last executing test programs:

7m36.010953355s ago: executing program 3 (id=1171):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1)
write$ppp(r1, &(0x7f0000000700)="b068aa", 0x3)

7m35.77997053s ago: executing program 3 (id=1172):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebdf4000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

7m34.668070092s ago: executing program 3 (id=1173):
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0xffffffffffffffff, 0x815, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x8, 0xc58, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000740)=[r0], &(0x7f0000000780)=[{0x2, 0x4, 0x3, 0x3}]}, 0x94)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c)

7m32.027711924s ago: executing program 3 (id=1178):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

7m29.574986212s ago: executing program 3 (id=1184):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(r0, 0xa, &(0x7f0000000000)={0x6, 0x9}, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, 0x0)

7m28.487955034s ago: executing program 3 (id=1186):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

7m28.004082483s ago: executing program 32 (id=1186):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

6m12.296666414s ago: executing program 0 (id=1331):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r3, 0xfffff789)
r4 = accept(r3, 0x0, 0x0)
listen(r2, 0x8)
listen(0xffffffffffffffff, 0xfffffffd)
socket$inet(0xa, 0x801, 0x84)
r5 = accept$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000002c0)=0x60)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000340)=0x5e1, 0x4)
r6 = socket$inet(0xa, 0x800, 0x182)
listen(r6, 0x8)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000600000000", @ANYRES32=r7, @ANYRESHEX=r0, @ANYBLOB="0000000000000000bf91000000000000b702000002000000850000002e000000b70000000000000795"], &(0x7f0000000180)='GPL\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x4)
listen(r1, 0x8200002)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r11, &(0x7f0000000040)=ANY=[], 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=0x0, @ANYRESDEC=r3, @ANYBLOB="c5af49f2ae14608d40ed5514aedb42e23c1910c2410c9e974babf4855d9ed29d84b4f42227f5d9ef2e1be4829d54117e46fc715104a5c80406854d61f947216c833e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9)

6m7.723056974s ago: executing program 0 (id=1338):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x22000)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000080)=""/84)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000180)={'syz_tun\x00', 0x80})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21)
ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300})
keyctl$session_to_parent(0x12)

6m4.671762725s ago: executing program 0 (id=1342):
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x40004046)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x67038, 0x882ab}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

6m4.43043581s ago: executing program 0 (id=1344):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48)

6m3.285414192s ago: executing program 0 (id=1345):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
ptrace(0x10, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x0, 0x1, 0x7, {{0x18, 0x4, 0x3, 0x9, 0x60, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x3, 0xc3}, @noop, @rr={0x7, 0x3, 0xaa}, @timestamp_addr={0x44, 0x3c, 0x37, 0x1, 0x7, [{@remote, 0x9}, {@local, 0x2}, {@rand_addr=0x64010100, 0x9}, {@empty, 0x6}, {@broadcast, 0x5}, {@multicast2, 0x9}, {@multicast1, 0xfffffffc}]}, @rr={0x7, 0x7, 0xef, [@loopback]}]}}}}})
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
r6 = socket$inet(0x2, 0x1, 0x6)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$sock_SIOCOUTQ(r7, 0x5411, 0xffffffffffffffff)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000f80)={0x80000000, &(0x7f0000000ec0), &(0x7f0000000f00)})
bind$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
listen(r6, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]})
sendmsg$nl_route(r4, 0x0, 0x0)

6m1.894989679s ago: executing program 0 (id=1350):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x80000000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0xff00)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x40001000})

5m46.740785168s ago: executing program 33 (id=1350):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x80000000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0xff00)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x40001000})

52.396069428s ago: executing program 5 (id=2214):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(0xffffffffffffffff, 0x5)
connect$inet(r0, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='h', 0x1}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1}, 0x40)

52.246339071s ago: executing program 5 (id=2216):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_pidfd_open(r1, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000001080)={0x2020}, 0x2020)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

50.994645356s ago: executing program 5 (id=2219):
prlimit64(0x0, 0xe, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240), 0x0, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000080), 0x80)

50.626533663s ago: executing program 5 (id=2221):
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x0)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'vcan0\x00', 0x6})
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000540)=ANY=[@ANYBLOB="646d61636b3d30303030303030303030303030303030303030303030302c646d61736b3d30303030303030303030303030303030303030303030362c5569643dcc4fd83d9844fc59bd26070e396465302d08b9712ed3a96661c644292aab6b0ff262f1a4eb4dfeda1a01727abeb7b97f5ffe52b0dc425ab28b92763bec0fc297d1c97a9de1624086aaf3cdc768b6599ebde4", @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000000005,fmask=00000000000000000000001,zero_size_dir,iocharset=iso8859-7,dmask=00000000000000000002001,iocharset=macroman,errors=continue,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
mknodat$loop(r1, 0x0, 0x200, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x40000)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[], 0x0, 0x2c3, &(0x7f0000000240)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='\n', 0x1)
sendmsg$nl_route(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x48001)

49.75647596s ago: executing program 5 (id=2223):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r3, 0xfffff789)
r4 = accept(r3, 0x0, 0x0)
listen(r2, 0x8)
listen(0xffffffffffffffff, 0xfffffffd)
socket$inet(0xa, 0x801, 0x84)
r5 = accept$nfc_llcp(r4, &(0x7f0000000240), 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000340)=0x5e1, 0x4)
r6 = socket$inet(0xa, 0x800, 0x182)
listen(r6, 0x8)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000600000000", @ANYRES32=r7, @ANYRESHEX=r0, @ANYBLOB="0000000000000000bf91000000000000b702000002000000850000002e000000b70000000000000795"], &(0x7f0000000180)='GPL\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28}, 0x94)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000040)=0x1f, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x4)
listen(r1, 0x8200002)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r11, &(0x7f0000000040)=ANY=[], 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=0x0, @ANYRESDEC=r3, @ANYBLOB="c5af49f2ae14608d40ed5514aedb42e23c1910c2410c9e974babf4855d9ed29d84b4f42227f5d9ef2e1be4829d54117e46fc715104a5c80406854d61f947216c833e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9)

46.70870261s ago: executing program 5 (id=2231):
syz_open_dev$loop(0x0, 0x6, 0x800)
semget(0x3, 0x2, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=0x0}})
mount$fuseblk(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00')
read$FUSE(r3, &(0x7f0000002a40)={0x2020}, 0x2020)

46.093716102s ago: executing program 34 (id=2231):
syz_open_dev$loop(0x0, 0x6, 0x800)
semget(0x3, 0x2, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=0x0}})
mount$fuseblk(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00')
read$FUSE(r3, &(0x7f0000002a40)={0x2020}, 0x2020)

14.088242403s ago: executing program 1 (id=2334):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe8, &(0x7f0000000440)=""/232, 0x41000, 0x1e}, 0x94)

13.473791455s ago: executing program 1 (id=2336):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x67038, 0x882ab}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

13.289032658s ago: executing program 1 (id=2337):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xfd}]}}}}}}}, 0x0)

11.856686297s ago: executing program 1 (id=2341):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000003c0), 0xa00, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x10, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0x6, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x3, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x205, 0x0, 0x4, 0x5, 0x9, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x2, 0x0, 0x5, 0x42f, 0x1, 0x312, 0x78, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x20006, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0x9, 0x8, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xfff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x0, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000007, 0x2, 0x6d03, 0x5, 0xd, 0x17, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x7, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0xb, 0x80aaed, 0x4, 0x24], [0x9, 0x840bb33, 0x7fffffff, 0xb, 0x5, 0x100093a, 0x7, 0x1000006, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0x4, 0x3, 0x101, 0x10003, 0x2, 0xfffff001, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffbfd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0xf7f]}, 0x45c)
close_range(r0, r1, 0x0)

11.646249411s ago: executing program 1 (id=2343):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

11.391135716s ago: executing program 1 (id=2344):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe8, &(0x7f0000000440)=""/232, 0x41000, 0x1e}, 0x94)

5.60402933s ago: executing program 2 (id=2357):
socket$tipc(0x1e, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xdf, 0x4}, {0x100, 0x2}}}}, 0x11)

5.405941094s ago: executing program 2 (id=2358):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000700)=0x10)

4.048959901s ago: executing program 6 (id=2360):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r3, 0xfffff789)
r4 = accept(r3, 0x0, 0x0)
listen(r2, 0x8)
listen(0xffffffffffffffff, 0xfffffffd)
socket$inet(0xa, 0x801, 0x84)
r5 = accept$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000002c0)=0x60)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000340)=0x5e1, 0x4)
r6 = socket$inet(0xa, 0x800, 0x182)
listen(r6, 0x8)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000600000000", @ANYRES32=r7, @ANYRESHEX=r0, @ANYBLOB="0000000000000000bf91000000000000b702000002000000850000002e000000b70000000000000795"], &(0x7f0000000180)='GPL\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28}, 0x94)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000040)=0x1f, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x4)
listen(r1, 0x8200002)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r11, &(0x7f0000000040)=ANY=[], 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=0x0, @ANYRESDEC=r3, @ANYBLOB="c5af49f2ae14608d40ed5514aedb42e23c1910c2410c9e974babf4855d9ed29d84b4f42227f5d9ef2e1be4829d54117e46fc715104a5c80406854d61f947216c833e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9)

3.902744854s ago: executing program 2 (id=2361):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='h', 0x1}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0)
recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1}, 0x40)

3.901726974s ago: executing program 4 (id=2362):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.783840446s ago: executing program 4 (id=2363):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2040)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x1, 0x801001a, 0x66d, 0xfffe, 0x6, 0x3, 0x0, 0x0, 0x41, 0x100000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0xb70, 0x7e30, 0xf, 0x3, {0x0, 0x0, 0x0, 0x100000000, 0x3, 0x1, 0x2, 0x4, 0x2608636, 0x4000, 0x104, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00')
syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x4, {0x2, 0xffffffffffe, 0x6, 0x0, 0x0, 0x3881fffc, {0x5, 0xfff, 0x47ffff, 0x0, 0x3, 0x0, 0xb, 0x0, 0x10000, 0x8000, 0x80000000, r2, r3, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f000000e9c0)={0x2020}, 0x2020)

3.082505459s ago: executing program 6 (id=2364):
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_misc(r1, &(0x7f0000000100)="96", 0x1)
write$binfmt_misc(r1, &(0x7f0000000040)='\t', 0x27)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

2.911982013s ago: executing program 2 (id=2365):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2.911723663s ago: executing program 6 (id=2366):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe8, &(0x7f0000000440)=""/232, 0x41000, 0x1e}, 0x94)

2.720045667s ago: executing program 4 (id=2367):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x210)

2.238961096s ago: executing program 4 (id=2368):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000700)=0x10)

1.991951031s ago: executing program 2 (id=2369):
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x201, 0x1d})
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r4, 0x401, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x4800)

1.990587121s ago: executing program 6 (id=2376):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe8, &(0x7f0000000440)=""/232, 0x41000, 0x1e}, 0x94)

1.908024973s ago: executing program 4 (id=2370):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000003c0), 0xa00, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
close_range(r0, r1, 0x0)

572.237389ms ago: executing program 4 (id=2371):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r3, 0xfffff789)
r4 = accept(r3, 0x0, 0x0)
listen(r2, 0x8)
listen(0xffffffffffffffff, 0xfffffffd)
socket$inet(0xa, 0x801, 0x84)
r5 = accept$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000002c0)=0x60)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000340)=0x5e1, 0x4)
r6 = socket$inet(0xa, 0x800, 0x182)
listen(r6, 0x8)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000600000000", @ANYRES32=r7, @ANYRESHEX=r0, @ANYBLOB="0000000000000000bf91000000000000b702000002000000850000002e000000b70000000000000795"], &(0x7f0000000180)='GPL\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28}, 0x94)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000040)=0x1f, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x4)
listen(r1, 0x8200002)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r11, &(0x7f0000000040)=ANY=[], 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=0x0, @ANYRESDEC=r3, @ANYBLOB="c5af49f2ae14608d40ed5514aedb42e23c1910c2410c9e974babf4855d9ed29d84b4f42227f5d9ef2e1be4829d54117e46fc715104a5c80406854d61f947216c833e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9)

436.416682ms ago: executing program 2 (id=2372):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='h', 0x1}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0)
recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1}, 0x40)

186.803667ms ago: executing program 6 (id=2373):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

0s ago: executing program 6 (id=2374):
syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="f7040094f29b8ea45f433a67e9722ca231cb00aaab0082b0924e1f080045789545c9e438c100278df394ef2c74a9e6bb4e1e00ff2b266cb9d4eea4b8b601604600"/75, @ANYRESOCT=0x0], 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000a80)="b9fff5308944268cb899e36e0800e8e47176b3446b2c1d8839b01d436c0e6c922608", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r3, 0x11}, 0x14)
r4 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r5, &(0x7f0000000240)='0000:00:03.0\x00', 0xd)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r6, &(0x7f00000000c0)='vp-vdpa\x00', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r7, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
pselect6(0x40, &(0x7f0000000080)={0xfffffffffffffffa, 0x6, 0x7fff, 0x9, 0x5, 0xe, 0x0, 0xfff}, &(0x7f0000000240)={0xc00, 0xb, 0x1, 0x3, 0x9, 0x2, 0xfffffffffffffff7, 0x9}, &(0x7f0000000280)={0x84, 0x2, 0xbb7, 0x7b60, 0x5, 0x8, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={&(0x7f0000000300)={[0x224]}, 0x8})
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

kernel console output (not intermixed with test programs):

0 in B*Tree
[  571.912471][ T9866] hfsplus: request for non-existent node 33423360 in B*Tree
[  571.978110][ T9869] hfsplus: request for non-existent node 33423360 in B*Tree
[  571.998086][ T9869] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.025740][ T9872] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.053601][ T9872] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.098866][ T9866] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.119599][ T9866] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.153877][ T9866] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.197443][ T9866] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.255758][ T9866] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.270461][ T9866] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.284352][ T9845] chnl_net:caif_netlink_parms(): no params data found
[  572.317041][ T9866] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.324498][ T9866] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.378337][ T9869] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.408255][ T9869] hfsplus: request for non-existent node 33423360 in B*Tree
[  573.606138][ T5783] Bluetooth: hci2: command tx timeout
[  573.813711][ T9845] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.866859][ T9845] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.874250][ T9845] bridge_slave_0: entered allmulticast mode
[  573.946203][ T9845] bridge_slave_0: entered promiscuous mode
[  574.009056][ T9845] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.031939][ T9845] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.062885][ T9845] bridge_slave_1: entered allmulticast mode
[  574.214726][ T9845] bridge_slave_1: entered promiscuous mode
[  575.243195][   T49] hsr_slave_0: left promiscuous mode
[  575.319626][   T49] hsr_slave_1: left promiscuous mode
[  575.415709][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.423254][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.479795][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.531883][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.556606][   T49] bridge_slave_1: left allmulticast mode
[  575.566508][   T49] bridge_slave_1: left promiscuous mode
[  575.586173][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.668845][   T49] bridge_slave_0: left allmulticast mode
[  575.706025][   T49] bridge_slave_0: left promiscuous mode
[  575.712152][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.745730][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  575.755619][ T5783] Bluetooth: hci2: command tx timeout
[  575.802678][   T49] veth1_macvtap: left promiscuous mode
[  575.810427][   T49] veth0_macvtap: left promiscuous mode
[  575.816305][   T49] veth1_vlan: left promiscuous mode
[  575.821910][   T49] veth0_vlan: left promiscuous mode
[  576.003199][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  576.026861][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  576.060254][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  576.079251][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.101865][ T9914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  576.126992][    T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  576.687346][ T9921] loop2: detected capacity change from 0 to 1024
[  576.766900][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  576.786664][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  576.916066][ T5816] usb 1-1: USB disconnect, device number 20
[  576.931565][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  576.963133][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.059349][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.085895][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.114689][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.134216][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.164923][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.185187][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.222510][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.230143][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.247301][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.254880][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.264655][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.275174][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.301310][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.311737][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.322559][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.330479][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.341203][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.365583][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.390513][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.398155][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.411368][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.424032][ T9921] hfsplus: request for non-existent node 33423360 in B*Tree
[  577.667328][ T9927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  577.835736][ T5783] Bluetooth: hci2: command tx timeout
[  578.075324][ T9931] loop1: detected capacity change from 0 to 16
[  578.083338][ T9931] erofs: (device loop1): mounted with root inode @ nid 36.
[  578.252647][   T49] team0 (unregistering): Port device team_slave_1 removed
[  578.328375][   T49] team0 (unregistering): Port device team_slave_0 removed
[  578.393628][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  578.453109][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  581.073814][   T49] bond0 (unregistering): Released all slaves
[  581.445989][ T9947] loop2: detected capacity change from 0 to 1024
[  581.504033][ T9845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  581.587558][ T9845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.613372][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  581.630170][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  581.653218][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  581.702064][ T9845] team0: Port device team_slave_0 added
[  581.721900][ T9845] team0: Port device team_slave_1 added
[  581.756015][ T9948] hfsplus: request for non-existent node 33423360 in B*Tree
[  581.775742][ T9948] hfsplus: request for non-existent node 33423360 in B*Tree
[  581.837896][ T9845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.844946][ T9845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.874693][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  581.883683][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  581.913270][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  581.924677][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  581.964129][ T9845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.967597][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  582.006852][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.014246][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.018065][ T9845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  582.030381][    T9] usb 2-1: Product: syz
[  582.034594][    T9] usb 2-1: Manufacturer: syz
[  582.052270][ T9845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.074436][    T9] usb 2-1: SerialNumber: syz
[  582.114868][ T9948] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.166737][ T9952] Set syz1 is full, maxelem 1029 reached
[  582.185489][ T9845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  582.190396][ T9948] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.243255][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.272276][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.312038][ T9956] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.333788][    T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  582.377059][ T9956] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.404791][ T9957] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.416650][ T9845] hsr_slave_0: entered promiscuous mode
[  582.439733][ T9957] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.446203][ T9845] hsr_slave_1: entered promiscuous mode
[  582.598605][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.606155][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.615711][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.623780][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.633651][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.642426][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.650995][    C0] usblp0: nonzero write bulk status received: -71
[  582.651841][ T5816] usb 2-1: USB disconnect, device number 7
[  582.717498][ T5816] usblp0: removed
[  582.874865][ T9948] hfsplus: request for non-existent node 33423360 in B*Tree
[  582.931706][ T9948] hfsplus: request for non-existent node 33423360 in B*Tree
[  583.008830][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  583.048134][ T9947] hfsplus: request for non-existent node 33423360 in B*Tree
[  583.438380][ T9970] loop1: detected capacity change from 0 to 1024
[  583.489114][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  583.627867][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  583.658072][ T9845] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  584.486099][ T9974] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.493466][ T9974] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.660292][ T9845] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  584.697701][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.705071][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.733368][ T9845] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  584.762857][ T9845] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  584.776860][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.795004][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.817955][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.843172][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.870989][ T9974] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.894679][ T9974] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.927997][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.947030][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  584.965958][ T9845] 8021q: adding VLAN 0 to HW filter on device bond0
[  584.978735][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  585.006081][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  585.045790][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  585.056383][ T9845] 8021q: adding VLAN 0 to HW filter on device team0
[  585.084297][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  585.107774][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.115067][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  585.124230][ T9974] hfsplus: request for non-existent node 33423360 in B*Tree
[  585.167462][ T9974] hfsplus: request for non-existent node 33423360 in B*Tree
[  585.198656][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  585.206657][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.214628][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  585.225544][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  585.268665][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  585.295632][ T9970] hfsplus: request for non-existent node 33423360 in B*Tree
[  586.244413][ T9845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.593943][T10018] loop2: detected capacity change from 0 to 1024
[  588.800732][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  588.864624][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  588.929996][T10023] hfsplus: request for non-existent node 33423360 in B*Tree
[  588.990204][T10023] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.021360][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.056529][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.097260][ T9845] veth0_vlan: entered promiscuous mode
[  589.109004][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.126726][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.147839][ T9845] veth1_vlan: entered promiscuous mode
[  589.185087][T10023] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.229202][T10023] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.240471][T10029] loop0: detected capacity change from 0 to 16
[  589.268682][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.291328][ T9845] veth0_macvtap: entered promiscuous mode
[  589.324500][T10029] erofs: (device loop0): mounted with root inode @ nid 36.
[  589.348285][ T9845] veth1_macvtap: entered promiscuous mode
[  589.360694][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.410891][T10023] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.418261][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.418326][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.418337][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.418353][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.418364][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.418377][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.419835][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  589.486120][T10023] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.531479][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.587412][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.620730][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.661353][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.662828][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.691315][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.724423][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.741909][T10023] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.755775][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.759802][T10023] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.790527][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.795403][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.802375][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.829434][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.842315][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.844233][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.866556][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.875081][T10018] hfsplus: request for non-existent node 33423360 in B*Tree
[  589.886994][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  589.911181][T10033] netlink: 'syz.1.1222': attribute type 4 has an invalid length.
[  589.981784][T10035] netlink: 'syz.1.1222': attribute type 4 has an invalid length.
[  590.056341][ T9845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  590.065125][ T9845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.135419][ T9845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.144290][ T9845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  591.361196][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.415531][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.494496][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.521609][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.663725][T10073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  594.795679][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  598.255089][T10128] loop1: detected capacity change from 0 to 16
[  599.313668][T10128] erofs: (device loop1): mounted with root inode @ nid 36.
[  601.534575][T10145] fuse: Unknown parameter 'user_id00000000000000000000'
[  603.236536][T10168] loop2: detected capacity change from 0 to 512
[  603.347804][T10168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  603.386490][ T9456] IPVS: starting estimator thread 0...
[  603.400670][T10168] EXT4-fs (loop2): 1 truncate cleaned up
[  603.448701][T10168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  603.505531][T10172] IPVS: using max 15 ests per chain, 36000 per kthread
[  603.576522][   T27] audit: type=1800 audit(1786794881.788:39): pid=10168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1248" name="file1" dev="loop2" ino=15 res=0 errno=0
[  606.359657][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.916128][T10213] fuse: Bad value for 'fd'
[  609.028609][T10221] loop0: detected capacity change from 0 to 16
[  609.032304][T10207] syz.2.1257: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  609.074643][T10207] CPU: 0 PID: 10207 Comm: syz.2.1257 Not tainted syzkaller #0
[  609.082187][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  609.092288][T10207] Call Trace:
[  609.095679][T10207]  <TASK>
[  609.098716][T10207]  dump_stack_lvl+0x18c/0x250
[  609.103579][T10207]  ? show_regs_print_info+0x20/0x20
[  609.108888][T10207]  ? load_image+0x420/0x420
[  609.113484][T10207]  ? __rcu_read_unlock+0x7c/0xd0
[  609.118894][T10207]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  609.125457][T10207]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  609.131970][T10207]  warn_alloc+0x246/0x340
[  609.136327][T10207]  ? zone_watermark_ok_safe+0x230/0x230
[  609.141876][T10207]  ? __mutex_trylock_common+0x160/0x270
[  609.147422][T10207]  __vmalloc_node_range+0x129/0x1320
[  609.152706][T10207]  ? tomoyo_path_number_perm+0x217/0x5e0
[  609.158388][T10207]  ? rcu_is_watching+0x15/0xb0
[  609.163151][T10207]  ? trace_contention_end+0x39/0xe0
[  609.168345][T10207]  ? __mutex_lock+0x30d/0xc80
[  609.173094][T10207]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  609.178910][T10207]  ? tomoyo_path_number_perm+0x217/0x5e0
[  609.184543][T10207]  ? free_vm_area+0x50/0x50
[  609.189061][T10207]  ? dvb_dvr_do_ioctl+0x12e/0x220
[  609.194164][T10207]  vmalloc+0x79/0x90
[  609.198066][T10207]  ? dvb_dvr_do_ioctl+0x12e/0x220
[  609.203091][T10207]  dvb_dvr_do_ioctl+0x12e/0x220
[  609.207947][T10207]  dvb_usercopy+0x195/0x2b0
[  609.212465][T10207]  ? dvb_dvr_release+0x3e0/0x3e0
[  609.217409][T10207]  ? dvb_generic_ioctl+0xb0/0xb0
[  609.222353][T10207]  ? dvb_dvr_poll+0x230/0x230
[  609.227032][T10207]  dvb_dvr_ioctl+0x29/0x30
[  609.231462][T10207]  __se_sys_ioctl+0xfd/0x170
[  609.236091][T10207]  do_syscall_64+0x55/0xb0
[  609.240535][T10207]  ? clear_bhb_loop+0x40/0x90
[  609.245259][T10207]  ? clear_bhb_loop+0x40/0x90
[  609.249936][T10207]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  609.255828][T10207] RIP: 0033:0x7f31ba99e0d9
[  609.260284][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.279949][T10207] RSP: 002b:00007f31bb843028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  609.288403][T10207] RAX: ffffffffffffffda RBX: 00007f31bac25fa0 RCX: 00007f31ba99e0d9
[  609.296375][T10207] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004
[  609.304357][T10207] RBP: 00007f31baa35024 R08: 0000000000000000 R09: 0000000000000000
[  609.312326][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  609.320295][T10207] R13: 00007f31bac26038 R14: 00007f31bac25fa0 R15: 00007ffda1299d88
[  609.328275][T10207]  </TASK>
[  609.331429][    C0] vkms_vblank_simulate: vblank timer overrun
[  610.708803][T10207] Mem-Info:
[  610.711523][T10221] erofs: (device loop0): mounted with root inode @ nid 36.
[  610.713320][T10207] active_anon:46824 inactive_anon:0 isolated_anon:0
[  610.713320][T10207]  active_file:17421 inactive_file:40623 isolated_file:0
[  610.713320][T10207]  unevictable:768 dirty:56 writeback:0
[  610.713320][T10207]  slab_reclaimable:10970 slab_unreclaimable:92772
[  610.713320][T10207]  mapped:27557 shmem:41510 pagetables:900
[  610.713320][T10207]  sec_pagetables:0 bounce:0
[  610.713320][T10207]  kernel_misc_reclaimable:0
[  610.713320][T10207]  free:1303642 free_pcp:11401 free_cma:0
[  610.765313][T10207] Node 0 active_anon:187196kB inactive_anon:0kB active_file:69684kB inactive_file:162288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110228kB dirty:224kB writeback:0kB shmem:164504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11132kB pagetables:3600kB sec_pagetables:0kB all_unreclaimable? no
[  610.800042][T10207] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  610.908136][T10207] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  610.947117][T10207] lowmem_reserve[]: 0 2521 2522 2522 2522
[  610.953003][T10207] Node 0 DMA32 free:1312048kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:168860kB inactive_anon:0kB active_file:69684kB inactive_file:161452kB unevictable:1536kB writepending:224kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:36284kB local_pcp:19312kB free_cma:0kB
[  611.027881][T10207] lowmem_reserve[]: 0 0 0 0 0
[  611.032697][T10207] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  611.059824][    C0] vkms_vblank_simulate: vblank timer overrun
[  611.107454][T10207] lowmem_reserve[]: 0 0 0 0 0
[  611.112276][T10207] Node 1 Normal free:3894720kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20360kB local_pcp:10688kB free_cma:0kB
[  611.141826][    C0] vkms_vblank_simulate: vblank timer overrun
[  611.190413][T10207] lowmem_reserve[]: 0 0 0 0 0
[  611.195227][T10207] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  611.235402][T10207] Node 0 DMA32: 1001*4kB (UME) 1159*8kB (UME) 188*16kB (UM) 170*32kB (UM) 208*64kB (UME) 197*128kB (UM) 62*256kB (UME) 10*512kB (UM) 25*1024kB (UM) 22*2048kB (UM) 293*4096kB (UM) = 1352028kB
[  611.275466][T10207] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  611.305734][T10207] Node 1 Normal: 236*4kB (UME) 64*8kB (UME) 37*16kB (UME) 60*32kB (UME) 15*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3894720kB
[  611.355390][T10207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  611.365001][T10207] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  611.411516][T10207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  611.423298][T10207] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  611.456186][T10207] 78569 total pagecache pages
[  611.460935][T10207] 0 pages in swap cache
[  611.465214][T10207] Free swap  = 124996kB
[  611.490244][T10207] Total swap = 124996kB
[  611.502480][T10207] 2097051 pages RAM
[  611.506841][T10207] 0 pages HighMem/MovableOnly
[  611.511550][T10207] 416958 pages reserved
[  611.535552][T10207] 0 pages cma reserved
[  612.529792][T10250] loop4: detected capacity change from 0 to 512
[  612.563333][T10250] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  612.687758][T10250] EXT4-fs (loop4): 1 truncate cleaned up
[  612.743062][T10250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  612.834517][   T27] audit: type=1800 audit(1786794891.038:40): pid=10250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1262" name="file1" dev="loop4" ino=15 res=0 errno=0
[  614.076971][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.311380][T10283] fuse: Bad value for 'fd'
[  617.714524][T10306] loop0: detected capacity change from 0 to 16
[  617.748455][T10306] erofs: (device loop0): mounted with root inode @ nid 36.
[  620.777325][T10340] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  622.672440][T10358] loop4: detected capacity change from 0 to 512
[  622.729156][T10358] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  622.817261][T10358] EXT4-fs (loop4): 1 truncate cleaned up
[  622.845115][T10358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.895400][   T27] audit: type=1800 audit(1786794901.098:41): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1291" name="file1" dev="loop4" ino=15 res=0 errno=0
[  622.961107][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.353266][T10375] tun0: tun_chr_ioctl cmd 1074812118
[  624.566210][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.572729][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  626.747683][T10399] loop1: detected capacity change from 0 to 16
[  626.809153][T10399] erofs: (device loop1): mounted with root inode @ nid 36.
[  629.962895][T10445] syz.1.1303: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  630.019963][T10445] CPU: 1 PID: 10445 Comm: syz.1.1303 Not tainted syzkaller #0
[  630.027511][T10445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  630.037703][T10445] Call Trace:
[  630.041019][T10445]  <TASK>
[  630.043988][T10445]  dump_stack_lvl+0x18c/0x250
[  630.048735][T10445]  ? show_regs_print_info+0x20/0x20
[  630.053986][T10445]  ? load_image+0x420/0x420
[  630.058546][T10445]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  630.065026][T10445]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  630.071589][T10445]  warn_alloc+0x246/0x340
[  630.075976][T10445]  ? zone_watermark_ok_safe+0x230/0x230
[  630.081584][T10445]  ? __mutex_trylock_common+0x160/0x270
[  630.087184][T10445]  __vmalloc_node_range+0x129/0x1320
[  630.092603][T10445]  ? tomoyo_path_number_perm+0x217/0x5e0
[  630.098288][T10445]  ? rcu_is_watching+0x15/0xb0
[  630.103104][T10445]  ? trace_contention_end+0x39/0xe0
[  630.108357][T10445]  ? __mutex_lock+0x30d/0xc80
[  630.113085][T10445]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  630.118815][T10445]  ? tomoyo_path_number_perm+0x217/0x5e0
[  630.124506][T10445]  ? free_vm_area+0x50/0x50
[  630.129079][T10445]  ? dvb_dvr_do_ioctl+0x12e/0x220
[  630.134172][T10445]  vmalloc+0x79/0x90
[  630.138117][T10445]  ? dvb_dvr_do_ioctl+0x12e/0x220
[  630.143197][T10445]  dvb_dvr_do_ioctl+0x12e/0x220
[  630.148195][T10445]  dvb_usercopy+0x195/0x2b0
[  630.152754][T10445]  ? dvb_dvr_release+0x3e0/0x3e0
[  630.157741][T10445]  ? dvb_generic_ioctl+0xb0/0xb0
[  630.162749][T10445]  ? dvb_dvr_poll+0x230/0x230
[  630.167515][T10445]  dvb_dvr_ioctl+0x29/0x30
[  630.171984][T10445]  __se_sys_ioctl+0xfd/0x170
[  630.176716][T10445]  do_syscall_64+0x55/0xb0
[  630.181176][T10445]  ? clear_bhb_loop+0x40/0x90
[  630.185902][T10445]  ? clear_bhb_loop+0x40/0x90
[  630.190621][T10445]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  630.196558][T10445] RIP: 0033:0x7f533599e0d9
[  630.201014][T10445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  630.220674][T10445] RSP: 002b:00007f53368e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  630.229154][T10445] RAX: ffffffffffffffda RBX: 00007f5335c25fa0 RCX: 00007f533599e0d9
[  630.237179][T10445] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004
[  630.245196][T10445] RBP: 00007f5335a35024 R08: 0000000000000000 R09: 0000000000000000
[  630.253213][T10445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  630.261226][T10445] R13: 00007f5335c26038 R14: 00007f5335c25fa0 R15: 00007ffc9a45de78
[  630.269262][T10445]  </TASK>
[  630.277296][T10445] Mem-Info:
[  630.280445][T10445] active_anon:9025 inactive_anon:0 isolated_anon:0
[  630.280445][T10445]  active_file:17421 inactive_file:40497 isolated_file:0
[  630.280445][T10445]  unevictable:2816 dirty:126 writeback:0
[  630.280445][T10445]  slab_reclaimable:10833 slab_unreclaimable:94311
[  630.280445][T10445]  mapped:26884 shmem:2397 pagetables:1037
[  630.280445][T10445]  sec_pagetables:0 bounce:0
[  630.280445][T10445]  kernel_misc_reclaimable:0
[  630.280445][T10445]  free:1339917 free_pcp:5676 free_cma:0
[  630.376739][T10445] Node 0 active_anon:36200kB inactive_anon:0kB active_file:69684kB inactive_file:161784kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:107536kB dirty:504kB writeback:0kB shmem:8052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:11600kB pagetables:4148kB sec_pagetables:0kB all_unreclaimable? no
[  632.131244][T10445] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  632.251003][T10445] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  632.325478][T10445] lowmem_reserve[]: 0 2521 2522 2522 2522
[  632.331349][T10445] Node 0 DMA32 free:1383972kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:84636kB inactive_anon:0kB active_file:69684kB inactive_file:160948kB unevictable:9728kB writepending:568kB present:3129332kB managed:2586828kB mlocked:8192kB bounce:0kB free_pcp:15604kB local_pcp:13660kB free_cma:0kB
[  632.498357][T10445] lowmem_reserve[]: 0 0 0 0 0
[  632.503189][T10445] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  632.655497][T10445] lowmem_reserve[]: 0 0 0 0 0
[  632.660485][T10445] Node 1 Normal free:3894720kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20392kB local_pcp:9704kB free_cma:0kB
[  632.705463][T10445] lowmem_reserve[]: 0 0 0 0 0
[  632.710703][T10445] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  632.797306][T10445] Node 0 DMA32: 1637*4kB (UME) 1268*8kB (UME) 1135*16kB (UME) 887*32kB (UME) 63*64kB (UME) 174*128kB (UM) 115*256kB (UM) 64*512kB (UM) 32*1024kB (UM) 22*2048kB (UM) 293*4096kB (ME) = 1429700kB
[  632.845518][T10445] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  632.887280][T10445] Node 1 Normal: 236*4kB (UME) 64*8kB (UME) 37*16kB (UME) 60*32kB (UME) 15*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3894720kB
[  632.965707][T10445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  632.995850][T10445] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  633.005223][T10445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  633.035539][T10445] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  633.055755][T10445] 63841 total pagecache pages
[  633.060509][T10445] 0 pages in swap cache
[  633.064698][T10445] Free swap  = 124996kB
[  633.085414][T10445] Total swap = 124996kB
[  633.095600][T10445] 2097051 pages RAM
[  633.099468][T10445] 0 pages HighMem/MovableOnly
[  633.124598][T10445] 416958 pages reserved
[  633.128936][T10445] 0 pages cma reserved
[  633.658491][T10497] loop4: detected capacity change from 0 to 16
[  633.689584][T10497] erofs: (device loop4): mounted with root inode @ nid 36.
[  634.575499][   T56] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  634.765582][   T56] usb 3-1: Using ep0 maxpacket: 32
[  634.799408][   T56] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  634.835130][   T56] usb 3-1: config 0 has no interface number 0
[  634.864957][   T56] usb 3-1: config 0 interface 12 has no altsetting 0
[  636.282195][   T56] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  636.291985][   T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.300780][   T56] usb 3-1: Product: syz
[  636.304990][   T56] usb 3-1: Manufacturer: syz
[  636.310541][   T56] usb 3-1: SerialNumber: syz
[  636.321166][   T56] usb 3-1: config 0 descriptor??
[  636.908851][T10535] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  638.163237][   T56] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  638.188362][   T56] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  638.219157][   T56] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  638.251259][   T56] f81534: probe of 3-1:0.12 failed with error -71
[  638.330431][   T56] usb 3-1: USB disconnect, device number 8
[  641.379629][T10573] loop2: detected capacity change from 0 to 16
[  641.387881][T10573] erofs: (device loop2): mounted with root inode @ nid 36.
[  647.575937][T10603] loop4: detected capacity change from 0 to 128
[  648.577953][T10603] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  648.595099][T10603] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  648.861653][ T9845] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  651.219573][T10630] loop0: detected capacity change from 0 to 16
[  651.416031][T10630] erofs: (device loop0): mounted with root inode @ nid 36.
[  654.783121][T10659] tun0: tun_chr_ioctl cmd 1074812118
[  655.964367][T10672] loop4: detected capacity change from 0 to 512
[  656.025587][T10672] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  656.121106][T10672] EXT4-fs (loop4): 1 truncate cleaned up
[  656.173343][T10672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  656.305383][   T27] audit: type=1800 audit(1786794934.478:42): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1352" name="file1" dev="loop4" ino=15 res=0 errno=0
[  656.359520][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  661.613817][T10698] tun0: tun_chr_ioctl cmd 1074812118
[  662.832719][T10703] loop4: detected capacity change from 0 to 512
[  662.860868][T10703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  662.897114][T10703] EXT4-fs (loop4): 1 truncate cleaned up
[  662.904243][T10703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  663.014364][   T27] audit: type=1800 audit(1786794941.218:43): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1361" name="file1" dev="loop4" ino=15 res=0 errno=0
[  663.132227][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.935712][T10738] loop2: detected capacity change from 0 to 512
[  669.009477][T10738] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  669.207063][T10738] EXT4-fs (loop2): 1 truncate cleaned up
[  669.214433][T10738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  669.391433][   T27] audit: type=1800 audit(1786794947.548:44): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1370" name="file1" dev="loop2" ino=15 res=0 errno=0
[  669.602398][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  671.501324][T10761] tun0: tun_chr_ioctl cmd 1074812118
[  672.412598][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  672.434508][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  672.445518][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  672.491559][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  672.508457][   T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  673.906594][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  675.212327][T10780] loop1: detected capacity change from 0 to 512
[  675.241474][T10780] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  675.263609][T10764] chnl_net:caif_netlink_parms(): no params data found
[  675.298427][T10780] EXT4-fs (loop1): 1 truncate cleaned up
[  675.308912][T10780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  675.355057][   T27] audit: type=1800 audit(1786794953.558:45): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1380" name="file1" dev="loop1" ino=15 res=0 errno=0
[  675.505100][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  675.747529][T10764] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.783267][T10764] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.796121][T10764] bridge_slave_0: entered allmulticast mode
[  675.830199][T10764] bridge_slave_0: entered promiscuous mode
[  675.858943][T10764] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.883116][T10764] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.926978][T10764] bridge_slave_1: entered allmulticast mode
[  675.955828][T10764] bridge_slave_1: entered promiscuous mode
[  675.995611][ T5783] Bluetooth: hci4: command tx timeout
[  676.122919][T10764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  676.153790][T10764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  676.194433][T10795] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  676.251132][T10764] team0: Port device team_slave_0 added
[  676.261424][T10764] team0: Port device team_slave_1 added
[  676.296659][T10764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  676.303904][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  676.331313][T10764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  676.365173][T10764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  676.372791][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  676.399442][T10764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  676.563196][T10764] hsr_slave_0: entered promiscuous mode
[  676.596757][T10764] hsr_slave_1: entered promiscuous mode
[  676.634147][T10764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  676.648937][T10764] Cannot create hsr debugfs directory
[  677.275500][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  678.078631][ T5783] Bluetooth: hci4: command tx timeout
[  678.802374][T10812] loop4: detected capacity change from 0 to 512
[  678.860873][T10812] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  678.977388][T10812] EXT4-fs (loop4): 1 truncate cleaned up
[  678.984544][T10812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  679.121169][T10816] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns
[  679.216120][T10764] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  679.242609][T10764] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  679.265133][T10764] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  679.318801][T10764] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  679.512457][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  679.574654][T10764] 8021q: adding VLAN 0 to HW filter on device bond0
[  679.618677][T10764] 8021q: adding VLAN 0 to HW filter on device team0
[  679.685400][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.692610][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  679.713641][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.720904][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state
[  680.159453][ T5783] Bluetooth: hci4: command tx timeout
[  680.172897][T10838] futex_wake_op: syz.1.1387 tries to shift op by 144; fix this program
[  680.242181][T10838] loop1: detected capacity change from 0 to 256
[  681.434536][T10838] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  681.560266][   T27] audit: type=1800 audit(1786794959.668:46): pid=10836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1387" name="file1" dev="loop1" ino=1048630 res=0 errno=0
[  681.860466][T10845] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  681.928048][T10764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.024628][ T5783] Bluetooth: hci0: unexpected event for opcode 0x2028
[  682.235530][ T5783] Bluetooth: hci4: command tx timeout
[  682.423564][T10854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  682.955610][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  682.967837][T10863] loop2: detected capacity change from 0 to 8192
[  683.778898][T10764] veth0_vlan: entered promiscuous mode
[  683.834255][T10764] veth1_vlan: entered promiscuous mode
[  683.923579][T10764] veth0_macvtap: entered promiscuous mode
[  683.969774][T10764] veth1_macvtap: entered promiscuous mode
[  684.377992][T10878] futex_wake_op: syz.1.1408 tries to shift op by 144; fix this program
[  684.480313][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.593562][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.615727][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.633905][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.649938][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.661317][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.675082][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.717359][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.740633][T10764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  684.748610][T10878] loop1: detected capacity change from 0 to 256
[  684.780468][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  684.805587][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.825422][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  684.853839][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.874055][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  684.916968][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.946582][T10764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  684.967916][T10764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.008739][T10878] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  685.027278][T10764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  685.054750][T10764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.081080][T10764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.119047][T10764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.145373][   T27] audit: type=1800 audit(1786794963.348:47): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1408" name="file1" dev="loop1" ino=1048631 res=0 errno=0
[  685.148116][T10764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.344713][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.375821][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.463097][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.521704][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.628051][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  686.634581][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  687.896161][T10900] kworker/u4:0: attempt to access beyond end of device
[  687.896161][T10900] loop1: rw=1048577, sector=1984, nr_sectors = 2200 limit=256
[  688.027360][T10900] kworker/u4:0: attempt to access beyond end of device
[  688.027360][T10900] loop1: rw=1048577, sector=4184, nr_sectors = 1936 limit=256
[  688.520513][ T1080] kworker/u4:6: attempt to access beyond end of device
[  688.520513][ T1080] loop1: rw=1, sector=6112, nr_sectors = 2304 limit=256
[  693.195529][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  693.538912][T10958] futex_wake_op: syz.1.1418 tries to shift op by 144; fix this program
[  693.556659][T10958] loop1: detected capacity change from 0 to 256
[  693.801554][T10958] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  693.862113][   T27] audit: type=1800 audit(1786794972.068:48): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1418" name="file1" dev="loop1" ino=1048635 res=0 errno=0
[  695.440036][T10968] syzkaller0: entered promiscuous mode
[  695.446218][T10968] syzkaller0: entered allmulticast mode
[  695.462582][T10968] tipc: Started in network mode
[  695.468057][T10968] tipc: Node identity 32fb2807995c, cluster identity 4711
[  695.478843][T10968] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  695.539839][T10965] tipc: Resetting bearer <eth:syzkaller0>
[  695.651364][T10965] tipc: Disabling bearer <eth:syzkaller0>
[  697.088780][T10997] futex_wake_op: syz.1.1435 tries to shift op by 144; fix this program
[  697.106456][T10997] loop1: detected capacity change from 0 to 256
[  697.420870][T10997] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  697.463263][   T27] audit: type=1800 audit(1786794975.668:49): pid=10996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1435" name="file1" dev="loop1" ino=1048636 res=0 errno=0
[  699.017329][ T5783] Bluetooth: hci2: unexpected event for opcode 0x2028
[  699.483242][T11018] loop1: detected capacity change from 0 to 8192
[  705.446385][T11052] futex_wake_op: syz.2.1447 tries to shift op by 144; fix this program
[  705.464681][T11052] loop2: detected capacity change from 0 to 256
[  705.569272][T11052] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  705.885708][   T27] audit: type=1800 audit(1786794983.798:50): pid=11052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1447" name="file1" dev="loop2" ino=1048637 res=0 errno=0
[  706.073389][   T49] kworker/u4:3: attempt to access beyond end of device
[  706.073389][   T49] loop2: rw=1, sector=2480, nr_sectors = 5936 limit=256
[  706.498514][ T5783] Bluetooth: hci2: unexpected event for opcode 0x2028
[  706.685748][   T56] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  706.896188][   T56] usb 3-1: Using ep0 maxpacket: 8
[  706.923642][   T56] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  706.972734][   T56] usb 3-1: config 0 interface 0 has no altsetting 0
[  706.983277][   T56] usb 3-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  707.023182][   T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.044273][   T56] usb 3-1: config 0 descriptor??
[  707.566668][   T56] aquacomputer_d5next 0003:0C70:F010.0004: unexpected long global item
[  707.591392][   T56] aquacomputer_d5next: probe of 0003:0C70:F010.0004 failed with error -22
[  707.750915][ T5158] usb 3-1: USB disconnect, device number 9
[  710.966856][T11103] loop4: detected capacity change from 0 to 32768
[  711.002887][T11103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1459 (11103)
[  711.024405][T11103] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  711.034734][T11103] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  711.043672][T11103] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  711.053825][T11103] BTRFS info (device loop4): force zstd compression, level 15
[  711.061521][T11103] BTRFS info (device loop4): using free space tree
[  712.372438][T11103] BTRFS info (device loop4): enabling ssd optimizations
[  712.379839][T11103] BTRFS info (device loop4): auto enabling async discard
[  713.387812][ T9845] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  713.777812][ T7708] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (7708)
[  713.902721][ T5783] Bluetooth: hci2: unexpected event for opcode 0x2028
[  716.810750][ T5783] Bluetooth: hci2: unexpected event for opcode 0x2028
[  720.243650][T11204] loop2: detected capacity change from 0 to 512
[  720.268438][T11204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  720.333089][T11204] EXT4-fs (loop2): 1 truncate cleaned up
[  720.551714][T11204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  721.752226][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  723.149769][T11248] loop2: detected capacity change from 0 to 512
[  723.235110][T11247] loop1: detected capacity change from 0 to 32768
[  723.292608][T11247] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  723.313509][T11248] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  723.413152][T11248] EXT4-fs (loop2): 1 truncate cleaned up
[  723.420545][T11248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  723.458424][   T27] audit: type=1800 audit(1786795001.668:51): pid=11248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1513" name="file1" dev="loop2" ino=15 res=0 errno=0
[  723.608656][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  723.612107][ T7708] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  724.091412][T11262] loop5: detected capacity change from 0 to 8192
[  726.948831][T11277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1523'.
[  727.511253][T11280] loop5: detected capacity change from 0 to 512
[  727.536797][T11280] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  727.649487][T11280] EXT4-fs (loop5): 1 truncate cleaned up
[  727.674336][T11280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  727.717588][   T27] audit: type=1800 audit(1786795005.928:52): pid=11280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1524" name="file1" dev="loop5" ino=15 res=0 errno=0
[  728.438621][T10764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  728.835805][ T5158] IPVS: starting estimator thread 0...
[  728.966343][T11289] IPVS: using max 32 ests per chain, 76800 per kthread
[  729.233312][T11295] loop5: detected capacity change from 0 to 8192
[  731.165519][ T5158] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  731.376855][ T5158] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  731.389787][ T5158] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  731.402755][ T5158] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  731.414247][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.989246][ T5158] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[  731.997303][ T5158] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[  732.004730][ T5158] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[  732.019558][ T5158] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[  732.029589][ T5158] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[  732.749813][ T5158] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[  732.759010][ T5158] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[  732.766536][ T5158] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[  732.773995][ T5158] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[  732.781509][ T5158] hid-picolcd 0003:04D8:C002.0005: nested delimiters
[  732.826932][ T5158] hid-picolcd 0003:04D8:C002.0005: item 0 2 2 10 parsing failed
[  732.839986][ T5158] hid-picolcd 0003:04D8:C002.0005: device report parse failed
[  732.848873][ T5158] hid-picolcd: probe of 0003:04D8:C002.0005 failed with error -22
[  732.870232][ T5158] usb 2-1: USB disconnect, device number 8
[  733.335518][ T9330] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  733.545268][ T9330] usb 6-1: Using ep0 maxpacket: 8
[  733.603411][ T9330] usb 6-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  733.697041][ T9330] usb 6-1: config 0 interface 0 has no altsetting 0
[  733.728561][ T9330] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  733.756385][ T9330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.811216][ T9330] usb 6-1: config 0 descriptor??
[  734.686899][ T9330] aquacomputer_d5next 0003:0C70:F010.0006: unexpected long global item
[  734.712475][ T9330] aquacomputer_d5next: probe of 0003:0C70:F010.0006 failed with error -22
[  735.188552][T11321] loop4: detected capacity change from 0 to 512
[  735.285767][ T9330] usb 6-1: USB disconnect, device number 2
[  735.292000][T11321] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  735.425678][T11321] EXT4-fs (loop4): 1 truncate cleaned up
[  735.443944][T11321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  735.465888][   T27] audit: type=1800 audit(1786795013.678:53): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1534" name="file1" dev="loop4" ino=15 res=0 errno=0
[  735.887236][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  747.440628][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  747.455380][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  749.476032][T11430] loop4: detected capacity change from 0 to 512
[  749.525693][T11430] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  749.620251][T11430] EXT4-fs (loop4): 1 truncate cleaned up
[  749.639599][T11430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  751.534109][   T27] audit: type=1800 audit(1786795028.018:54): pid=11430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1551" name="file1" dev="loop4" ino=15 res=0 errno=0
[  751.654649][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.175569][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  755.725673][ T5816] usb 5-1: Using ep0 maxpacket: 8
[  755.737620][ T5816] usb 5-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  755.755814][ T5816] usb 5-1: config 0 interface 0 has no altsetting 0
[  755.776567][ T5816] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  755.805425][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.834769][ T5816] usb 5-1: config 0 descriptor??
[  756.280956][ T5816] usbhid 5-1:0.0: can't add hid device: -71
[  756.296539][ T5816] usbhid: probe of 5-1:0.0 failed with error -71
[  756.344025][ T5816] usb 5-1: USB disconnect, device number 2
[  760.518486][T11519] loop4: detected capacity change from 0 to 16
[  760.536627][T11519] erofs: (device loop4): mounted with root inode @ nid 36.
[  760.843876][T11519] syz.4.1597: attempt to access beyond end of device
[  760.843876][T11519] loop4: rw=0, sector=48, nr_sectors = 16 limit=16
[  760.933194][T11524] syz.4.1597: attempt to access beyond end of device
[  760.933194][T11524] loop4: rw=0, sector=48, nr_sectors = 16 limit=16
[  761.435615][ T5158] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  761.700739][ T5158] usb 5-1: Using ep0 maxpacket: 8
[  761.722080][ T5158] usb 5-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  761.760947][ T5158] usb 5-1: config 0 interface 0 has no altsetting 0
[  761.785161][ T5158] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  761.799186][ T5158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.827210][ T5158] usb 5-1: config 0 descriptor??
[  762.597265][ T5158] usbhid 5-1:0.0: can't add hid device: -71
[  762.615597][ T5158] usbhid: probe of 5-1:0.0 failed with error -71
[  762.624947][ T5158] usb 5-1: USB disconnect, device number 3
[  764.339569][T11554] loop5: detected capacity change from 0 to 512
[  764.406198][T11554] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  764.534649][T11554] EXT4-fs (loop5): 1 truncate cleaned up
[  764.566821][T11554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  764.640045][   T27] audit: type=1800 audit(1786795042.848:55): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1595" name="file1" dev="loop5" ino=15 res=0 errno=0
[  764.803097][T10764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  774.363255][T11632] loop1: detected capacity change from 0 to 512
[  774.461433][T11632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  774.516822][T11632] EXT4-fs (loop1): 1 truncate cleaned up
[  774.594098][T11632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  774.618721][   T27] audit: type=1800 audit(1786795052.818:56): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1614" name="file1" dev="loop1" ino=15 res=0 errno=0
[  775.326188][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  777.822686][T11652] loop4: detected capacity change from 0 to 32768
[  777.891672][T11652] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  777.929440][T11652] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  777.964483][T11652] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  777.996309][T11652] BTRFS info (device loop4): force zstd compression, level 15
[  778.015674][T11652] BTRFS info (device loop4): using free space tree
[  778.158887][T11686] loop1: detected capacity change from 0 to 512
[  778.167304][T11652] BTRFS info (device loop4): enabling ssd optimizations
[  778.174304][T11652] BTRFS info (device loop4): auto enabling async discard
[  778.250098][T11686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  778.366440][T11686] EXT4-fs (loop1): 1 truncate cleaned up
[  778.373591][T11686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  778.529590][   T27] audit: type=1800 audit(1786795056.718:57): pid=11686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1638" name="file1" dev="loop1" ino=15 res=0 errno=0
[  778.595196][ T9845] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  778.609939][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.793085][ T7708] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (7708)
[  781.443662][T11707] xt_TCPMSS: Only works on TCP SYN packets
[  781.489269][T11707] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd
[  781.547354][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'.
[  782.102513][T11718] loop2: detected capacity change from 0 to 512
[  782.144209][T11718] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  782.239353][T11718] EXT4-fs (loop2): 1 truncate cleaned up
[  782.247423][T11718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  782.278650][   T27] audit: type=1800 audit(1786795060.488:58): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1648" name="file1" dev="loop2" ino=15 res=0 errno=0
[  782.470246][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  785.070084][T11755] loop5: detected capacity change from 0 to 512
[  785.089549][T11755] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  785.225406][T11755] EXT4-fs (loop5): 1 truncate cleaned up
[  785.236828][T11755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  785.361432][   T27] audit: type=1800 audit(1786795063.568:59): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1659" name="file1" dev="loop5" ino=15 res=0 errno=0
[  785.542051][T10764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  786.032249][T11751] loop2: detected capacity change from 0 to 32768
[  786.055599][T11751] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  786.243189][ T7708] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  786.284241][T11771] loop1: detected capacity change from 0 to 16
[  786.314785][T11771] erofs: (device loop1): mounted with root inode @ nid 36.
[  786.361475][T11771] syz.1.1658: attempt to access beyond end of device
[  786.361475][T11771] loop1: rw=0, sector=48, nr_sectors = 16 limit=16
[  786.706715][T11780] loop2: detected capacity change from 0 to 512
[  786.744258][T11780] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  786.771801][T11780] EXT4-fs (loop2): 1 truncate cleaned up
[  786.784464][T11780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  786.848727][   T27] audit: type=1800 audit(1786795065.058:60): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1668" name="file1" dev="loop2" ino=15 res=0 errno=0
[  786.914642][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  787.415586][  T788] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  787.667711][  T788] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  787.696819][  T788] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  787.720150][  T788] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  787.752867][  T788] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  787.780477][  T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.797305][  T788] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  787.956967][ T7705] udevd[7705]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  788.000597][  T788] snd-usb-audio: probe of 6-1:27.0 failed with error -12
[  788.048203][  T788] usb 6-1: USB disconnect, device number 3
[  788.431031][T11800] loop1: detected capacity change from 0 to 32768
[  788.490413][T11800] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  788.823755][ T7708] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  789.044794][T11808] loop5: detected capacity change from 0 to 512
[  789.069407][T11808] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  789.078921][T11810] loop1: detected capacity change from 0 to 16
[  789.122286][T11808] EXT4-fs (loop5): 1 truncate cleaned up
[  789.136983][T11808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  789.155746][T11810] erofs: (device loop1): mounted with root inode @ nid 36.
[  789.200106][   T27] audit: type=1800 audit(1786795067.408:61): pid=11808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1678" name="file1" dev="loop5" ino=15 res=0 errno=0
[  789.230812][T11810] syz.1.1679: attempt to access beyond end of device
[  789.230812][T11810] loop1: rw=0, sector=48, nr_sectors = 16 limit=16
[  789.393843][T10764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.135418][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  790.717355][    T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  790.735379][    T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  790.745216][    T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  790.755096][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  790.756978][T11830] loop1: detected capacity change from 0 to 40427
[  790.764804][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.786326][T11830] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  790.793937][T11830] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  790.809761][    T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  790.820666][T11830] F2FS-fs (loop1): Image doesn't support compression
[  790.829254][T11830] F2FS-fs (loop1): Image doesn't support compression
[  790.857713][T11830] F2FS-fs (loop1): invalid crc value
[  790.924049][    T9] snd-usb-audio: probe of 3-1:27.0 failed with error -12
[  790.939435][ T7691] udevd[7691]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  791.158172][    T8] usb 3-1: USB disconnect, device number 10
[  791.204948][T11830] F2FS-fs (loop1): Start checkpoint disabled!
[  791.205102][T11839] loop5: detected capacity change from 0 to 512
[  791.247521][T11839] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  791.267883][T11830] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  791.286010][T11830] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  791.328871][T11839] EXT4-fs (loop5): 1 truncate cleaned up
[  791.365901][T11839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  791.422162][   T27] audit: type=1800 audit(1786795069.628:62): pid=11839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1689" name="file1" dev="loop5" ino=15 res=0 errno=0
[  791.514679][T10764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  791.978293][T11846] syz.1.1687: attempt to access beyond end of device
[  791.978293][T11846] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  792.000796][T11846] syz.1.1687: attempt to access beyond end of device
[  792.000796][T11846] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  792.719405][ T1080] kworker/u4:6: attempt to access beyond end of device
[  792.719405][ T1080] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  792.776790][ T1080] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  793.363167][T11847] loop5: detected capacity change from 0 to 32768
[  793.428555][T11847] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  793.593018][ T7708] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  796.107642][T11894] loop5: detected capacity change from 0 to 16
[  796.147925][T11894] erofs: (device loop5): mounted with root inode @ nid 36.
[  796.540488][T11905] loop4: detected capacity change from 0 to 128
[  796.551199][T11905] =======================================================
[  796.551199][T11905] WARNING: The mand mount option has been deprecated and
[  796.551199][T11905]          and is ignored by this kernel. Remove the mand
[  796.551199][T11905]          option from the mount to silence this warning.
[  796.551199][T11905] =======================================================
[  796.628567][T11905] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  796.635425][   T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  796.649315][T11905] hpfs: filesystem error: improperly stopped
[  796.655844][T11905] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  796.663659][T11905] hpfs: You really don't want any checks? You are crazy...
[  796.671133][T11905] hpfs: Code page index out of array
[  796.676559][T11905] hpfs: code page support is disabled
[  796.730496][T11905] hpfs: hpfs_map_4sectors(): unaligned read
[  796.744283][T11905] hpfs: hpfs_map_4sectors(): unaligned read
[  796.750405][T11905] hpfs: filesystem error: unable to find root dir
[  796.803248][T11905] hpfs: hpfs_map_4sectors(): unaligned read
[  797.489187][   T23] usb 6-1: Using ep0 maxpacket: 8
[  797.535433][   T23] usb 6-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  797.555343][   T23] usb 6-1: config 0 interface 0 has no altsetting 0
[  797.582382][   T23] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  797.610365][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.633057][   T23] usb 6-1: config 0 descriptor??
[  798.153680][   T23] usbhid 6-1:0.0: can't add hid device: -71
[  798.158074][T11909] loop2: detected capacity change from 0 to 8192
[  798.159945][   T23] usbhid: probe of 6-1:0.0 failed with error -71
[  798.191070][   T23] usb 6-1: USB disconnect, device number 4
[  798.944421][T11926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1717'.
[  800.715961][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  801.103740][T11956] loop5: detected capacity change from 0 to 8192
[  801.337676][   T56] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  801.563095][T11970] loop2: detected capacity change from 0 to 64
[  801.585363][   T56] usb 2-1: Using ep0 maxpacket: 8
[  801.606337][   T56] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  801.645883][   T56] usb 2-1: config 0 interface 0 has no altsetting 0
[  801.672975][   T56] usb 2-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  801.702879][   T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.746908][   T56] usb 2-1: config 0 descriptor??
[  802.041502][T11964] loop4: detected capacity change from 0 to 32768
[  802.071025][T11964] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  802.082137][T11964] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  802.168067][T11964] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  802.230365][T11964] BTRFS info (device loop4): force zstd compression, level 15
[  802.273186][T11964] BTRFS info (device loop4): using free space tree
[  802.527676][T11964] BTRFS info (device loop4): enabling ssd optimizations
[  802.565691][T11964] BTRFS info (device loop4): auto enabling async discard
[  802.625980][   T56] usbhid 2-1:0.0: can't add hid device: -71
[  802.632479][   T56] usbhid: probe of 2-1:0.0 failed with error -71
[  802.642280][   T56] usb 2-1: USB disconnect, device number 9
[  803.514236][ T9845] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  803.749082][ T7708] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (7708)
[  803.834085][T12016] loop1: detected capacity change from 0 to 512
[  804.013726][T12016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  804.208092][T12016] fs-verity: sha512 using implementation "sha512-avx2"
[  804.475831][T12018] loop4: detected capacity change from 0 to 8192
[  804.579228][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  806.805145][T12050] loop2: detected capacity change from 0 to 512
[  806.845403][T12050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  806.895387][T12050] EXT4-fs (loop2): 1 truncate cleaned up
[  806.934219][T12050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  807.057500][   T27] audit: type=1800 audit(1786795085.258:63): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1750" name="file1" dev="loop2" ino=15 res=0 errno=0
[  807.135717][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  807.326773][T12039] loop1: detected capacity change from 0 to 32768
[  807.369173][T12039] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  807.504998][ T7708] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  807.967593][T12073] futex_wake_op: syz.2.1753 tries to shift op by 144; fix this program
[  807.985180][T12073] loop2: detected capacity change from 0 to 256
[  808.884968][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  808.891549][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  809.455122][T12073] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  809.691974][   T27] audit: type=1800 audit(1786795087.788:64): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1753" name="file1" dev="loop2" ino=1048638 res=0 errno=0
[  810.734832][T12090] loop5: detected capacity change from 0 to 512
[  810.783779][T12090] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  810.883587][T12090] EXT4-fs (loop5): 1 truncate cleaned up
[  810.926018][T12090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  811.020749][   T27] audit: type=1800 audit(1786795089.228:65): pid=12090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1759" name="file1" dev="loop5" ino=15 res=0 errno=0
[  811.213712][T10764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  811.521921][T12092] loop4: detected capacity change from 0 to 32768
[  811.553444][T12092] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  811.576205][T12092] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  811.585788][T12092] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  811.616632][T12092] BTRFS info (device loop4): force zstd compression, level 15
[  811.624180][T12092] BTRFS info (device loop4): using free space tree
[  811.785000][T12092] BTRFS info (device loop4): enabling ssd optimizations
[  811.804906][T12092] BTRFS info (device loop4): auto enabling async discard
[  811.999741][ T9845] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  812.065767][T12121] futex_wake_op: syz.5.1763 tries to shift op by 144; fix this program
[  812.111734][T12121] loop5: detected capacity change from 0 to 256
[  812.336408][T12121] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  812.440793][   T27] audit: type=1800 audit(1786795090.598:66): pid=12121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1763" name="file1" dev="loop5" ino=1048639 res=0 errno=0
[  813.102752][   T42] kworker/u4:2: attempt to access beyond end of device
[  813.102752][   T42] loop5: rw=1, sector=3744, nr_sectors = 4672 limit=256
[  814.124931][T12133] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  814.124931][T12133] The task syz.1.1766 (12133) triggered the difference, watch for misbehavior.
[  814.416381][T12142] loop2: detected capacity change from 0 to 512
[  814.466794][T12142] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  814.549661][T12142] EXT4-fs (loop2): 1 truncate cleaned up
[  814.573174][T12142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  814.876710][   T27] audit: type=1800 audit(1786795093.078:67): pid=12142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1769" name="file1" dev="loop2" ino=15 res=0 errno=0
[  815.567763][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  815.808431][T12163] futex_wake_op: syz.4.1773 tries to shift op by 144; fix this program
[  815.854335][T12163] loop4: detected capacity change from 0 to 256
[  815.890156][T12163] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  816.409397][   T27] audit: type=1800 audit(1786795094.148:68): pid=12163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1773" name="file1" dev="loop4" ino=1048640 res=0 errno=0
[  816.802101][   T42] kworker/u4:2: attempt to access beyond end of device
[  816.802101][   T42] loop4: rw=1, sector=2072, nr_sectors = 4016 limit=256
[  816.894748][   T42] kworker/u4:2: attempt to access beyond end of device
[  816.894748][   T42] loop4: rw=1, sector=6088, nr_sectors = 2328 limit=256
[  816.905397][T12155] loop1: detected capacity change from 0 to 32768
[  816.972023][T12155] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1772 (12155)
[  817.071664][T12155] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  817.311513][T12155] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  817.473148][T12155] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  817.619724][T12155] BTRFS info (device loop1): force zstd compression, level 15
[  817.629919][T12155] BTRFS info (device loop1): using free space tree
[  817.845053][T12155] BTRFS info (device loop1): enabling ssd optimizations
[  817.859359][T12155] BTRFS info (device loop1): auto enabling async discard
[  818.058634][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  818.938464][T12204] loop5: detected capacity change from 0 to 512
[  818.957311][T12204] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  819.100357][T12204] EXT4-fs (loop5): 1 truncate cleaned up
[  819.235638][T12204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  819.713604][   T27] audit: type=1800 audit(1786795097.918:69): pid=12204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1782" name="file1" dev="loop5" ino=15 res=0 errno=0
[  820.010261][T10764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  820.106591][T12214] futex_wake_op: syz.1.1785 tries to shift op by 144; fix this program
[  820.153131][T12214] loop1: detected capacity change from 0 to 256
[  820.286018][T12214] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  820.368093][   T27] audit: type=1800 audit(1786795098.548:70): pid=12214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1785" name="file1" dev="loop1" ino=1048641 res=0 errno=0
[  821.027118][T12216] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1784'.
[  821.104282][ T8155] kworker/u4:13: attempt to access beyond end of device
[  821.104282][ T8155] loop1: rw=1, sector=3352, nr_sectors = 3064 limit=256
[  821.183263][ T8155] kworker/u4:13: attempt to access beyond end of device
[  821.183263][ T8155] loop1: rw=1, sector=6416, nr_sectors = 2000 limit=256
[  823.206628][T12247] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1796'.
[  823.249132][T12248] futex_wake_op: syz.1.1795 tries to shift op by 144; fix this program
[  823.266638][T12248] loop1: detected capacity change from 0 to 256
[  823.371610][T12248] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  823.396164][   T27] audit: type=1800 audit(1786795101.598:71): pid=12248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1795" name="file1" dev="loop1" ino=1048642 res=0 errno=0
[  823.984382][T12254] kvm: pic: non byte write
[  824.969503][   T42] kworker/u4:2: attempt to access beyond end of device
[  824.969503][   T42] loop1: rw=1, sector=440, nr_sectors = 2080 limit=256
[  825.038468][   T42] kworker/u4:2: attempt to access beyond end of device
[  825.038468][   T42] loop1: rw=1, sector=2520, nr_sectors = 2048 limit=256
[  825.104093][   T42] kworker/u4:2: attempt to access beyond end of device
[  825.104093][   T42] loop1: rw=1, sector=4568, nr_sectors = 2048 limit=256
[  826.046572][   T42] kworker/u4:2: attempt to access beyond end of device
[  826.046572][   T42] loop1: rw=1, sector=6616, nr_sectors = 1800 limit=256
[  827.075360][T12297] futex_wake_op: syz.2.1811 tries to shift op by 144; fix this program
[  827.111726][T12297] loop2: detected capacity change from 0 to 256
[  827.357753][T12297] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  827.924969][   T27] audit: type=1800 audit(1786795105.628:72): pid=12297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1811" name="file1" dev="loop2" ino=1048643 res=0 errno=0
[  828.092512][ T8155] kworker/u4:13: attempt to access beyond end of device
[  828.092512][ T8155] loop2: rw=1, sector=4008, nr_sectors = 2048 limit=256
[  828.164337][ T8155] kworker/u4:13: attempt to access beyond end of device
[  828.164337][ T8155] loop2: rw=1, sector=6056, nr_sectors = 2360 limit=256
[  828.573256][T12303] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1815'.
[  828.674859][T12309] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1817'.
[  830.221022][T12329] futex_wake_op: syz.5.1822 tries to shift op by 144; fix this program
[  830.257970][T12329] loop5: detected capacity change from 0 to 256
[  830.298455][T12329] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  830.360429][   T27] audit: type=1800 audit(1786795108.558:73): pid=12329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1822" name="file1" dev="loop5" ino=1048644 res=0 errno=0
[  831.114775][ T2929] kworker/u4:8: attempt to access beyond end of device
[  831.114775][ T2929] loop5: rw=1, sector=2040, nr_sectors = 2784 limit=256
[  831.172753][ T2929] kworker/u4:8: attempt to access beyond end of device
[  831.172753][ T2929] loop5: rw=1, sector=4824, nr_sectors = 2056 limit=256
[  831.252790][ T2929] kworker/u4:8: attempt to access beyond end of device
[  831.252790][ T2929] loop5: rw=1, sector=6880, nr_sectors = 1536 limit=256
[  831.583696][T12331] team0: Device ipvlan2 failed to register rx_handler
[  832.330969][T12341] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1827'.
[  832.546625][T12343] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1826'.
[  834.425835][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  834.629538][    T9] usb 6-1: Using ep0 maxpacket: 16
[  834.646527][    T9] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  834.664070][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.681744][    T9] usb 6-1: Product: syz
[  834.686541][    T9] usb 6-1: Manufacturer: syz
[  834.691248][    T9] usb 6-1: SerialNumber: syz
[  834.718128][    T9] usb 6-1: config 0 descriptor??
[  834.739744][    T9] gspca_main: spca508-2.14.0 probing 041e:4018
[  834.962104][    T9] gspca_spca508: reg_read err -32
[  834.996461][    T9] gspca_spca508: reg_read err -32
[  835.026128][    T9] gspca_spca508: reg_read err -32
[  835.038503][    T9] gspca_spca508: reg_read err -32
[  835.073373][T12366] futex_wake_op: syz.4.1831 tries to shift op by 144; fix this program
[  835.099570][T12366] loop4: detected capacity change from 0 to 256
[  835.555581][    T9] gspca_spca508: reg write: error -71
[  835.583163][    T9] spca508: probe of 6-1:0.0 failed with error -71
[  835.598340][T12366] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  835.620742][    T9] usb 6-1: USB disconnect, device number 5
[  835.637504][   T27] audit: type=1800 audit(1786795113.828:74): pid=12351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1831" name="file1" dev="loop4" ino=1048645 res=0 errno=0
[  836.275695][T12373] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1837'.
[  836.964152][T12389] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  837.713476][T12406] futex_wake_op: syz.4.1845 tries to shift op by 144; fix this program
[  837.731775][T12406] loop4: detected capacity change from 0 to 256
[  838.047009][T12406] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  838.109899][   T27] audit: type=1800 audit(1786795116.308:75): pid=12406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1845" name="file1" dev="loop4" ino=1048646 res=0 errno=0
[  838.788230][   T49] kworker/u4:3: attempt to access beyond end of device
[  838.788230][   T49] loop4: rw=1, sector=3656, nr_sectors = 3720 limit=256
[  838.817476][   T49] kworker/u4:3: attempt to access beyond end of device
[  838.817476][   T49] loop4: rw=1, sector=7376, nr_sectors = 1040 limit=256
[  838.958242][   T21] process 12408 (syz.5.1847) no longer affine to cpu1
[  839.008664][   T56] smpboot: CPU 1 is now offline
[  839.211786][T12416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1849'.
[  839.738558][T12428] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  840.411251][T12436] warning: `syz.4.1856' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  840.450077][T12442] loop2: detected capacity change from 0 to 512
[  840.494821][T12442] EXT4-fs: Ignoring removed mblk_io_submit option
[  840.553584][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1859'.
[  840.584545][T12442] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.1858: corrupted in-inode xattr: e_value size too large
[  840.660001][T12442] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1858: couldn't read orphan inode 15 (err -117)
[  840.738648][T12442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  841.100300][T12454] loop1: detected capacity change from 0 to 4096
[  841.150134][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  842.251134][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1869'.
[  842.332911][T12479] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  842.555996][   T56] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  842.804375][T12488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1871'.
[  842.833130][T12489] team0: Device ipvlan2 failed to register rx_handler
[  842.885327][   T56] usb 2-1: Using ep0 maxpacket: 8
[  842.907191][   T56] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  842.979487][   T56] usb 2-1: config 0 interface 0 has no altsetting 0
[  843.021562][   T56] usb 2-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  843.132499][   T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.172504][   T56] usb 2-1: config 0 descriptor??
[  844.791183][   T56] usbhid 2-1:0.0: can't add hid device: -71
[  844.855446][   T56] usbhid: probe of 2-1:0.0 failed with error -71
[  844.915409][   T56] usb 2-1: USB disconnect, device number 10
[  846.223860][T12526] loop4: detected capacity change from 0 to 512
[  846.392444][T12526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  846.616097][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  849.295400][ T5818] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  850.904047][T12566] loop4: detected capacity change from 0 to 128
[  850.944599][T12566] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  851.010433][T12566] hpfs: filesystem error: improperly stopped
[  851.033601][T12566] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  851.128818][ T5818] usb 2-1: Using ep0 maxpacket: 8
[  851.154483][ T5818] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  851.176048][T12566] hpfs: You really don't want any checks? You are crazy...
[  851.212049][T12566] hpfs: Code page index out of array
[  851.221834][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0
[  851.244857][T12566] hpfs: code page support is disabled
[  851.259756][ T5818] usb 2-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  851.279501][T12566] hpfs: hpfs_map_4sectors(): unaligned read
[  851.299385][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.314545][T12566] hpfs: hpfs_map_4sectors(): unaligned read
[  851.344055][T12566] hpfs: filesystem error: unable to find root dir
[  851.355082][ T5818] usb 2-1: config 0 descriptor??
[  851.417011][T12563] hpfs: hpfs_map_4sectors(): unaligned read
[  855.447515][ T5818] usbhid 2-1:0.0: can't add hid device: -71
[  855.453525][ T5818] usbhid: probe of 2-1:0.0 failed with error -71
[  855.557837][ T5818] usb 2-1: USB disconnect, device number 11
[  855.841857][T12597] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  858.730174][T12623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1915'.
[  858.905351][T10890] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  859.153471][T12637] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  859.183694][T10890] usb 6-1: Using ep0 maxpacket: 8
[  859.212172][T10890] usb 6-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  859.276859][T10890] usb 6-1: config 0 interface 0 has no altsetting 0
[  859.330698][T10890] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  859.402000][T10890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.460738][T10890] usb 6-1: config 0 descriptor??
[  861.362092][T10890] usbhid 6-1:0.0: can't add hid device: -71
[  861.609986][T10890] usbhid: probe of 6-1:0.0 failed with error -71
[  861.660842][T10890] usb 6-1: USB disconnect, device number 6
[  861.845876][T12656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1926'.
[  862.163057][T12664] loop5: detected capacity change from 0 to 512
[  862.237011][T12664] EXT4-fs: Ignoring removed mblk_io_submit option
[  862.297597][T12664] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.1929: corrupted in-inode xattr: e_value size too large
[  862.462097][T12664] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1929: couldn't read orphan inode 15 (err -117)
[  862.514024][T12676] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  862.560845][T12664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  862.881044][T10764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  865.375429][ T5818] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  865.588877][ T5818] usb 6-1: Using ep0 maxpacket: 8
[  865.605683][ T5818] usb 6-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  865.728680][ T5818] usb 6-1: config 0 interface 0 has no altsetting 0
[  865.750646][ T5818] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  865.792368][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.844426][ T5818] usb 6-1: config 0 descriptor??
[  866.090959][T12715] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  866.316362][    C0] raw-gadget.0 gadget.5: ignoring, device is not running
[  866.323811][    C0] raw-gadget.0 gadget.5: ignoring, device is not running
[  866.331519][    C0] raw-gadget.0 gadget.5: ignoring, device is not running
[  866.338795][ T5818] usbhid 6-1:0.0: can't add hid device: -32
[  866.344770][ T5818] usbhid: probe of 6-1:0.0 failed with error -32
[  866.508813][ T5818] usb 6-1: USB disconnect, device number 7
[  869.011975][T12747] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  870.318289][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  870.324652][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  871.513521][T12769] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  872.374317][T12791] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  874.539791][T12804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1970'.
[  875.015717][T12818] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  879.218703][T12838] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1982'.
[  883.735777][T12871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1994'.
[  897.766029][T12996] loop2: detected capacity change from 0 to 512
[  897.845424][T12996] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2039: inode has both inline data and extents flags
[  897.927139][T12996] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2039: couldn't read orphan inode 15 (err -117)
[  897.972482][T12996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  900.066856][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  904.818359][ T5818] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  905.035492][ T5818] usb 3-1: Using ep0 maxpacket: 32
[  905.059119][ T5818] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  905.085391][ T5818] usb 3-1: config 0 has no interface number 0
[  905.143035][ T5818] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  905.173041][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.213676][ T5818] usb 3-1: Product: syz
[  905.229249][ T5818] usb 3-1: Manufacturer: syz
[  905.256515][ T5818] usb 3-1: SerialNumber: syz
[  905.278957][ T5818] usb 3-1: config 0 descriptor??
[  905.314485][ T5818] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  905.564782][ T5818] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  905.643411][ T5818] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  905.909597][T13041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  906.099004][T13041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  906.617573][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  906.625540][   T56] usb 3-1: USB disconnect, device number 11
[  906.672517][   T56] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  908.170826][   T56] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  908.256187][   T56] quatech2 3-1:0.51: device disconnected
[  909.811825][T13098] i2c i2c-0: delete_device: Can't parse I2C address
[  912.182930][T13118] loop4: detected capacity change from 0 to 512
[  912.243505][T13118] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  913.224643][T13118] EXT4-fs (loop4): 1 truncate cleaned up
[  913.255112][T13118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  913.778547][   T27] audit: type=1800 audit(1786795191.758:76): pid=13118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2078" name="file1" dev="loop4" ino=15 res=0 errno=0
[  915.711956][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  918.340175][T13169] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2092'.
[  919.929873][T13180] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2095'.
[  920.434056][T13192] i2c i2c-0: delete_device: Can't parse I2C address
[  922.809732][T13207] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2104'.
[  922.919218][T13215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2105'.
[  923.091017][T13221] loop5: detected capacity change from 0 to 512
[  923.127023][T13221] EXT4-fs: Ignoring removed mblk_io_submit option
[  923.238816][T13221] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.2109: corrupted in-inode xattr: e_value size too large
[  923.320818][T13221] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2109: couldn't read orphan inode 15 (err -117)
[  923.424134][T13221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  923.701116][T10764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  923.978739][T13238] loop4: detected capacity change from 0 to 512
[  924.137956][T13238] EXT4-fs: inline encryption not supported
[  924.394599][T13238] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  924.450345][T13238] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.2113: corrupted in-inode xattr: e_value size too large
[  924.503847][T13238] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2113: couldn't read orphan inode 15 (err -117)
[  924.546658][T13238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  926.657543][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  927.965448][ T5818] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  928.215609][ T5818] usb 6-1: Using ep0 maxpacket: 8
[  928.230943][ T5818] usb 6-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  928.272127][ T5818] usb 6-1: config 0 interface 0 has no altsetting 0
[  928.310207][ T5818] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  928.351978][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.409285][ T5818] usb 6-1: config 0 descriptor??
[  930.311593][ T5818] usbhid 6-1:0.0: can't add hid device: -71
[  930.371357][ T5818] usbhid: probe of 6-1:0.0 failed with error -71
[  931.673730][ T5818] usb 6-1: USB disconnect, device number 8
[  931.859024][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  931.943315][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  933.565558][T13280] loop5: detected capacity change from 0 to 128
[  933.574129][T13280] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  933.586005][T13280] hpfs: filesystem error: improperly stopped
[  933.592047][T13280] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  933.599875][T13280] hpfs: You really don't want any checks? You are crazy...
[  933.607160][T13280] hpfs: Code page index out of array
[  933.612519][T13280] hpfs: code page support is disabled
[  933.618384][T13280] hpfs: hpfs_map_4sectors(): unaligned read
[  933.624407][T13280] hpfs: hpfs_map_4sectors(): unaligned read
[  933.630428][T13280] hpfs: filesystem error: unable to find root dir
[  933.660552][T13280] hpfs: hpfs_map_4sectors(): unaligned read
[  934.018650][T13288] loop4: detected capacity change from 0 to 512
[  934.038445][T13288] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  934.090819][T13288] EXT4-fs (loop4): 1 truncate cleaned up
[  934.117489][T13288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  934.172113][   T27] audit: type=1800 audit(1786795212.378:77): pid=13288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2119" name="file1" dev="loop4" ino=15 res=0 errno=0
[  934.440706][ T9845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  937.400160][T13320] team0: Device ipvlan2 failed to register rx_handler
[  937.565600][T10890] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  937.786818][T10890] usb 2-1: Using ep0 maxpacket: 8
[  937.824046][T10890] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  937.882912][T10890] usb 2-1: config 0 interface 0 has no altsetting 0
[  937.933540][T10890] usb 2-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  937.984124][T10890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.038700][T10890] usb 2-1: config 0 descriptor??
[  938.702172][T10890] usbhid 2-1:0.0: can't add hid device: -71
[  938.734573][T10890] usbhid: probe of 2-1:0.0 failed with error -71
[  939.205469][T10890] usb 2-1: USB disconnect, device number 12
[  939.506667][T13334] syz.4.2140 (13334) used greatest stack depth: 20048 bytes left
[  939.669079][T13339] netlink: 'syz.4.2142': attribute type 1 has an invalid length.
[  939.700166][T13339] netlink: 'syz.4.2142': attribute type 2 has an invalid length.
[  939.747404][T13339] binder: 13338:13339 ioctl c0306201 0 returned -14
[  939.788643][T13339] binder: 13338:13339 ioctl 4018620d 0 returned -22
[  939.818884][T13339] binder: 13338:13339 ioctl c0306201 0 returned -14
[  949.635403][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  949.838030][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  949.884196][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  949.988581][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.031543][    T9] usb 5-1: config 0 descriptor??
[  950.273371][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  950.304865][    T9] usbhid: probe of 5-1:0.0 failed with error -71
[  950.466661][    T9] usb 5-1: USB disconnect, device number 4
[  951.075461][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  951.286178][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  952.714143][T13440] loop5: detected capacity change from 0 to 128
[  953.234887][    T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  953.711816][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.731503][T13440] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  953.777126][    T9] usb 5-1: config 0 descriptor??
[  953.819355][T13440] hpfs: filesystem error: improperly stopped
[  953.825735][    T9] usb 5-1: can't set config #0, error -71
[  954.001589][T13440] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  954.011793][    T9] usb 5-1: USB disconnect, device number 5
[  954.246485][T13448] loop4: detected capacity change from 0 to 64
[  954.340887][T13440] hpfs: You really don't want any checks? You are crazy...
[  954.423921][T13440] hpfs: Code page index out of array
[  954.457628][T13440] hpfs: code page support is disabled
[  954.491838][T13440] hpfs: hpfs_map_4sectors(): unaligned read
[  954.524331][T13440] hpfs: hpfs_map_4sectors(): unaligned read
[  954.557793][T13440] hpfs: filesystem error: unable to find root dir
[  954.622636][T13453] kvm: user requested TSC rate below hardware speed
[  956.031367][T13481] team0: Device ipvlan2 failed to register rx_handler
[  956.133982][T13483] loop5: detected capacity change from 0 to 128
[  956.147642][T13483] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  956.159606][T13483] hpfs: filesystem error: improperly stopped
[  956.165743][T13483] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  956.173503][T13483] hpfs: You really don't want any checks? You are crazy...
[  956.180831][T13483] hpfs: Code page index out of array
[  956.186326][T13483] hpfs: code page support is disabled
[  956.192484][T13483] hpfs: hpfs_map_4sectors(): unaligned read
[  956.198548][T13483] hpfs: hpfs_map_4sectors(): unaligned read
[  956.204507][T13483] hpfs: filesystem error: unable to find root dir
[  956.240207][T13483] hpfs: hpfs_map_4sectors(): unaligned read
[  958.365376][T13524] team0: Device ipvlan2 failed to register rx_handler
[  965.979529][T13598] loop5: detected capacity change from 0 to 256
[  966.018851][T13598] exfat: Unknown parameter 'dmack'
[  966.101372][T12621] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  966.139001][T13598] loop5: detected capacity change from 0 to 256
[  966.151704][T12621] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  966.184198][T13598] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  966.208935][T12621] Buffer I/O error on dev loop5, logical block 0, async page read
[  966.286198][T13598] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  966.754806][T10764] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  966.789483][T10764] FAT-fs (loop5): Filesystem has been set read-only
[  966.833394][T10764] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  970.052509][   T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.250023][   T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.416986][   T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.571488][   T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.817679][T13649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  972.827985][T13649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  972.836823][T13649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  972.847901][T13649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  972.855586][T13649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  972.862922][T13649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  974.956940][T13649] Bluetooth: hci3: command tx timeout
[  975.203453][T13647] chnl_net:caif_netlink_parms(): no params data found
[  975.903384][   T49] hsr_slave_0: left promiscuous mode
[  975.943074][   T49] hsr_slave_1: left promiscuous mode
[  975.967091][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  975.995126][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  976.083319][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  976.121656][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  976.170668][   T49] bridge_slave_1: left allmulticast mode
[  976.193209][   T49] bridge_slave_1: left promiscuous mode
[  976.220775][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  976.252537][   T49] bridge_slave_0: left allmulticast mode
[  976.359042][   T49] bridge_slave_0: left promiscuous mode
[  976.365029][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.514734][   T49] veth1_macvtap: left promiscuous mode
[  976.528231][   T49] veth0_macvtap: left promiscuous mode
[  976.551227][   T49] veth1_vlan: left promiscuous mode
[  976.573940][   T49] veth0_vlan: left promiscuous mode
[  977.035408][T13649] Bluetooth: hci3: command tx timeout
[  977.418674][T13707] loop4: detected capacity change from 0 to 512
[  979.161131][T13649] Bluetooth: hci3: command tx timeout
[  980.271677][   T49] team0 (unregistering): Port device team_slave_1 removed
[  980.494745][   T49] team0 (unregistering): Port device team_slave_0 removed
[  980.704181][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  980.908864][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  981.195571][T13649] Bluetooth: hci3: command tx timeout
[  983.626671][   T49] bond0 (unregistering): Released all slaves
[  983.780043][T13647] bridge0: port 1(bridge_slave_0) entered blocking state
[  983.798287][T13647] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.915100][T13647] bridge_slave_0: entered allmulticast mode
[  983.942464][T13647] bridge_slave_0: entered promiscuous mode
[  984.103382][T13647] bridge0: port 2(bridge_slave_1) entered blocking state
[  984.127218][T13647] bridge0: port 2(bridge_slave_1) entered disabled state
[  984.398257][T13647] bridge_slave_1: entered allmulticast mode
[  984.431165][T13647] bridge_slave_1: entered promiscuous mode
[  984.608849][T13647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  984.684470][T13647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  985.030528][T13647] team0: Port device team_slave_0 added
[  985.083024][T13647] team0: Port device team_slave_1 added
[  985.171505][   T49] IPVS: stop unused estimator thread 0...
[  985.220245][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  985.261021][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  985.398764][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  985.459676][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  985.497737][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  985.633625][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  985.889441][T13647] hsr_slave_0: entered promiscuous mode
[  985.947322][T13647] hsr_slave_1: entered promiscuous mode
[  985.983022][T13647] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  986.053354][T13647] Cannot create hsr debugfs directory
[  986.731938][T13647] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  986.777066][T13647] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  986.826209][T13647] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  986.879984][T13647] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  987.168343][T13647] 8021q: adding VLAN 0 to HW filter on device bond0
[  987.586308][T13647] 8021q: adding VLAN 0 to HW filter on device team0
[  987.626492][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state
[  987.633657][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state
[  987.679747][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state
[  987.686920][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state
[  987.948398][T13826] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2284'.
[  988.405587][T13841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  988.711024][T13647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  988.942991][T13851] team0: Device ipvlan2 failed to register rx_handler
[  990.010244][T13647] veth0_vlan: entered promiscuous mode
[  990.039851][T13647] veth1_vlan: entered promiscuous mode
[  990.121525][T13647] veth0_macvtap: entered promiscuous mode
[  990.182583][T13647] veth1_macvtap: entered promiscuous mode
[  990.276365][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  990.370608][T13881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2294'.
[  990.488379][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.541330][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  990.612976][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.572994][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.615570][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.651740][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  991.681401][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.840735][T13647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  991.871041][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  991.912534][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  991.955399][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  991.991427][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.025457][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.066805][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.108382][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  992.146659][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  992.191235][T13647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  992.293160][T13647] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  992.346277][T13647] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  992.355003][T13647] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  992.527165][T13647] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  992.965954][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  993.014420][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  993.103412][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  993.143979][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  993.198825][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  993.272867][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  993.485884][T13912] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2304'.
[  993.980942][T13922] team0: Device ipvlan2 failed to register rx_handler
[  998.328759][T13966] team0: Device ipvlan2 failed to register rx_handler
[ 1000.228564][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2324'.
[ 1002.137815][T14007] team0: Device ipvlan2 failed to register rx_handler
[ 1002.656676][T14019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1003.424126][T14034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1005.215390][T13907] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1005.535257][T13907] usb 3-1: Using ep0 maxpacket: 16
[ 1005.546853][T13907] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[ 1006.625309][T13907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1006.895818][T13907] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1006.938315][T13907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.888808][T13907] usb 3-1: Product: syz
[ 1007.893009][T13907] usb 3-1: Manufacturer: syz
[ 1007.911240][T14070] Device name cannot be null; rc = [-22]
[ 1007.972460][T13907] usb 3-1: SerialNumber: syz
[ 1008.143445][T13907] usb 3-1: can't set config #1, error -71
[ 1008.216313][T13907] usb 3-1: USB disconnect, device number 12
[ 1009.572828][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1009.584826][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1009.594623][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1009.602560][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1009.611094][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1009.619166][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1010.908020][T14091] chnl_net:caif_netlink_parms(): no params data found
[ 1012.271212][T14118] hub 8-0:1.0: USB hub found
[ 1012.279396][T14118] hub 8-0:1.0: 1 port detected
[ 1012.298346][ T5783] Bluetooth: hci4: command tx timeout
[ 1012.735028][T10086] syz_tun (unregistering): left allmulticast mode
[ 1012.861456][T14091] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1012.890421][T14091] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1012.925778][T14091] bridge_slave_0: entered allmulticast mode
[ 1012.953457][T14091] bridge_slave_0: entered promiscuous mode
[ 1012.981725][T14091] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.007904][T14091] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.031336][T14091] bridge_slave_1: entered allmulticast mode
[ 1013.051942][T14091] bridge_slave_1: entered promiscuous mode
[ 1013.107768][T14091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1013.144595][T14091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1013.215606][T14091] team0: Port device team_slave_0 added
[ 1013.238733][T14091] team0: Port device team_slave_1 added
[ 1013.300969][T14091] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1013.320177][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1013.353948][T14091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1013.423152][T14091] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1013.459495][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1013.573435][T14091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1014.116797][T14091] hsr_slave_0: entered promiscuous mode
[ 1014.151646][T14091] hsr_slave_1: entered promiscuous mode
[ 1014.174266][T14091] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1014.194434][T14091] Cannot create hsr debugfs directory
[ 1014.316202][ T5783] Bluetooth: hci4: command tx timeout
[ 1015.887405][T14164] hub 8-0:1.0: USB hub found
[ 1015.892763][T14164] hub 8-0:1.0: 1 port detected
[ 1016.245102][T14091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1016.391798][T14091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1016.407676][ T5783] Bluetooth: hci4: command tx timeout
[ 1016.566717][T14091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1016.623218][T14183] 
[ 1016.625585][T14183] ======================================================
[ 1016.632592][T14183] WARNING: possible circular locking dependency detected
[ 1016.639603][T14183] syzkaller #0 Not tainted
[ 1016.644010][T14183] ------------------------------------------------------
[ 1016.651014][T14183] syz.6.2374/14183 is trying to acquire lock:
[ 1016.657066][T14183] ffff88814ddec0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x189/0x390
[ 1016.666485][T14183] 
[ 1016.666485][T14183] but task is already holding lock:
[ 1016.673838][T14183] ffff888022031888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0
[ 1016.683420][T14183] 
[ 1016.683420][T14183] which lock already depends on the new lock.
[ 1016.683420][T14183] 
[ 1016.693834][T14183] 
[ 1016.693834][T14183] the existing dependency chain (in reverse order) is:
[ 1016.702838][T14183] 
[ 1016.702838][T14183] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}:
[ 1016.710992][T14183]        __mutex_lock+0x135/0xc80
[ 1016.716015][T14183]        bd_finish_claiming+0x229/0x3f0
[ 1016.721568][T14183]        blkdev_get_by_dev+0x469/0x610
[ 1016.727015][T14183]        bdev_open_by_dev+0x77/0x100
[ 1016.732292][T14183]        setup_bdev_super+0x59/0x660
[ 1016.737590][T14183]        mount_bdev+0x1ce/0x2c0
[ 1016.742432][T14183]        legacy_get_tree+0xea/0x180
[ 1016.747810][T14183]        vfs_get_tree+0x8c/0x280
[ 1016.752742][T14183]        do_new_mount+0x24a/0xa40
[ 1016.757757][T14183]        init_mount+0xde/0x130
[ 1016.762588][T14183]        do_mount_root+0x97/0x230
[ 1016.767633][T14183]        mount_root_generic+0x1a6/0x3e0
[ 1016.773187][T14183]        prepare_namespace+0xc2/0x100
[ 1016.778551][T14183]        kernel_init_freeable+0x41a/0x560
[ 1016.784264][T14183]        kernel_init+0x1d/0x1c0
[ 1016.789113][T14183]        ret_from_fork+0x48/0x80
[ 1016.794063][T14183]        ret_from_fork_asm+0x11/0x20
[ 1016.799354][T14183] 
[ 1016.799354][T14183] -> #3 (bdev_lock){+.+.}-{3:3}:
[ 1016.806470][T14183]        __mutex_lock+0x135/0xc80
[ 1016.811499][T14183]        bd_prepare_to_claim+0x1d9/0x4a0
[ 1016.817140][T14183]        truncate_bdev_range+0x4e/0x260
[ 1016.822676][T14183]        blkdev_common_ioctl+0x1c7a/0x2580
[ 1016.828474][T14183]        blkdev_ioctl+0x512/0x730
[ 1016.833487][T14183]        __se_sys_ioctl+0xfd/0x170
[ 1016.838590][T14183]        do_syscall_64+0x55/0xb0
[ 1016.843530][T14183]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1016.849937][T14183] 
[ 1016.849937][T14183] -> #2 (mapping.invalidate_lock){++++}-{3:3}:
[ 1016.858261][T14183]        down_write+0x97/0x200
[ 1016.863027][T14183]        set_blocksize+0x247/0x4b0
[ 1016.868129][T14183]        sb_min_blocksize+0xbe/0x190
[ 1016.873407][T14183]        ext4_fill_super+0x6e7/0x6870
[ 1016.878808][T14183]        get_tree_bdev+0x3e5/0x520
[ 1016.883923][T14183]        vfs_get_tree+0x8c/0x280
[ 1016.888870][T14183]        do_new_mount+0x24a/0xa40
[ 1016.893884][T14183]        init_mount+0xde/0x130
[ 1016.898724][T14183]        do_mount_root+0x97/0x230
[ 1016.903766][T14183]        mount_root_generic+0x1a6/0x3e0
[ 1016.909427][T14183]        prepare_namespace+0xc2/0x100
[ 1016.914791][T14183]        kernel_init_freeable+0x41a/0x560
[ 1016.920520][T14183]        kernel_init+0x1d/0x1c0
[ 1016.925381][T14183]        ret_from_fork+0x48/0x80
[ 1016.930337][T14183]        ret_from_fork_asm+0x11/0x20
[ 1016.935615][T14183] 
[ 1016.935615][T14183] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}:
[ 1016.944221][T14183]        down_write+0x97/0x200
[ 1016.948978][T14183]        set_blocksize+0x1ff/0x4b0
[ 1016.954146][T14183]        sb_min_blocksize+0xbe/0x190
[ 1016.959421][T14183]        ext4_fill_super+0x6e7/0x6870
[ 1016.964800][T14183]        get_tree_bdev+0x3e5/0x520
[ 1016.969988][T14183]        vfs_get_tree+0x8c/0x280
[ 1016.974915][T14183]        do_new_mount+0x24a/0xa40
[ 1016.979944][T14183]        init_mount+0xde/0x130
[ 1016.984708][T14183]        do_mount_root+0x97/0x230
[ 1016.989727][T14183]        mount_root_generic+0x1a6/0x3e0
[ 1016.995263][T14183]        prepare_namespace+0xc2/0x100
[ 1017.000628][T14183]        kernel_init_freeable+0x41a/0x560
[ 1017.006358][T14183]        kernel_init+0x1d/0x1c0
[ 1017.011224][T14183]        ret_from_fork+0x48/0x80
[ 1017.016192][T14183]        ret_from_fork_asm+0x11/0x20
[ 1017.021478][T14183] 
[ 1017.021478][T14183] -> #0 (&type->s_umount_key#32){++++}-{3:3}:
[ 1017.029728][T14183]        __lock_acquire+0x37ef/0x7d80
[ 1017.035113][T14183]        lock_acquire+0x19e/0x420
[ 1017.040148][T14183]        down_read+0x46/0x2e0
[ 1017.044828][T14183]        super_lock+0x189/0x390
[ 1017.049687][T14183]        fs_bdev_mark_dead+0xad/0x1f0
[ 1017.055053][T14183]        bdev_mark_dead+0x83/0x1a0
[ 1017.060157][T14183]        blk_report_disk_dead+0x21c/0x3e0
[ 1017.065869][T14183]        del_gendisk+0x2cb/0x8f0
[ 1017.070815][T14183]        sd_remove+0x8d/0x100
[ 1017.075516][T14183]        device_release_driver_internal+0x458/0x6f0
[ 1017.082111][T14183]        bus_remove_device+0x43b/0x520
[ 1017.087564][T14183]        device_del+0x51f/0x910
[ 1017.092425][T14183]        __scsi_remove_device+0x1a2/0x390
[ 1017.098151][T14183]        scsi_forget_host+0xd0/0x110
[ 1017.103451][T14183]        scsi_remove_host+0x1b3/0x730
[ 1017.108828][T14183]        virtscsi_remove+0x130/0x1a0
[ 1017.114112][T14183]        virtio_dev_remove+0x96/0x1a0
[ 1017.119517][T14183]        device_release_driver_internal+0x408/0x6f0
[ 1017.126117][T14183]        bus_remove_device+0x43b/0x520
[ 1017.131573][T14183]        device_del+0x51f/0x910
[ 1017.136430][T14183]        device_unregister+0x20/0xc0
[ 1017.141718][T14183]        unregister_virtio_device+0x37/0x60
[ 1017.147601][T14183]        virtio_pci_remove+0x7f/0xf0
[ 1017.152998][T14183]        pci_device_remove+0x97/0x230
[ 1017.158379][T14183]        device_release_driver_internal+0x408/0x6f0
[ 1017.164960][T14183]        unbind_store+0x1a1/0x1d0
[ 1017.169978][T14183]        kernfs_fop_write_iter+0x3a4/0x520
[ 1017.175803][T14183]        vfs_write+0x474/0x9a0
[ 1017.180561][T14183]        ksys_write+0x151/0x260
[ 1017.185406][T14183]        do_syscall_64+0x55/0xb0
[ 1017.190355][T14183]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1017.196758][T14183] 
[ 1017.196758][T14183] other info that might help us debug this:
[ 1017.196758][T14183] 
[ 1017.206983][T14183] Chain exists of:
[ 1017.206983][T14183]   &type->s_umount_key#32 --> bdev_lock --> &bdev->bd_holder_lock
[ 1017.206983][T14183] 
[ 1017.220626][T14183]  Possible unsafe locking scenario:
[ 1017.220626][T14183] 
[ 1017.228060][T14183]        CPU0                    CPU1
[ 1017.233412][T14183]        ----                    ----
[ 1017.238779][T14183]   lock(&bdev->bd_holder_lock);
[ 1017.243706][T14183]                                lock(bdev_lock);
[ 1017.250111][T14183]                                lock(&bdev->bd_holder_lock);
[ 1017.257556][T14183]   rlock(&type->s_umount_key#32);
[ 1017.262673][T14183] 
[ 1017.262673][T14183]  *** DEADLOCK ***
[ 1017.262673][T14183] 
[ 1017.270800][T14183] 8 locks held by syz.6.2374/14183:
[ 1017.275981][T14183]  #0: ffff88802dbcb4c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330
[ 1017.285194][T14183]  #1: ffff88803130c418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0
[ 1017.294060][T14183]  #2: ffff88802ef62088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520
[ 1017.303790][T14183]  #3: ffff888146e501f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0
[ 1017.314308][T14183]  #4: ffff8881446c21b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0
[ 1017.324821][T14183]  #5: ffff8880215cc0e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730
[ 1017.334720][T14183]  #6: ffff8880239a03b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0
[ 1017.345233][T14183]  #7: ffff888022031888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0
[ 1017.355223][T14183] 
[ 1017.355223][T14183] stack backtrace:
[ 1017.361095][T14183] CPU: 0 PID: 14183 Comm: syz.6.2374 Not tainted syzkaller #0
[ 1017.368627][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1017.378668][T14183] Call Trace:
[ 1017.381947][T14183]  <TASK>
[ 1017.384876][T14183]  dump_stack_lvl+0x18c/0x250
[ 1017.389552][T14183]  ? load_image+0x420/0x420
[ 1017.394064][T14183]  ? show_regs_print_info+0x20/0x20
[ 1017.399253][T14183]  ? print_circular_bug+0x12b/0x1a0
[ 1017.404455][T14183]  check_noncircular+0x2fc/0x400
[ 1017.409408][T14183]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1017.414620][T14183]  ? lockdep_lock+0xf5/0x230
[ 1017.419217][T14183]  ? _find_first_zero_bit+0xd6/0x100
[ 1017.424530][T14183]  __lock_acquire+0x37ef/0x7d80
[ 1017.429381][T14183]  ? __lock_acquire+0x1262/0x7d80
[ 1017.434398][T14183]  ? verify_lock_unused+0x140/0x140
[ 1017.439588][T14183]  ? verify_lock_unused+0x140/0x140
[ 1017.444800][T14183]  ? find_lock_entries+0x120/0x1020
[ 1017.449993][T14183]  lock_acquire+0x19e/0x420
[ 1017.454594][T14183]  ? super_lock+0x189/0x390
[ 1017.459091][T14183]  ? __might_sleep+0xe0/0xe0
[ 1017.463689][T14183]  ? read_lock_is_recursive+0x20/0x20
[ 1017.469053][T14183]  ? __mutex_trylock_common+0x160/0x270
[ 1017.474608][T14183]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1017.480752][T14183]  ? mapping_try_invalidate+0x4bf/0x570
[ 1017.486296][T14183]  down_read+0x46/0x2e0
[ 1017.490449][T14183]  ? super_lock+0x189/0x390
[ 1017.494957][T14183]  super_lock+0x189/0x390
[ 1017.499364][T14183]  ? xa_find_after+0xaf/0x430
[ 1017.504049][T14183]  ? user_get_super+0x180/0x180
[ 1017.508895][T14183]  ? mutex_lock_nested+0x20/0x20
[ 1017.513858][T14183]  fs_bdev_mark_dead+0xad/0x1f0
[ 1017.518728][T14183]  ? super_s_dev_set+0xa0/0xa0
[ 1017.523540][T14183]  bdev_mark_dead+0x83/0x1a0
[ 1017.528129][T14183]  ? blk_report_disk_dead+0x88/0x3e0
[ 1017.533415][T14183]  blk_report_disk_dead+0x21c/0x3e0
[ 1017.538611][T14183]  ? __blk_mark_disk_dead+0x120/0x120
[ 1017.543976][T14183]  ? xa_find_after+0xaf/0x430
[ 1017.548664][T14183]  del_gendisk+0x2cb/0x8f0
[ 1017.553078][T14183]  ? blk_report_disk_dead+0x3e0/0x3e0
[ 1017.558445][T14183]  ? __pm_runtime_resume+0x129/0x170
[ 1017.563728][T14183]  sd_remove+0x8d/0x100
[ 1017.567968][T14183]  ? sd_probe+0x11c0/0x11c0
[ 1017.572477][T14183]  device_release_driver_internal+0x458/0x6f0
[ 1017.578551][T14183]  bus_remove_device+0x43b/0x520
[ 1017.583487][T14183]  ? bus_probe_device+0x260/0x260
[ 1017.588501][T14183]  ? up_write+0x1be/0x410
[ 1017.592819][T14183]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 1017.598535][T14183]  device_del+0x51f/0x910
[ 1017.602945][T14183]  ? kill_device+0x160/0x160
[ 1017.607529][T14183]  ? kobject_put+0x421/0x450
[ 1017.612136][T14183]  __scsi_remove_device+0x1a2/0x390
[ 1017.617330][T14183]  scsi_forget_host+0xd0/0x110
[ 1017.622090][T14183]  scsi_remove_host+0x1b3/0x730
[ 1017.626932][T14183]  virtscsi_remove+0x130/0x1a0
[ 1017.631689][T14183]  virtio_dev_remove+0x96/0x1a0
[ 1017.636529][T14183]  ? virtio_dev_probe+0xae0/0xae0
[ 1017.641551][T14183]  device_release_driver_internal+0x408/0x6f0
[ 1017.647613][T14183]  bus_remove_device+0x43b/0x520
[ 1017.652574][T14183]  ? bus_probe_device+0x260/0x260
[ 1017.657599][T14183]  ? up_write+0x1be/0x410
[ 1017.661918][T14183]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 1017.667644][T14183]  device_del+0x51f/0x910
[ 1017.671966][T14183]  ? kill_device+0x160/0x160
[ 1017.676544][T14183]  ? pci_device_is_present+0x175/0x240
[ 1017.681992][T14183]  ? pci_real_dma_dev+0x20/0x20
[ 1017.686831][T14183]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1017.691851][T14183]  device_unregister+0x20/0xc0
[ 1017.696604][T14183]  unregister_virtio_device+0x37/0x60
[ 1017.701967][T14183]  virtio_pci_remove+0x7f/0xf0
[ 1017.706738][T14183]  pci_device_remove+0x97/0x230
[ 1017.711581][T14183]  ? pci_device_probe+0x8d0/0x8d0
[ 1017.716594][T14183]  device_release_driver_internal+0x408/0x6f0
[ 1017.722677][T14183]  unbind_store+0x1a1/0x1d0
[ 1017.727177][T14183]  ? sysfs_kf_read+0x360/0x360
[ 1017.731941][T14183]  kernfs_fop_write_iter+0x3a4/0x520
[ 1017.737221][T14183]  vfs_write+0x474/0x9a0
[ 1017.741456][T14183]  ? file_end_write+0x250/0x250
[ 1017.746298][T14183]  ? __fget_files+0x3fc/0x460
[ 1017.750988][T14183]  ? __fdget_pos+0x2a3/0x330
[ 1017.755569][T14183]  ? ksys_write+0x74/0x260
[ 1017.759977][T14183]  ksys_write+0x151/0x260
[ 1017.764298][T14183]  ? __ia32_sys_read+0x90/0x90
[ 1017.769058][T14183]  ? lockdep_hardirqs_on+0x98/0x150
[ 1017.774263][T14183]  do_syscall_64+0x55/0xb0
[ 1017.778669][T14183]  ? clear_bhb_loop+0x40/0x90
[ 1017.783335][T14183]  ? clear_bhb_loop+0x40/0x90
[ 1017.788009][T14183]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1017.793890][T14183] RIP: 0033:0x7f9f6c79e0d9
[ 1017.798300][T14183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1017.817895][T14183] RSP: 002b:00007f9f6d679028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1017.826298][T14183] RAX: ffffffffffffffda RBX: 00007f9f6ca25fa0 RCX: 00007f9f6c79e0d9
[ 1017.834260][T14183] RDX: 000000000000000d RSI: 0000200000000240 RDI: 0000000000000007
[ 1017.842228][T14183] RBP: 00007f9f6c835024 R08: 0000000000000000 R09: 0000000000000000
[ 1017.850187][T14183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1017.858148][T14183] R13: 00007f9f6ca26038 R14: 00007f9f6ca25fa0 R15: 00007ffd4861e978
[ 1017.866130][T14183]  </TASK>
[ 1017.951953][T14091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1017.966248][   T10] device offline error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1017.977763][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 92198)
[ 1017.990246][   T10] Buffer I/O error on device sda1, logical block 92160
[ 1017.999522][   T10] device offline error, dev sda, sector 745766 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1018.010504][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93220)
[ 1018.023200][   T10] Buffer I/O error on device sda1, logical block 93182
[ 1018.030110][   T10] Buffer I/O error on device sda1, logical block 93183
[ 1018.037123][   T10] device offline error, dev sda, sector 749726 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2
[ 1018.048176][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93715)
[ 1018.063323][   T10] Buffer I/O error on device sda1, logical block 93677
[ 1018.070621][   T10] Buffer I/O error on device sda1, logical block 93678
[ 1018.077866][   T10] Buffer I/O error on device sda1, logical block 93679
[ 1018.084762][   T10] Buffer I/O error on device sda1, logical block 93680
[ 1018.094968][   T10] Buffer I/O error on device sda1, logical block 93681
[ 1018.103522][   T10] Buffer I/O error on device sda1, logical block 93682
[ 1018.112562][   T10] Buffer I/O error on device sda1, logical block 93683
[ 1018.120450][   T10] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1018.134298][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 94246)
[ 1018.147601][   T10] device offline error, dev sda, sector 762070 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1018.158799][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95258)
[ 1018.171687][   T10] device offline error, dev sda, sector 766158 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[ 1018.182339][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95769)
[ 1018.195874][T10901] device offline error, dev sda, sector 725302 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1018.206747][   T10] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1018.217473][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 100390)
[ 1018.230163][   T10] device offline error, dev sda, sector 811286 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1018.240934][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 101410)
[ 1018.271974][T10901] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2029 starting block 90662)
[ 1018.284583][T10901] device offline error, dev sda, sector 729398 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1018.296295][T10901] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 91174)
[ 1018.332729][ T5104] Aborting journal on device sda1-8.
[ 1018.339275][T14183] Buffer I/O error on dev sda1, logical block 1, lost async page write
[ 1018.351013][   T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[ 1018.362945][ T5104] JBD2: I/O error when updating journal superblock for sda1-8.
[ 1018.372521][T14183] Buffer I/O error on dev sda1, logical block 129, lost async page write
[ 1018.382288][T14183] Buffer I/O error on dev sda1, logical block 130, lost async page write
[ 1018.390960][T14183] Buffer I/O error on dev sda1, logical block 131, lost async page write
[ 1018.401374][T14183] Buffer I/O error on dev sda1, logical block 132, lost async page write
[ 1018.409967][T14183] Buffer I/O error on dev sda1, logical block 137, lost async page write
[ 1018.419651][T14183] Buffer I/O error on dev sda1, logical block 224, lost async page write
[ 1018.428414][T14183] Buffer I/O error on dev sda1, logical block 273, lost async page write
[ 1018.438099][T14183] Buffer I/O error on dev sda1, logical block 8214, lost async page write
[ 1018.486808][ T5783] Bluetooth: hci4: command tx timeout
[ 1018.530006][T14183] EXT4-fs (sda1): shut down requested (2)
[ 1018.537102][T14091] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1018.548810][T14091] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1018.568077][T14091] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1018.588252][T14091] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1018.639297][T14183] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[ 1018.718562][T14091] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1018.748896][T14091] 8021q: adding VLAN 0 to HW filter on device team0
[ 1018.771774][T10900] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1018.778986][T10900] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1018.817788][T10900] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.824900][T10900] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1018.932958][T14091] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1018.991743][T14091] veth0_vlan: entered promiscuous mode
[ 1019.014066][T14091] veth1_vlan: entered promiscuous mode
[ 1019.063288][T14091] veth0_macvtap: entered promiscuous mode
[ 1019.089627][T14091] veth1_macvtap: entered promiscuous mode
[ 1019.120922][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1019.140596][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1019.152234][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1019.163844][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1019.174690][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1019.186337][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1019.196463][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1019.208248][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1019.218331][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1019.230474][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1019.249577][T14091] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1019.263908][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1019.277483][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1019.288540][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1019.300234][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1019.310428][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1019.322214][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1019.332234][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1019.344771][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1019.357080][T14091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1019.369002][T14091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1019.381477][T14091] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1019.393764][T14091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.403929][T14091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.413493][T14091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.424191][T14091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.461692][T14091] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht'
[ 1019.486702][T10900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1019.494673][T10900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1019.503343][T14091] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht'
[ 1019.530604][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1019.539085][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1022.168545][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1024.488914][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1024.550679][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1024.608752][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1025.150681][   T49] hsr_slave_0: left promiscuous mode
[ 1025.166410][   T49] hsr_slave_1: left promiscuous mode
[ 1025.175667][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1025.183057][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1025.225369][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1025.232789][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1025.256605][   T49] bridge_slave_1: left allmulticast mode
[ 1025.262259][   T49] bridge_slave_1: left promiscuous mode
[ 1025.276285][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.284429][   T49] bridge_slave_0: left allmulticast mode
[ 1025.296275][   T49] bridge_slave_0: left promiscuous mode
[ 1025.302054][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1025.338884][   T49] veth1_macvtap: left promiscuous mode
[ 1025.344418][   T49] veth0_macvtap: left promiscuous mode
[ 1025.365977][   T49] veth1_vlan: left promiscuous mode
[ 1025.371258][   T49] veth0_vlan: left promiscuous mode
[ 1025.746022][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1025.815904][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1025.866768][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1025.935857][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1026.057182][   T49] bond0 (unregistering): Released all slaves