last executing test programs:

51.416223645s ago: executing program 2 (id=233):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x400, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}])

50.113027106s ago: executing program 2 (id=238):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x4)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
chroot(0x0)
r2 = syz_mount_image$udf(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/15], 0x0, 0x1045, &(0x7f0000001140)="$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")
futimesat(r2, &(0x7f0000000100)='./file1\x00', 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r4 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0x1, 0xffffbfff, 0x1, 0xffffdfff, 0x3, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x3fc, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, 0x0)

49.334686123s ago: executing program 2 (id=242):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010100000000086a05b951fccd0000000109022d00010000002009040000050300010009210000000122260009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="4037260000002631aa27f10161b71a9d938b5548f784cb6860bfb7e2855799c3ab3473f2adba68caa4d15bb44b"], 0x0, 0x0, 0x0, 0x0}, 0x0)

45.789245341s ago: executing program 2 (id=255):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file2\x00', 0x3000000, &(0x7f0000000240)=ANY=[@ANYBLOB="626c6f636b3d3078303030303030303030303030303830302c73657373696f6e3d3078303030303030303030303030303035372c63727566742c756e686964652c646d6f64653d3078303030303030303030303030303000002c636865636b3d7374726963742c686964652c696f636861727365743d6d616363656e746575726f2c7569643d109fd831b10499724a61606aa2d221b643ce971564e7cc59f8d512ce58d7", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x2, 0x401, &(0x7f0000000840)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

45.405357959s ago: executing program 2 (id=256):
clock_settime(0x0, &(0x7f0000000000)={0x655409fe, 0x389fd980})
syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e22"], 0x0)
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = epoll_create1(0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x40000013})
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r3)
r4 = fsmount(r0, 0x0, 0x18)
symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00')
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/142, 0x8e}], 0x1, &(0x7f0000001d80)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0x0)
getpriority(0x1, r5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00')
getdents64(r6, &(0x7f0000000000)=""/90, 0x5a)
getdents(r6, &(0x7f0000000100)=""/67, 0x43)

44.145185348s ago: executing program 2 (id=262):
unshare(0x400)
r0 = socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

43.05133145s ago: executing program 32 (id=262):
unshare(0x400)
r0 = socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

29.185198364s ago: executing program 0 (id=332):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

28.937095385s ago: executing program 0 (id=334):
setuid(0xee01)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003cc0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x3}]}}}], 0x18}}], 0x2, 0x8090)

28.224486289s ago: executing program 0 (id=338):
mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='7', 0x1)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x4000010, r1, 0x17b46000)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$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")

27.238441145s ago: executing program 0 (id=344):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x9e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000100)='?', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)

26.110426809s ago: executing program 0 (id=348):
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000080)=0x765, 0x4)
write(r0, &(0x7f0000000000)="08001800000020a3", 0x8)
read(r0, &(0x7f00000003c0)=""/14, 0xe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x24048044)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)

25.192708641s ago: executing program 4 (id=350):
syz_clone3(&(0x7f0000000180)={0x42907480, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xa, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xef})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xdddd0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0xd, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0xe, 0x1, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x9}, {0xeeee8000, 0xdddd1000, 0xc, 0x7, 0x0, 0x10, 0x9, 0x20, 0x0, 0x3}, {0x1ffc, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x23, 0x0, 0x0, 0xfe}, {0x200000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0x3801, 0xdddd1000, [0x4, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

24.569189241s ago: executing program 0 (id=353):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c00"], 0xc0}}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42402)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80})

23.269256623s ago: executing program 33 (id=353):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c00"], 0xc0}}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42402)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80})

23.239451493s ago: executing program 4 (id=356):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

21.728297385s ago: executing program 4 (id=363):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205000000370800"], 0x0}, 0x0)

18.036145789s ago: executing program 4 (id=373):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==")
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write(r1, &(0x7f0000000080)="7009d8", 0x3)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "feb78fbaf888a34a69e00d96072000e60080b8785d96020100014a0000000003000000000000000036c447eb00000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0xfffffffffffffffa]}})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1000000, 0x17, 0x14, "6bf125058e637b44e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b61a321b296a4d858a1a07e3c87df2f85a1df2c809cda49a11ff76e906b13a0c26ef2f2b08d4dcaffbc3200f99d6f328ccecaf9ec49aa55fba663c523", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56229263b3", [0xa2, 0x3562]})
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x5, 0x1, 0x1a, 0x8, "239f5f357221692bf8f1129c45a378b6aee4794881784f29a10510470e6981c6a22f2f99e7bca0b0aad316b714967cddaec3cf58ec3fb913552cbb793a7c1d85", "f28aa80ce766b90c9fca635e8a542e187f6f3e7f19a8ed98a17b80ff5f25300d", [0x40000000000000, 0xf]})
socket$nl_generic(0x10, 0x3, 0x10)

16.627685426s ago: executing program 4 (id=376):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1000000, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX=r0], 0x1, 0x304, &(0x7f0000000bc0)="$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")
unlink(&(0x7f0000000000)='./file1\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

13.613004018s ago: executing program 4 (id=384):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00')
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000008c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0)
syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/time\x00')
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f00000000c0))
r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x12)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x40040)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETAW(r4, 0x5407, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$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")

13.026029005s ago: executing program 34 (id=384):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00')
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000008c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0)
syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/time\x00')
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f00000000c0))
r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x12)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x40040)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETAW(r4, 0x5407, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$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")

12.329289338s ago: executing program 1 (id=392):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
keyctl$clear(0x3, 0xfffffffffffffffd)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
open(0x0, 0x145142, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
unshare(0x64000400)

9.74300308s ago: executing program 1 (id=400):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x236, [0xfffffffe, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9ed, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x90000000, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0xffbffff8, 0x1000, 0x100, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, 0x6], [0x714, 0x20000, 0x0, 0xffd, 0x0, 0x4000001, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0xb5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x4, 0x7, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x2, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xfffffffd, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xc09, 0x6, 0xfffffffc, 0x1, 0x1d, 0x10, 0x0, 0x4, 0x80000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x400, 0x5, 0x0, 0x2, 0x0, 0x8, 0xfffffc01, 0x91a, 0x3, 0x0, 0xdca2, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x9, 0x0, 0x0, 0x40008001, 0x40000, 0x4, 0x1]}, 0x45c)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

9.149110498s ago: executing program 1 (id=402):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00')
fchdir(r1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x219)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000)
read(r0, &(0x7f0000000180)=""/145, 0x91)

7.788678433s ago: executing program 1 (id=405):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES64, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="2c736d61636b667364656630234f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3ff33e07b480ad2f41c04cd7956530c3be5c0d1830700000040d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776bde1479f97c773fd904da89481def7b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc27, &(0x7f0000003180)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
socket$inet_tcp(0x2, 0x1, 0x0)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

7.210530129s ago: executing program 1 (id=407):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2a81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0xe6, 0x3, 0x4, 0xef}}]})

6.661860515s ago: executing program 1 (id=410):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81)
readv(r1, &(0x7f00000052c0)=[{&(0x7f00000005c0)=""/160, 0xa0}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x0, 0x3f00, 0xfffffff8, 'syz1\x00', 0xfffe}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x3, 'syz0\x00', 0x0})

6.158426279s ago: executing program 35 (id=410):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81)
readv(r1, &(0x7f00000052c0)=[{&(0x7f00000005c0)=""/160, 0xa0}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x0, 0x3f00, 0xfffffff8, 'syz1\x00', 0xfffe}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x3, 'syz0\x00', 0x0})

2.796330548s ago: executing program 3 (id=417):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2.499471032s ago: executing program 3 (id=418):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000005300)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x5, @mcast2, 0x3}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d40)="0013ad534e", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000e80)="67a17d", 0x3}], 0x1}}], 0x3, 0xc840)

2.370971888s ago: executing program 3 (id=419):
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0xff}, {0x5, 0x24, 0x1a, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x0, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}}}]}}, 0x0)

1.641880582s ago: executing program 3 (id=420):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x28, 0x24, 0xd0f, 0x470bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x44080)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008009}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.345907057s ago: executing program 3 (id=421):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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")
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000100)='?', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0)
chdir(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0x4000)

1.316051568s ago: executing program 5 (id=354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="a252", 0x2}], 0x1)

1.06107854s ago: executing program 5 (id=422):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "16"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840)

930.106716ms ago: executing program 5 (id=423):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x8, 0x7, 0x1000, 0xa, 0x6, 0x10, 0x5, 0xf64, 0xffffffff})
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff})
fchown(r0, 0xee00, 0xee01)
fchown(r0, 0x0, 0x0)

524.756995ms ago: executing program 5 (id=424):
unshare(0x20040400)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bind$inet(r0, 0x0, 0x0)

293.145176ms ago: executing program 5 (id=425):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x8840, 0xa2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r0, 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r2 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000009b80)={0x40000012})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r3, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006)

0s ago: executing program 3 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x28, 0x24, 0xd0f, 0x470bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x44080)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008009}, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts.
[   91.251660][ T5764] cgroup: Unknown subsys name 'net'
[   91.420054][ T5764] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   93.185419][ T5764] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   94.941981][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.951378][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.959195][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.981444][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.989371][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   94.996830][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.071472][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.079496][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.087955][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.096115][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.104293][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   95.112193][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.135498][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.147725][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.178439][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.195976][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.204353][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   95.213738][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.305188][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.317812][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.331462][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.342135][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.361875][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   95.369787][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.565819][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   95.789436][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.797401][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.805395][ T5776] bridge_slave_0: entered allmulticast mode
[   95.813141][ T5776] bridge_slave_0: entered promiscuous mode
[   95.826023][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.833402][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.840617][ T5776] bridge_slave_1: entered allmulticast mode
[   95.848565][ T5776] bridge_slave_1: entered promiscuous mode
[   95.856575][ T5780] chnl_net:caif_netlink_parms(): no params data found
[   95.977149][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.000561][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.075462][ T5782] chnl_net:caif_netlink_parms(): no params data found
[   96.091797][ T5776] team0: Port device team_slave_0 added
[   96.098253][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.106843][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.114285][ T5780] bridge_slave_0: entered allmulticast mode
[   96.123267][ T5780] bridge_slave_0: entered promiscuous mode
[   96.162529][ T5776] team0: Port device team_slave_1 added
[   96.175458][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.182774][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.189966][ T5780] bridge_slave_1: entered allmulticast mode
[   96.199638][ T5780] bridge_slave_1: entered promiscuous mode
[   96.215974][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   96.283738][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.315699][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.323110][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.349618][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.363808][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.370814][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.397400][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.412571][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.444260][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.451610][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.458793][ T5782] bridge_slave_0: entered allmulticast mode
[   96.466497][ T5782] bridge_slave_0: entered promiscuous mode
[   96.513595][ T5780] team0: Port device team_slave_0 added
[   96.519889][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.530317][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.537676][ T5782] bridge_slave_1: entered allmulticast mode
[   96.545632][ T5782] bridge_slave_1: entered promiscuous mode
[   96.574566][ T5780] team0: Port device team_slave_1 added
[   96.652690][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.665650][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.686896][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.694000][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.720707][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.757483][ T5776] hsr_slave_0: entered promiscuous mode
[   96.764481][ T5776] hsr_slave_1: entered promiscuous mode
[   96.785994][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.793689][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.819814][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.838899][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.846824][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.854438][ T5786] bridge_slave_0: entered allmulticast mode
[   96.862079][ T5786] bridge_slave_0: entered promiscuous mode
[   96.907536][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.914883][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.922283][ T5786] bridge_slave_1: entered allmulticast mode
[   96.929820][ T5786] bridge_slave_1: entered promiscuous mode
[   96.957335][ T5782] team0: Port device team_slave_0 added
[   96.978615][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.016789][ T5782] team0: Port device team_slave_1 added
[   97.024894][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.041918][   T51] Bluetooth: hci0: command tx timeout
[   97.045822][ T5780] hsr_slave_0: entered promiscuous mode
[   97.056184][ T5780] hsr_slave_1: entered promiscuous mode
[   97.062761][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.070574][ T5780] Cannot create hsr debugfs directory
[   97.130581][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.138584][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.165538][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.191090][   T51] Bluetooth: hci1: command tx timeout
[   97.218179][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.225409][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.251537][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.271359][   T51] Bluetooth: hci2: command tx timeout
[   97.278419][ T5786] team0: Port device team_slave_0 added
[   97.292623][ T5786] team0: Port device team_slave_1 added
[   97.353214][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.360230][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.386913][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.426001][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.433903][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.441329][   T51] Bluetooth: hci3: command tx timeout
[   97.466614][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.546564][ T5782] hsr_slave_0: entered promiscuous mode
[   97.553573][ T5782] hsr_slave_1: entered promiscuous mode
[   97.559944][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.567646][ T5782] Cannot create hsr debugfs directory
[   97.643990][ T5786] hsr_slave_0: entered promiscuous mode
[   97.650575][ T5786] hsr_slave_1: entered promiscuous mode
[   97.657081][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.664753][ T5786] Cannot create hsr debugfs directory
[   97.896284][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   97.930627][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   97.943112][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   97.956102][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.087632][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.117192][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.128200][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.144274][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.266722][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.290124][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.316317][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.330347][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.377522][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.454487][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   98.466988][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   98.479383][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   98.507986][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   98.526505][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   98.556898][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.564389][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.593497][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.600689][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.643790][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.724575][ T5780] 8021q: adding VLAN 0 to HW filter on device team0
[   98.756478][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.763713][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.803752][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.811128][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.978580][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.079562][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   99.094478][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.113049][   T51] Bluetooth: hci0: command tx timeout
[   99.129435][  T990] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.136723][  T990] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.211965][  T990] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.219186][  T990] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.272279][   T51] Bluetooth: hci1: command tx timeout
[   99.307487][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   99.351380][   T51] Bluetooth: hci2: command tx timeout
[   99.372697][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.379875][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.419538][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.426807][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.467371][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.511268][   T51] Bluetooth: hci3: command tx timeout
[   99.528472][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.675143][    T9] cfg80211: failed to load regulatory.db
[   99.740167][ T5780] veth0_vlan: entered promiscuous mode
[   99.756397][ T5776] veth0_vlan: entered promiscuous mode
[   99.784778][ T5780] veth1_vlan: entered promiscuous mode
[   99.862174][ T5776] veth1_vlan: entered promiscuous mode
[   99.889618][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.917775][ T5780] veth0_macvtap: entered promiscuous mode
[   99.985067][ T5780] veth1_macvtap: entered promiscuous mode
[  100.005614][ T5782] veth0_vlan: entered promiscuous mode
[  100.027034][ T5776] veth0_macvtap: entered promiscuous mode
[  100.047687][ T5776] veth1_macvtap: entered promiscuous mode
[  100.074967][ T5782] veth1_vlan: entered promiscuous mode
[  100.085937][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.120559][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.148139][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.158994][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.168245][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.177183][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.189467][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.205700][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.217467][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.237239][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.247847][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.261378][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.284021][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.294652][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.303478][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.314406][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.400690][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.415809][ T5782] veth0_macvtap: entered promiscuous mode
[  100.439124][ T5782] veth1_macvtap: entered promiscuous mode
[  100.520138][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.532537][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.544706][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.556312][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.570222][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.590208][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.599146][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.613009][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.627072][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.641431][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.652691][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.664250][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.692907][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.708110][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.718288][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.727357][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.769946][ T5786] veth0_vlan: entered promiscuous mode
[  100.788886][  T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.798981][  T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.851682][ T5786] veth1_vlan: entered promiscuous mode
[  100.858397][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.867345][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.920439][  T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.929656][  T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.048693][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.083478][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.146187][ T5786] veth0_macvtap: entered promiscuous mode
[  101.192069][   T51] Bluetooth: hci0: command tx timeout
[  101.210334][ T5786] veth1_macvtap: entered promiscuous mode
[  101.228428][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.253952][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.264654][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.275743][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.287581][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.291999][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.297648][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.344829][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.361100][   T51] Bluetooth: hci1: command tx timeout
[  101.614933][   T51] Bluetooth: hci2: command tx timeout
[  101.614933][ T5788] Bluetooth: hci3: command tx timeout
[  101.645135][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.155062][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.175910][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.186298][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.204858][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.218472][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.229286][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.255034][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.269613][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[  102.366635][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.388878][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.407269][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.416089][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.271518][ T5788] Bluetooth: hci0: command tx timeout
[  103.431154][ T5788] Bluetooth: hci1: command tx timeout
[  103.493760][ T5858] Can't find ip_set type hash:
[  103.522612][ T5855] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  103.555130][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'.
[  103.584470][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'.
[  103.596303][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'.
[  103.607191][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'.
[  103.673040][ T5788] Bluetooth: hci2: command tx timeout
[  103.694753][ T5865] fuse: Bad value for 'fd'
[  104.152091][ T5788] Bluetooth: hci3: command tx timeout
[  104.206611][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.254370][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.291781][ T5873] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7'.
[  104.368361][ T5875] process 'syz.3.8' launched './file1' with NULL argv: empty string added
[  104.965518][ T5873] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  105.249107][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.257849][ T5878] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  105.264741][ T5878] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  105.303524][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.320635][ T5879] ERROR: Out of memory at tomoyo_memory_ok.
[  105.332663][ T5878] vhci_hcd vhci_hcd.0: Device attached
[  105.353747][ T5880] vhci_hcd: connection closed
[  105.356990][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'.
[  105.384964][  T990] vhci_hcd: stop threads
[  105.415213][  T990] vhci_hcd: release socket
[  105.475498][  T990] vhci_hcd: disconnect device
[  109.408579][ T5896] Can't find ip_set type hash:
[  109.550347][ T5893] jffs2: notice: (5893) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  109.982882][ T5908] Zero length message leads to an empty skb
[  112.534695][ T5918] Can't find ip_set type hash:
[  113.832444][ T5819] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[  115.314023][ T5819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.337520][ T5819] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  115.386671][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  115.951167][ T5819] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  116.016010][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.226509][ T5819] usb 3-1: can't set config #1, error -71
[  116.944067][ T5819] usb 3-1: USB disconnect, device number 2
[  119.342365][ T5973] netlink: 96 bytes leftover after parsing attributes in process `syz.2.24'.
[  119.447348][ T5973] tipc: Started in network mode
[  121.701432][ T5973] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  121.782278][ T5973] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002
[  121.794772][ T5983] =======================================================
[  121.794772][ T5983] WARNING: The mand mount option has been deprecated and
[  121.794772][ T5983]          and is ignored by this kernel. Remove the mand
[  121.794772][ T5983]          option from the mount to silence this warning.
[  121.794772][ T5983] =======================================================
[  121.839710][ T5983] NILFS (loop1): device size too small
[  122.128763][ T5973] tipc: Enabled bearer <udp:syz0>, priority 10
[  123.560051][  T787] tipc: Node number set to 1
[  123.925841][ T5992] block nbd0: NBD_DISCONNECT
[  124.071866][ T5996] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  124.078532][ T5996] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  124.102127][ T5996] vhci_hcd vhci_hcd.0: Device attached
[  124.233517][ T6000] vhci_hcd: connection closed
[  124.237446][   T34] vhci_hcd: stop threads
[  124.311127][  T787] vhci_hcd: vhci_device speed not set
[  124.339039][   T34] vhci_hcd: release socket
[  124.404893][   T34] vhci_hcd: disconnect device
[  125.174880][  T787] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  125.249294][  T787] usb 39-1: enqueue for inactive port 0
[  125.341127][  T787] vhci_hcd: vhci_device speed not set
[  128.071055][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  129.385413][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  129.399059][    T9] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  129.408713][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.458084][ T6028] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  129.464696][ T6028] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  129.501161][ T6028] vhci_hcd vhci_hcd.0: Device attached
[  129.595230][ T6029] vhci_hcd: connection closed
[  129.596475][   T11] vhci_hcd: stop threads
[  129.621111][   T11] vhci_hcd: release socket
[  129.625665][   T11] vhci_hcd: disconnect device
[  129.703422][ T6033] block nbd1: NBD_DISCONNECT
[  130.368803][    T9] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device
[  130.753159][    T9] wwan wwan0: port wwan0qmi0 attached
[  130.997900][    T9] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 6a:1c:9d:bd:84:a9
[  130.997922][ T6041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41'.
[  131.061171][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'.
[  131.542689][    T9] usb 4-1: USB disconnect, device number 2
[  131.831335][    T9] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device
[  132.458052][ T6052] jffs2: notice: (6052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  132.572777][    T9] wwan wwan0: port wwan0qmi0 disconnected
[  133.771268][ T6060] Can't find ip_set type hash:
[  134.214270][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  135.293513][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  135.940993][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!!
[  137.362621][    T9] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  137.372225][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.515946][ T6082] jffs2: notice: (6082) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  138.070954][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  139.078511][    T9] usb 3-1: can't set config #1, error -71
[  139.181458][    T9] usb 3-1: USB disconnect, device number 3
[  140.598389][ T6107] block nbd3: NBD_DISCONNECT
[  140.645086][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  140.663519][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  140.735331][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'.
[  140.755153][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'.
[  140.766372][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'.
[  140.777205][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'.
[  140.901051][ T1209] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  142.669143][ T1209] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  142.801817][ T5819] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  143.308870][ T1209] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  144.831056][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.985672][ T1209] usb 2-1: can't set config #1, error -71
[  145.024433][ T5819] usb 3-1: device descriptor read/all, error -71
[  145.051478][ T1209] usb 2-1: USB disconnect, device number 2
[  145.218910][ T6130] block nbd3: NBD_DISCONNECT
[  145.403556][ T6140] MTD: Couldn't look up './dev/mtdblock0': -2
[  146.802665][ T6152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.61'.
[  146.951048][ T6154] MTD: Couldn't look up './dev/mtdblock0': -2
[  147.751925][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'.
[  148.481137][ T6151] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  148.825886][ T6177] MTD: Couldn't look up './dev/mtdblock0': -2
[  150.986616][ T6192] MTD: Couldn't look up './dev/mtdblock0': -2
[  151.811216][ T6185] MTD: Couldn't look up './dev/mtdblock0': -2
[  151.852842][ T6189] netlink: 96 bytes leftover after parsing attributes in process `syz.3.69'.
[  151.963813][ T6189] tipc: Started in network mode
[  151.968813][ T6189] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  152.011782][ T6189] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002
[  152.044527][ T6189] tipc: Enabled bearer <udp:syz0>, priority 10
[  154.205717][ T6203] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  154.212322][ T6203] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  154.311332][ T6203] vhci_hcd vhci_hcd.0: Device attached
[  154.863457][ T6204] vhci_hcd: connection closed
[  155.247004][    T9] tipc: Node number set to 1
[  155.330817][ T3524] vhci_hcd: stop threads
[  155.360860][ T3524] vhci_hcd: release socket
[  155.382070][ T3524] vhci_hcd: disconnect device
[  156.691065][ T6213] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  156.697663][ T6213] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  156.752223][ T6213] vhci_hcd vhci_hcd.0: Device attached
[  156.791813][ T6214] vhci_hcd: connection closed
[  156.793679][ T3524] vhci_hcd: stop threads
[  156.834870][ T3524] vhci_hcd: release socket
[  156.871086][ T3524] vhci_hcd: disconnect device
[  158.571136][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  161.338479][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'.
[  166.126850][ T6253] Can't find ip_set type hash:
[  167.631033][ T6270] MTD: Couldn't look up './dev/mtdblock0': -2
[  180.110518][ T6350] MTD: Couldn't look up './dev/mtdblock0': -2
[  180.627566][ T6354] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  180.634195][ T6354] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  180.661093][ T6354] vhci_hcd vhci_hcd.0: Device attached
[  180.707672][ T6357] vhci_hcd: connection closed
[  180.711904][ T3517] vhci_hcd: stop threads
[  180.732805][ T3517] vhci_hcd: release socket
[  180.737322][ T3517] vhci_hcd: disconnect device
[  180.821085][ T5819] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  180.876891][ T6364] jffs2: notice: (6364) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  181.921044][ T5819] usb 2-1: Using ep0 maxpacket: 32
[  181.935325][ T5819] usb 2-1: config 0 has an invalid interface number: 119 but max is 0
[  181.961438][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.993485][ T5819] usb 2-1: config 0 has no interface number 0
[  181.999679][ T5819] usb 2-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  182.063823][ T5819] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  182.073897][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.101659][ T5819] usb 2-1: Product: syz
[  182.111282][ T5819] usb 2-1: Manufacturer: syz
[  182.115982][ T5819] usb 2-1: SerialNumber: syz
[  182.140684][ T5819] usb 2-1: config 0 descriptor??
[  182.173325][ T5819] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input5
[  182.488955][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.498489][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.967499][  T787] usb 2-1: USB disconnect, device number 3
[  183.360934][ T6405] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[  183.763252][   T28] audit: type=1326 audit(1790012095.987:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faae339e159 code=0x0
[  183.831465][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  183.921717][  T787] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  184.044643][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.060269][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  184.088978][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  184.100473][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  184.113232][    T9] usb 4-1: SerialNumber: syz
[  184.121135][  T787] usb 3-1: Using ep0 maxpacket: 16
[  184.130811][  T787] usb 3-1: unable to get BOS descriptor or descriptor too short
[  184.157367][    T9] cdc_ether 4-1:1.0: skipping garbage
[  184.165183][  T787] usb 3-1: config 6 has an invalid interface number: 231 but max is 0
[  184.181465][    T9] usb 4-1: bad CDC descriptors
[  184.188567][  T787] usb 3-1: config 6 has no interface number 0
[  184.208871][  T787] usb 3-1: New USB device found, idVendor=04f2, idProduct=aff9, bcdDevice=98.5b
[  184.222390][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.230844][  T787] usb 3-1: Product: syz
[  184.239085][  T787] usb 3-1: Manufacturer: syz
[  184.246833][  T787] usb 3-1: SerialNumber: syz
[  184.367109][    T9] usb 4-1: USB disconnect, device number 3
[  185.181286][ T6438] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  185.997368][ T6445] syz.1.138[6445]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  186.028316][ T6445] loop1: detected capacity change from 0 to 512
[  186.127325][ T6445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  186.171007][ T6445] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  186.271420][ T6445] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.138: bad orphan inode 13
[  186.286571][ T6445] ext4_test_bit(bit=12, block=18) = 1
[  186.292685][ T6445] is_bad_inode(inode)=0
[  186.297024][ T6445] NEXT_ORPHAN(inode)=10485760
[  186.302516][ T6445] max_ino=32
[  186.305864][ T6445] i_nlink=1
[  186.310595][ T6445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  186.413656][ T6445] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  186.480095][ T6445] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.138: bg 0: block 248: padding at end of block bitmap is not set
[  186.507325][ T6445] Quota error (device loop1): write_blk: dquota write failed
[  186.516820][ T6445] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  186.530429][ T6445] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.138: Failed to acquire dquot type 1
[  186.755236][ T5819] usb 3-1: USB disconnect, device number 6
[  186.794263][ T6445] syz.1.138 (6445) used greatest stack depth: 20680 bytes left
[  186.934015][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  186.949378][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'.
[  186.991833][   T59] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  187.006279][   T59] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1
[  187.599031][ T6483] capability: warning: `syz.3.153' uses deprecated v2 capabilities in a way that may be insecure
[  187.909116][ T6490] loop1: detected capacity change from 0 to 2048
[  188.009732][ T6490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.095597][ T6502] loop2: detected capacity change from 0 to 128
[  188.158215][ T6502] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  188.175429][ T6502] FAT-fs (loop2): Filesystem has been set read-only
[  188.193795][ T6502] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  188.211088][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  188.219280][ T6502] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  188.263543][ T6502] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  188.295450][ T6502] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  188.321769][ T6502] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  188.333875][ T6488] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  188.352469][ T6502] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  188.364490][ T6502] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  188.377517][ T6488] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 514 with error 28
[  188.391483][ T6502] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  188.402843][ T6502] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  188.413144][ T6488] EXT4-fs (loop1): This should not happen!! Data will be lost
[  188.413144][ T6488] 
[  188.425402][   T28] audit: type=1800 audit(1700006401.260:3): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.160" name="file2" dev="loop2" ino=1048657 res=0 errno=0
[  188.431721][    T9] usb 1-1: Using ep0 maxpacket: 16
[  188.445273][ T6488] EXT4-fs (loop1): Total free blocks count 0
[  188.445328][ T6488] EXT4-fs (loop1): Free/Dirty block details
[  188.445426][ T6488] EXT4-fs (loop1): free_blocks=4096
[  188.475040][    T9] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.487251][ T6502] syz.2.160 (6502) used greatest stack depth: 20584 bytes left
[  188.495251][ T6488] EXT4-fs (loop1): dirty_blocks=528
[  188.500516][ T6488] EXT4-fs (loop1): Block reservation details
[  188.507087][    T9] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.521142][ T6488] EXT4-fs (loop1): i_reserved_data_blocks=33
[  188.530670][    T9] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.581083][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  188.611078][    T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.00
[  188.620656][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.667638][    T9] usb 1-1: config 0 descriptor??
[  188.739475][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.134286][    T9] hid-generic 0003:18D1:5050.0001: ignoring exceeding usage max
[  189.189873][    T9] hid-generic 0003:18D1:5050.0001: hidraw0: USB HID v0.00 Device [HID 18d1:5050] on usb-dummy_hcd.0-1/input0
[  189.320569][    T9] usb 1-1: USB disconnect, device number 2
[  189.402878][ T6525] loop2: detected capacity change from 0 to 1024
[  189.490351][ T6523] fido_id[6523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  189.569640][ T6525] hfsplus: xattr searching failed
[  189.594347][   T28] audit: type=1800 audit(1700006402.430:4): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.170" name="file1" dev="loop2" ino=2 res=0 errno=0
[  189.964853][ T6535] hfsplus: xattr searching failed
[  191.883152][ T6555] loop0: detected capacity change from 0 to 512
[  191.892624][ T6555] EXT4-fs: Ignoring removed orlov option
[  191.898345][ T6555] EXT4-fs: Ignoring removed orlov option
[  191.983141][ T6555] EXT4-fs (loop0): 1 truncate cleaned up
[  192.067448][ T6555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.175528][ T6560] loop2: detected capacity change from 0 to 1024
[  192.244977][ T6560] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  192.284290][ T6560] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  192.318211][ T6560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.425207][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.625328][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.715668][ T6570] loop0: detected capacity change from 0 to 1024
[  192.753401][ T6572] loop3: detected capacity change from 0 to 128
[  193.768866][ T6595] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  194.017921][ T6600] loop3: detected capacity change from 0 to 2048
[  194.422264][ T6607] loop3: detected capacity change from 0 to 128
[  194.450803][ T6607] ext4: Unknown parameter 'smackfstransmute'
[  195.105224][ T6615] loop1: detected capacity change from 0 to 4096
[  195.402863][ T6615] EXT4-fs: Ignoring removed orlov option
[  195.421389][ T6615] EXT4-fs (loop1): Test dummy encryption mode enabled
[  195.464339][ T6615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.822131][ T6615] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  195.862130][ T5829] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  195.928459][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.053374][ T5829] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  196.080976][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.100004][ T5829] usb 3-1: config 0 has no interface number 0
[  196.111019][ T5829] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  196.131858][ T5829] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.166365][ T5829] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  196.180341][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.200573][ T5829] usb 3-1: Product: syz
[  196.205187][ T5829] usb 3-1: Manufacturer: syz
[  196.209842][ T5829] usb 3-1: SerialNumber: syz
[  196.225373][ T5829] usb 3-1: config 0 descriptor??
[  196.391851][ T6639] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input6
[  196.472573][ T5829] usbtouchscreen: probe of 3-1:0.117 failed with error -71
[  196.510256][ T5829] usb 3-1: USB disconnect, device number 7
[  196.781928][ T6650] loop1: detected capacity change from 0 to 1024
[  196.985774][ T6650] hfsplus: xattr searching failed
[  196.998198][ T6650] hfsplus: xattr searching failed
[  197.001015][   T28] audit: type=1800 audit(1700006409.830:5): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.211" name="file1" dev="loop1" ino=3 res=0 errno=0
[  197.028561][    T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  197.090594][ T3517] hfsplus: b-tree write err: -5, ino 3
[  199.181059][    T8] usb 4-1: Using ep0 maxpacket: 32
[  199.203888][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  199.222834][    T8] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  199.233033][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.245189][    T8] usb 4-1: config 0 descriptor??
[  199.288673][ T6658] Bluetooth: MGMT ver 1.22
[  199.941120][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  201.510825][    T8] cherry 0003:046A:0023.0002: ignoring exceeding usage max
[  201.558774][    T8] cherry 0003:046A:0023.0002: hidraw0: USB HID v0.03 Device [HID 046a:0023] on usb-dummy_hcd.3-1/input0
[  201.712182][ T5819] usb 4-1: USB disconnect, device number 4
[  201.766642][ T6667] fido_id[6667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046A:0023.0002/report_descriptor': No such file or directory
[  202.082302][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  202.088702][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  202.201102][    T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  202.403439][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.420985][    T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  202.430080][    T8] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  202.450179][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.479605][    T8] usb 2-1: config 0 descriptor??
[  202.724955][    T8] usb 2-1: USB disconnect, device number 4
[  202.755622][ T6680] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[  202.802363][ T6675] loop3: detected capacity change from 0 to 8192
[  202.856467][ T6675]  loop3: p1 p2 p4
[  202.858570][ T6681] loop2: detected capacity change from 0 to 2048
[  202.877877][ T6675] loop3: partition table partially beyond EOD, truncated
[  202.896427][ T6675] loop3: p1 start 51379968 is beyond EOD, truncated
[  202.925157][ T6675] loop3: p4 start 33554440 is beyond EOD, truncated
[  202.950627][ T6681] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  202.995509][ T6683] usb usb1: usbfs: process 6683 (syz.0.224) did not claim interface 0 before use
[  203.002632][ T6681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.138342][   T28] audit: type=1800 audit(1700006415.960:6): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="file2" dev="loop2" ino=1347 res=0 errno=0
[  203.494821][ T6262] udevd[6262]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  203.645510][ T6693] loop2: detected capacity change from 0 to 512
[  203.667337][ T6693] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  203.713389][ T6693] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  203.787800][ T6693] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.227: bad orphan inode 13
[  203.819066][ T6697] loop3: detected capacity change from 0 to 4096
[  203.827102][ T6697] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.835286][ T6697] EXT4-fs: Ignoring removed orlov option
[  203.845053][ T6693] ext4_test_bit(bit=12, block=18) = 1
[  203.850512][ T6693] is_bad_inode(inode)=0
[  203.859419][ T6693] NEXT_ORPHAN(inode)=10485760
[  203.865791][ T6697] EXT4-fs (loop3): Test dummy encryption mode enabled
[  203.887479][ T6693] max_ino=32
[  203.898879][ T6697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.919588][ T6693] i_nlink=1
[  203.926760][ T6693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  204.000397][ T6693] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  204.096976][ T6693] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.227: bg 0: block 248: padding at end of block bitmap is not set
[  204.150233][ T6693] Quota error (device loop2): write_blk: dquota write failed
[  204.175104][ T6693] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  204.226419][ T6693] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.227: Failed to acquire dquot type 1
[  204.390852][ T6697] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  204.536206][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.632194][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  204.691391][ T3524] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  204.700506][ T3524] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1
[  206.071655][ T6729] loop2: detected capacity change from 0 to 1756
[  206.103950][ T6729] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  206.112055][ T6729] UDF-fs: Scanning with blocksize 512 failed
[  206.131410][ T6729] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  206.139197][ T6729] UDF-fs: Scanning with blocksize 1024 failed
[  206.151227][ T6729] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[  206.310543][ T6733] loop3: detected capacity change from 0 to 1024
[  207.015999][ T6745] loop1: detected capacity change from 0 to 1024
[  207.036086][ T6745] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  207.057197][ T6745] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  207.075405][ T6745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.111114][ T5829] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  207.186954][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.485294][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.496367][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  207.507961][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.518967][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  207.532490][ T5829] usb 3-1: New USB device found, idVendor=056a, idProduct=51b9, bcdDevice=cd.fc
[  207.542437][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.665899][ T5829] usb 3-1: config 0 descriptor??
[  208.460931][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  208.614602][ T6766] blktrace: Concurrent blktraces are not allowed on loop0
[  209.771046][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  210.178749][ T5829] usbhid 3-1:0.0: can't add hid device: -71
[  210.201130][ T5829] usbhid: probe of 3-1:0.0 failed with error -71
[  210.218188][ T5829] usb 3-1: USB disconnect, device number 8
[  210.335546][ T6772] loop2: detected capacity change from 0 to 136
[  211.555049][ T6783] loop0: detected capacity change from 0 to 1024
[  211.717603][ T6783] hfsplus: xattr searching failed
[  211.735366][   T28] audit: type=1800 audit(1700006424.570:7): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.257" name="file1" dev="loop0" ino=2 res=0 errno=0
[  211.985886][ T3524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.078603][ T6790] hfsplus: xattr searching failed
[  212.687963][ T3524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.856671][ T3524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.082655][ T3524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.682111][ T3524] tipc: Disabling bearer <udp:syz0>
[  213.688517][ T3524] tipc: Left network mode
[  214.070697][ T6822] loop0: detected capacity change from 0 to 1024
[  214.076188][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  214.101171][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  214.110165][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  214.129595][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  214.148286][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  214.156196][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  214.213480][ T6822] hfsplus: xattr searching failed
[  214.218902][   T28] audit: type=1800 audit(1700006427.050:8): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.273" name="file1" dev="loop0" ino=2 res=0 errno=0
[  214.516011][ T6829] hfsplus: xattr searching failed
[  214.877944][ T6844] loop1: detected capacity change from 0 to 128
[  215.033005][ T6262] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  215.098923][ T6848] fuse: Bad value for 'fd'
[  215.379522][ T6858] xt_hashlimit: size too large, truncated to 1048576
[  215.413114][ T6818] chnl_net:caif_netlink_parms(): no params data found
[  216.231388][ T5788] Bluetooth: hci2: command tx timeout
[  216.299562][ T6883] loop1: detected capacity change from 0 to 512
[  216.318589][ T6883] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  216.420373][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.504045][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.529485][ T6818] bridge_slave_0: entered allmulticast mode
[  216.572834][ T6818] bridge_slave_0: entered promiscuous mode
[  216.608295][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.672281][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.701151][ T6818] bridge_slave_1: entered allmulticast mode
[  216.717802][ T6818] bridge_slave_1: entered promiscuous mode
[  217.673836][ T3524] hsr_slave_0: left promiscuous mode
[  217.698998][ T3524] hsr_slave_1: left promiscuous mode
[  217.716667][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.724282][  T787] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  217.736960][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.746534][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.775123][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.794588][ T3524] bridge_slave_1: left allmulticast mode
[  217.816098][ T3524] bridge_slave_1: left promiscuous mode
[  217.824134][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.869773][ T3524] bridge_slave_0: left allmulticast mode
[  217.877155][ T3524] bridge_slave_0: left promiscuous mode
[  217.883681][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.941348][ T3524] veth1_macvtap: left promiscuous mode
[  217.951941][  T787] usb 2-1: config 0 has an invalid interface number: 176 but max is 2
[  217.960643][ T3524] veth0_macvtap: left promiscuous mode
[  217.978947][  T787] usb 2-1: config 0 has no interface number 1
[  217.990140][ T3524] veth1_vlan: left promiscuous mode
[  217.998656][  T787] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[  218.019570][ T3524] veth0_vlan: left promiscuous mode
[  218.028696][  T787] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  218.064783][  T787] usb 2-1: config 0 interface 0 has no altsetting 0
[  218.078002][  T787] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  218.109617][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.138370][  T787] usb 2-1: config 0 descriptor??
[  218.311048][ T5087] Bluetooth: hci2: command tx timeout
[  218.534682][  T787] usb 2-1: Could not set interface, error -71
[  218.559438][  T787] qmi_wwan: probe of 2-1:0.0 failed with error -22
[  218.607647][  T787] usb 2-1: USB disconnect, device number 5
[  219.263794][ T6907] loop1: detected capacity change from 0 to 512
[  219.288625][ T6907] EXT4-fs: inline encryption not supported
[  219.329501][ T6907] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.295: inode has both inline data and extents flags
[  219.366606][ T6907] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.295: couldn't read orphan inode 15 (err -117)
[  219.385338][ T3524] team0 (unregistering): Port device team_slave_1 removed
[  219.445160][ T6907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.473174][ T6913] loop0: detected capacity change from 0 to 512
[  219.490738][ T6913] EXT4-fs (loop0): Test dummy encryption mode enabled
[  219.497803][ T6913] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  219.512012][ T6913] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  219.531665][ T6913] EXT4-fs (loop0): 1 truncate cleaned up
[  219.539169][ T6913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.584836][ T3524] team0 (unregistering): Port device team_slave_0 removed
[  219.595575][ T5788] Bluetooth: hci0: command 0x0406 tx timeout
[  219.608964][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  219.615554][ T5788] Bluetooth: hci3: command 0x0406 tx timeout
[  219.716346][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.738146][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.828586][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.870326][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.390626][ T6926] netlink: 'syz.1.302': attribute type 3 has an invalid length.
[  220.399502][ T5789] Bluetooth: hci2: command tx timeout
[  220.648486][ T3524] bond0 (unregistering): Released all slaves
[  220.750847][ T6818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.788747][ T6818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.921807][ T6818] team0: Port device team_slave_0 added
[  220.935682][ T6818] team0: Port device team_slave_1 added
[  220.959373][ T6933] loop1: detected capacity change from 0 to 1024
[  221.004310][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.019205][ T6933] EXT4-fs: Ignoring removed nomblk_io_submit option
[  221.026644][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.041064][ T6933] EXT4-fs: inline encryption not supported
[  221.088937][ T6818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.102642][ T6935] lo: entered promiscuous mode
[  221.111200][ T6933] EXT4-fs: Ignoring removed nomblk_io_submit option
[  221.124054][ T6935] netlink: 96 bytes leftover after parsing attributes in process `syz.3.306'.
[  221.133989][ T6935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.168885][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.176838][ T6933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  221.188693][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.225243][ T6818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.258646][ T6933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  221.305349][ T6933] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.374013][ T6818] hsr_slave_0: entered promiscuous mode
[  221.410758][ T6818] hsr_slave_1: entered promiscuous mode
[  221.429020][ T6818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.477408][ T6818] Cannot create hsr debugfs directory
[  221.484708][ T6933] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.305: bg 0: block 112: padding at end of block bitmap is not set
[  221.526463][ T6933] EXT4-fs (loop1): Remounting filesystem read-only
[  221.761321][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  222.185234][ T6818] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  222.196771][ T6818] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  222.210708][ T6818] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  222.232386][ T6818] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  222.471613][ T5789] Bluetooth: hci2: command tx timeout
[  222.492034][ T6818] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.534675][ T6818] 8021q: adding VLAN 0 to HW filter on device team0
[  222.589296][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.596570][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.649850][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.657202][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.308090][ T6979] loop1: detected capacity change from 0 to 512
[  223.338722][ T6979] FAT-fs (loop1): Directory bread(block 199916) failed
[  223.350720][ T6979] FAT-fs (loop1): Directory bread(block 199917) failed
[  223.358451][ T6979] FAT-fs (loop1): Directory bread(block 199918) failed
[  223.385512][ T6979] FAT-fs (loop1): Directory bread(block 199919) failed
[  223.418321][ T6818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.426618][ T6979] FAT-fs (loop1): Directory bread(block 199920) failed
[  223.459461][ T6979] FAT-fs (loop1): Directory bread(block 199921) failed
[  223.490152][ T6979] FAT-fs (loop1): Directory bread(block 199922) failed
[  223.504544][ T6979] FAT-fs (loop1): Directory bread(block 199923) failed
[  223.607587][ T6979] FAT-fs (loop1): FAT read failed (blocknr 128)
[  225.404569][ T6818] veth0_vlan: entered promiscuous mode
[  225.453513][ T6818] veth1_vlan: entered promiscuous mode
[  225.579175][ T6818] veth0_macvtap: entered promiscuous mode
[  225.604799][ T6818] veth1_macvtap: entered promiscuous mode
[  225.729776][ T6818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.769910][ T6818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.790207][ T6818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.801505][ T6818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.815510][ T6818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.826530][ T6818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.846312][ T6818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.896220][ T6818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.927749][ T6818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.963304][ T6818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.976991][ T6818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.987497][ T6818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.998823][ T6818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.021167][ T6818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.051983][ T6818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.074345][ T6818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.086594][ T6818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.100075][ T6818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.484422][   T28] audit: type=1800 audit(1700006439.320:9): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.328" name="UDC" dev="configfs" ino=11924 res=0 errno=0
[  226.657799][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.711900][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.806460][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.832979][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.247674][ T7060] loop1: detected capacity change from 0 to 1024
[  227.255551][ T7060] EXT4-fs: Ignoring removed bh option
[  227.344173][ T7060] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  227.633400][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.738330][ T7060] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  227.978871][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.133607][ T7076] loop0: detected capacity change from 0 to 1024
[  228.208075][ T7076] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  228.278410][ T7076] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  228.354206][ T7076] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  228.440302][ T7076] EXT4-fs (loop0): orphan cleanup on readonly fs
[  228.515090][ T7076] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.338: Inode bitmap for bg 0 marked uninitialized
[  228.564447][ T7076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  228.741189][ T5829] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  228.807619][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.959241][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  228.990067][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.007461][ T5829] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00
[  229.037253][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.056201][ T7098] loop0: detected capacity change from 0 to 256
[  229.082457][ T5829] usb 2-1: config 0 descriptor??
[  229.195854][ T7098] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  229.209090][ T7103] loop4: detected capacity change from 0 to 1024
[  229.266230][ T7103] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  229.358467][ T7103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.538095][ T5829] apple 0003:05AC:0241.0003: item 0 1 0 9 parsing failed
[  229.548979][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  229.560161][ T5789] CPU: 1 PID: 5789 Comm: kworker/u5:4 Not tainted syzkaller #0
[  229.567781][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  229.577893][ T5789] Workqueue: hci0 hci_rx_work
[  229.582868][ T5789] Call Trace:
[  229.586275][ T5789]  <TASK>
[  229.589295][ T5789]  dump_stack_lvl+0x18c/0x250
[  229.594151][ T5789]  ? show_regs_print_info+0x20/0x20
[  229.599476][ T5789]  ? load_image+0x420/0x420
[  229.604079][ T5789]  sysfs_create_dir_ns+0x26e/0x2a0
[  229.609304][ T5789]  ? __lock_acquire+0x7d80/0x7d80
[  229.614425][ T5789]  ? sysfs_warn_dup+0xa0/0xa0
[  229.619216][ T5789]  ? do_raw_spin_unlock+0x121/0x230
[  229.624497][ T5789]  kobject_add_internal+0x617/0xc90
[  229.629778][ T5789]  kobject_add+0x164/0x240
[  229.634253][ T5789]  ? kobject_init+0x1d0/0x1d0
[  229.638997][ T5789]  ? get_device_parent+0x366/0x390
[  229.644302][ T5789]  device_add+0x3fa/0xc40
[  229.648702][ T5789]  hci_conn_add_sysfs+0xd5/0x1e0
[  229.653882][ T5789]  le_conn_complete_evt+0xe9a/0x1480
[  229.659312][ T5789]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  229.665659][ T5789]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  229.671497][ T5789]  ? mutex_unlock+0x10/0x10
[  229.676152][ T5789]  ? skb_pull_data+0xf0/0x1f0
[  229.680971][ T5789]  hci_le_conn_complete_evt+0x187/0x440
[  229.686603][ T5789]  ? hci_remote_host_features_evt+0x150/0x150
[  229.692770][ T5789]  hci_event_packet+0x7b4/0x1280
[  229.697779][ T5789]  ? __lock_acquire+0x7d80/0x7d80
[  229.702869][ T5789]  ? lock_chain_count+0x20/0x20
[  229.707804][ T5789]  ? bis_list+0x290/0x290
[  229.712208][ T5789]  ? kcov_remote_start+0x513/0x810
[  229.717486][ T5789]  ? lockdep_hardirqs_on+0x98/0x150
[  229.722814][ T5789]  ? hci_send_to_monitor+0xd7/0x4f0
[  229.728088][ T5789]  hci_rx_work+0x43a/0xd60
[  229.732578][ T5789]  ? process_scheduled_works+0x975/0x1600
[  229.738463][ T5789]  process_scheduled_works+0xa60/0x1600
[  229.744119][ T5789]  ? worker_attach_to_pool+0x370/0x370
[  229.749649][ T5789]  ? assign_work+0x3cc/0x5d0
[  229.754306][ T5789]  worker_thread+0xa5e/0xfe0
[  229.758979][ T5789]  ? _raw_spin_unlock+0x40/0x40
[  229.763942][ T5789]  ? __kthread_parkme+0x71/0x1c0
[  229.769031][ T5789]  kthread+0x2fa/0x390
[  229.773187][ T5789]  ? pr_cont_work+0x550/0x550
[  229.777922][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  229.782564][ T5789]  ret_from_fork+0x48/0x80
[  229.787150][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  229.791801][ T5789]  ret_from_fork_asm+0x11/0x20
[  229.796723][ T5789]  </TASK>
[  229.802962][ T5789] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  229.817411][ T5789] Bluetooth: hci0: failed to register connection device
[  229.871890][ T5829] apple 0003:05AC:0241.0003: parse failed
[  229.905257][ T5829] apple: probe of 0003:05AC:0241.0003 failed with error -22
[  229.968785][ T5829] usb 2-1: USB disconnect, device number 6
[  230.281059][   T28] audit: type=1804 audit(1700006402.060:10): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.346" name="/newroot/4/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  230.824034][ T6818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.413528][ T3524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.609997][ T3524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.717420][ T3524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.905591][ T3524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.074692][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  234.090639][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  234.101980][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  234.113893][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  234.122073][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  234.139288][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  234.185277][ T7169] loop1: detected capacity change from 0 to 128
[  234.242402][ T7169] EXT4-fs (loop1): Test dummy encryption mode enabled
[  234.298114][ T7169] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  234.345651][ T7169] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  234.682530][  T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  234.699856][ T7179] capability: warning: `syz.3.365' uses 32-bit capabilities (legacy support in use)
[  235.662152][  T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.703963][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  235.716360][  T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.739133][  T787] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  235.750756][  T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.839332][  T787] usb 5-1: config 0 descriptor??
[  236.316660][ T5789] Bluetooth: hci1: command tx timeout
[  237.338462][  T787] hid-led: probe of 0003:27B8:01ED.0004 failed with error -71
[  237.453894][  T787] usb 5-1: USB disconnect, device number 2
[  237.731900][ T7164] chnl_net:caif_netlink_parms(): no params data found
[  238.128198][ T7222] loop4: detected capacity change from 0 to 256
[  238.371824][ T3524] hsr_slave_0: left promiscuous mode
[  238.378344][ T3524] hsr_slave_1: left promiscuous mode
[  238.394462][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.407814][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.416277][ T5789] Bluetooth: hci1: command tx timeout
[  238.468095][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.486289][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.528411][ T3524] bridge_slave_1: left allmulticast mode
[  238.536268][ T7226] syz.4.373: attempt to access beyond end of device
[  238.536268][ T7226] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256
[  238.559270][ T3524] bridge_slave_1: left promiscuous mode
[  238.585709][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.381159][ T3524] bridge_slave_0: left allmulticast mode
[  239.398371][ T3524] bridge_slave_0: left promiscuous mode
[  239.414281][ T6818] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  239.427918][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.458283][ T6818] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  239.546306][ T3524] veth1_macvtap: left promiscuous mode
[  239.559454][ T3524] veth0_macvtap: left promiscuous mode
[  239.567659][ T3524] veth1_vlan: left promiscuous mode
[  239.588770][ T3524] veth0_vlan: left promiscuous mode
[  240.481372][ T5789] Bluetooth: hci1: command tx timeout
[  240.976077][ T7243] loop1: detected capacity change from 0 to 1024
[  241.130228][ T7243] hfsplus: xattr searching failed
[  241.147254][   T28] audit: type=1800 audit(1700006403.050:11): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.381" name="file1" dev="loop1" ino=2 res=0 errno=0
[  241.171936][ T7243] hfsplus: xattr searching failed
[  241.448112][ T3524] team0 (unregistering): Port device team_slave_1 removed
[  241.497523][ T3524] team0 (unregistering): Port device team_slave_0 removed
[  241.548037][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.596113][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.963556][ T3524] bond0 (unregistering): Released all slaves
[  242.039291][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.047187][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.054578][ T7164] bridge_slave_0: entered allmulticast mode
[  242.062757][ T7164] bridge_slave_0: entered promiscuous mode
[  242.071902][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.079178][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.090211][ T7164] bridge_slave_1: entered allmulticast mode
[  242.101582][ T7164] bridge_slave_1: entered promiscuous mode
[  242.225686][ T7164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.247069][ T7164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.353536][ T7164] team0: Port device team_slave_0 added
[  242.377498][ T7164] team0: Port device team_slave_1 added
[  242.504626][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.524249][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.575583][ T5789] Bluetooth: hci1: command tx timeout
[  242.611195][ T7164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.639172][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.677223][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.748376][ T7164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.928694][ T7164] hsr_slave_0: entered promiscuous mode
[  242.953492][ T7164] hsr_slave_1: entered promiscuous mode
[  242.971276][ T7164] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  242.978948][ T7164] Cannot create hsr debugfs directory
[  243.196517][ T3524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.415327][ T3524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.572374][ T3524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.713646][ T3524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.875520][ T7286] futex_wake_op: syz.1.392 tries to shift op by 144; fix this program
[  243.947315][ T7286] loop1: detected capacity change from 0 to 256
[  244.200514][ T7286] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  244.756127][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.767390][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.776987][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.829979][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.857567][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  244.866406][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  245.153644][ T7164] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  245.199780][ T7296] blktrace: Concurrent blktraces are not allowed on loop6
[  245.384256][ T7164] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  245.491621][ T7164] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  245.585557][ T7164] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  246.546743][ T7164] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.742492][ T7164] 8021q: adding VLAN 0 to HW filter on device team0
[  246.750870][    C0] sched: RT throttling activated
[  246.863981][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.871282][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.951678][ T5788] Bluetooth: hci2: command tx timeout
[  246.993895][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.001192][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.042238][ T7284] chnl_net:caif_netlink_parms(): no params data found
[  247.298828][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.308459][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.316208][ T7284] bridge_slave_0: entered allmulticast mode
[  247.324863][ T7284] bridge_slave_0: entered promiscuous mode
[  247.338492][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.361189][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.382701][ T7284] bridge_slave_1: entered allmulticast mode
[  247.435646][ T7284] bridge_slave_1: entered promiscuous mode
[  247.565853][ T7284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.625336][ T7284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.748699][ T7284] team0: Port device team_slave_0 added
[  247.793601][ T7284] team0: Port device team_slave_1 added
[  247.867088][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.880948][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.907498][ T7284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.021219][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.028248][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.076119][ T7284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.192456][ T7164] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.313432][ T7284] hsr_slave_0: entered promiscuous mode
[  248.345347][ T7284] hsr_slave_1: entered promiscuous mode
[  248.358136][ T7284] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.366340][ T7284] Cannot create hsr debugfs directory
[  248.397065][ T7341] loop1: detected capacity change from 0 to 2048
[  248.452500][ T7341] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  248.529198][ T7341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  248.827207][ T5786] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  248.868007][ T5786] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  249.032827][ T5788] Bluetooth: hci2: command tx timeout
[  249.774596][ T7164] veth0_vlan: entered promiscuous mode
[  249.867197][ T7284] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  249.994381][ T7164] veth1_vlan: entered promiscuous mode
[  250.013980][ T7284] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  250.062795][ T7284] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  250.459918][ T7284] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  251.204949][ T5788] Bluetooth: hci2: command tx timeout
[  251.246655][ T7164] veth0_macvtap: entered promiscuous mode
[  251.290910][ T7164] veth1_macvtap: entered promiscuous mode
[  251.369967][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.383130][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.401450][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.410200][ T3524] hsr_slave_0: left promiscuous mode
[  251.416536][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.438501][ T3524] hsr_slave_1: left promiscuous mode
[  251.444358][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  251.453177][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.485538][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.493265][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.501806][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.509305][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.517640][ T3524] bridge_slave_1: left allmulticast mode
[  251.523619][ T3524] bridge_slave_1: left promiscuous mode
[  251.529488][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.540022][ T3524] bridge_slave_0: left allmulticast mode
[  251.546393][ T3524] bridge_slave_0: left promiscuous mode
[  251.552949][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.607447][ T3524] veth1_macvtap: left promiscuous mode
[  251.620052][ T3524] veth0_macvtap: left promiscuous mode
[  251.625947][ T3524] veth1_vlan: left promiscuous mode
[  251.631573][ T3524] veth0_vlan: left promiscuous mode
[  252.558480][ T3524] team0 (unregistering): Port device team_slave_1 removed
[  252.610150][ T3524] team0 (unregistering): Port device team_slave_0 removed
[  252.659133][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.713303][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.092189][ T3524] bond0 (unregistering): Released all slaves
[  253.273952][ T5788] Bluetooth: hci2: command tx timeout
[  253.305264][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.316952][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.327692][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.338295][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.351401][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.422716][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.451387][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.461824][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.472712][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.507236][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.515354][ T5788] Bluetooth: hci3: command tx timeout
[  253.590160][ T7164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.600074][ T7164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.609368][ T7164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.619088][ T7164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.759927][ T7284] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.869685][ T7284] 8021q: adding VLAN 0 to HW filter on device team0
[  253.985956][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.993316][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.065017][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.085644][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.092981][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.105853][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.256264][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.312179][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.467203][ T3524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.603174][ T3524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.624321][ T7380] chnl_net:caif_netlink_parms(): no params data found
[  254.729826][ T3524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.954454][ T3524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.172304][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.179517][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.229926][ T7441] loop5: detected capacity change from 0 to 512
[  255.236859][ T7380] bridge_slave_0: entered allmulticast mode
[  255.253385][ T7380] bridge_slave_0: entered promiscuous mode
[  255.310682][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.327062][ T7441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.341583][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.348903][ T7380] bridge_slave_1: entered allmulticast mode
[  255.353671][ T7441] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.372328][ T7380] bridge_slave_1: entered promiscuous mode
[  255.493649][ T7380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.527394][ T7164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.539047][ T7380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.591683][ T5788] Bluetooth: hci3: command tx timeout
[  255.867484][ T7380] team0: Port device team_slave_0 added
[  255.885549][ T7284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.896105][ T7380] team0: Port device team_slave_1 added
[  256.055076][ T7449] ==================================================================
[  256.055154][ T7449] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0
[  256.055297][ T7449] Write of size 4 at addr ffffc90003f09000 by task syz.5.425/7449
[  256.055318][ T7449] 
[  256.055350][ T7449] CPU: 0 PID: 7449 Comm: syz.5.425 Not tainted syzkaller #0
[  256.055398][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  256.055411][ T7449] Call Trace:
[  256.055421][ T7449]  <TASK>
[  256.055431][ T7449]  dump_stack_lvl+0x18c/0x250
[  256.055464][ T7449]  ? sys_imageblit+0x1bac/0x25d0
[  256.055489][ T7449]  ? show_regs_print_info+0x20/0x20
[  256.055517][ T7449]  ? load_image+0x420/0x420
[  256.055545][ T7449]  print_report+0xa8/0x210
[  256.055596][ T7449]  ? sys_imageblit+0x1bac/0x25d0
[  256.055616][ T7449]  kasan_report+0x117/0x150
[  256.055678][ T7449]  ? sys_imageblit+0x1bac/0x25d0
[  256.055702][ T7449]  sys_imageblit+0x1bac/0x25d0
[  256.055731][ T7449]  ? sys_copyarea+0x2530/0x2530
[  256.055755][ T7449]  ? __flush_work+0x120/0xac0
[  256.055776][ T7449]  ? __flush_work+0x9a1/0xac0
[  256.055797][ T7449]  ? __flush_work+0x120/0xac0
[  256.055819][ T7449]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  256.055894][ T7449]  soft_cursor+0xa01/0xc30
[  256.055953][ T7449]  bit_cursor+0x16dd/0x1f60
[  256.055995][ T7449]  ? bit_clear_margins+0x550/0x550
[  256.056038][ T7449]  ? get_color+0x2e8/0x4d0
[  256.056064][ T7449]  ? bit_clear_margins+0x550/0x550
[  256.056098][ T7449]  ? fbcon_cursor+0x430/0x640
[  256.056128][ T7449]  hide_cursor+0x7f/0x320
[  256.056170][ T7449]  do_con_write+0x1e1/0x70a0
[  256.056205][ T7449]  ? verify_lock_unused+0x140/0x140
[  256.056231][ T7449]  ? desc_read+0x1cf/0x3d0
[  256.056260][ T7449]  ? _prb_read_valid+0x921/0x9a0
[  256.056298][ T7449]  ? __mutex_trylock_common+0x160/0x270
[  256.056321][ T7449]  ? trace_raw_output_contention_end+0xd0/0xd0
[  256.056343][ T7449]  ? vt_resize+0xc0/0xc0
[  256.056370][ T7449]  ? rcu_is_watching+0x15/0xb0
[  256.056451][ T7449]  ? trace_contention_end+0x39/0xe0
[  256.056472][ T7449]  ? __mutex_lock+0x30d/0xc80
[  256.056496][ T7449]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  256.056516][ T7449]  ? n_tty_write+0x668/0x11e0
[  256.056597][ T7449]  ? mutex_lock_nested+0x20/0x20
[  256.056620][ T7449]  ? con_write+0x2e/0x40
[  256.056649][ T7449]  con_write+0x24/0x40
[  256.056678][ T7449]  n_tty_write+0xd3d/0x11e0
[  256.056719][ T7449]  ? n_tty_read+0x1370/0x1370
[  256.056749][ T7449]  ? wait_woken+0x180/0x180
[  256.056798][ T7449]  ? __virt_addr_valid+0x10c/0x380
[  256.056833][ T7449]  ? __check_object_size+0x4fc/0xa40
[  256.056878][ T7449]  ? n_tty_read+0x1370/0x1370
[  256.056907][ T7449]  file_tty_write+0x529/0x960
[  256.056938][ T7449]  vfs_write+0x474/0x9a0
[  256.056969][ T7449]  ? file_end_write+0x250/0x250
[  256.057000][ T7449]  ? __fget_files+0x3fc/0x460
[  256.057075][ T7449]  ? __fdget_pos+0x1d8/0x330
[  256.057102][ T7449]  ? ksys_write+0x74/0x260
[  256.057157][ T7449]  ksys_write+0x151/0x260
[  256.057187][ T7449]  ? __ia32_sys_read+0x90/0x90
[  256.057219][ T7449]  ? lockdep_hardirqs_on+0x98/0x150
[  256.057243][ T7449]  do_syscall_64+0x55/0xb0
[  256.057288][ T7449]  ? clear_bhb_loop+0x40/0x90
[  256.057371][ T7449]  ? clear_bhb_loop+0x40/0x90
[  256.057399][ T7449]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.057432][ T7449] RIP: 0033:0x7fafa7f9e159
[  256.057457][ T7449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.057507][ T7449] RSP: 002b:00007fafa8ed3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  256.057532][ T7449] RAX: ffffffffffffffda RBX: 00007fafa8225fa0 RCX: 00007fafa7f9e159
[  256.057548][ T7449] RDX: 0000000000001006 RSI: 0000200000000e00 RDI: 0000000000000005
[  256.057561][ T7449] RBP: 00007fafa803506b R08: 0000000000000000 R09: 0000000000000000
[  256.057575][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.057588][ T7449] R13: 00007fafa8226038 R14: 00007fafa8225fa0 R15: 00007ffc348ce0e8
[  256.057612][ T7449]  </TASK>
[  256.057620][ T7449] 
[  256.057624][ T7449] The buggy address belongs to a 768-page vmalloc region starting at 0xffffc90003c09000 allocated at drm_fbdev_generic_helper_fb_probe+0x247/0x520
[  256.057700][ T7449] Memory state around the buggy address:
[  256.057711][ T7449]  ffffc90003f08f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  256.057725][ T7449]  ffffc90003f08f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  256.057738][ T7449] >ffffc90003f09000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  256.057748][ T7449]                    ^
[  256.057758][ T7449]  ffffc90003f09080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  256.057772][ T7449]  ffffc90003f09100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  256.057781][ T7449] ==================================================================
[  256.068716][ T7449] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  256.068731][ T7449] CPU: 0 PID: 7449 Comm: syz.5.425 Not tainted syzkaller #0
[  256.068754][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  256.068767][ T7449] Call Trace:
[  256.068775][ T7449]  <TASK>
[  256.068783][ T7449]  dump_stack_lvl+0x18c/0x250
[  256.068820][ T7449]  ? show_regs_print_info+0x20/0x20
[  256.068849][ T7449]  ? load_image+0x420/0x420
[  256.068880][ T7449]  panic+0x2ca/0x720
[  256.068905][ T7449]  ? bpf_jit_dump+0xd0/0xd0
[  256.068928][ T7449]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  256.068955][ T7449]  ? _raw_spin_unlock+0x40/0x40
[  256.068978][ T7449]  ? print_memory_metadata+0x314/0x400
[  256.069016][ T7449]  ? sys_imageblit+0x1bac/0x25d0
[  256.069038][ T7449]  check_panic_on_warn+0x84/0xa0
[  256.069153][ T7449]  ? sys_imageblit+0x1bac/0x25d0
[  256.069173][ T7449]  end_report+0x6f/0x130
[  256.069200][ T7449]  kasan_report+0x128/0x150
[  256.069227][ T7449]  ? sys_imageblit+0x1bac/0x25d0
[  256.069251][ T7449]  sys_imageblit+0x1bac/0x25d0
[  256.069281][ T7449]  ? sys_copyarea+0x2530/0x2530
[  256.069304][ T7449]  ? __flush_work+0x120/0xac0
[  256.069326][ T7449]  ? __flush_work+0x9a1/0xac0
[  256.069348][ T7449]  ? __flush_work+0x120/0xac0
[  256.069372][ T7449]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  256.069431][ T7449]  soft_cursor+0xa01/0xc30
[  256.069469][ T7449]  bit_cursor+0x16dd/0x1f60
[  256.069512][ T7449]  ? bit_clear_margins+0x550/0x550
[  256.069549][ T7449]  ? get_color+0x2e8/0x4d0
[  256.069576][ T7449]  ? bit_clear_margins+0x550/0x550
[  256.069630][ T7449]  ? fbcon_cursor+0x430/0x640
[  256.069658][ T7449]  hide_cursor+0x7f/0x320
[  256.069685][ T7449]  do_con_write+0x1e1/0x70a0
[  256.069716][ T7449]  ? verify_lock_unused+0x140/0x140
[  256.069746][ T7449]  ? desc_read+0x1cf/0x3d0
[  256.069777][ T7449]  ? _prb_read_valid+0x921/0x9a0
[  256.069818][ T7449]  ? __mutex_trylock_common+0x160/0x270
[  256.069841][ T7449]  ? trace_raw_output_contention_end+0xd0/0xd0
[  256.069863][ T7449]  ? vt_resize+0xc0/0xc0
[  256.069891][ T7449]  ? rcu_is_watching+0x15/0xb0
[  256.069919][ T7449]  ? trace_contention_end+0x39/0xe0
[  256.069939][ T7449]  ? __mutex_lock+0x30d/0xc80
[  256.069963][ T7449]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  256.069984][ T7449]  ? n_tty_write+0x668/0x11e0
[  256.070026][ T7449]  ? mutex_lock_nested+0x20/0x20
[  256.070050][ T7449]  ? con_write+0x2e/0x40
[  256.070080][ T7449]  con_write+0x24/0x40
[  256.070108][ T7449]  n_tty_write+0xd3d/0x11e0
[  256.070151][ T7449]  ? n_tty_read+0x1370/0x1370
[  256.070181][ T7449]  ? wait_woken+0x180/0x180
[  256.070207][ T7449]  ? __virt_addr_valid+0x10c/0x380
[  256.070236][ T7449]  ? __check_object_size+0x4fc/0xa40
[  256.070257][ T7449]  ? n_tty_read+0x1370/0x1370
[  256.070287][ T7449]  file_tty_write+0x529/0x960
[  256.070320][ T7449]  vfs_write+0x474/0x9a0
[  256.070352][ T7449]  ? file_end_write+0x250/0x250
[  256.070384][ T7449]  ? __fget_files+0x3fc/0x460
[  256.070418][ T7449]  ? __fdget_pos+0x1d8/0x330
[  256.070446][ T7449]  ? ksys_write+0x74/0x260
[  256.070476][ T7449]  ksys_write+0x151/0x260
[  256.070506][ T7449]  ? __ia32_sys_read+0x90/0x90
[  256.070538][ T7449]  ? lockdep_hardirqs_on+0x98/0x150
[  256.070562][ T7449]  do_syscall_64+0x55/0xb0
[  256.070589][ T7449]  ? clear_bhb_loop+0x40/0x90
[  256.070618][ T7449]  ? clear_bhb_loop+0x40/0x90
[  256.070648][ T7449]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.070677][ T7449] RIP: 0033:0x7fafa7f9e159
[  256.070697][ T7449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.070715][ T7449] RSP: 002b:00007fafa8ed3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  256.070739][ T7449] RAX: ffffffffffffffda RBX: 00007fafa8225fa0 RCX: 00007fafa7f9e159
[  256.070755][ T7449] RDX: 0000000000001006 RSI: 0000200000000e00 RDI: 0000000000000005
[  256.070803][ T7449] RBP: 00007fafa803506b R08: 0000000000000000 R09: 0000000000000000
[  256.070817][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.070830][ T7449] R13: 00007fafa8226038 R14: 00007fafa8225fa0 R15: 00007ffc348ce0e8
[  256.070854][ T7449]  </TASK>
[  256.071657][ T7449] Kernel Offset: disabled