, 0x40, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x1, 0xc, {0xa, 0x25, 0x25, 0x1b, 0x40, 0xfafb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xdd, 0x1, 0x2, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x81, 0x0, {0xa, 0x25, 0x25, 0x9, 0x2, 0x8}}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x200, 0x7, 0x81, 0x6, 0xbf, 0xc4}, 0x121, &(0x7f0000000940)={0x5, 0xf, 0x121, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7, 0x0, 0x1}, @generic={0xa6, 0x10, 0x2, "17976234d44dc2b8f6bbe28c4d8def50d43fea0101a4e78dce962f1ae1e86f745f93e2e7f8544e86be936b5c241caa0a05c03c4ff5dcdaec29ad752a6ec35de433ff0c44d439f2ffc52cd31738e7c6ff1e254c2601ad2a27c8d26e238c8d52b53f091d9a5c5f9d152337f07c95f4b9b3c39317b98efb0ad7fc0168d4ae4363e9186ba2d932c21e32fe93a395c23c9690a11fec0ccfbffe34aa9fd5ff918a6bb12e6ead"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x9, 0x39, 0x2, 0x4}, @generic={0x5f, 0x10, 0x1, "139f9c74589cc0e3f73ac08ed945fab72c03639db717f5300f93ea80de2ac1c19787adb3be49874cae9a4c2e2c68e6a498ba1751ac9bbd226a7505342db09f5fe432bb7d67a3a266366cfa29aa3f0f148b786abcc57137826e3f1005"}]}, 0x4, [{0x84, &(0x7f0000000a80)=@string={0x84, 0x3, "182b15b8949e2eee2854c1915950b52331adf556183b04a7f06ba599066beb314c6b2050ff7a8d666bfe4738377279f1e6784b371b68c42ee51886372b532c39787a6782bb07a2d94be1b564a4c27b8869deb6136b279b9c56b62833cbdc42ded481bfab82b9343e6dd2234ec4c76f4665a95c34b7030bf04b3120c9049693f26ac0"}}, {0xf1, &(0x7f0000000b40)=@string={0xf1, 0x3, "af33bd5b226c8a843fac8a5c278b619d54380ca592420be097da786cffdc5c1c83ffd5e4c999d16a2601b81989314f09261c0565465838944bc4c280882a06882cf5c249d8fbb379189445b95deac9f36511e89a949b1b88e2c443844d3e95d4a86e5238a66812c8b22c7e346eb15bd38e498048889eb0de9b722c59b973cf21d44c8509223a58be59801790e3315f03ac214dade7db981b4605c0a29a08f08c04ae719941b09dce2005992dd847bb5c19b3f8ee970c775c7af38b5fd805b198df10cd87fa96bf361332ccc8ed404f73fefd688cc06a64fecb7e46b9a23c189cc60b19130c67cbe987b20e74be71af"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x140a}}]})

2m36.403072956s ago: executing program 4 (id=544):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x2100100, 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001700))
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x808, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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")
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x2818c02, &(0x7f0000002580)=ANY=[], 0x1, 0xc3b, &(0x7f0000001940)="$eJzs3V9oXOl5B+D3myOtJadJZjcb549zMbCBbL3ZRbK8axVvQI4VEYPxmpWVi4WCx5bsDiuNZEku3lCCCwklpC0uuchlDZtAe1VftRCa4lxtSwiI9qb0orjtxmwvCpNA2tKLqJyZb6SR1ra0a1uS189j7N/MOe+Z+c7Yr+ac8TlzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI+OrXjg8Np90eBQCwk05Pvj404v0fAJ4oZ+3/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwtRRFfDtSvP29VjrXvt8xcKrRvHJ1anzi7osNpkhRiaJdX/4eGD48cuTlV46OdvP+yz9sn4vXJs8er52Yn1tYnFlampmuTTUbF+anZ7b9CA+6/GaH2i9Abe7NK9MXLy7VDr80smH21eqdfR87UD02enDkjW7t1PjExGRPTV//h37290kP76H4CHkqivh6pHjnxfdSPSIq8eC9sMXPjkdtMPrK/muvxNT4RHtFZhv15nI5M1VyVV9EtWehsW6P7EAvPpCxiGvl31M54EPl6k0u1Bfr52dnamfqi8uN5cZ8M1U6oy3XpxqVGE0RCxHRKnZ78Ow1/VHEkUhx51etdD4iim4fvHB68vWhka0foG8HBnmPp60WESvxGPQs7FH7oog/ixTfPzcUF3Jftdvm3YgvlflqxOUyb6W4nu+n8gfEaMQvvZ/AY60vivh5pJhPrTTd7f32duWpb9RONi/O99R2tysf+/2DnWTbhD1sIIo4397ib6UP/2EXAAAAAAAAAAAAALAzivhxpLg593xaiN5zShvNS7Wz9fOznaOCu8f+1/JSq6urq9XUyVrOoZxjOc+kiL/7RMS5fH8h57Wc13PeyHkz562cKzlv52zljEp+/py1nEM5x3KeyXku50LOazmv57yR82bOWzlXct7O2coZznsCAAAAAAAAAAAAAAAAAADgIRuMIiYixY23f799XeloX5f+k8dGT48/23vN+M9s8Thl7UsR8ePY3jV5+/O1xlOl/PXw1wvY2kAU8a18/b8/3O3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe0Ilivh2pPjBr1tpdXV1NcYizpUzxiJuF7s9OgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNJCKOBEp/vNrA+37KxHx+Yj4zWr5K+J/Vzfb7REDAAAAAAAAAAAAAAAAAADAR1Aq4nKk+OE7rVSNiKvVO/s+dqB6bPTgyBtFFJHKkt761ybPHq+dmJ9bWJxZWpqZrk01Gxfmp2e2+3QDpxrNK1enxiceycpsafARj39w4MT8wluLjUu/t3zX+fsHjp9fWl6sX7j77BiMvoih3imH2gOeGp9oD3q2UW+2F02VewywL6K23ZUBAAAAAAAAAAAAAAAAAABgz9ifihiPFM/95Ejqnjfe1znn/+Ode8Va7Y/+YP27AGY3ZVfv9wds53ba7kAPtU+8r02NT0xM9kzu639/aTmmlIr4dKQ4+LefbZ8Pn2L/Xc+NL+v+OFKM/t+RXFc9WNaNbagaODQ1PlE7Pd988fjs7PyF+nL9/OxMbXKhfmHbXxwAAAAAAAAAAAAAAAAAAAAA97E/FfEnkeLIyZXUve58Pv+/r3Ov5/z/VyO6l50fSBtzTfvc/k+0z+3v3P7ksdGTh5+71/RHcf5/OaaUivhNpHj6zz/bvp5+9/z/oU21Zd0PI8XPv/OFXFd5qqwb7q5O5xEvNmZnhsraFyLFd890a6Nd+0qu/dR67XBZ+9NI8czvbqw9mmufXa89XNbeiRQTp+9e++n12pGydjBSfPmPat3a/WXtV3PtgfXaly7Mz05v9+XlyVT2/79Gii8Ofz11/83fs/97vv/j2qZc876ev//th9X/1Z5p13Jfr+b+H96i/y9Hij+9/oVc1+m9w3n+0+0/1/v/u5Hitz++sfblXPvMeu3wdlcLdlPZ//8QKVZu//Pav/nc/7mz1ju0t/8/37cxu9sFu9X/T/dMq+ZxjXzA1wKeNEtvffPN+uzszKIbbrjxpN34r5P3nLXbP5mAR63c/v/vSPGVy0Xq7sfm7f/f6txb3///n2+tb/8f25Rrdmn7/5meacfyXkt/X8TA8txC/2ciBpbe+uaLjbn6pZlLM82RkdGjv3Nk+PDR4f6nujv367e2/drB467s/zcjxY/+6h/XPsfeuP9/98//9m/KNbvU/5/qXacN+zXbfingiVP2/19Ein+58d7a/zfd7/O/7ud8zz+3MQe7RbvU/8/2TKvlP0Z7pt3lvwkBAAAAAAAAAOCxtz8V8ZNI8detv1+75v3G43/ii93a3uP/7mUvXP8fALi/8v1/MlL8bP+XU/c7ZLZz/P/0plzzwY///ae/3M5At3j/P9AzbXqHzmv+QC80AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8CCmK2Bcp3v5eK90uyvsdA6cazStXp8Yn7r7YYIoUlSja9eXvgeHDI0defuXoaDfvv/zD9rl4bfLs8dqJ+bmFxZmlpZnp2lSzcWF+embbj/Cgy292qP0C1ObevDJ98eJS7fBLIxtmX63e2fexA9VjowdH3ujWTo1PTEz21PT1f+hnf5/08B6Kj5CnooifRYp3Xnwv/VsRUYkH74UtfnY8aoPRV/ZfeyWmxifaKzLbqDeXy5mpkqv6Iqo9C411e2QHevGBjEVci4hKOeBD5epNLtQX6+dnZ2pn6ovLjeXGfDNVOqMt16calRhNEQsR0Sp2e/DsNf1RxN9Eiju/aqV/LyKKbh+8cHry9aGRrR+gbwcGeY+nrRYRK/EY9CzsUfuiiGcjxffPDcV/FJ2+arfNuxFfKvPViMtl3kpxPd9P5Q+I0Yhfej+Bx1pfFHEmUsynVnq3yL3f3q489Y3ayebF+Z7a7nblY79/sJNsm7CHDUQRv2hv8bfSL7yfAwAAAAAAAAAAAMAeV8RXIsXNuedT+/zQtXNKG81LtbP187Odw/q7x/7X8lKrq6ur1dTJWs6hnGM5z+T8ac6FnNdyXs95I+fNnLdyruS8nbOVMyr5+XPWcg7lHMt5Jue5nAs5r+W8nvNGzps5b+VcyXk7ZytnOE4aAAAAAAAAAAAAAAAAAIBHpBJFfCdS/ODXrbRadK4vey46edt5rvCR9v8BAAD//5M7Saw=")
chdir(&(0x7f0000000040)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x418000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r1, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4)

2m32.08729137s ago: executing program 4 (id=554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{r2}, 0xe7, 0x400, 0x40})
r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x4021, 0x1, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r4)
iopl(0x3)
r6 = open(&(0x7f0000000200)='./file0\x00', 0x800, 0x1a1)
fcntl$setlease(r6, 0x400, 0x1)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
r7 = openat$cgroup_ro(r2, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r8 = socket(0x8, 0x4, 0x3)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x40106183, &(0x7f0000001940)={{r0, 0x0, 0x101040, 0x0, 0x4, &(0x7f0000000100)={@_ha_fsid}, 0x0}, 0x0, 0x0})
ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000000c0)={{r1}, 0xc42, 0x1, 0x4c})

2m17.071668345s ago: executing program 32 (id=554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{r2}, 0xe7, 0x400, 0x40})
r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x4021, 0x1, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r4)
iopl(0x3)
r6 = open(&(0x7f0000000200)='./file0\x00', 0x800, 0x1a1)
fcntl$setlease(r6, 0x400, 0x1)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
r7 = openat$cgroup_ro(r2, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r8 = socket(0x8, 0x4, 0x3)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x40106183, &(0x7f0000001940)={{r0, 0x0, 0x101040, 0x0, 0x4, &(0x7f0000000100)={@_ha_fsid}, 0x0}, 0x0, 0x0})
ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000000c0)={{r1}, 0xc42, 0x1, 0x4c})

12.65789829s ago: executing program 3 (id=764):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000000201050000000000000000000300000108000840000000040800034000000002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x40)
r1 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x2, &(0x7f00000002c0)="e3", 0x1)
sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x4084)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = getpid()
migrate_pages(r3, 0x7, &(0x7f0000000080)=0x7e9c, &(0x7f00000000c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
r5 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000100)={0xb56e})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x1000cd95, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)

12.454981952s ago: executing program 1 (id=765):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
listen(r1, 0x39b3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)=""/44, 0x2c}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/154, 0x9a}], 0x3, &(0x7f00000005c0)=""/91, 0x5b}, 0x2020)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0xffff, 0x0, 0x7}, 0x10) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64)
syz_clone(0x1011, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbff}, 0x34}, 0x1, 0x0, 0x0, 0x24008045}, 0x404c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000)
syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)

10.084654313s ago: executing program 1 (id=766):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
accept4(r1, 0x0, 0x0, 0x800)
prlimit64(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x808004, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (fail_nth: 7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10)

10.084445829s ago: executing program 2 (id=767):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80042, 0x10)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000a940)='freezer.parent_freezing\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
creat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x172)
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0xe4ff, &(0x7f0000000080))

9.551026425s ago: executing program 3 (id=768):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xb1bd, 0x3000000, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

8.833006112s ago: executing program 2 (id=769):
r0 = syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b7032d7a3d77ba65f6179d16cef7c34648024212402e69cc86c8fce5989be545ce26a9c4f5f2165f36561402b40d94de59edbb0507bf01e3ece0fd57e13bef384234e823d81383eac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f473cd22efb03bcddff402dacf8c1372a5e8ff5bc5b6a5015037cf1236a6167a302d5d082a447099b4ee2bc4"], 0x1, 0x10600, &(0x7f0000020cc0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0)
r2 = getpid()
write$P9_RGETLOCK(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="05006632667300"], 0x23)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="ac832012ea0455603af5fb0806dd44963c252628b54ac0c6d774b139c387f511941d29716cfae789788db0e9a08bb06db37340d6fdec33e6fbd5109c4161f159b242e76411b738be37f89ee2e91187e585db2f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYBLOB="59c72f217d7fdd423ed192c007ab5e3db1524c65763be5468def7b6934f06e41a780581eed1597bf88", @ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000300, 0xfd83, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
writev(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="d6680e167a49ca5a80db9aafee0f2b570dcd4c3dfb2e716baac26ae3482fabf5b7c5c5236b9bac9249", 0x29}, {0x0, 0xff01}], 0x2)

5.996915184s ago: executing program 1 (id=770):
r0 = socket(0x2d, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040810)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYRESDEC=r4, @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES16=r4], 0xb0}, 0x1, 0x0, 0x0, 0x4054850}, 0x20040040)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000840))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff004)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.7138767s ago: executing program 3 (id=771):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @multicast1}}}}}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r6 = dup(r5)
r7 = socket$netlink(0x10, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2)
epoll_create1(0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
socket$inet6_sctp(0xa, 0x1, 0x84)

4.296091234s ago: executing program 1 (id=772):
syz_read_part_table(0x105d, &(0x7f0000000000)="$eJzsz7FNAzEYBeBnG3NyhegoqSiYgoYJECMxADUbsERWSZ0lLrrkotsgSfF9zbOfLf36w009Jplqko8kT6WknOrnv/e2ZK/J79i+v1wOJaOl5vD1+lNTHjLP60M7x7ReR+v7z62aW3Zvy7jRe5Lv/+tsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD37RgAAP//yKEKLA==")
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001080), 0x161400, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000010c0)={<r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f0000001180)={'gretap0\x00', <r2=>0x0, 0x1, 0x700, 0x1, 0x7, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x66, 0x0, 0x7, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x8b, 0x1, 0x8, [{@remote, 0x8}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x44, 0xd6, 0x3, 0xc, [{@broadcast, 0x1}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x4}, {@empty, 0x2000}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@local, 0x3}, {@private=0xa010102, 0x8}]}, @ssrr={0x89, 0xb, 0x7e, [@dev={0xac, 0x14, 0x14, 0x2c}, @broadcast]}, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "8325"}]}]}}}}})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x9329, 0x8001, 0x100008}}}}}}, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x16, r2, 0x1, 0x5c, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f00000010c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @private0, 0x9}}}, &(0x7f0000000000)=0x84)
recvfrom$packet(r5, &(0x7f00000012c0)=""/30, 0x1e, 0x10002, &(0x7f0000001300)={0x11, 0x1b, r2, 0x1, 0x8}, 0x14)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000001140)={r1, &(0x7f0000001100)=""/22})

3.735796921s ago: executing program 2 (id=773):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2405a045)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x10, 0x0, 0x1, 0x40000000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x368}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)
r2 = io_uring_setup(0x7, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r2, &(0x7f0000000180)=':$)\xed\x00', 0x1, &(0x7f0000000200)={@_ha_fsid={[0x9, 0x1]}, {0x9, 0x29, 0x0, 0xd}}, 0x7, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x10001}, {[0x2, 0x7, 0x0, 0x1ff]}, 0x5, 0x2e, &(0x7f00000002c0)=""/46})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "c157c8", 0x1}}}, 0xd)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.456131726s ago: executing program 2 (id=774):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_macvtap\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x20, 0x7, "11c44ab83781cc"}})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@lazytime}]}, 0xfd, 0x4da, &(0x7f0000000e80)="$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")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x5c0c000)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000900), 0x4)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000))
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040))

2.92803828s ago: executing program 1 (id=775):
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2)
userfaultfd(0x80001)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e4, 0x0)

2.313659948s ago: executing program 3 (id=776):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x1000000}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

1.213611401s ago: executing program 2 (id=777):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x10801, 0x1000})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
fchdir(r2)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)

1.1596744s ago: executing program 1 (id=778):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, r2, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x14a923563da798d9}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r4, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000)

777.384246ms ago: executing program 3 (id=779):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x89, 0xfffffffb})
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000244e0000", 0x58}], 0x1)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0xc0000000, 0x10001, 0x2, 0x6, 0x0, 0x4, 0xffffff6c}, {0x80000000, 0x1, 0x5, 0xffffffff, 0x5, 0x8, 0x8001}, {0x80000001, 0x9, 0x0, 0xfffffff9, 0x8, 0x7, 0x39f8dd59}, {0x80000000, 0x5, 0x1, 0x3, 0x7fffffff, 0x0, 0xa}]})

393.264567ms ago: executing program 3 (id=780):
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x101)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0x0, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240440d1}, 0x400c840)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0)
timerfd_create(0x0, 0x800)
setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbb0800450000380000000000019078ac1e00400b93bde6cbfab2b9c46548d41501ac1414aa030490781200183f2500000000000000000100007f0000"], 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="ab7c2ab5700003dcdf251200000008000300", @ANYRES32=r11, @ANYBLOB="08001400", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000010000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40002084)

0s ago: executing program 2 (id=781):
r0 = socket(0x2d, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040810)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYRESDEC=r4, @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES16=r4], 0xb0}, 0x1, 0x0, 0x0, 0x4054850}, 0x20040040)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000840))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff004)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

dc_ncm 5-1:1.1: bind() failure
[  379.883014][ T5823] ocfs2: Unmounting device (7,2) on (node local)
[  379.893579][ T8357] IPv6: Can't replace route, no match found
[  380.213072][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.216093][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.216463][ T8090] bridge_slave_0: entered allmulticast mode
[  380.617400][ T8090] bridge_slave_0: entered promiscuous mode
[  380.935443][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.935830][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.936196][ T8090] bridge_slave_1: entered allmulticast mode
[  380.997084][  T823] usb 5-1: USB disconnect, device number 9
[  381.000944][ T8090] bridge_slave_1: entered promiscuous mode
[  381.361972][ T8363] loop3: detected capacity change from 0 to 2048
[  381.499301][ T8363] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  381.696817][ T8374] loop2: detected capacity change from 0 to 1024
[  381.964192][  T823] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  382.148534][  T823] usb 5-1: Using ep0 maxpacket: 32
[  382.164499][  T823] usb 5-1: config 5 has an invalid interface number: 7 but max is 0
[  382.164533][  T823] usb 5-1: config 5 has no interface number 0
[  382.164570][  T823] usb 5-1: config 5 interface 7 has no altsetting 0
[  382.200691][ T8090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.207358][  T823] usb 5-1: New USB device found, idVendor=12d1, idProduct=cedf, bcdDevice=fc.28
[  382.207394][  T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.207417][  T823] usb 5-1: Product: syz
[  382.207432][  T823] usb 5-1: Manufacturer: syz
[  382.207449][  T823] usb 5-1: SerialNumber: syz
[  382.292596][ T8090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.546253][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.547034][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.615913][  T823] qmi_wwan 5-1:5.7: bogus CDC Union: master=0, slave=0
[  382.617163][  T823] qmi_wwan 5-1:5.7: probe with driver qmi_wwan failed with error -22
[  382.650329][  T823] usb 5-1: USB disconnect, device number 10
[  382.858809][ T8090] team0: Port device team_slave_0 added
[  382.865849][ T8090] team0: Port device team_slave_1 added
[  383.127111][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.127132][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.127163][ T8090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.204848][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.204867][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.204899][ T8090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.212726][ T8381] loop3: detected capacity change from 0 to 512
[  383.614602][ T8388] FAULT_INJECTION: forcing a failure.
[  383.614602][ T8388] name failslab, interval 1, probability 0, space 0, times 0
[  383.614642][ T8388] CPU: 0 UID: 0 PID: 8388 Comm: syz.2.545 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  383.614676][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  383.614688][ T8388] Call Trace:
[  383.614697][ T8388]  <TASK>
[  383.614706][ T8388]  dump_stack_lvl+0xe8/0x150
[  383.614737][ T8388]  should_fail_ex+0x46b/0x600
[  383.614771][ T8388]  should_failslab+0xa8/0x100
[  383.614804][ T8388]  __kmalloc_cache_noprof+0x84/0x690
[  383.614833][ T8388]  ? __vmalloc_noprof+0xd2/0x120
[  383.614860][ T8388]  ? bpf_prog_alloc_no_stats+0xdb/0x4f0
[  383.614892][ T8388]  bpf_prog_alloc_no_stats+0xdb/0x4f0
[  383.614923][ T8388]  bpf_prog_alloc+0x3c/0x1a0
[  383.614951][ T8388]  bpf_prog_create_from_user+0xa7/0x440
[  383.614978][ T8388]  ? __pfx_seccomp_check_filter+0x10/0x10
[  383.615015][ T8388]  do_seccomp+0x776/0xd30
[  383.615050][ T8388]  ? __pfx_do_seccomp+0x10/0x10
[  383.615086][ T8388]  ? __pfx_ksys_write+0x10/0x10
[  383.615125][ T8388]  ? __secure_computing+0xe1/0x2a0
[  383.615154][ T8388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.615177][ T8388]  do_syscall_64+0x15f/0xf80
[  383.615209][ T8388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.615232][ T8388]  ? clear_bhb_loop+0x40/0x90
[  383.615259][ T8388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.615280][ T8388] RIP: 0033:0x7fc943ddcdd9
[  383.615302][ T8388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.615321][ T8388] RSP: 002b:00007fc942036028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  383.615347][ T8388] RAX: ffffffffffffffda RBX: 00007fc944055fa0 RCX: 00007fc943ddcdd9
[  383.615364][ T8388] RDX: 0000200000000040 RSI: 000000000000000a RDI: 0000000000000001
[  383.615377][ T8388] RBP: 00007fc942036090 R08: 0000000000000000 R09: 0000000000000000
[  383.615390][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  383.615403][ T8388] R13: 00007fc944056038 R14: 00007fc944055fa0 R15: 00007ffc37287c88
[  383.615437][ T8388]  </TASK>
[  384.109658][ T8090] hsr_slave_0: entered promiscuous mode
[  384.153647][ T8090] hsr_slave_1: entered promiscuous mode
[  384.166244][ T8090] debugfs: 'hsr0' already exists in 'hsr'
[  384.166272][ T8090] Cannot create hsr debugfs directory
[  384.875267][ T8404] IPv6: Can't replace route, no match found
[  387.261871][  T823] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  387.557574][  T823] usb 3-1: Using ep0 maxpacket: 32
[  387.742712][  T823] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  387.742744][  T823] usb 3-1: config 0 has no interface number 0
[  387.742792][  T823] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  387.742818][  T823] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  387.930391][  T823] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  387.930427][  T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.930450][  T823] usb 3-1: Product: syz
[  387.930465][  T823] usb 3-1: Manufacturer: syz
[  387.930480][  T823] usb 3-1: SerialNumber: syz
[  388.038027][  T823] usb 3-1: config 0 descriptor??
[  388.120142][  T823] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  388.120180][  T823] em28xx 3-1:0.132: Video interface 132 found: bulk
[  388.441305][ T8429] loop1: detected capacity change from 0 to 1024
[  388.531142][ T8429] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  388.754648][ T8425] process 'syz.4.554' launched './file0' with NULL argv: empty string added
[  388.996687][ T8429] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.556: lblock 2 mapped to illegal pblock 2 (length 1)
[  388.996734][ T8429] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  389.018654][    C0] EXT4-fs (loop1): initial error at time 1777268434: ext4_map_blocks:791: inode 3: block 2
[  389.018703][    C0] EXT4-fs (loop1): last error at time 1777268434: ext4_map_blocks:791: inode 3: block 2
[  389.059689][ T8429] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  389.059754][ T8429] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.556: lblock 0 mapped to illegal pblock 48 (length 1)
[  389.059790][ T8429] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  389.060080][ T8429] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  389.060102][ T8429] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.556: Failed to acquire dquot type 0
[  389.060128][ T8429] loop1: lost filesystem error report for type 5 error -117
[  389.060553][ T8429] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  389.060576][ T8429] loop1: lost filesystem error report for type 5 error -117
[  389.362534][ T8429] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.556: mark_inode_dirty error
[  389.362571][ T8429] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  389.364372][ T8429] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  389.364481][ T8429] EXT4-fs (loop1): 1 orphan inode deleted
[  389.367430][ T8429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  389.420975][  T823] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  389.445184][ T8429] EXT4-fs (loop1): shut down requested (2)
[  389.575808][  T823] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  389.575844][  T823] em28xx 3-1:0.132: board has no eeprom
[  389.633801][  T823] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  389.633832][  T823] em28xx 3-1:0.132: analog set to bulk mode.
[  389.635731][   T32] em28xx 3-1:0.132: Registering V4L2 extension
[  389.677022][  T823] usb 3-1: USB disconnect, device number 14
[  389.694941][  T823] em28xx 3-1:0.132: Disconnecting em28xx
[  389.742195][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.556'.
[  389.742234][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.556'.
[  389.789745][ T8438] loop3: detected capacity change from 0 to 8192
[  389.792148][ T8440] 9pnet_fd: Insufficient options for proto=fd
[  390.132384][   T32] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  390.132415][   T32] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  390.132428][   T32] em28xx 3-1:0.132: No AC97 audio processor
[  390.469129][   T32] usb 3-1: Decoder not found
[  390.469152][   T32] em28xx 3-1:0.132: failed to create media graph
[  390.469222][   T32] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  390.533092][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.556713][ T2211] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  390.686279][   T32] em28xx 3-1:0.132: Remote control support is not available for this card.
[  390.690695][  T823] em28xx 3-1:0.132: Closing input extension
[  390.835503][ T8454] loop1: detected capacity change from 0 to 128
[  391.672971][  T823] em28xx 3-1:0.132: Freeing device
[  392.996005][ T6026] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  393.162861][ T8090] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  393.272167][ T6026] usb 4-1: config 3 has an invalid interface number: 112 but max is 0
[  393.272198][ T6026] usb 4-1: config 3 has no interface number 0
[  393.272244][ T6026] usb 4-1: config 3 interface 112 has no altsetting 0
[  393.278210][ T6026] usb 4-1: New USB device found, idVendor=07fa, idProduct=0846, bcdDevice=42.d9
[  393.278245][ T6026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.278267][ T6026] usb 4-1: Product: syz
[  393.278283][ T6026] usb 4-1: Manufacturer: syz
[  393.278298][ T6026] usb 4-1: SerialNumber: syz
[  393.411838][ T8090] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  393.479167][ T8090] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  393.926677][ T8090] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  394.229943][ T8468] netlink: 'syz.3.564': attribute type 8 has an invalid length.
[  394.229969][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'.
[  394.947094][ T8488] loop2: detected capacity change from 0 to 256
[  395.030499][ T8489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.565'.
[  395.601423][ T8488] FAT-fs (loop2): Directory bread(block 64) failed
[  395.601467][ T8488] FAT-fs (loop2): Directory bread(block 65) failed
[  395.601599][ T8488] FAT-fs (loop2): Directory bread(block 66) failed
[  395.601621][ T8488] FAT-fs (loop2): Directory bread(block 67) failed
[  395.601719][ T8488] FAT-fs (loop2): Directory bread(block 68) failed
[  395.601740][ T8488] FAT-fs (loop2): Directory bread(block 69) failed
[  395.601834][ T8488] FAT-fs (loop2): Directory bread(block 70) failed
[  395.601856][ T8488] FAT-fs (loop2): Directory bread(block 71) failed
[  395.601948][ T8488] FAT-fs (loop2): Directory bread(block 72) failed
[  395.602079][ T8488] FAT-fs (loop2): Directory bread(block 73) failed
[  395.893624][ T8468] bond0: entered promiscuous mode
[  395.893651][ T8468] bond_slave_0: entered promiscuous mode
[  395.894212][ T8468] bond_slave_1: entered promiscuous mode
[  395.962392][ T8468] gretap0: entered promiscuous mode
[  395.981072][ T8468] veth0_to_team: entered promiscuous mode
[  396.054220][ T8468] hsr1: entered promiscuous mode
[  396.055011][ T8090] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  396.352237][ T8090] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  396.787735][ T6026] HFC-S_USB 4-1:3.112: probe with driver HFC-S_USB failed with error -5
[  396.808405][ T8090] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  396.866465][ T6026] usb 4-1: USB disconnect, device number 22
[  396.986411][ T8090] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  397.209927][ T8500] IPv6: Can't replace route, no match found
[  401.397265][ T8518] netlink: 'syz.3.576': attribute type 12 has an invalid length.
[  401.554901][ T8518] loop3: detected capacity change from 0 to 512
[  401.637846][ T8518] EXT4-fs (loop3): Test dummy encryption mode enabled
[  401.639882][ T8518] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal
[  402.115421][ T8529] FAULT_INJECTION: forcing a failure.
[  402.115421][ T8529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.115458][ T8529] CPU: 1 UID: 0 PID: 8529 Comm: syz.3.578 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  402.115484][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  402.115496][ T8529] Call Trace:
[  402.115504][ T8529]  <TASK>
[  402.115512][ T8529]  dump_stack_lvl+0xe8/0x150
[  402.115545][ T8529]  should_fail_ex+0x46b/0x600
[  402.115576][ T8529]  _copy_from_user+0x2d/0xb0
[  402.115608][ T8529]  sock_do_ioctl+0x195/0x320
[  402.115637][ T8529]  ? __pfx_sock_do_ioctl+0x10/0x10
[  402.115680][ T8529]  sock_ioctl+0x5c9/0x7f0
[  402.115709][ T8529]  ? __pfx_sock_ioctl+0x10/0x10
[  402.115744][ T8529]  ? __fget_files+0x2a/0x420
[  402.115769][ T8529]  ? __fget_files+0x3a6/0x420
[  402.115794][ T8529]  ? __fget_files+0x2a/0x420
[  402.115823][ T8529]  ? bpf_lsm_file_ioctl+0x9/0x20
[  402.115850][ T8529]  ? __pfx_sock_ioctl+0x10/0x10
[  402.115875][ T8529]  __se_sys_ioctl+0xff/0x170
[  402.115909][ T8529]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.115932][ T8529]  do_syscall_64+0x15f/0xf80
[  402.115963][ T8529]  ? trace_irq_disable+0x3b/0x140
[  402.115988][ T8529]  ? clear_bhb_loop+0x40/0x90
[  402.116016][ T8529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.116037][ T8529] RIP: 0033:0x7f8cc6b2cdd9
[  402.116057][ T8529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.116075][ T8529] RSP: 002b:00007f8cc4d7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  402.116099][ T8529] RAX: ffffffffffffffda RBX: 00007f8cc6da5fa0 RCX: 00007f8cc6b2cdd9
[  402.116116][ T8529] RDX: 0000200000000580 RSI: 0000000000008946 RDI: 0000000000000004
[  402.116130][ T8529] RBP: 00007f8cc4d7e090 R08: 0000000000000000 R09: 0000000000000000
[  402.116143][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.116156][ T8529] R13: 00007f8cc6da6038 R14: 00007f8cc6da5fa0 R15: 00007ffffb4964b8
[  402.116191][ T8529]  </TASK>
[  402.366463][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.787717][ T8090] 8021q: adding VLAN 0 to HW filter on device team0
[  402.892998][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.893286][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.934616][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.934899][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.148554][ T5911] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  403.324766][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  403.367418][ T5911] usb 4-1: Using ep0 maxpacket: 8
[  403.419631][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  403.449689][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  403.469861][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  403.472166][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  403.473161][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  403.499974][ T5911] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  403.500005][ T5911] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  403.500026][ T5911] usb 4-1: Product: syz
[  403.500042][ T5911] usb 4-1: Manufacturer: syz
[  403.500057][ T5911] usb 4-1: SerialNumber: syz
[  403.750335][ T5911] usb 4-1: Handspring Visor / Palm OS: No valid connect info available
[  403.750365][ T5911] usb 4-1: Handspring Visor / Palm OS: port 0, is for HotSync use
[  403.750385][ T5911] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  403.750405][ T5911] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2
[  403.953774][ T5911] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  404.148161][ T5911] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  404.192744][ T5911] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  404.209191][ T8546] loop1: detected capacity change from 0 to 512
[  404.234324][ T5911] usb 4-1: USB disconnect, device number 23
[  404.462579][ T8546] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.585: Unrecognised inode hash code 4
[  404.462617][ T8546] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.585: Corrupt directory, running e2fsck is recommended
[  404.481657][ T8546] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  404.551370][ T5911] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  404.614145][ T8546] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.585: corrupted in-inode xattr: invalid ea_ino
[  404.614183][ T8546] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  404.623915][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  404.623944][    C0] EXT4-fs (loop1): initial error at time 1777268449: ext4_iget_extra_inode:5128: inode 15
[  404.623977][    C0] EXT4-fs (loop1): last error at time 1777268449: ext4_iget_extra_inode:5128: inode 15
[  404.698993][ T5911] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  404.699995][ T5911] visor 4-1:1.0: device disconnected
[  404.745316][ T8546] EXT4-fs (loop1): Remounting filesystem read-only
[  404.809815][ T8546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.240815][ T8552] netlink: 'syz.1.585': attribute type 16 has an invalid length.
[  405.798092][ T5828] Bluetooth: hci4: command tx timeout
[  405.812483][ T5911] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  406.032291][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  406.032324][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.032346][ T5911] usb 4-1: Product: syz
[  406.032358][ T5911] usb 4-1: Manufacturer: syz
[  406.032373][ T5911] usb 4-1: SerialNumber: syz
[  406.601395][ T5911] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  406.601467][ T5911] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  407.104117][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  407.162984][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  407.200229][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  407.302320][ T5911] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[  407.312160][ T5911] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  407.312173][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  407.318707][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  407.329226][ T5911] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  407.550036][ T5911] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  407.600948][ T5911] usb 4-1: USB disconnect, device number 24
[  407.902919][ T5835] Bluetooth: hci4: command tx timeout
[  407.995849][ T8578] FAULT_INJECTION: forcing a failure.
[  407.995849][ T8578] name failslab, interval 1, probability 0, space 0, times 0
[  407.998897][ T8578] CPU: 1 UID: 0 PID: 8578 Comm: syz.3.591 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  407.998930][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  407.998943][ T8578] Call Trace:
[  407.998953][ T8578]  <TASK>
[  407.998963][ T8578]  dump_stack_lvl+0xe8/0x150
[  407.998996][ T8578]  should_fail_ex+0x46b/0x600
[  407.999033][ T8578]  should_failslab+0xa8/0x100
[  407.999071][ T8578]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  407.999105][ T8578]  ? __alloc_skb+0x1d0/0x7d0
[  407.999135][ T8578]  ? lockdep_hardirqs_on+0x7a/0x110
[  407.999174][ T8578]  __alloc_skb+0x1d0/0x7d0
[  407.999213][ T8578]  __ip6_append_data+0x2c7c/0x3e90
[  407.999262][ T8578]  ? __pfx_raw6_getfrag+0x10/0x10
[  407.999318][ T8578]  ? __pfx___ip6_append_data+0x10/0x10
[  407.999344][ T8578]  ? ip6_setup_cork+0x544/0xf30
[  407.999371][ T8578]  ? ip6_append_data+0x1c7/0x2a0
[  407.999400][ T8578]  ip6_append_data+0x10f/0x2a0
[  407.999427][ T8578]  ? __pfx_raw6_getfrag+0x10/0x10
[  407.999459][ T8578]  rawv6_sendmsg+0x12d3/0x18e0
[  407.999505][ T8578]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  407.999570][ T8578]  ? __pfx_aa_sk_perm+0x10/0x10
[  407.999600][ T8578]  ? sock_rps_record_flow+0x19/0x350
[  407.999627][ T8578]  ? inet_sendmsg+0x2f4/0x370
[  407.999649][ T8578]  ? aa_sock_msg_perm+0x122/0x200
[  407.999693][ T8578]  ? __pfx_inet_sendmsg+0x10/0x10
[  407.999715][ T8578]  sock_sendmsg_nosec+0xf9/0x150
[  407.999746][ T8578]  ____sys_sendmsg+0x55c/0x870
[  407.999776][ T8578]  ? __pfx_____sys_sendmsg+0x10/0x10
[  407.999809][ T8578]  ? import_iovec+0x73/0xa0
[  407.999845][ T8578]  ___sys_sendmsg+0x2a5/0x360
[  407.999866][ T8578]  ? __lock_acquire+0x6b5/0x2cf0
[  407.999902][ T8578]  ? __pfx____sys_sendmsg+0x10/0x10
[  407.999967][ T8578]  ? __fget_files+0x2a/0x420
[  407.999994][ T8578]  ? __fget_files+0x3a6/0x420
[  408.000034][ T8578]  __x64_sys_sendmsg+0x1c3/0x2a0
[  408.000060][ T8578]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  408.000095][ T8578]  ? __pfx_ksys_write+0x10/0x10
[  408.000138][ T8578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.000162][ T8578]  do_syscall_64+0x15f/0xf80
[  408.000194][ T8578]  ? trace_irq_disable+0x3b/0x140
[  408.000220][ T8578]  ? clear_bhb_loop+0x40/0x90
[  408.000249][ T8578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.000273][ T8578] RIP: 0033:0x7f8cc6b2cdd9
[  408.000295][ T8578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.000316][ T8578] RSP: 002b:00007f8cc4d7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.000341][ T8578] RAX: ffffffffffffffda RBX: 00007f8cc6da5fa0 RCX: 00007f8cc6b2cdd9
[  408.000358][ T8578] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004
[  408.000373][ T8578] RBP: 00007f8cc4d7e090 R08: 0000000000000000 R09: 0000000000000000
[  408.000387][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.000400][ T8578] R13: 00007f8cc6da6038 R14: 00007f8cc6da5fa0 R15: 00007ffffb4964b8
[  408.000434][ T8578]  </TASK>
[  408.350028][ T8580] loop3: detected capacity change from 0 to 64
[  408.444422][ T8580] BFS-fs: bfs_fill_super(): Impossible last inode number 257073 > 513 on loop3
[  408.658388][ T8586] netlink: 128 bytes leftover after parsing attributes in process `syz.3.593'.
[  408.668598][  T159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.694941][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.099948][ T8589] loop1: detected capacity change from 0 to 512
[  409.266120][ T8589] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  409.587332][ T8589] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.594: iget: bogus i_mode (2)
[  409.587372][ T8589] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  409.601680][    C1] EXT4-fs (loop1): initial error at time 1777268454: ext4_orphan_get:1397: inode 15
[  409.601726][    C1] EXT4-fs (loop1): last error at time 1777268454: ext4_orphan_get:1397: inode 15
[  409.666024][ T5835] Bluetooth: hci0: command tx timeout
[  409.744899][ T8589] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.594: couldn't read orphan inode 15 (err -117)
[  409.744940][ T8589] loop1: lost filesystem error report for type 5 error -117
[  409.751693][ T8589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.849620][ T8589] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.594: iget: bogus i_mode (2)
[  409.937865][ T8601] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.594: iget: bogus i_mode (2)
[  409.955406][ T5835] Bluetooth: hci4: command tx timeout
[  410.435876][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.817690][ T8611] FAULT_INJECTION: forcing a failure.
[  410.817690][ T8611] name failslab, interval 1, probability 0, space 0, times 0
[  410.817729][ T8611] CPU: 0 UID: 0 PID: 8611 Comm: syz.1.598 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  410.817754][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  410.817767][ T8611] Call Trace:
[  410.817776][ T8611]  <TASK>
[  410.817784][ T8611]  dump_stack_lvl+0xe8/0x150
[  410.817815][ T8611]  should_fail_ex+0x46b/0x600
[  410.817849][ T8611]  should_failslab+0xa8/0x100
[  410.817882][ T8611]  kmem_cache_alloc_noprof+0x87/0x680
[  410.817912][ T8611]  ? skb_clone+0x212/0x3a0
[  410.817939][ T8611]  skb_clone+0x212/0x3a0
[  410.817964][ T8611]  __netlink_deliver_tap+0x424/0x8b0
[  410.818009][ T8611]  ? netlink_deliver_tap+0x2e/0x1b0
[  410.818049][ T8611]  netlink_deliver_tap+0x19c/0x1b0
[  410.818093][ T8611]  __netlink_sendskb+0x47/0x90
[  410.818124][ T8611]  netlink_dump+0xa0f/0xe10
[  410.818178][ T8611]  ? __pfx_netlink_dump+0x10/0x10
[  410.818224][ T8611]  ? lockdep_hardirqs_on+0x7a/0x110
[  410.818269][ T8611]  __netlink_dump_start+0x5cb/0x7e0
[  410.818312][ T8611]  rtnetlink_rcv_msg+0xa3a/0xbe0
[  410.818343][ T8611]  ? __pfx_ipmr_rtm_dumproute+0x10/0x10
[  410.818367][ T8611]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  410.818395][ T8611]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  410.818431][ T8611]  ? ref_tracker_free+0x673/0x820
[  410.818457][ T8611]  ? __pfx_ipmr_rtm_dumproute+0x10/0x10
[  410.818481][ T8611]  ? __x64_sys_sendmsg+0x1c3/0x2a0
[  410.818499][ T8611]  ? do_syscall_64+0x15f/0xf80
[  410.818528][ T8611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.818561][ T8611]  netlink_rcv_skb+0x232/0x4b0
[  410.818594][ T8611]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  410.818623][ T8611]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  410.818669][ T8611]  ? netlink_deliver_tap+0x2e/0x1b0
[  410.818700][ T8611]  ? netlink_deliver_tap+0x2e/0x1b0
[  410.818739][ T8611]  netlink_unicast+0x780/0x920
[  410.818781][ T8611]  netlink_sendmsg+0x813/0xb40
[  410.818825][ T8611]  ? __pfx_netlink_sendmsg+0x10/0x10
[  410.818860][ T8611]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  410.818901][ T8611]  ? aa_sock_msg_perm+0x122/0x200
[  410.818936][ T8611]  ? __pfx_netlink_sendmsg+0x10/0x10
[  410.818967][ T8611]  sock_sendmsg_nosec+0x112/0x150
[  410.818997][ T8611]  ____sys_sendmsg+0x55c/0x870
[  410.819026][ T8611]  ? __pfx_____sys_sendmsg+0x10/0x10
[  410.819059][ T8611]  ? import_iovec+0x73/0xa0
[  410.819091][ T8611]  ___sys_sendmsg+0x2a5/0x360
[  410.819112][ T8611]  ? __lock_acquire+0x6b5/0x2cf0
[  410.819146][ T8611]  ? __pfx____sys_sendmsg+0x10/0x10
[  410.819208][ T8611]  ? __fget_files+0x2a/0x420
[  410.819235][ T8611]  ? __fget_files+0x3a6/0x420
[  410.819272][ T8611]  __x64_sys_sendmsg+0x1c3/0x2a0
[  410.819297][ T8611]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  410.819331][ T8611]  ? __pfx_ksys_write+0x10/0x10
[  410.819371][ T8611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.819395][ T8611]  do_syscall_64+0x15f/0xf80
[  410.819451][ T8611]  ? trace_irq_disable+0x3b/0x140
[  410.819476][ T8611]  ? clear_bhb_loop+0x40/0x90
[  410.819504][ T8611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.819524][ T8611] RIP: 0033:0x7f1d04bfcdd9
[  410.819545][ T8611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.819564][ T8611] RSP: 002b:00007f1d02e4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.819588][ T8611] RAX: ffffffffffffffda RBX: 00007f1d04e75fa0 RCX: 00007f1d04bfcdd9
[  410.819603][ T8611] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  410.819618][ T8611] RBP: 00007f1d02e4e090 R08: 0000000000000000 R09: 0000000000000000
[  410.819633][ T8611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.819646][ T8611] R13: 00007f1d04e76038 R14: 00007f1d04e75fa0 R15: 00007ffde4f60648
[  410.819681][ T8611]  </TASK>
[  410.858338][ T8612] loop2: detected capacity change from 0 to 16
[  410.960364][ T8612] erofs (device loop2): mounted with root inode @ nid 36.
[  411.255240][  T159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.351586][ T8615] fuse: Bad value for 'fd'
[  412.035389][ T5835] Bluetooth: hci0: command tx timeout
[  412.035430][ T5835] Bluetooth: hci4: command tx timeout
[  412.290496][ T8621] loop3: detected capacity change from 0 to 512
[  412.332400][ T8622] loop2: detected capacity change from 0 to 2048
[  412.347113][ T8621] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.603: Unrecognised inode hash code 4
[  412.347149][ T8621] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.603: Corrupt directory, running e2fsck is recommended
[  412.368881][ T8621] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  412.369025][ T8621] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.603: corrupted in-inode xattr: invalid ea_ino
[  412.369051][ T8621] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  412.376302][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  412.376330][    C1] EXT4-fs (loop3): initial error at time 1777268457: ext4_iget_extra_inode:5128: inode 15
[  412.376361][    C1] EXT4-fs (loop3): last error at time 1777268457: ext4_iget_extra_inode:5128: inode 15
[  412.389195][ T8621] EXT4-fs (loop3): Remounting filesystem read-only
[  412.419749][ T8621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.530834][ T8622] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  412.729581][ T5812] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  412.794268][ T8626] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  412.923219][ T5812] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  412.923255][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.923279][ T5812] usb 2-1: Product: syz
[  412.934770][ T5812] usb 2-1: Manufacturer: syz
[  412.934796][ T5812] usb 2-1: SerialNumber: syz
[  412.969669][ T8631] netlink: 'syz.3.603': attribute type 16 has an invalid length.
[  413.429154][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  413.429228][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  413.936459][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  413.936529][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  414.045396][ T5812] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  414.069869][ T5812] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  414.117496][ T5828] Bluetooth: hci0: command tx timeout
[  414.203818][ T5812] usb 2-1: USB disconnect, device number 22
[  414.617942][ T8634] FAULT_INJECTION: forcing a failure.
[  414.617942][ T8634] name failslab, interval 1, probability 0, space 0, times 0
[  414.617980][ T8634] CPU: 0 UID: 0 PID: 8634 Comm: syz.2.604 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  414.618006][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  414.618020][ T8634] Call Trace:
[  414.618028][ T8634]  <TASK>
[  414.618037][ T8634]  dump_stack_lvl+0xe8/0x150
[  414.618068][ T8634]  should_fail_ex+0x46b/0x600
[  414.618102][ T8634]  should_failslab+0xa8/0x100
[  414.618138][ T8634]  kmem_cache_alloc_noprof+0x87/0x680
[  414.618171][ T8634]  ? skb_clone+0x212/0x3a0
[  414.618199][ T8634]  skb_clone+0x212/0x3a0
[  414.618232][ T8634]  __netlink_deliver_tap+0x424/0x8b0
[  414.618280][ T8634]  ? netlink_deliver_tap+0x2e/0x1b0
[  414.618315][ T8634]  netlink_deliver_tap+0x19c/0x1b0
[  414.618350][ T8634]  netlink_sendskb+0x68/0x140
[  414.618383][ T8634]  netlink_rcv_skb+0x2b6/0x4b0
[  414.618426][ T8634]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  414.618460][ T8634]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  414.618507][ T8634]  ? bpf_lsm_capable+0x9/0x20
[  414.618536][ T8634]  ? security_capable+0x7e/0x2c0
[  414.618576][ T8634]  nfnetlink_rcv+0x2c0/0x27b0
[  414.618608][ T8634]  ? sock_sendmsg_nosec+0x112/0x150
[  414.618635][ T8634]  ? __pfx_snprintf+0x10/0x10
[  414.618662][ T8634]  ? unwind_get_return_address+0x4d/0x90
[  414.618689][ T8634]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  414.618726][ T8634]  ? trim_netdev_trace+0x7ac/0x840
[  414.618756][ T8634]  ? __pfx_trim_netdev_trace+0x10/0x10
[  414.618778][ T8634]  ? stack_trace_save+0xa9/0x100
[  414.618806][ T8634]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  414.618838][ T8634]  ? save_netdev_trace_buffer+0x18f/0x5f0
[  414.618868][ T8634]  ? save_netdev_trace_buffer+0x4cf/0x5f0
[  414.618902][ T8634]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  414.618926][ T8634]  ? ref_tracker_free+0x673/0x820
[  414.618953][ T8634]  ? __netlink_deliver_tap+0x636/0x8b0
[  414.618983][ T8634]  ? netlink_deliver_tap+0x19c/0x1b0
[  414.619012][ T8634]  ? netlink_unicast+0x754/0x920
[  414.619036][ T8634]  ? netlink_sendmsg+0x813/0xb40
[  414.619066][ T8634]  ? sock_sendmsg_nosec+0x112/0x150
[  414.619090][ T8634]  ? ____sys_sendmsg+0x55c/0x870
[  414.619108][ T8634]  ? ___sys_sendmsg+0x2a5/0x360
[  414.619126][ T8634]  ? __x64_sys_sendmsg+0x1c3/0x2a0
[  414.619146][ T8634]  ? do_syscall_64+0x15f/0xf80
[  414.619176][ T8634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.619218][ T8634]  ? skb_clone+0x246/0x3a0
[  414.619243][ T8634]  ? __netlink_deliver_tap+0x866/0x8b0
[  414.619277][ T8634]  ? netlink_deliver_tap+0x2e/0x1b0
[  414.619317][ T8634]  ? netlink_deliver_tap+0x2e/0x1b0
[  414.619350][ T8634]  ? netlink_deliver_tap+0x2e/0x1b0
[  414.619389][ T8634]  netlink_unicast+0x780/0x920
[  414.619438][ T8634]  netlink_sendmsg+0x813/0xb40
[  414.619484][ T8634]  ? __pfx_netlink_sendmsg+0x10/0x10
[  414.619520][ T8634]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  414.619563][ T8634]  ? aa_sock_msg_perm+0x122/0x200
[  414.619597][ T8634]  ? __pfx_netlink_sendmsg+0x10/0x10
[  414.619629][ T8634]  sock_sendmsg_nosec+0x112/0x150
[  414.619660][ T8634]  ____sys_sendmsg+0x55c/0x870
[  414.619687][ T8634]  ? __pfx_____sys_sendmsg+0x10/0x10
[  414.619719][ T8634]  ? import_iovec+0x73/0xa0
[  414.619754][ T8634]  ___sys_sendmsg+0x2a5/0x360
[  414.619773][ T8634]  ? __lock_acquire+0x6b5/0x2cf0
[  414.619808][ T8634]  ? __pfx____sys_sendmsg+0x10/0x10
[  414.619868][ T8634]  ? __fget_files+0x2a/0x420
[  414.619893][ T8634]  ? __fget_files+0x3a6/0x420
[  414.619929][ T8634]  __x64_sys_sendmsg+0x1c3/0x2a0
[  414.619951][ T8634]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  414.619982][ T8634]  ? __pfx_ksys_write+0x10/0x10
[  414.620023][ T8634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.620048][ T8634]  do_syscall_64+0x15f/0xf80
[  414.620078][ T8634]  ? trace_irq_disable+0x3b/0x140
[  414.620102][ T8634]  ? clear_bhb_loop+0x40/0x90
[  414.620128][ T8634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.620151][ T8634] RIP: 0033:0x7fc943ddcdd9
[  414.620172][ T8634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.620191][ T8634] RSP: 002b:00007fc942036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  414.620216][ T8634] RAX: ffffffffffffffda RBX: 00007fc944055fa0 RCX: 00007fc943ddcdd9
[  414.620231][ T8634] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007
[  414.620245][ T8634] RBP: 00007fc942036090 R08: 0000000000000000 R09: 0000000000000000
[  414.620258][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.620271][ T8634] R13: 00007fc944056038 R14: 00007fc944055fa0 R15: 00007ffc37287c88
[  414.620307][ T8634]  </TASK>
[  414.867033][   T37] audit: type=1326 audit(1777268459.929:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.1.605" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d04bfcdd9 code=0x0
[  414.952957][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.962087][ T8640] loop2: detected capacity change from 0 to 1024
[  415.375938][ T8640] hfsplus: failed to load catalog file
[  415.455168][ T8640] loop2: detected capacity change from 0 to 2048
[  415.470217][ T8640] udf: Unknown parameter 'hfsplus'
[  415.509844][  T159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.747963][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'.
[  415.936751][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  415.996930][ T8647] loop3: detected capacity change from 0 to 8192
[  416.000170][ T8652] usb usb8: usbfs: process 8652 (syz.2.610) did not claim interface 0 before use
[  416.050072][ T8652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.610'.
[  416.092051][ T8647] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  416.137913][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.137953][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  416.138061][   T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  416.138088][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.193766][ T5828] Bluetooth: hci0: command tx timeout
[  416.194233][   T10] usb 2-1: config 0 descriptor??
[  416.477013][  T159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.617810][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.618504][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.685433][   T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  416.685476][   T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  416.685501][   T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  416.685527][   T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  416.685552][   T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  416.740117][   T10] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[  416.813562][  T824] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  416.866851][   T10] playstation 0003:054C:0DF2.0002: Invalid byte count transferred, expected 20 got 0
[  416.866884][   T10] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22
[  416.866943][   T10] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense
[  416.866960][   T10] playstation 0003:054C:0DF2.0002: Failed to create dualsense.
[  416.976793][   T10] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -22
[  417.008134][  T824] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  417.008168][  T824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.044384][  T824] usb 3-1: config 0 descriptor??
[  417.186284][   T32] usb 2-1: USB disconnect, device number 23
[  417.295676][ T8654] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0
[  417.300737][ T8654] PKCS7: Only support pkcs7_signedData type
[  418.431685][ T8669] IPv6: Can't replace route, no match found
[  421.468126][ T8691] loop2: detected capacity change from 0 to 512
[  421.534012][ T8691] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.616: Unrecognised inode hash code 4
[  421.534049][ T8691] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.616: Corrupt directory, running e2fsck is recommended
[  421.534758][ T8691] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  421.534921][ T8691] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.616: corrupted in-inode xattr: invalid ea_ino
[  421.534951][ T8691] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  421.536152][ T8691] EXT4-fs (loop2): Remounting filesystem read-only
[  421.542593][ T8691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.896398][ T8540] chnl_net:caif_netlink_parms(): no params data found
[  422.186035][ T8700] netlink: 'syz.2.616': attribute type 16 has an invalid length.
[  422.861321][ T8706] FAULT_INJECTION: forcing a failure.
[  422.861321][ T8706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  422.861366][ T8706] CPU: 1 UID: 0 PID: 8706 Comm: syz.1.619 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  422.861391][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  422.861405][ T8706] Call Trace:
[  422.861413][ T8706]  <TASK>
[  422.861423][ T8706]  dump_stack_lvl+0xe8/0x150
[  422.861454][ T8706]  should_fail_ex+0x46b/0x600
[  422.861489][ T8706]  _copy_from_iter+0x1d3/0x1670
[  422.861517][ T8706]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  422.861541][ T8706]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  422.861585][ T8706]  ? __pfx__copy_from_iter+0x10/0x10
[  422.861611][ T8706]  ? trace_kmalloc+0x2a/0xf0
[  422.861647][ T8706]  ? __kmalloc_noprof+0x408/0x7b0
[  422.861688][ T8706]  bcm_tx_setup+0x6e1/0x1bf0
[  422.861739][ T8706]  bcm_sendmsg+0x46e/0x6c0
[  422.861775][ T8706]  ? __pfx_bcm_sendmsg+0x10/0x10
[  422.861811][ T8706]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  422.861853][ T8706]  ? aa_sock_msg_perm+0x122/0x200
[  422.861888][ T8706]  ? __pfx_bcm_sendmsg+0x10/0x10
[  422.861915][ T8706]  sock_sendmsg_nosec+0x112/0x150
[  422.861947][ T8706]  ____sys_sendmsg+0x55c/0x870
[  422.861976][ T8706]  ? __pfx_____sys_sendmsg+0x10/0x10
[  422.862009][ T8706]  ? import_iovec+0x73/0xa0
[  422.862042][ T8706]  ___sys_sendmsg+0x2a5/0x360
[  422.862064][ T8706]  ? __lock_acquire+0x6b5/0x2cf0
[  422.862099][ T8706]  ? __pfx____sys_sendmsg+0x10/0x10
[  422.862163][ T8706]  ? __fget_files+0x2a/0x420
[  422.862191][ T8706]  ? __fget_files+0x3a6/0x420
[  422.862230][ T8706]  __x64_sys_sendmsg+0x1c3/0x2a0
[  422.862256][ T8706]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  422.862290][ T8706]  ? __pfx_ksys_write+0x10/0x10
[  422.862330][ T8706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.862355][ T8706]  do_syscall_64+0x15f/0xf80
[  422.862386][ T8706]  ? trace_irq_disable+0x3b/0x140
[  422.862412][ T8706]  ? clear_bhb_loop+0x40/0x90
[  422.862441][ T8706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.862462][ T8706] RIP: 0033:0x7f1d04bfcdd9
[  422.862484][ T8706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.862503][ T8706] RSP: 002b:00007f1d02e2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  422.862527][ T8706] RAX: ffffffffffffffda RBX: 00007f1d04e76090 RCX: 00007f1d04bfcdd9
[  422.862543][ T8706] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000006
[  422.862557][ T8706] RBP: 00007f1d02e2d090 R08: 0000000000000000 R09: 0000000000000000
[  422.862580][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.862592][ T8706] R13: 00007f1d04e76128 R14: 00007f1d04e76090 R15: 00007ffde4f60648
[  422.862627][ T8706]  </TASK>
[  423.772568][  T823] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  423.950215][  T823] usb 4-1: Invalid ep0 maxpacket: 64
[  423.964413][ T8710] FAULT_INJECTION: forcing a failure.
[  423.964413][ T8710] name failslab, interval 1, probability 0, space 0, times 0
[  423.964451][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  423.964476][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  423.964490][ T8710] Call Trace:
[  423.964498][ T8710]  <TASK>
[  423.964507][ T8710]  dump_stack_lvl+0xe8/0x150
[  423.964538][ T8710]  should_fail_ex+0x46b/0x600
[  423.964578][ T8710]  should_failslab+0xa8/0x100
[  423.964614][ T8710]  __kmalloc_cache_noprof+0x84/0x690
[  423.964646][ T8710]  ? do_mq_timedreceive+0x3d1/0xb30
[  423.964680][ T8710]  do_mq_timedreceive+0x3d1/0xb30
[  423.964717][ T8710]  ? __pfx_do_mq_timedreceive+0x10/0x10
[  423.964751][ T8710]  ? rt_mutex_slowunlock+0x1cb/0x300
[  423.964796][ T8710]  __x64_sys_mq_timedreceive+0x17a/0x220
[  423.964826][ T8710]  ? __pfx___x64_sys_mq_timedreceive+0x10/0x10
[  423.964851][ T8710]  ? __task_pid_nr_ns+0x28/0x470
[  423.964885][ T8710]  ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0
[  423.964916][ T8710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.964940][ T8710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.964964][ T8710]  do_syscall_64+0x15f/0xf80
[  423.964994][ T8710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.965016][ T8710]  ? clear_bhb_loop+0x40/0x90
[  423.965044][ T8710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.965065][ T8710] RIP: 0033:0x7f1d04bfcdd9
[  423.965086][ T8710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  423.965105][ T8710] RSP: 002b:00007f1d02e4e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3
[  423.965130][ T8710] RAX: ffffffffffffffda RBX: 00007f1d04e75fa0 RCX: 00007f1d04bfcdd9
[  423.965147][ T8710] RDX: 0000000000001000 RSI: 0000200000000640 RDI: 0000000000000004
[  423.965161][ T8710] RBP: 00007f1d02e4e090 R08: 0000000000000000 R09: 0000000000000000
[  423.965175][ T8710] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  423.965188][ T8710] R13: 00007f1d04e76038 R14: 00007f1d04e75fa0 R15: 00007ffde4f60648
[  423.965223][ T8710]  </TASK>
[  424.076383][  T823] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  424.373842][  T823] usb 4-1: Invalid ep0 maxpacket: 64
[  424.530240][  T823] usb usb4-port1: attempt power cycle
[  425.038743][  T823] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  425.120868][  T823] usb 4-1: Invalid ep0 maxpacket: 64
[  425.281230][  T823] usb 4-1: new low-speed USB device number 28 using dummy_hcd
[  425.297127][  T823] usb 4-1: Invalid ep0 maxpacket: 64
[  425.304486][  T823] usb usb4-port1: unable to enumerate USB device
[  425.655790][ T8571] chnl_net:caif_netlink_parms(): no params data found
[  425.761883][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.003083][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.094426][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.094813][ T8540] bridge_slave_0: entered allmulticast mode
[  426.118273][ T8540] bridge_slave_0: entered promiscuous mode
[  426.812287][  T159] bridge_slave_1: left allmulticast mode
[  426.816944][  T159] bridge_slave_1: left promiscuous mode
[  426.817271][  T159] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.937467][  T159] bridge_slave_0: left allmulticast mode
[  426.937509][  T159] bridge_slave_0: left promiscuous mode
[  426.937983][  T159] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.601369][ T8723] loop3: detected capacity change from 0 to 32768
[  427.655458][  T823] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  427.699627][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'.
[  427.699661][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'.
[  427.852069][  T823] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  427.852103][  T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.852125][  T823] usb 2-1: Product: syz
[  427.852140][  T823] usb 2-1: Manufacturer: syz
[  427.852156][  T823] usb 2-1: SerialNumber: syz
[  428.357600][  T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  428.357669][  T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  428.887560][  T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  428.887628][  T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  428.929010][  T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  429.004836][  T823] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  429.051499][  T823] usb 2-1: USB disconnect, device number 24
[  430.216240][ T8740] loop3: detected capacity change from 0 to 8
[  430.618043][ T8742] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  430.641332][ T8740] SQUASHFS error: Unable to read directory block [2c0:35]
[  433.036731][  T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.117098][  T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.191912][  T159] bond0 (unregistering): Released all slaves
[  433.398917][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.399152][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.399394][ T8540] bridge_slave_1: entered allmulticast mode
[  433.530353][ T8540] bridge_slave_1: entered promiscuous mode
[  433.713865][ T8751] IPv6: Can't replace route, no match found
[  435.101207][  T824] ath6kl: Failed to submit usb control message: -71
[  435.101265][  T824] ath6kl: unable to send the bmi data to the device: -71
[  435.101281][  T824] ath6kl: Unable to send get target info: -71
[  435.156021][  T824] ath6kl: Failed to init ath6kl core: -71
[  435.159207][  T824] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  435.320467][ T8756] loop2: detected capacity change from 0 to 512
[  435.349679][  T824] usb 3-1: USB disconnect, device number 15
[  435.378948][ T8756] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.631: Unrecognised inode hash code 4
[  435.378985][ T8756] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.631: Corrupt directory, running e2fsck is recommended
[  435.379745][ T8756] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  435.380158][ T8756] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.631: corrupted in-inode xattr: invalid ea_ino
[  435.380190][ T8756] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  435.380729][ T8756] EXT4-fs (loop2): Remounting filesystem read-only
[  435.674928][ T8756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.945142][ T8756] netlink: 'syz.2.631': attribute type 16 has an invalid length.
[  436.161545][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.253094][ T8540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.345705][ T8540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.424384][ T8765] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  436.943583][  T824] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  437.099590][  T824] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  437.099626][  T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.099647][  T824] usb 2-1: Product: syz
[  437.099662][  T824] usb 2-1: Manufacturer: syz
[  437.099678][  T824] usb 2-1: SerialNumber: syz
[  437.609034][  T824] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  437.609104][  T824] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  437.851303][ T5828] Bluetooth: hci3: SCO packet for unknown connection handle 200
[  437.888021][  T824] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  437.888090][  T824] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  437.888957][  T824] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  437.970298][  T824] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  437.971167][ T5828] Bluetooth: hci3: connection err: -111
[  438.070666][  T824] usb 2-1: USB disconnect, device number 25
[  438.392168][ T8760] loop3: detected capacity change from 0 to 32768
[  438.854122][ T8760] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.632 (8760)
[  438.892252][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.892578][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.892886][ T8571] bridge_slave_0: entered allmulticast mode
[  439.867439][ T8571] bridge_slave_0: entered promiscuous mode
[  440.293650][ T6028] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  440.475069][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.475170][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.477452][ T6028] usb 2-1: Using ep0 maxpacket: 8
[  440.485844][ T6028] usb 2-1: unable to get BOS descriptor or descriptor too short
[  440.497234][ T6028] usb 2-1: config 0 has an invalid interface number: 122 but max is 0
[  440.497262][ T6028] usb 2-1: config 0 has no interface number 0
[  440.497308][ T6028] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024
[  440.497337][ T6028] usb 2-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85
[  440.497362][ T6028] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024
[  440.497389][ T6028] usb 2-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024
[  440.497413][ T6028] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0
[  440.497434][ T6028] usb 2-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0
[  440.497466][ T6028] usb 2-1: config 0 interface 122 has no altsetting 0
[  440.527652][ T6028] usb 2-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a
[  440.527683][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.527703][ T6028] usb 2-1: Product: syz
[  440.527716][ T6028] usb 2-1: Manufacturer: syz
[  440.527731][ T6028] usb 2-1: SerialNumber: syz
[  440.578780][ T6028] usb 2-1: config 0 descriptor??
[  440.582488][ T8788] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  440.582954][ T8788] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  441.141869][ T6028] pl2303 2-1:0.122: pl2303 converter detected
[  441.209696][ T8760] BTRFS error (device loop3): open_ctree failed: -4
[  441.243714][ T6028] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -110
[  441.244093][ T6028] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0404]: -32
[  441.244659][ T6028] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -32
[  441.245121][ T6028] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8383]: -32
[  441.245519][ T6028] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -32
[  441.245917][ T6028] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0404]: -32
[  441.246313][ T6028] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -32
[  441.246709][ T6028] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8383]: -32
[  441.247187][ T6028] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0000]: -32
[  441.247711][ T6028] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0001]: -32
[  441.248136][ T6028] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0002]: -32
[  441.443760][ T8540] team0: Port device team_slave_0 added
[  441.446962][ T6028] usb 2-1: pl2303 converter now attached to ttyUSB0
[  441.448099][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.448550][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.448918][ T8571] bridge_slave_1: entered allmulticast mode
[  441.644417][ T8571] bridge_slave_1: entered promiscuous mode
[  441.709609][ T6028] usb 2-1: USB disconnect, device number 26
[  441.718986][ T8540] team0: Port device team_slave_1 added
[  441.780127][ T6028] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  442.027289][ T6028] pl2303 2-1:0.122: device disconnected
[  442.237316][ T8798] loop1: detected capacity change from 0 to 512
[  442.269577][ T8798] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.643: Unrecognised inode hash code 4
[  442.269615][ T8798] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.643: Corrupt directory, running e2fsck is recommended
[  442.270706][ T8798] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  442.270802][ T8798] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.643: corrupted in-inode xattr: invalid ea_ino
[  442.270822][ T8798] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  442.283383][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  442.283411][    C1] EXT4-fs (loop1): initial error at time 1777268487: ext4_iget_extra_inode:5128: inode 15
[  442.283436][    C1] EXT4-fs (loop1): last error at time 1777268487: ext4_iget_extra_inode:5128: inode 15
[  442.379916][ T8798] EXT4-fs (loop1): Remounting filesystem read-only
[  442.432974][ T8798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.648035][ T8798] netlink: 'syz.1.643': attribute type 16 has an invalid length.
[  442.828693][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.137619][ T8571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.163837][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.163850][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.163868][ T8540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.368591][ T8808] loop2: detected capacity change from 0 to 1024
[  443.376061][ T8808] EXT4-fs: inline encryption not supported
[  443.380389][ T8808] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  443.398036][  T159] hsr_slave_0: left promiscuous mode
[  443.412334][ T8808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.468250][  T159] hsr_slave_1: left promiscuous mode
[  443.469330][  T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.469361][  T159] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.502042][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'.
[  443.514053][ T8813] IPv6: Can't replace route, no match found
[  443.689749][  T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.689782][  T159] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.754672][ T5812] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  444.847689][  T159] veth1_macvtap: left promiscuous mode
[  444.847759][  T159] veth0_macvtap: left promiscuous mode
[  444.847935][  T159] veth1_vlan: left promiscuous mode
[  444.911785][  T159] veth0_vlan: left promiscuous mode
[  444.926580][ T5812] usb 2-1: unable to get BOS descriptor or descriptor too short
[  444.927907][ T5812] usb 2-1: config 125 has an invalid interface number: 38 but max is 0
[  444.927935][ T5812] usb 2-1: config 125 has no interface number 0
[  444.927969][ T5812] usb 2-1: config 125 interface 38 has no altsetting 0
[  444.930378][ T5812] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  444.930408][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.930429][ T5812] usb 2-1: Product: syz
[  444.930446][ T5812] usb 2-1: Manufacturer: syz
[  444.930460][ T5812] usb 2-1: SerialNumber: syz
[  445.221480][   T32] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  445.474252][   T32] usb 4-1: device descriptor read/64, error -71
[  445.765354][   T32] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  446.213502][   T32] usb 4-1: device descriptor read/64, error -71
[  446.328762][   T32] usb usb4-port1: attempt power cycle
[  446.859703][   T32] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  446.890976][   T32] usb 4-1: device descriptor read/8, error -71
[  447.080317][ T5812] usb 2-1: USB disconnect, device number 27
[  447.204839][   T32] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  447.224956][   T32] usb 4-1: device descriptor read/8, error -71
[  447.334286][   T32] usb usb4-port1: unable to enumerate USB device
[  447.723785][ T8823] loop1: detected capacity change from 0 to 32768
[  447.727489][ T8823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.649 (8823)
[  447.779920][ T8823] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  447.779957][ T8823] BTRFS info (device loop1): using sha256 checksum algorithm
[  448.389101][ T8823] BTRFS info (device loop1): setting nodatasum
[  448.389129][ T8823] BTRFS info (device loop1): enabling ssd optimizations
[  448.389149][ T8823] BTRFS info (device loop1): turning on async discard
[  448.389166][ T8823] BTRFS info (device loop1): enabling free space tree
[  448.505714][ T8823] FAULT_INJECTION: forcing a failure.
[  448.505714][ T8823] name failslab, interval 1, probability 0, space 0, times 0
[  448.505740][ T8823] CPU: 1 UID: 0 PID: 8823 Comm: syz.1.649 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  448.505755][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  448.505763][ T8823] Call Trace:
[  448.505768][ T8823]  <TASK>
[  448.505774][ T8823]  dump_stack_lvl+0xe8/0x150
[  448.505794][ T8823]  should_fail_ex+0x46b/0x600
[  448.505814][ T8823]  should_failslab+0xa8/0x100
[  448.505834][ T8823]  kmem_cache_alloc_noprof+0x87/0x680
[  448.505856][ T8823]  ? btrfs_real_readdir+0x41d/0x1400
[  448.505872][ T8823]  ? btrfs_alloc_path+0x9/0x30
[  448.505886][ T8823]  btrfs_real_readdir+0x41d/0x1400
[  448.505912][ T8823]  ? iterate_dir+0x29e/0x580
[  448.505925][ T8823]  ? __pfx_btrfs_real_readdir+0x10/0x10
[  448.505950][ T8823]  ? down_read_killable+0x14c/0x220
[  448.505965][ T8823]  ? down_read_interruptible+0x1f0/0x220
[  448.505986][ T8823]  ? apparmor_file_permission+0x1f4/0x300
[  448.506011][ T8823]  iterate_dir+0x3a5/0x580
[  448.506026][ T8823]  __se_sys_getdents64+0xf1/0x280
[  448.506119][ T8823]  ? __pfx___se_sys_getdents64+0x10/0x10
[  448.506130][ T8823]  ? ksys_write+0x248/0x270
[  448.506148][ T8823]  ? __pfx_filldir64+0x10/0x10
[  448.506161][ T8823]  ? __pfx_ksys_write+0x10/0x10
[  448.506185][ T8823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.506199][ T8823]  do_syscall_64+0x15f/0xf80
[  448.506216][ T8823]  ? trace_irq_disable+0x3b/0x140
[  448.506231][ T8823]  ? clear_bhb_loop+0x40/0x90
[  448.506246][ T8823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.506269][ T8823] RIP: 0033:0x7f1d04bfcdd9
[  448.506282][ T8823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.506293][ T8823] RSP: 002b:00007f1d02e4e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  448.506308][ T8823] RAX: ffffffffffffffda RBX: 00007f1d04e75fa0 RCX: 00007f1d04bfcdd9
[  448.506317][ T8823] RDX: 00000000000000e0 RSI: 0000200000000fc0 RDI: 0000000000000005
[  448.506326][ T8823] RBP: 00007f1d02e4e090 R08: 0000000000000000 R09: 0000000000000000
[  448.506334][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.506341][ T8823] R13: 00007f1d04e76038 R14: 00007f1d04e75fa0 R15: 00007ffde4f60648
[  448.506361][ T8823]  </TASK>
[  448.662910][   T32] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  448.831962][   T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  448.831995][   T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  448.832062][   T32] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  448.832090][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.873652][   T32] usb 4-1: config 0 descriptor??
[  448.902724][   T32] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  448.903012][   T32] dvb-usb: bulk message failed: -22 (3/0)
[  449.009273][   T32] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  449.011983][   T32] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  449.012042][   T32] usb 4-1: media controller created
[  449.017076][   T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  449.171927][ T8845] dvb-usb: bulk message failed: -22 (3/0)
[  449.252573][   T32] dvb-usb: bulk message failed: -22 (6/0)
[  449.291857][   T32] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  449.304704][   T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10
[  449.327176][   T32] dvb-usb: schedule remote query interval to 150 msecs.
[  449.327202][   T32] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  449.354126][  T159] team0 (unregistering): Port device team_slave_1 removed
[  449.418400][   T32] usb 4-1: USB disconnect, device number 33
[  449.499147][  T159] team0 (unregistering): Port device team_slave_0 removed
[  449.599331][ T5827] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  450.007994][   T32] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  450.271944][ T8847] loop3: detected capacity change from 0 to 512
[  450.435682][ T8847] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.653: Unrecognised inode hash code 4
[  450.435716][ T8847] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.653: Corrupt directory, running e2fsck is recommended
[  450.437228][ T8847] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  450.437321][ T8847] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.653: corrupted in-inode xattr: invalid ea_ino
[  450.437341][ T8847] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  450.443410][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  450.443436][    C0] EXT4-fs (loop3): initial error at time 1777268495: ext4_iget_extra_inode:5128: inode 15
[  450.443469][    C0] EXT4-fs (loop3): last error at time 1777268495: ext4_iget_extra_inode:5128: inode 15
[  450.447164][ T8847] EXT4-fs (loop3): Remounting filesystem read-only
[  450.449096][ T8847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.761322][ T8847] netlink: 'syz.3.653': attribute type 16 has an invalid length.
[  450.901799][ T8571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.954920][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.954939][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.954966][ T8540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.957295][ T6026] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  451.095615][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.123610][ T6026] usb 2-1: Using ep0 maxpacket: 32
[  451.144130][ T6026] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  451.144188][ T6026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.144210][ T6026] usb 2-1: Product: syz
[  451.144226][ T6026] usb 2-1: Manufacturer: syz
[  451.144243][ T6026] usb 2-1: SerialNumber: syz
[  451.224383][ T8808] veth3: entered promiscuous mode
[  451.228465][ T6026] usb 2-1: config 0 descriptor??
[  451.259525][ T6026] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  451.579158][ T8851] loop1: detected capacity change from 0 to 256
[  451.766814][ T6026] gspca_topro: reg_w err -110
[  451.793733][ T6026] gspca_topro: Sensor soi763a
[  451.795391][ T8571] team0: Port device team_slave_0 added
[  451.818376][ T8851] FAT-fs (loop1): Directory bread(block 64) failed
[  451.818413][ T8851] FAT-fs (loop1): Directory bread(block 65) failed
[  451.818508][ T8851] FAT-fs (loop1): Directory bread(block 66) failed
[  451.818530][ T8851] FAT-fs (loop1): Directory bread(block 67) failed
[  451.818619][ T8851] FAT-fs (loop1): Directory bread(block 68) failed
[  451.818640][ T8851] FAT-fs (loop1): Directory bread(block 69) failed
[  451.818726][ T8851] FAT-fs (loop1): Directory bread(block 70) failed
[  451.818745][ T8851] FAT-fs (loop1): Directory bread(block 71) failed
[  451.818833][ T8851] FAT-fs (loop1): Directory bread(block 72) failed
[  451.818853][ T8851] FAT-fs (loop1): Directory bread(block 73) failed
[  451.822208][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.012028][ T8571] team0: Port device team_slave_1 added
[  452.182791][ T8862] IPv6: Can't replace route, no match found
[  452.391494][   T37] audit: type=1800 audit(1777268497.219:303): pid=8851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.652" name="file2" dev="loop1" ino=1048618 res=0 errno=0
[  453.798745][ T5912] usb 2-1: USB disconnect, device number 28
[  453.945352][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'.
[  454.429731][ T8868] loop3: detected capacity change from 0 to 40427
[  454.454689][ T8865] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  454.522922][ T8868] F2FS-fs (loop3): invalid crc value
[  454.686465][ T8868] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  454.736749][ T8540] hsr_slave_0: entered promiscuous mode
[  454.737734][ T8868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  455.242068][ T8881] loop2: detected capacity change from 0 to 1024
[  455.352895][ T8540] hsr_slave_1: entered promiscuous mode
[  455.433000][ T8881] hfsplus: invalid extent max_key_len 0
[  455.433230][ T8881] hfsplus: failed to load extents file
[  455.560501][ T8540] debugfs: 'hsr0' already exists in 'hsr'
[  455.560523][ T8540] Cannot create hsr debugfs directory
[  455.608134][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.608154][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.608184][ T8571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.670630][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.670648][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.670675][ T8571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.743510][ T5912] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  455.949610][ T5912] usb 2-1: Using ep0 maxpacket: 32
[  455.952149][ T5912] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  455.952181][ T5912] usb 2-1: config 0 has no interface number 0
[  455.952233][ T5912] usb 2-1: config 0 interface 184 has no altsetting 0
[  455.957191][ T5912] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  455.957226][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.957248][ T5912] usb 2-1: Product: syz
[  455.957265][ T5912] usb 2-1: Manufacturer: syz
[  455.957281][ T5912] usb 2-1: SerialNumber: syz
[  456.033934][ T5912] usb 2-1: config 0 descriptor??
[  456.533354][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.534356][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.679286][ T8883] loop1: detected capacity change from 0 to 1024
[  457.851190][ T8571] hsr_slave_0: entered promiscuous mode
[  457.861448][ T8571] hsr_slave_1: entered promiscuous mode
[  457.867271][ T8571] debugfs: 'hsr0' already exists in 'hsr'
[  457.867301][ T8571] Cannot create hsr debugfs directory
[  460.420162][ T5912] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  460.420197][ T5912] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  460.420217][ T5912] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  460.420519][ T5912] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  460.429261][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1
[  460.507671][ T5912] usb 2-1: USB disconnect, device number 29
[  460.716106][ T8903] loop3: detected capacity change from 0 to 2048
[  460.946161][ T8903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  461.133077][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'.
[  461.144530][   T37] audit: type=1800 audit(1777268506.209:304): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.664" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  461.161173][ T8911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'.
[  461.443659][ T6028] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  461.592293][ T8914] loop1: detected capacity change from 0 to 256
[  461.594227][ T8914] exfat: Deprecated parameter 'namecase'
[  461.619627][ T6028] usb 4-1: config index 0 descriptor too short (expected 90, got 45)
[  461.632990][ T6028] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  461.633021][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.633040][ T6028] usb 4-1: Product: syz
[  461.633053][ T6028] usb 4-1: Manufacturer: syz
[  461.633067][ T6028] usb 4-1: SerialNumber: syz
[  462.096678][ T8914] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  462.389684][ T8916] overlayfs: missing 'lowerdir'
[  462.506831][ T8918] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  462.506864][ T8918] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  462.506981][ T8918] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  462.507000][ T8918] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  463.225423][ T6028] rtl8150 4-1:1.0: couldn't reset the device
[  463.240558][ T6028] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  463.617195][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  463.692445][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  463.722673][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  463.796501][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  463.797381][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  463.905521][ T6028] usb 4-1: USB disconnect, device number 34
[  464.443880][ T8926] loop1: detected capacity change from 0 to 512
[  464.450082][ T8929] IPv6: Can't replace route, no match found
[  464.675568][ T8926] EXT4-fs (loop1): Test dummy encryption mode enabled
[  464.675594][ T8926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  464.838218][ T8926] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.668: bad orphan inode 131083
[  464.838290][ T8926] loop1: lost filesystem error report for type 5 error -117
[  464.851120][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  464.851195][    C1] EXT4-fs (loop1): initial error at time 1777268509: ext4_orphan_get:1423
[  464.851274][    C1] EXT4-fs (loop1): last error at time 1777268509: ext4_orphan_get:1423
[  465.443444][ T8926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  465.462802][ T8926] 9p: Bad value for 'rfdno'
[  465.849672][ T8926] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  465.979438][ T8936] loop3: detected capacity change from 0 to 512
[  466.095241][ T8936] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  466.095270][ T8936] EXT4-fs (loop3): filesystem is read-only
[  466.120886][ T5835] Bluetooth: hci5: command tx timeout
[  466.583457][ T6028] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  466.710711][ T8926] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  466.743743][ T6028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  466.743799][ T6028] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  466.743825][ T6028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.789828][ T6028] usb 4-1: config 0 descriptor??
[  466.972878][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.068041][ T6028] ath6kl: Failed to submit usb control message: -71
[  467.068098][ T6028] ath6kl: unable to send the bmi data to the device: -71
[  467.068115][ T6028] ath6kl: Unable to send get target info: -71
[  467.076713][ T6028] ath6kl: Failed to init ath6kl core: -71
[  467.082749][ T6028] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  467.149713][ T6028] usb 4-1: USB disconnect, device number 35
[  467.480407][ T8948] loop1: detected capacity change from 0 to 256
[  468.149050][ T5812] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  468.198051][ T5830] Bluetooth: hci5: command tx timeout
[  468.199444][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  468.260205][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  468.262214][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  468.287761][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  468.288533][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  468.335979][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  468.336044][ T5812] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  468.336069][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.377629][ T5812] usb 4-1: config 0 descriptor??
[  468.563136][ T8958] loop1: detected capacity change from 0 to 512
[  468.636828][ T8958] EXT4-fs: inline encryption not supported
[  468.941525][ T8958] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.672: bad orphan inode 15
[  468.941564][ T8958] loop1: lost filesystem error report for type 5 error -117
[  468.942511][ T5812] ath6kl: Failed to read usb control message: -71
[  468.942568][ T5812] ath6kl: Unable to read the bmi data from the device: -71
[  468.942584][ T5812] ath6kl: Unable to recv target info: -71
[  468.943418][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  468.943439][    C0] EXT4-fs (loop1): initial error at time 1777268513: ext4_orphan_get:1423
[  468.943463][    C0] EXT4-fs (loop1): last error at time 1777268513: ext4_orphan_get:1423
[  468.955542][ T8958] ext4_test_bit(bit=14, block=5) = 0
[  468.958521][ T8958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.965126][ T5812] ath6kl: Failed to init ath6kl core: -71
[  468.965726][ T5812] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  468.999520][ T8958] EXT4-fs (loop1): shut down requested (1)
[  469.019091][ T5812] usb 4-1: USB disconnect, device number 36
[  469.337539][ T8964] loop2: detected capacity change from 0 to 128
[  469.349431][ T8964] qnx6: Unknown parameter ' '
[  470.071454][ T5487] 8021q: adding VLAN 0 to HW filter on device eth2
[  470.162355][ T5812] libceph: connect (1)[c::]:6789 error -101
[  470.176773][ T5812] libceph: mon0 (1)[c::]:6789 connect error
[  470.248869][ T5812] libceph: connect (1)[c::]:6789 error -101
[  470.249106][ T5812] libceph: mon0 (1)[c::]:6789 connect error
[  470.276926][ T5835] Bluetooth: hci5: command tx timeout
[  470.315022][ T8969] ceph: No mds server is up or the cluster is laggy
[  470.317756][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.509190][ T5812] libceph: connect (1)[c::]:6789 error -101
[  470.509408][ T5812] libceph: mon0 (1)[c::]:6789 connect error
[  470.517088][ T5835] Bluetooth: hci6: command tx timeout
[  470.586173][ T8982] IPv6: Can't replace route, no match found
[  472.072520][ T5812] libceph: connect (1)[c::]:6789 error -101
[  472.336230][ T5812] libceph: mon0 (1)[c::]:6789 connect error
[  472.353423][ T5835] Bluetooth: hci5: command tx timeout
[  472.878792][ T5835] Bluetooth: hci6: command tx timeout
[  473.333729][   T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  473.418096][ T6028] libceph: connect (1)[c::]:6789 error -101
[  473.418319][ T6028] libceph: mon0 (1)[c::]:6789 connect error
[  473.507830][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.507870][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  473.507913][   T32] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  473.507938][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.581687][   T32] usb 3-1: config 0 descriptor??
[  473.953778][ T6026] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  473.954062][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  474.076503][ T9015] loop3: detected capacity change from 0 to 1024
[  474.077807][ T9015] EXT4-fs: Ignoring removed bh option
[  474.077966][ T9015] EXT4-fs: Ignoring removed bh option
[  474.139362][ T6026] usb 2-1: device descriptor read/64, error -32
[  474.198803][ T9015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.373927][ T6026] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  474.551040][ T6026] usb 2-1: Using ep0 maxpacket: 16
[  474.560888][ T6026] usb 2-1: config 254 has an invalid interface number: 235 but max is 0
[  474.560920][ T6026] usb 2-1: config 254 has no interface number 0
[  474.560968][ T6026] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  474.560993][ T6026] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  474.561024][ T6026] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  474.561050][ T6026] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0
[  474.561565][ T6026] usb 2-1: config 254 interface 235 has no altsetting 0
[  474.577392][ T6026] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  474.577429][ T6026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.577453][ T6026] usb 2-1: Product: syz
[  474.577468][ T6026] usb 2-1: Manufacturer: syz
[  474.577483][ T6026] usb 2-1: SerialNumber: syz
[  474.705407][ T9008] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  474.844381][   T32] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71
[  474.911628][   T32] usb 3-1: USB disconnect, device number 16
[  474.913408][ T5835] Bluetooth: hci6: command tx timeout
[  474.958043][ T6026] usbtest 2-1:254.235: couldn't get endpoints, -71
[  474.958148][ T6026] usbtest 2-1:254.235: probe with driver usbtest failed with error -71
[  474.984210][ T6026] usb 2-1: USB disconnect, device number 31
[  475.020174][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.172395][ T5487] 8021q: adding VLAN 0 to HW filter on device eth3
[  476.954145][ T9034] loop2: detected capacity change from 0 to 512
[  476.955641][ T9034] EXT4-fs: inline encryption not supported
[  477.123450][ T9032] loop3: detected capacity change from 0 to 32768
[  477.175169][ T5835] Bluetooth: hci6: command tx timeout
[  477.636209][ T9032] gfs2: fsid=gfùs2: Trying to join cluster "lock_nolock", "gfùs2"
[  477.636233][ T9032] gfs2: fsid=gfùs2: Now mounting FS (format 0)...
[  477.690290][ T9032] gfs2: fsid=gfùs2: Unknown on-disk format, unable to mount
[  477.690311][ T9032] gfs2: fsid=gfùs2: can't read superblock
[  477.690322][ T9032] gfs2: fsid=gfùs2: can't read superblock: -22
[  478.122718][ T9034] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.686: bad orphan inode 15
[  478.122754][ T9034] loop2: lost filesystem error report for type 5 error -117
[  478.123389][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  478.123412][    C0] EXT4-fs (loop2): initial error at time 1777268523: ext4_orphan_get:1423
[  478.123435][    C0] EXT4-fs (loop2): last error at time 1777268523: ext4_orphan_get:1423
[  478.165490][ T9034] ext4_test_bit(bit=14, block=5) = 0
[  478.168917][ T9034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.340417][ T9047] IPv6: Can't replace route, no match found
[  478.669751][ T9048] netlink: 'syz.3.689': attribute type 16 has an invalid length.
[  479.336818][ T9034] EXT4-fs (loop2): shut down requested (1)
[  479.948767][ T9052] loop3: detected capacity change from 0 to 512
[  480.049669][ T9052] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.691: Unrecognised inode hash code 4
[  480.049708][ T9052] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.691: Corrupt directory, running e2fsck is recommended
[  480.080360][ T9052] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  480.082397][ T9052] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.691: corrupted in-inode xattr: invalid ea_ino
[  480.082437][ T9052] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  480.082950][ T9052] EXT4-fs (loop3): Remounting filesystem read-only
[  480.086313][ T9052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.462283][ T9060] netlink: 'syz.3.691': attribute type 16 has an invalid length.
[  480.513955][  T154] bridge_slave_1: left allmulticast mode
[  480.513988][  T154] bridge_slave_1: left promiscuous mode
[  480.514262][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.575486][  T154] bridge_slave_0: left allmulticast mode
[  480.575527][  T154] bridge_slave_0: left promiscuous mode
[  480.575821][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.365493][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  481.444283][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  481.487631][  T154] bond0 (unregistering): Released all slaves
[  481.638207][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.865593][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.050563][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'.
[  482.073223][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.697'.
[  482.431261][ T9081] binder_alloc: binder_alloc_mmap_handler: 9071 200000ffe000-200001000000 already mapped failed -16
[  483.748254][ T9086] loop3: detected capacity change from 0 to 512
[  483.749266][ T9086] ext4: Unknown parameter 'noacl'
[  483.861012][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'.
[  484.081092][ T8921] chnl_net:caif_netlink_parms(): no params data found
[  484.153537][ T6026] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  484.307220][ T6026] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  484.307253][ T6026] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 253
[  484.310309][ T6026] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  484.310343][ T6026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.310365][ T6026] usb 4-1: Product: syz
[  484.310380][ T6026] usb 4-1: Manufacturer: syz
[  484.310396][ T6026] usb 4-1: SerialNumber: syz
[  484.467397][ T6026] usb 4-1: config 0 descriptor??
[  484.507536][  T154] hsr_slave_0: left promiscuous mode
[  484.543645][  T154] hsr_slave_1: left promiscuous mode
[  484.545930][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.707547][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'.
[  485.650281][ T9094] IPv6: Can't replace route, no match found
[  485.960460][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.965343][ T6004] usb 4-1: USB disconnect, device number 37
[  487.750307][ T9106] loop3: detected capacity change from 0 to 512
[  487.824246][ T9107] loop1: detected capacity change from 0 to 512
[  487.827283][ T9107] EXT4-fs: inline encryption not supported
[  487.941517][ T9107] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.705: bad orphan inode 15
[  487.941554][ T9107] loop1: lost filesystem error report for type 5 error -117
[  487.942321][ T9107] ext4_test_bit(bit=14, block=5) = 0
[  487.949693][ T9107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.008707][ T9106] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.704: Unrecognised inode hash code 4
[  488.008746][ T9106] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.704: Corrupt directory, running e2fsck is recommended
[  488.010522][ T9106] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  488.010673][ T9106] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.704: corrupted in-inode xattr: invalid ea_ino
[  488.010702][ T9106] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  488.011359][ T9106] EXT4-fs (loop3): Remounting filesystem read-only
[  488.020140][ T9106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.239232][ T9107] EXT4-fs (loop1): shut down requested (1)
[  488.353908][ T9113] netlink: 'syz.3.704': attribute type 16 has an invalid length.
[  488.674316][  T154] team0 (unregistering): Port device team_slave_1 removed
[  488.747663][  T154] team0 (unregistering): Port device team_slave_0 removed
[  488.894140][ T9117] loop2: detected capacity change from 0 to 32768
[  488.992843][ T9117] JBD2: Ignoring recovery information on journal
[  489.177569][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.429598][ T9117] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  490.078663][ T5823] ocfs2: Unmounting device (7,2) on (node local)
[  491.213730][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.637739][ T9140] loop3: detected capacity change from 0 to 4096
[  491.667510][ T9140] ntfs3: Unknown parameter 'nosparse'
[  491.688169][   T37] audit: type=1326 audit(1777268536.749:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.3.713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cc6b2cdd9 code=0x0
[  493.414629][ T9157] loop3: detected capacity change from 0 to 512
[  493.489563][ T9157] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.717: Unrecognised inode hash code 4
[  493.489599][ T9157] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.717: Corrupt directory, running e2fsck is recommended
[  493.490284][ T9157] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  493.490639][ T9157] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.717: corrupted in-inode xattr: invalid ea_ino
[  493.490670][ T9157] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  493.491267][ T9157] EXT4-fs (loop3): Remounting filesystem read-only
[  493.498601][ T9157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  493.768094][ T9160] netlink: 'syz.3.717': attribute type 16 has an invalid length.
[  493.809976][ T9147] loop2: detected capacity change from 0 to 4096
[  493.896531][ T8921] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.896986][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.897385][ T8921] bridge_slave_0: entered allmulticast mode
[  493.901590][ T8921] bridge_slave_0: entered promiscuous mode
[  493.934832][ T8953] chnl_net:caif_netlink_parms(): no params data found
[  493.959086][ T8921] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.959469][ T8921] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.959785][ T8921] bridge_slave_1: entered allmulticast mode
[  493.995712][ T8921] bridge_slave_1: entered promiscuous mode
[  495.059931][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.551853][ T8921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.657211][ T9170] loop1: detected capacity change from 0 to 4096
[  495.769730][ T8921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.366652][ T8921] team0: Port device team_slave_0 added
[  496.869893][ T8921] team0: Port device team_slave_1 added
[  496.998383][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.998775][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.999183][ T8953] bridge_slave_0: entered allmulticast mode
[  497.040217][ T9181] loop2: detected capacity change from 0 to 512
[  497.054567][ T9181] EXT4-fs: inline encryption not supported
[  497.055888][ T8953] bridge_slave_0: entered promiscuous mode
[  497.102669][ T9181] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.721: bad orphan inode 15
[  497.102707][ T9181] loop2: lost filesystem error report for type 5 error -117
[  497.115851][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  497.115879][    C1] EXT4-fs (loop2): initial error at time 1777268542: ext4_orphan_get:1423
[  497.115898][    C1] EXT4-fs (loop2): last error at time 1777268542: ext4_orphan_get:1423
[  497.116045][ T9181] ext4_test_bit(bit=14, block=5) = 0
[  497.119109][ T9181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  497.213589][ T9181] EXT4-fs (loop2): shut down requested (1)
[  497.283140][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.283665][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.283976][ T8953] bridge_slave_1: entered allmulticast mode
[  497.315559][ T8953] bridge_slave_1: entered promiscuous mode
[  497.522022][ T9175] loop3: detected capacity change from 0 to 32768
[  497.719405][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.855986][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.856006][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.856035][ T8921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.911845][ T9175] JBD2: Ignoring recovery information on journal
[  498.077021][ T9175] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  498.297923][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_1
[  498.297944][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  498.297975][ T8921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.441078][ T9197] loop1: detected capacity change from 0 to 32768
[  498.442360][ T9197] btrfs: Deprecated parameter 'usebackuproot'
[  498.442382][ T9197] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  498.530124][ T9197] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.725 (9197)
[  498.580399][ T9197] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  498.580436][ T9197] BTRFS info (device loop1): using crc32c checksum algorithm
[  498.872161][ T1194] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  498.872332][ T9197] BTRFS error (device loop1): failed to load root extent
[  498.872381][ T9197] BTRFS warning (device loop1): try to load backup roots slot 1
[  498.928731][ T5826] ocfs2: Unmounting device (7,3) on (node local)
[  498.953004][ T1194] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  498.953175][ T9197] BTRFS warning (device loop1): couldn't read tree root
[  498.953198][ T9197] BTRFS warning (device loop1): try to load backup roots slot 2
[  498.981788][ T1194] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  498.999808][ T9197] BTRFS warning (device loop1): couldn't read tree root
[  498.999836][ T9197] BTRFS warning (device loop1): try to load backup roots slot 3
[  499.057673][ T9197] BTRFS info (device loop1): rebuilding free space tree
[  499.218078][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.405662][ T9197] BTRFS info (device loop1): checking UUID tree
[  499.483871][ T9197] BTRFS info (device loop1): enabling ssd optimizations
[  499.483899][ T9197] BTRFS info (device loop1): using spread ssd allocation scheme
[  499.483920][ T9197] BTRFS info (device loop1): turning on async discard
[  499.483938][ T9197] BTRFS info (device loop1): enabling free space tree
[  499.483967][ T9197] BTRFS info (device loop1): force clearing of disk cache
[  499.483985][ T9197] BTRFS info (device loop1): enabling auto defrag
[  499.484002][ T9197] BTRFS info (device loop1): trying to use backup root at mount time
[  499.484022][ T9197] BTRFS info (device loop1): force zlib compression, level 3
[  499.944338][ T9215] loop2: detected capacity change from 0 to 65536
[  500.080272][ T8953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  500.293909][ T9215] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  500.802596][ T8953] team0: Port device team_slave_0 added
[  500.850729][ T8953] team0: Port device team_slave_1 added
[  501.036973][ T9215] XFS (loop2): Ending clean mount
[  502.189605][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  502.189735][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.277656][ T8921] hsr_slave_0: entered promiscuous mode
[  502.280426][ T8921] hsr_slave_1: entered promiscuous mode
[  502.287941][ T8921] debugfs: 'hsr0' already exists in 'hsr'
[  502.287970][ T8921] Cannot create hsr debugfs directory
[  502.774280][ T5827] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  502.817886][ T5823] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  502.851114][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.851132][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.851158][ T8953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.154938][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.154958][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.154989][ T8953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.201469][ T9247] loop3: detected capacity change from 0 to 512
[  503.504953][ T9247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  504.002967][ T5487] 8021q: adding VLAN 0 to HW filter on device eth4
[  504.165906][ T9253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  504.412131][ T9256] loop1: detected capacity change from 0 to 512
[  504.530619][ T9256] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.728: Unrecognised inode hash code 4
[  504.530659][ T9256] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.728: Corrupt directory, running e2fsck is recommended
[  504.541801][ T9256] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  504.541959][ T9256] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.728: corrupted in-inode xattr: invalid ea_ino
[  504.541990][ T9256] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  504.557030][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  504.557053][    C0] EXT4-fs (loop1): initial error at time 1777268549: ext4_iget_extra_inode:5128: inode 15
[  504.557082][    C0] EXT4-fs (loop1): last error at time 1777268549: ext4_iget_extra_inode:5128: inode 15
[  505.078973][ T9256] EXT4-fs (loop1): Remounting filesystem read-only
[  505.814255][ T9256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.136357][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'.
[  506.136375][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'.
[  506.136413][ T9263] netlink: 'syz.2.731': attribute type 15 has an invalid length.
[  506.184942][ T9264] netlink: 'syz.1.728': attribute type 16 has an invalid length.
[  506.201499][ T9265] comedi comedi0: Minor 48 is invalid!
[  506.532849][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.886864][ T9269] loop2: detected capacity change from 0 to 512
[  506.888824][ T9269] EXT4-fs: inline encryption not supported
[  506.982450][ T9269] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.733: bad orphan inode 15
[  506.982486][ T9269] loop2: lost filesystem error report for type 5 error -117
[  506.982988][ T9269] ext4_test_bit(bit=14, block=5) = 0
[  506.988340][ T9269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  506.991256][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'.
[  507.021489][ T9269] EXT4-fs (loop2): shut down requested (1)
[  507.462334][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.761868][ T8953] hsr_slave_0: entered promiscuous mode
[  507.780926][ T8953] hsr_slave_1: entered promiscuous mode
[  507.814450][ T8953] debugfs: 'hsr0' already exists in 'hsr'
[  507.814483][ T8953] Cannot create hsr debugfs directory
[  508.087293][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.096132][ T9279] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 3327
[  508.096152][ T9279] binder: 9277:9279 ioctl 4018620d 200000000040 returned -1
[  508.600507][ T9280] loop3: detected capacity change from 0 to 32768
[  508.697165][ T9285] loop2: detected capacity change from 0 to 32768
[  508.795083][ T9285] JBD2: Ignoring recovery information on journal
[  508.847003][ T9285] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  508.905392][ T9280] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[  508.971324][ T9285] FAULT_INJECTION: forcing a failure.
[  508.971324][ T9285] name failslab, interval 1, probability 0, space 0, times 0
[  508.971353][ T9285] CPU: 0 UID: 0 PID: 9285 Comm: syz.2.738 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  508.971369][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  508.971377][ T9285] Call Trace:
[  508.971382][ T9285]  <TASK>
[  508.971388][ T9285]  dump_stack_lvl+0xe8/0x150
[  508.971407][ T9285]  should_fail_ex+0x46b/0x600
[  508.971427][ T9285]  should_failslab+0xa8/0x100
[  508.971448][ T9285]  __kmalloc_noprof+0xdf/0x7b0
[  508.971465][ T9285]  ? tomoyo_encode+0x28b/0x550
[  508.971489][ T9285]  tomoyo_encode+0x28b/0x550
[  508.971511][ T9285]  tomoyo_realpath_from_path+0x58d/0x5d0
[  508.971547][ T9285]  ? tomoyo_path2_perm+0x299/0x760
[  508.971564][ T9285]  tomoyo_path2_perm+0x2c5/0x760
[  508.971584][ T9285]  ? __pfx_tomoyo_path2_perm+0x10/0x10
[  508.971602][ T9285]  ? __asan_memset+0x22/0x50
[  508.971617][ T9285]  ? current_check_refer_path+0x402/0x11f0
[  508.971654][ T9285]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  508.971673][ T9285]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  508.971693][ T9285]  tomoyo_path_rename+0x14e/0x1b0
[  508.971709][ T9285]  ? __pfx_tomoyo_path_rename+0x10/0x10
[  508.971730][ T9285]  security_path_rename+0x248/0x460
[  508.971746][ T9285]  filename_renameat2+0x4c1/0x9c0
[  508.971760][ T9285]  ? __might_fault+0xaf/0x130
[  508.971783][ T9285]  ? __might_fault+0xaf/0x130
[  508.971805][ T9285]  ? __pfx_filename_renameat2+0x10/0x10
[  508.971830][ T9285]  ? do_getname+0x151/0x250
[  508.971844][ T9285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.971857][ T9285]  __se_sys_rename+0x55/0x2c0
[  508.971872][ T9285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.971885][ T9285]  do_syscall_64+0x15f/0xf80
[  508.971903][ T9285]  ? trace_irq_disable+0x3b/0x140
[  508.971918][ T9285]  ? clear_bhb_loop+0x40/0x90
[  508.971940][ T9285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.971957][ T9285] RIP: 0033:0x7fc943ddcdd9
[  508.971970][ T9285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  508.971982][ T9285] RSP: 002b:00007fc942036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  508.971997][ T9285] RAX: ffffffffffffffda RBX: 00007fc944055fa0 RCX: 00007fc943ddcdd9
[  508.972006][ T9285] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000140
[  508.972015][ T9285] RBP: 00007fc942036090 R08: 0000000000000000 R09: 0000000000000000
[  508.972022][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  508.972030][ T9285] R13: 00007fc944056038 R14: 00007fc944055fa0 R15: 00007ffc37287c88
[  508.972051][ T9285]  </TASK>
[  508.972065][ T9285] ERROR: Out of memory at tomoyo_realpath_from_path.
[  509.369448][ T9280] JBD2: Ignoring recovery information on journal
[  509.726134][ T9280] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  509.853729][ T5823] ocfs2: Unmounting device (7,2) on (node local)
[  510.776517][ T9297] loop1: detected capacity change from 0 to 512
[  510.890286][ T9297] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.741: Unrecognised inode hash code 4
[  510.890344][ T9297] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.741: Corrupt directory, running e2fsck is recommended
[  510.893656][ T9297] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  510.898328][ T9297] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.741: corrupted in-inode xattr: invalid ea_ino
[  510.898363][ T9297] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  510.910348][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  510.910375][    C0] EXT4-fs (loop1): initial error at time 1777268555: ext4_iget_extra_inode:5128: inode 15
[  510.910403][    C0] EXT4-fs (loop1): last error at time 1777268555: ext4_iget_extra_inode:5128: inode 15
[  510.910822][ T9297] EXT4-fs (loop1): Remounting filesystem read-only
[  511.096805][ T9297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  511.397368][ T5826] ocfs2: Unmounting device (7,3) on (node local)
[  511.450103][ T9302] netlink: 'syz.1.741': attribute type 16 has an invalid length.
[  511.871111][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.596452][ T6026] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  512.764982][ T6026] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  512.765006][ T6026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.765019][ T6026] usb 4-1: Product: syz
[  512.765028][ T6026] usb 4-1: Manufacturer: syz
[  512.765036][ T6026] usb 4-1: SerialNumber: syz
[  512.946747][  T154] bridge_slave_1: left allmulticast mode
[  512.946786][  T154] bridge_slave_1: left promiscuous mode
[  512.947089][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.059997][  T154] bridge_slave_0: left allmulticast mode
[  513.060101][  T154] bridge_slave_0: left promiscuous mode
[  513.060644][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.215538][ T6026] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  513.273472][ T6026] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  513.449719][ T9310] netdevsim netdevsim1: Direct firmware load for þ failed with error -2
[  513.449750][ T9310] netdevsim netdevsim1: Falling back to sysfs fallback for: þ
[  513.480638][  T154] bridge_slave_1: left allmulticast mode
[  513.480677][  T154] bridge_slave_1: left promiscuous mode
[  513.480970][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.511188][ T6026] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  513.511255][ T6026] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  513.512268][ T6026] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  513.525612][ T6026] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  513.571015][  T154] bridge_slave_0: left allmulticast mode
[  513.624121][ T6026] usb 4-1: USB disconnect, device number 38
[  513.634045][  T154] bridge_slave_0: left promiscuous mode
[  513.634313][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.630672][ T9325] loop3: detected capacity change from 0 to 4096
[  514.845888][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  514.947097][   T37] audit: type=1800 audit(1777268560.009:306): pid=9325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.744" name="file1" dev="loop3" ino=33 res=0 errno=0
[  515.013207][ T9332] FAULT_INJECTION: forcing a failure.
[  515.013207][ T9332] name failslab, interval 1, probability 0, space 0, times 0
[  515.013242][ T9332] CPU: 0 UID: 0 PID: 9332 Comm: syz.1.745 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  515.013268][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  515.013279][ T9332] Call Trace:
[  515.013287][ T9332]  <TASK>
[  515.013295][ T9332]  dump_stack_lvl+0xe8/0x150
[  515.013322][ T9332]  should_fail_ex+0x46b/0x600
[  515.013349][ T9332]  ? __pfx_proc_alloc_inode+0x10/0x10
[  515.013374][ T9332]  should_failslab+0xa8/0x100
[  515.013403][ T9332]  ? __pfx_proc_alloc_inode+0x10/0x10
[  515.013425][ T9332]  kmem_cache_alloc_lru_noprof+0x8b/0x680
[  515.013452][ T9332]  ? proc_alloc_inode+0x2a/0xc0
[  515.013480][ T9332]  ? __pfx_proc_alloc_inode+0x10/0x10
[  515.013502][ T9332]  proc_alloc_inode+0x2a/0xc0
[  515.013526][ T9332]  alloc_inode+0x6a/0x1b0
[  515.013547][ T9332]  new_inode+0x22/0x170
[  515.013573][ T9332]  proc_pid_make_inode+0x21/0x130
[  515.013602][ T9332]  proc_pident_instantiate+0x6d/0x2b0
[  515.013625][ T9332]  proc_pident_lookup+0x1b7/0x270
[  515.013648][ T9332]  path_openat+0x11cb/0x38a0
[  515.013708][ T9332]  ? __pfx_path_openat+0x10/0x10
[  515.013750][ T9332]  ? do_raw_spin_lock+0x12b/0x2f0
[  515.013792][ T9332]  do_file_open+0x23e/0x4a0
[  515.013816][ T9332]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  515.013846][ T9332]  ? __pfx_do_file_open+0x10/0x10
[  515.013869][ T9332]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  515.013900][ T9332]  ? __pfx_kfree_link+0x10/0x10
[  515.013934][ T9332]  ? alloc_fd+0x64e/0x6c0
[  515.013967][ T9332]  do_sys_openat2+0x113/0x200
[  515.013993][ T9332]  ? __pfx_do_sys_openat2+0x10/0x10
[  515.014016][ T9332]  ? ksys_write+0x248/0x270
[  515.014044][ T9332]  ? __pfx_ksys_write+0x10/0x10
[  515.014073][ T9332]  __x64_sys_openat+0x138/0x170
[  515.014096][ T9332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.014115][ T9332]  do_syscall_64+0x15f/0xf80
[  515.014139][ T9332]  ? trace_irq_disable+0x3b/0x140
[  515.014160][ T9332]  ? clear_bhb_loop+0x40/0x90
[  515.014182][ T9332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.014199][ T9332] RIP: 0033:0x7f1d04bbd60e
[  515.014217][ T9332] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  515.014232][ T9332] RSP: 002b:00007f1d02e0bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  515.014253][ T9332] RAX: ffffffffffffffda RBX: 00007f1d02e0c6c0 RCX: 00007f1d04bbd60e
[  515.014265][ T9332] RDX: 0000000000000002 RSI: 00007f1d02e0bf90 RDI: ffffffffffffff9c
[  515.014277][ T9332] RBP: 00007f1d02e0c090 R08: 0000000000000000 R09: 0000000000000000
[  515.014288][ T9332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  515.014298][ T9332] R13: 00007f1d04e76218 R14: 00007f1d04e76180 R15: 00007ffde4f60648
[  515.014329][ T9332]  </TASK>
[  515.169178][ T9335] loop2: detected capacity change from 0 to 512
[  515.172395][ T9335] EXT4-fs: inline encryption not supported
[  515.194567][ T9335] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.747: bad orphan inode 15
[  515.194599][ T9335] loop2: lost filesystem error report for type 5 error -117
[  515.197837][ T9335] ext4_test_bit(bit=14, block=5) = 0
[  515.206412][ T9335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.241464][ T9335] EXT4-fs (loop2): shut down requested (1)
[  515.409123][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  515.499834][  T154] bond0 (unregistering): Released all slaves
[  516.864657][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  516.905962][ T9352] loop1: detected capacity change from 0 to 512
[  516.922169][ T9352] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.752: Unrecognised inode hash code 4
[  516.922204][ T9352] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.752: Corrupt directory, running e2fsck is recommended
[  516.976107][ T9352] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  517.002898][ T9354] loop3: detected capacity change from 0 to 256
[  517.008503][ T9354] exfat: Bad value for 'umask'
[  517.230614][ T9352] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.752: corrupted in-inode xattr: invalid ea_ino
[  517.230656][ T9352] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  517.243665][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  517.243739][    C1] EXT4-fs (loop1): initial error at time 1777268562: ext4_iget_extra_inode:5128: inode 15
[  517.243771][    C1] EXT4-fs (loop1): last error at time 1777268562: ext4_iget_extra_inode:5128: inode 15
[  517.405720][ T9352] EXT4-fs (loop1): Remounting filesystem read-only
[  517.782465][ T9352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.375044][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  518.742659][ T9358] netlink: 'syz.1.752': attribute type 16 has an invalid length.
[  519.796586][  T154] bond0 (unregistering): Released all slaves
[  520.460521][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.299531][ T5487] 8021q: adding VLAN 0 to HW filter on device eth5
[  521.751881][  T154] hsr_slave_0: left promiscuous mode
[  521.843476][  T154] hsr_slave_1: left promiscuous mode
[  521.844687][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.904635][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.054299][  T823] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  522.083413][  T154] hsr_slave_0: left promiscuous mode
[  522.103449][  T154] hsr_slave_1: left promiscuous mode
[  522.104528][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.144271][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.216145][  T823] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  522.216186][  T823] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  522.216212][  T823] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  522.216226][  T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.243956][ T9375] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  522.292356][  T823] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  523.279028][  T823] usb 2-1: USB disconnect, device number 32
[  523.301201][  T154] team0 (unregistering): Port device team_slave_1 removed
[  523.494498][  T154] team0 (unregistering): Port device team_slave_0 removed
[  524.000185][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  524.091689][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  524.142385][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  524.168252][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  524.169160][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  524.670756][ T9373] loop3: detected capacity change from 0 to 131072
[  524.698585][ T9373] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  524.698618][ T9373] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  524.730124][ T9373] F2FS-fs (loop3): invalid crc value
[  524.731994][ T9373] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4)
[  525.927258][  T154] team0 (unregistering): Port device team_slave_1 removed
[  525.990130][  T154] team0 (unregistering): Port device team_slave_0 removed
[  526.433629][ T5828] Bluetooth: hci0: command tx timeout
[  526.455767][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.368943][ T5828] Bluetooth: hci0: command tx timeout
[  529.480243][ T9410] loop2: detected capacity change from 0 to 512
[  529.581347][ T9410] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  529.651114][ T9410] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.767: bad orphan inode 131083
[  529.651151][ T9410] loop2: lost filesystem error report for type 5 error -117
[  529.657973][ T9410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.421873][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  530.795498][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  530.799558][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  530.809007][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  530.823888][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  531.160346][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.394757][ T5828] Bluetooth: hci0: command tx timeout
[  533.073625][ T5828] Bluetooth: hci4: command tx timeout
[  533.475214][ T5828] Bluetooth: hci0: command tx timeout
[  535.163404][ T5828] Bluetooth: hci4: command tx timeout
[  535.275380][ T9442] loop3: detected capacity change from 0 to 512
[  535.279573][ T9442] EXT4-fs: inline encryption not supported
[  535.294611][ T9442] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.771: bad orphan inode 15
[  535.294645][ T9442] loop3: lost filesystem error report for type 5 error -117
[  535.295105][ T9442] ext4_test_bit(bit=14, block=5) = 0
[  535.411846][ T9442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  535.487680][ T9442] EXT4-fs (loop3): shut down requested (1)
[  535.788973][ T9447] loop1: detected capacity change from 0 to 8192
[  536.341716][ T9447]  loop1: p3 < > p4
[  536.341756][ T9447] loop1: partition table partially beyond EOD, truncated
[  536.512410][ T9462] loop2: detected capacity change from 0 to 512
[  536.535235][ T9447] loop1: p4 start 84475904 is beyond EOD, truncated
[  536.678609][ T9462] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.774: bg 0: block 255: padding at end of block bitmap is not set
[  536.678651][ T9462] loop2: lost filesystem error report for type 5 error -117
[  536.692509][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  536.692538][    C1] EXT4-fs (loop2): initial error at time 1777268581: ext4_validate_block_bitmap:441
[  536.692564][    C1] EXT4-fs (loop2): last error at time 1777268581: ext4_validate_block_bitmap:441
[  536.750412][ T9462] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  536.750441][ T9462] loop2: lost filesystem error report for type 5 error -117
[  536.752579][ T9462] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.774: invalid indirect mapped block 65536 (level 0)
[  536.752619][ T9462] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  536.786074][ T9462] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.774: invalid indirect mapped block 32768 (level 2)
[  536.786119][ T9462] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  536.845619][ T9462] EXT4-fs (loop2): 1 truncate cleaned up
[  536.892126][ T9462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  537.063432][ T6035] udevd[6035]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  538.338594][ T5828] Bluetooth: hci4: command tx timeout
[  538.348306][ T5828] Bluetooth: hci3: command 0x0406 tx timeout
[  538.417445][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.441748][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.979183][ T9380] chnl_net:caif_netlink_parms(): no params data found
[  539.217761][ T9487] netlink: 108 bytes leftover after parsing attributes in process `syz.3.780'.
[  539.336375][  T154] bridge_slave_1: left allmulticast mode
[  539.336405][  T154] bridge_slave_1: left promiscuous mode
[  539.336615][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.412760][ T5828] block nbd0: Receive control failed (result -32)
[  539.415300][ T5835] block nbd0: Receive control failed (result -32)
[  539.485531][  T154] bridge_slave_0: left allmulticast mode
[  539.485567][  T154] bridge_slave_0: left promiscuous mode
[  539.501889][ T9477] nbd0: detected capacity change from 0 to 128
[  539.531408][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.570053][ T6035] 
[  539.570067][ T6035] ======================================================
[  539.570078][ T6035] WARNING: possible circular locking dependency detected
[  539.570088][ T6035] syzkaller #0 Not tainted
[  539.570099][ T6035] ------------------------------------------------------
[  539.570107][ T6035] udevd/6035 is trying to acquire lock:
[  539.570119][ T6035] ffff88802af87c60 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100
[  539.570176][ T6035] 
[  539.570176][ T6035] but task is already holding lock:
[  539.570183][ T6035] ffff88804fc651f0 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  539.570231][ T6035] 
[  539.570231][ T6035] which lock already depends on the new lock.
[  539.570231][ T6035] 
[  539.570239][ T6035] 
[  539.570239][ T6035] the existing dependency chain (in reverse order) is:
[  539.570246][ T6035] 
[  539.570246][ T6035] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  539.570271][ T6035]        mutex_lock_nested+0x5a/0x1d0
[  539.570296][ T6035]        nbd_queue_rq+0xc6/0x1100
[  539.570318][ T6035]        blk_mq_dispatch_rq_list+0xa77/0x1910
[  539.570336][ T6035]        __blk_mq_sched_dispatch_requests+0xddb/0x1610
[  539.570355][ T6035]        blk_mq_sched_dispatch_requests+0xda/0x1a0
[  539.570374][ T6035]        blk_mq_run_hw_queue+0x368/0x520
[  539.570402][ T6035]        blk_mq_dispatch_list+0xd1f/0xe20
[  539.570420][ T6035]        blk_mq_flush_plug_list+0x48d/0x570
[  539.570440][ T6035]        __blk_flush_plug+0x3ed/0x4d0
[  539.570459][ T6035]        __submit_bio+0x28d/0x580
[  539.570478][ T6035]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  539.570509][ T6035]        block_read_full_folio+0x7b7/0x830
[  539.570529][ T6035]        filemap_read_folio+0x137/0x3b0
[  539.570551][ T6035]        do_read_cache_folio+0x2bf/0x560
[  539.570573][ T6035]        read_part_sector+0xb8/0x2b0
[  539.570601][ T6035]        adfspart_check_ICS+0xb1/0x960
[  539.570621][ T6035]        bdev_disk_changed+0x817/0x1770
[  539.570640][ T6035]        blkdev_get_whole+0x2e5/0x480
[  539.570659][ T6035]        bdev_open+0x31e/0xcc0
[  539.570680][ T6035]        blkdev_open+0x485/0x620
[  539.570700][ T6035]        do_dentry_open+0x83d/0x13e0
[  539.570721][ T6035]        vfs_open+0x3b/0x350
[  539.570739][ T6035]        path_openat+0x2e43/0x38a0
[  539.570765][ T6035]        do_file_open+0x23e/0x4a0
[  539.570790][ T6035]        do_sys_openat2+0x113/0x200
[  539.570810][ T6035]        __x64_sys_openat+0x138/0x170
[  539.570831][ T6035]        do_syscall_64+0x15f/0xf80
[  539.570858][ T6035]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.570879][ T6035] 
[  539.570879][ T6035] -> #5 (set->srcu){.+.+}-{0:0}:
[  539.570908][ T6035]        __synchronize_srcu+0xca/0x300
[  539.570933][ T6035]        elevator_switch+0x1e8/0x7a0
[  539.570950][ T6035]        elevator_change+0x2cc/0x450
[  539.570969][ T6035]        elevator_set_default+0x36c/0x430
[  539.570987][ T6035]        blk_register_queue+0x3e9/0x4e0
[  539.571009][ T6035]        __add_disk+0x677/0xd50
[  539.571032][ T6035]        add_disk_fwnode+0xfb/0x480
[  539.571061][ T6035]        nbd_dev_add+0x72c/0xb50
[  539.571084][ T6035]        nbd_init+0x168/0x1f0
[  539.571110][ T6035]        do_one_initcall+0x250/0x870
[  539.571133][ T6035]        do_initcall_level+0x104/0x190
[  539.571158][ T6035]        do_initcalls+0x59/0xa0
[  539.571181][ T6035]        kernel_init_freeable+0x2a6/0x3e0
[  539.571205][ T6035]        kernel_init+0x1d/0x1d0
[  539.571226][ T6035]        ret_from_fork+0x514/0xb70
[  539.571246][ T6035]        ret_from_fork_asm+0x1a/0x30
[  539.571268][ T6035] 
[  539.571268][ T6035] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  539.571298][ T6035]        mutex_lock_nested+0x5a/0x1d0
[  539.571319][ T6035]        elevator_change+0x1b3/0x450
[  539.571336][ T6035]        elevator_set_none+0xb5/0x140
[  539.571353][ T6035]        blk_mq_update_nr_hw_queues+0x607/0x1a80
[  539.571377][ T6035]        nbd_start_device+0x17f/0xb20
[  539.571401][ T6035]        nbd_genl_connect+0x1651/0x1c80
[  539.571425][ T6035]        genl_family_rcv_msg_doit+0x22a/0x330
[  539.571449][ T6035]        genl_rcv_msg+0x61c/0x7a0
[  539.571468][ T6035]        netlink_rcv_skb+0x232/0x4b0
[  539.571496][ T6035]        genl_rcv+0x28/0x40
[  539.571516][ T6035]        netlink_unicast+0x780/0x920
[  539.571541][ T6035]        netlink_sendmsg+0x813/0xb40
[  539.571571][ T6035]        sock_sendmsg_nosec+0x112/0x150
[  539.571602][ T6035]        ____sys_sendmsg+0x55c/0x870
[  539.571620][ T6035]        ___sys_sendmsg+0x2a5/0x360
[  539.571637][ T6035]        __x64_sys_sendmsg+0x1c3/0x2a0
[  539.571655][ T6035]        do_syscall_64+0x15f/0xf80
[  539.571684][ T6035]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.571703][ T6035] 
[  539.571703][ T6035] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  539.571737][ T6035]        blk_alloc_queue+0x54e/0x690
[  539.571766][ T6035]        __blk_mq_alloc_disk+0x197/0x390
[  539.571789][ T6035]        nbd_dev_add+0x499/0xb50
[  539.571810][ T6035]        nbd_init+0x168/0x1f0
[  539.571831][ T6035]        do_one_initcall+0x250/0x870
[  539.571851][ T6035]        do_initcall_level+0x104/0x190
[  539.571873][ T6035]        do_initcalls+0x59/0xa0
[  539.571893][ T6035]        kernel_init_freeable+0x2a6/0x3e0
[  539.571917][ T6035]        kernel_init+0x1d/0x1d0
[  539.571935][ T6035]        ret_from_fork+0x514/0xb70
[  539.571955][ T6035]        ret_from_fork_asm+0x1a/0x30
[  539.571978][ T6035] 
[  539.571978][ T6035] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  539.572006][ T6035]        fs_reclaim_acquire+0x71/0x100
[  539.572036][ T6035]        kmem_cache_alloc_node_noprof+0x4b/0x6e0
[  539.572062][ T6035]        __alloc_skb+0x1d0/0x7d0
[  539.572089][ T6035]        tcp_stream_alloc_skb+0x3f/0x5c0
[  539.572110][ T6035]        tcp_sendmsg_locked+0x134b/0x5370
[  539.572133][ T6035]        tcp_sendmsg+0x2f/0x50
[  539.572153][ T6035]        sock_sendmsg_nosec+0xf9/0x150
[  539.572175][ T6035]        sock_write_iter+0x308/0x410
[  539.572194][ T6035]        vfs_write+0x629/0xba0
[  539.572221][ T6035]        ksys_write+0x156/0x270
[  539.572247][ T6035]        do_syscall_64+0x15f/0xf80
[  539.572272][ T6035]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.572292][ T6035] 
[  539.572292][ T6035] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  539.572318][ T6035]        lock_sock_nested+0x41/0x130
[  539.572340][ T6035]        inet_shutdown+0x6a/0x390
[  539.572359][ T6035]        nbd_mark_nsock_dead+0x2e9/0x560
[  539.572385][ T6035]        sock_shutdown+0x15e/0x260
[  539.572409][ T6035]        nbd_clear_sock+0x24/0x170
[  539.572434][ T6035]        nbd_ioctl+0x337/0xe40
[  539.572458][ T6035]        blkdev_ioctl+0x5e6/0x750
[  539.572480][ T6035]        __se_sys_ioctl+0xff/0x170
[  539.572509][ T6035]        do_syscall_64+0x15f/0xf80
[  539.572537][ T6035]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.572557][ T6035] 
[  539.572557][ T6035] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  539.572593][ T6035]        __lock_acquire+0x15a5/0x2cf0
[  539.572619][ T6035]        lock_acquire+0x106/0x350
[  539.572643][ T6035]        mutex_lock_nested+0x5a/0x1d0
[  539.572664][ T6035]        nbd_queue_rq+0x37b/0x1100
[  539.572686][ T6035]        blk_mq_dispatch_rq_list+0xa77/0x1910
[  539.572705][ T6035]        __blk_mq_sched_dispatch_requests+0xddb/0x1610
[  539.572726][ T6035]        blk_mq_sched_dispatch_requests+0xda/0x1a0
[  539.572747][ T6035]        blk_mq_run_hw_queue+0x368/0x520
[  539.572777][ T6035]        blk_mq_dispatch_list+0xd1f/0xe20
[  539.572796][ T6035]        blk_mq_flush_plug_list+0x48d/0x570
[  539.572817][ T6035]        __blk_flush_plug+0x3ed/0x4d0
[  539.572835][ T6035]        __submit_bio+0x28d/0x580
[  539.572855][ T6035]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  539.572884][ T6035]        block_read_full_folio+0x7b7/0x830
[  539.572905][ T6035]        filemap_read_folio+0x137/0x3b0
[  539.572924][ T6035]        do_read_cache_folio+0x2bf/0x560
[  539.572945][ T6035]        read_part_sector+0xb8/0x2b0
[  539.572962][ T6035]        adfspart_check_ICS+0xb1/0x960
[  539.572981][ T6035]        bdev_disk_changed+0x817/0x1770
[  539.573000][ T6035]        blkdev_get_whole+0x2e5/0x480
[  539.573019][ T6035]        bdev_open+0x31e/0xcc0
[  539.573036][ T6035]        blkdev_open+0x485/0x620
[  539.573056][ T6035]        do_dentry_open+0x83d/0x13e0
[  539.573076][ T6035]        vfs_open+0x3b/0x350
[  539.573097][ T6035]        path_openat+0x2e43/0x38a0
[  539.573124][ T6035]        do_file_open+0x23e/0x4a0
[  539.573151][ T6035]        do_sys_openat2+0x113/0x200
[  539.573173][ T6035]        __x64_sys_openat+0x138/0x170
[  539.573194][ T6035]        do_syscall_64+0x15f/0xf80
[  539.573222][ T6035]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.573241][ T6035] 
[  539.573241][ T6035] other info that might help us debug this:
[  539.573241][ T6035] 
[  539.573247][ T6035] Chain exists of:
[  539.573247][ T6035]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  539.573247][ T6035] 
[  539.573278][ T6035]  Possible unsafe locking scenario:
[  539.573278][ T6035] 
[  539.573283][ T6035]        CPU0                    CPU1
[  539.573289][ T6035]        ----                    ----
[  539.573296][ T6035]   lock(&cmd->lock);
[  539.573309][ T6035]                                lock(set->srcu);
[  539.573322][ T6035]                                lock(&cmd->lock);
[  539.573337][ T6035]   lock(&nsock->tx_lock);
[  539.573348][ T6035] 
[  539.573348][ T6035]  *** DEADLOCK ***
[  539.573348][ T6035] 
[  539.573353][ T6035] 3 locks held by udevd/6035:
[  539.573363][ T6035]  #0: ffff888027a2f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0
[  539.573403][ T6035]  #1: ffff888027908218 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x33e/0x520
[  539.573459][ T6035]  #2: ffff88804fc651f0 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  539.573510][ T6035] 
[  539.573510][ T6035] stack backtrace:
[  539.573524][ T6035] CPU: 0 UID: 0 PID: 6035 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  539.573548][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  539.573561][ T6035] Call Trace:
[  539.573570][ T6035]  <TASK>
[  539.573578][ T6035]  dump_stack_lvl+0xe8/0x150
[  539.573650][ T6035]  print_circular_bug+0x2e1/0x300
[  539.573686][ T6035]  check_noncircular+0x12e/0x150
[  539.573721][ T6035]  __lock_acquire+0x15a5/0x2cf0
[  539.573760][ T6035]  ? nbd_queue_rq+0x37b/0x1100
[  539.573783][ T6035]  lock_acquire+0x106/0x350
[  539.573808][ T6035]  ? nbd_queue_rq+0x37b/0x1100
[  539.573835][ T6035]  ? nbd_queue_rq+0x37b/0x1100
[  539.573863][ T6035]  ? nbd_queue_rq+0x37b/0x1100
[  539.573884][ T6035]  mutex_lock_nested+0x5a/0x1d0
[  539.573906][ T6035]  ? nbd_queue_rq+0x37b/0x1100
[  539.573930][ T6035]  nbd_queue_rq+0x37b/0x1100
[  539.573959][ T6035]  ? __pfx_nbd_queue_rq+0x10/0x10
[  539.573985][ T6035]  ? preempt_schedule_common+0x82/0xd0
[  539.574014][ T6035]  ? preempt_schedule_thunk+0x16/0x30
[  539.574051][ T6035]  blk_mq_dispatch_rq_list+0xa77/0x1910
[  539.574080][ T6035]  ? sbitmap_get+0x229/0x390
[  539.574113][ T6035]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  539.574134][ T6035]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  539.574157][ T6035]  __blk_mq_sched_dispatch_requests+0xddb/0x1610
[  539.574188][ T6035]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  539.574211][ T6035]  ? blk_mq_hw_queue_need_run+0x13c/0x690
[  539.574234][ T6035]  ? blk_mq_run_hw_queue+0x33e/0x520
[  539.574263][ T6035]  ? blk_mq_run_hw_queue+0x33e/0x520
[  539.574294][ T6035]  blk_mq_sched_dispatch_requests+0xda/0x1a0
[  539.574318][ T6035]  ? blk_mq_run_hw_queue+0x33e/0x520
[  539.574349][ T6035]  blk_mq_run_hw_queue+0x368/0x520
[  539.574383][ T6035]  blk_mq_dispatch_list+0xd1f/0xe20
[  539.574405][ T6035]  ? bdev_count_inflight+0x1cf/0x210
[  539.574431][ T6035]  ? blk_mq_dispatch_list+0x200/0xe20
[  539.574457][ T6035]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  539.574482][ T6035]  ? rcu_is_watching+0x15/0xb0
[  539.574514][ T6035]  blk_mq_flush_plug_list+0x48d/0x570
[  539.574536][ T6035]  ? blk_add_rq_to_plug+0x300/0x450
[  539.574570][ T6035]  ? blk_mq_submit_bio+0x1b66/0x29d0
[  539.574599][ T6035]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  539.574625][ T6035]  __blk_flush_plug+0x3ed/0x4d0
[  539.574650][ T6035]  ? __pfx___blk_flush_plug+0x10/0x10
[  539.574671][ T6035]  ? blkg_get+0x20/0x1d0
[  539.574695][ T6035]  __submit_bio+0x28d/0x580
[  539.574718][ T6035]  ? __pfx___submit_bio+0x10/0x10
[  539.574743][ T6035]  ? bio_associate_blkg+0x6d/0x230
[  539.574769][ T6035]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  539.574806][ T6035]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  539.574849][ T6035]  block_read_full_folio+0x7b7/0x830
[  539.574873][ T6035]  ? __pfx_blkdev_get_block+0x10/0x10
[  539.574899][ T6035]  filemap_read_folio+0x137/0x3b0
[  539.574923][ T6035]  ? __pfx_blkdev_read_folio+0x10/0x10
[  539.574947][ T6035]  ? __pfx_filemap_read_folio+0x10/0x10
[  539.574969][ T6035]  ? filemap_add_folio+0x3d9/0x610
[  539.575002][ T6035]  do_read_cache_folio+0x2bf/0x560
[  539.575025][ T6035]  ? __pfx_blkdev_read_folio+0x10/0x10
[  539.575049][ T6035]  read_part_sector+0xb8/0x2b0
[  539.575069][ T6035]  adfspart_check_ICS+0xb1/0x960
[  539.575089][ T6035]  ? seq_buf_printf+0x212/0x2d0
[  539.575118][ T6035]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  539.575150][ T6035]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  539.575176][ T6035]  bdev_disk_changed+0x817/0x1770
[  539.575205][ T6035]  ? __pfx_bdev_disk_changed+0x10/0x10
[  539.575228][ T6035]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  539.575261][ T6035]  blkdev_get_whole+0x2e5/0x480
[  539.575284][ T6035]  bdev_open+0x31e/0xcc0
[  539.575309][ T6035]  blkdev_open+0x485/0x620
[  539.575334][ T6035]  ? __pfx_blkdev_open+0x10/0x10
[  539.575356][ T6035]  do_dentry_open+0x83d/0x13e0
[  539.575385][ T6035]  vfs_open+0x3b/0x350
[  539.575405][ T6035]  ? path_openat+0x2e2b/0x38a0
[  539.575436][ T6035]  path_openat+0x2e43/0x38a0
[  539.575479][ T6035]  ? __pfx_path_openat+0x10/0x10
[  539.575510][ T6035]  ? kasan_save_track+0x4f/0x80
[  539.575537][ T6035]  ? kasan_save_track+0x3e/0x80
[  539.575564][ T6035]  ? __kasan_slab_alloc+0x6c/0x80
[  539.575625][ T6035]  ? kmem_cache_alloc_noprof+0x33b/0x680
[  539.575658][ T6035]  ? do_raw_spin_lock+0x12b/0x2f0
[  539.575686][ T6035]  do_file_open+0x23e/0x4a0
[  539.575716][ T6035]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  539.575748][ T6035]  ? __pfx_do_file_open+0x10/0x10
[  539.575777][ T6035]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  539.575814][ T6035]  ? alloc_fd+0x64e/0x6c0
[  539.575842][ T6035]  do_sys_openat2+0x113/0x200
[  539.575866][ T6035]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  539.575889][ T6035]  ? __pfx_do_sys_openat2+0x10/0x10
[  539.575917][ T6035]  ? rcu_is_watching+0x15/0xb0
[  539.575949][ T6035]  __x64_sys_openat+0x138/0x170
[  539.575975][ T6035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.575997][ T6035]  do_syscall_64+0x15f/0xf80
[  539.576025][ T6035]  ? clear_bhb_loop+0x40/0x90
[  539.576047][ T6035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.576068][ T6035] RIP: 0033:0x7f3a840ce407
[  539.576086][ T6035] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  539.576127][ T6035] RSP: 002b:00007ffc60dfd7b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  539.576150][ T6035] RAX: ffffffffffffffda RBX: 00007f3a83fe0880 RCX: 00007f3a840ce407
[  539.576167][ T6035] RDX: 00000000000a0800 RSI: 000055aa343748e0 RDI: ffffffffffffff9c
[  539.576182][ T6035] RBP: 000055aa34363910 R08: 0000000000000000 R09: 0000000000000000
[  539.576196][ T6035] R10: 0000000000000000 R11: 0000000000000202 R12: 000055aa34380f10
[  539.576210][ T6035] R13: 000055aa3437b410 R14: 0000000000000000 R15: 000055aa34380f10
[  539.576231][ T6035]  </TASK>
[  540.353514][ T5828] Bluetooth: hci4: command tx timeout
[  540.412909][ T6035] block nbd0: Dead connection, failed to find a fallback
[  540.412927][ T6035] block nbd0: shutting down sockets
[  540.412938][ T6035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.412957][ T6035] Buffer I/O error on dev nbd0, logical block 0, async page read
[  540.413076][ T6035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.413092][ T6035] Buffer I/O error on dev nbd0, logical block 0, async page read
[  540.413153][ T6035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.413168][ T6035] Buffer I/O error on dev nbd0, logical block 0, async page read
[  540.413226][ T6035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.443442][  T154] bridge_slave_1: left allmulticast mode
[  540.443470][  T154] bridge_slave_1: left promiscuous mode
[  540.443671][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.473357][ T6035] Buffer I/O error on dev nbd0, logical block 0, async page read
[  540.473541][ T6035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.473574][ T6035] Buffer I/O error on dev nbd0, logical block 0, async page read
[  540.473684][ T6035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.473707][ T6035] Buffer I/O error on dev nbd0, logical block 0, async page read
[  540.473858][ T6035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.473881][ T6035] Buffer I/O error on dev nbd0, logical block 0, async page read
[  540.473972][ T6035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.473993][ T6035] Buffer I/O error on dev nbd0, logical block 0, async page read
[  540.474048][ T6035] ldm_validate_partition_table(): Disk read failed.
[  540.474095][ T6035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.474117][ T6035] Buffer I/O error on dev nbd0, logical block 0, async page read
[  540.474208][ T6035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.474230][ T6035] Buffer I/O error on dev nbd0, logical block 0, async page read
[  540.474607][ T6035] Dev nbd0: unable to read RDB block 0
[  540.475085][ T6035]  nbd0: unable to read partition table
[  540.479830][ T6035] ldm_validate_partition_table(): Disk read failed.
[  540.480156][ T6035] Dev nbd0: unable to read RDB block 0
[  540.480627][ T6035]  nbd0: unable to read partition table
[  540.693125][  T154] bridge_slave_0: left allmulticast mode
[  540.693151][  T154] bridge_slave_0: left promiscuous mode
[  540.693359][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.996384][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.076409][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.146088][  T154] bond0 (unregistering): Released all slaves
[  541.243927][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.343851][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.404930][  T154] bond0 (unregistering): Released all slaves
[  541.575815][ T9487] dvmrp0: entered allmulticast mode
[  541.670035][ T9420] chnl_net:caif_netlink_parms(): no params data found
[  541.695266][ T9380] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.695478][ T9380] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.695635][ T9380] bridge_slave_0: entered allmulticast mode
[  541.697003][ T9380] bridge_slave_0: entered promiscuous mode
[  541.731114][ T9380] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.731389][ T9380] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.731620][ T9380] bridge_slave_1: entered allmulticast mode
[  541.754448][ T9380] bridge_slave_1: entered promiscuous mode
[  541.824585][ T9380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.832162][ T9380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.993433][  T154] hsr_slave_0: left promiscuous mode
[  542.033470][  T154] hsr_slave_1: left promiscuous mode
[  542.034235][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.054107][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.213364][  T154] hsr_slave_0: left promiscuous mode
[  542.233423][  T154] hsr_slave_1: left promiscuous mode
[  542.233970][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.274249][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.554312][  T154] team0 (unregistering): Port device team_slave_1 removed
[  542.573744][  T154] team0 (unregistering): Port device team_slave_0 removed
[  542.823810][  T154] team0 (unregistering): Port device team_slave_1 removed
[  542.843803][  T154] team0 (unregistering): Port device team_slave_0 removed
[  543.004311][ T9420] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.004615][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.004861][ T9420] bridge_slave_0: entered allmulticast mode
[  543.007901][ T9420] bridge_slave_0: entered promiscuous mode
[  543.014078][ T9380] team0: Port device team_slave_0 added
[  543.016713][ T9420] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.016961][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.017164][ T9420] bridge_slave_1: entered allmulticast mode
[  543.019154][ T9420] bridge_slave_1: entered promiscuous mode
[  543.023015][ T9380] team0: Port device team_slave_1 added
[  543.101317][ T9420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  543.103010][ T9380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  543.103021][ T9380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.103038][ T9380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  543.109272][ T9420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  543.111506][ T9380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  543.111521][ T9380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.111547][ T9380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.156942][ T9420] team0: Port device team_slave_0 added
[  543.163461][ T9420] team0: Port device team_slave_1 added
[  543.239311][ T9380] hsr_slave_0: entered promiscuous mode
[  543.240421][ T9380] hsr_slave_1: entered promiscuous mode
[  543.242019][ T9380] debugfs: 'hsr0' already exists in 'hsr'
[  543.242040][ T9380] Cannot create hsr debugfs directory
[  543.266491][ T9420] batman_adv: batadv0: Adding interface: batadv_slave_0
[  543.266505][ T9420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.266523][ T9420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  543.270147][ T9420] batman_adv: batadv0: Adding interface: batadv_slave_1
[  543.270160][ T9420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.270177][ T9420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.371242][ T9420] hsr_slave_0: entered promiscuous mode
[  543.372334][ T9420] hsr_slave_1: entered promiscuous mode
[  543.373804][ T9420] debugfs: 'hsr0' already exists in 'hsr'
[  543.373824][ T9420] Cannot create hsr debugfs directory
[  543.597810][ T9380] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  543.628355][ T9380] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  543.630090][ T9380] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  543.666250][ T9380] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  543.668380][ T9380] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  543.706681][ T9380] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  543.712418][ T9380] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  543.746303][ T9380] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  543.791711][ T9420] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  543.826131][ T9420] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  543.827487][ T9420] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  543.865874][ T9420] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  543.867654][ T9420] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  543.906914][ T9420] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  543.910302][ T9420] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  543.946057][ T9420] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  544.354702][ T9380] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.396850][ T9380] 8021q: adding VLAN 0 to HW filter on device team0
[  544.410346][ T3037] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.410419][ T3037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.435401][ T9420] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.440420][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.440485][ T6883] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.493944][ T9420] 8021q: adding VLAN 0 to HW filter on device team0
[  544.518479][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.518538][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.547596][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.547715][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.786148][ T9380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.858279][ T9420] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.945893][ T9420] veth0_vlan: entered promiscuous mode
[  544.965126][ T9420] veth1_vlan: entered promiscuous mode
[  545.026486][ T9420] veth0_macvtap: entered promiscuous mode
[  545.037445][ T9420] veth1_macvtap: entered promiscuous mode
[  545.069559][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.098261][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.122485][ T6883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.135232][ T6883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.137645][   T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.140681][   T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.231475][ T9380] veth0_vlan: entered promiscuous mode
[  545.276007][ T9420] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht'
[  545.305670][ T9380] veth1_vlan: entered promiscuous mode
[  545.308791][  T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.308812][  T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.329506][ T9420] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht'
[  545.360659][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.360682][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.409029][ T9380] veth0_macvtap: entered promiscuous mode
[  545.421430][ T9380] veth1_macvtap: entered promiscuous mode
[  545.445145][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.455397][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.474623][   T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.478215][ T3037] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.478639][ T3037] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.479075][ T3037] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.614484][ T9380] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht'
[  545.640037][  T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.640059][  T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.646776][ T9380] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  545.691102][  T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.691125][  T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50