last executing test programs:

3m3.204258704s ago: executing program 5 (id=95):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x10000000}, @flat=@binder={0x73622a85, 0x100}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

3m3.112283891s ago: executing program 5 (id=96):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/psched\x00')
pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x4}, 0x0, 0x0, 0x0)

3m1.848167009s ago: executing program 5 (id=101):
r0 = io_uring_setup(0x136a, &(0x7f0000000400)={0x0, 0x4ea9, 0x0, 0x20000003, 0xa8d})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

3m1.652206176s ago: executing program 5 (id=104):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000000400)=0xe8)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000020801020000000000000000010000051400048008000240000000bc0930ef986941e72b0a98f9a7c71590e8841860b9bebb0b41c677f629696faeaa4d4410d94662a8334dfb4dfedc150997c1daec078e898589964c0e12bf8ed1216463151c7f7547987f"], 0x28}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40000c1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x46200, 0x0)
r5 = syz_open_pts(r4, 0x141601)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0xfe, 0x0, 0x1000}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000000)='bridge0\x00')
mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0)

2m58.091213832s ago: executing program 5 (id=106):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
newfstatat(0xffffffffffffff9c, &(0x7f0000004200)='./file0\x00', &(0x7f0000004240), 0x6000)

2m57.314281589s ago: executing program 5 (id=113):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

2m41.22400308s ago: executing program 32 (id=113):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

2m33.288428037s ago: executing program 1 (id=155):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000340), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='./file0\n', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f00000004c0)='1', 0x1)

2m31.778541287s ago: executing program 4 (id=156):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x32, 0xfffffffffffffeb6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0)
ppoll(&(0x7f0000000480)=[{r0, 0x298}], 0x1, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xfffffffffffffffe})
fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x21, 0x0, &(0x7f0000000240))
fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

2m31.641214751s ago: executing program 1 (id=157):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0/file0\x00', 0x66)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

2m27.438988313s ago: executing program 1 (id=161):
r0 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001e80)={'syz', 0x1}, &(0x7f00000001c0)='blake2b-256-generic\x00\v\xe5\xa1\"\x05<\x99\xd3U\xf8\x9cb\xfa\xb5\xd8\x1et\x05s', r0)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0)

2m26.700919626s ago: executing program 4 (id=163):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
r1 = dup(r0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1)

2m25.991695519s ago: executing program 4 (id=166):
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
read$FUSE(r0, &(0x7f0000014680)={0x2020}, 0x2020)

2m25.934791746s ago: executing program 1 (id=167):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200008, &(0x7f00000003c0), 0x3, 0x5ad, &(0x7f0000001000)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
fallocate(r4, 0x10, 0x1000037ec, 0x683)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x125442, 0x1d3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
openat2(r4, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x40080, 0x100}, 0x18)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="e941", 0x2}], 0x1)

2m25.674725494s ago: executing program 4 (id=169):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x1, 0x0, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

2m25.300332671s ago: executing program 2 (id=170):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000180)='./file1\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x260, &(0x7f0000002780)="$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")
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx  \x00'}, 0x20)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

2m23.60202214s ago: executing program 2 (id=171):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x200, @mcast2, 0x7}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000045, 0x0, 0x0)
shutdown(r4, 0x1)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x9d13, 0x4)
ppoll(&(0x7f00000002c0)=[{r4, 0x1487}], 0x1, 0x0, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x486180, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='\x8d@}/\x00', &(0x7f0000000100)='./file1\x00', r5)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
ioctl$TIOCMBIC(r6, 0x5417, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r7, 0x400, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x10)
fcntl$setlease(r8, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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")

2m23.277512845s ago: executing program 3 (id=172):
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0xe, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r0 = syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, r4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/4096, 0x1000, 0x800}, 0x20)
ioctl(r5, 0x400c4d07, &(0x7f0000000340))

2m23.101582393s ago: executing program 0 (id=173):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x8d8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726faa136bfe3bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a7364664b62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e94619600000042e1174fa269de92e463fc1cde2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3000000f9ffffffffffffff000000"], 0x9, 0x273, &(0x7f0000000300)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$incfs(0xffffffffffffff9c, 0x0, 0x868c2, 0x9c37611dc13d0da6)
setitimer(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
alarm(0x38)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = epoll_create(0x10005f93)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x80002014})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @remote}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x855)

2m22.677808698s ago: executing program 1 (id=174):
r0 = syz_open_procfs(0x0, 0x0)
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_clone(0x80288100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x20000000)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
semget$private(0x0, 0x1, 0x490)
memfd_create(0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
sendto$inet6(r5, &(0x7f0000000080)="800009e9", 0x4, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)

2m18.54894791s ago: executing program 2 (id=175):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
getrlimit(0xc, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xe7b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000300))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)

2m17.040642266s ago: executing program 1 (id=176):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x0, 0x10, 0x6, "8a0b216d32de"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0})

2m16.7662693s ago: executing program 0 (id=177):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @remote}, 0x10)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280))
add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000400000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60}, 0x28)

2m15.844185731s ago: executing program 2 (id=178):
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x400)

2m15.803635185s ago: executing program 3 (id=179):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000004200)='./file0\x00', &(0x7f0000004240), 0x6000)

2m14.68842828s ago: executing program 2 (id=180):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)

2m14.686004328s ago: executing program 0 (id=181):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000340), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='./file0\n', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f00000004c0)='1', 0x1)

2m14.438403449s ago: executing program 3 (id=182):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec779000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000380))

2m14.125050647s ago: executing program 4 (id=183):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10, 0x0, 0x0)

2m13.120231539s ago: executing program 0 (id=184):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpgid(r0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
mprotect(&(0x7f0000ac2000/0x1000)=nil, 0x1000, 0x3000003)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x80002, 0x0)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0)
preadv(r3, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x5, 0x0)

2m12.441406058s ago: executing program 3 (id=185):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000002180)=ANY=[@ANYBLOB="07000000000000007111840000000000851000000200000085000000a000000095000000000000009500a50500000000885304e8cfc2a2303a0c47be242955898a9b92fafcec80e3f595b5eb7917f5a55fe71d7145c9cc2c0679ca633d223c8710787c9a97eaaf31537d9424e357571460263a2c1230396f738a56a4155b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

2m12.02713426s ago: executing program 2 (id=186):
unshare(0x20060400)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800)

2m11.828335509s ago: executing program 4 (id=187):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f00005f7000/0x4000)=nil, 0x4000, 0x7, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0xbbe9b68db8b621d2)
mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)

2m11.704843511s ago: executing program 0 (id=188):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0xea6f, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x400)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r6)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x0, 0x0}, 0x10)
socketpair(0x28, 0x6, 0x10, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, 0x0)
timer_create(0x7, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m11.651492763s ago: executing program 3 (id=189):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x80000001)

2m11.468773672s ago: executing program 3 (id=190):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000050000a2fc710bca09a60007000000350a0000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), 0x0, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}], 0x0}, 0x20)
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

2m10.421783665s ago: executing program 0 (id=191):
r0 = socket(0x400000000010, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xb, 0x4, 0x7fff0000}]})
rt_sigpending(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_bond\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x99}, 0x8)
personality(0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x10a83000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
socketpair(0x5, 0x20000000000001, 0x6, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0)
r7 = openat(r6, &(0x7f0000000040)='./file1\x00', 0x111402, 0x31)
write$P9_ROPEN(r6, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x6}, 0xc3}}, 0x18)
preadv2(r7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1, 0x5d7, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000400), &(0x7f00000003c0)=r4}, 0x20)

1m42.313566779s ago: executing program 33 (id=176):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x0, 0x10, 0x6, "8a0b216d32de"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0})

56.851089646s ago: executing program 34 (id=191):
r0 = socket(0x400000000010, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xb, 0x4, 0x7fff0000}]})
rt_sigpending(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_bond\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x99}, 0x8)
personality(0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x10a83000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
socketpair(0x5, 0x20000000000001, 0x6, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0)
r7 = openat(r6, &(0x7f0000000040)='./file1\x00', 0x111402, 0x31)
write$P9_ROPEN(r6, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x6}, 0xc3}}, 0x18)
preadv2(r7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1, 0x5d7, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000400), &(0x7f00000003c0)=r4}, 0x20)

0s ago: executing program 35 (id=186):
unshare(0x20060400)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts.
[   77.229929][ T5599] cgroup: Unknown subsys name 'net'
[   77.367392][ T5599] cgroup: Unknown subsys name 'cpuset'
[   77.371682][ T5599] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   78.834527][ T5599] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   81.556289][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.557928][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.558369][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.559629][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.559962][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.561358][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.561736][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.586285][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.588870][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.589369][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.591645][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.596424][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.605876][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.623915][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.644050][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.661236][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.667198][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.673784][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.695052][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.696653][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.736190][ T4929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   81.737420][ T4929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.738675][ T4929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.740418][ T4929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   81.741526][ T4929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   81.745392][ T4929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.749688][ T4929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   81.750629][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   81.766575][ T4929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.779034][ T4929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.622430][ T4929] Bluetooth: hci2: command tx timeout
[   83.692060][ T4929] Bluetooth: hci1: command tx timeout
[   83.692071][ T5616] Bluetooth: hci0: command tx timeout
[   83.772009][ T5616] Bluetooth: hci3: command tx timeout
[   83.852265][ T5616] Bluetooth: hci5: command tx timeout
[   83.852359][ T5616] Bluetooth: hci4: command tx timeout
[   84.084215][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.084328][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.084720][ T5620] bridge_slave_0: entered allmulticast mode
[   84.086743][ T5620] bridge_slave_0: entered promiscuous mode
[   84.168656][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.168761][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.168886][ T5620] bridge_slave_1: entered allmulticast mode
[   84.170602][ T5620] bridge_slave_1: entered promiscuous mode
[   84.201249][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.201356][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.201463][ T5617] bridge_slave_0: entered allmulticast mode
[   84.204216][ T5617] bridge_slave_0: entered promiscuous mode
[   84.208023][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.208135][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.208271][ T5617] bridge_slave_1: entered allmulticast mode
[   84.210144][ T5617] bridge_slave_1: entered promiscuous mode
[   84.391097][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.391325][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.391510][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.391648][ T5611] bridge_slave_0: entered allmulticast mode
[   84.394409][ T5611] bridge_slave_0: entered promiscuous mode
[   84.398064][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.398178][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.398318][ T5629] bridge_slave_0: entered allmulticast mode
[   84.400781][ T5629] bridge_slave_0: entered promiscuous mode
[   84.408645][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.461194][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.461324][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.461752][ T5611] bridge_slave_1: entered allmulticast mode
[   84.464888][ T5611] bridge_slave_1: entered promiscuous mode
[   84.503117][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.503358][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.503519][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.503625][ T5629] bridge_slave_1: entered allmulticast mode
[   84.505603][ T5629] bridge_slave_1: entered promiscuous mode
[   84.509547][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.512829][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.512941][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.513078][ T5627] bridge_slave_0: entered allmulticast mode
[   84.516089][ T5627] bridge_slave_0: entered promiscuous mode
[   84.541006][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.616301][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.616458][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.616604][ T5627] bridge_slave_1: entered allmulticast mode
[   84.618437][ T5627] bridge_slave_1: entered promiscuous mode
[   84.619888][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.620000][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.620699][ T5610] bridge_slave_0: entered allmulticast mode
[   84.623056][ T5610] bridge_slave_0: entered promiscuous mode
[   84.629216][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.632865][ T5620] team0: Port device team_slave_0 added
[   84.653588][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.657991][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.693571][ T5617] team0: Port device team_slave_0 added
[   84.713108][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.713332][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.713668][ T5610] bridge_slave_1: entered allmulticast mode
[   84.715242][ T5610] bridge_slave_1: entered promiscuous mode
[   84.735830][ T5620] team0: Port device team_slave_1 added
[   84.738391][ T5629] team0: Port device team_slave_0 added
[   84.743317][ T5617] team0: Port device team_slave_1 added
[   84.809572][ T5629] team0: Port device team_slave_1 added
[   84.826920][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.844783][ T5611] team0: Port device team_slave_0 added
[   84.872115][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.872132][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.872160][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.875929][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.878615][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.880750][ T5611] team0: Port device team_slave_1 added
[   84.881714][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.881728][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.881756][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.885664][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.885680][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.885709][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.904694][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.904710][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.904758][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.987474][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.033426][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.033444][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.033475][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.038932][ T5627] team0: Port device team_slave_0 added
[   85.079273][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.079291][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.079322][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.083084][ T5627] team0: Port device team_slave_1 added
[   85.086882][ T5610] team0: Port device team_slave_0 added
[   85.111918][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.111934][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.111964][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.115669][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.115684][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.115714][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.206125][ T5610] team0: Port device team_slave_1 added
[   85.316392][ T5617] hsr_slave_0: entered promiscuous mode
[   85.317611][ T5617] hsr_slave_1: entered promiscuous mode
[   85.322638][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.322654][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.322684][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.335026][ T5620] hsr_slave_0: entered promiscuous mode
[   85.336211][ T5620] hsr_slave_1: entered promiscuous mode
[   85.337536][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   85.337595][ T5620] Cannot create hsr debugfs directory
[   85.339735][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.339750][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.339780][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.423748][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.423768][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.423799][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.453635][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.453651][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.453682][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.594974][ T5611] hsr_slave_0: entered promiscuous mode
[   85.595854][ T5611] hsr_slave_1: entered promiscuous mode
[   85.596439][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   85.596460][ T5611] Cannot create hsr debugfs directory
[   85.674166][ T5629] hsr_slave_0: entered promiscuous mode
[   85.675023][ T5629] hsr_slave_1: entered promiscuous mode
[   85.675852][ T5629] debugfs: 'hsr0' already exists in 'hsr'
[   85.675872][ T5629] Cannot create hsr debugfs directory
[   85.703255][ T4929] Bluetooth: hci2: command tx timeout
[   85.703592][ T5627] hsr_slave_0: entered promiscuous mode
[   85.706484][ T5627] hsr_slave_1: entered promiscuous mode
[   85.708820][ T5627] debugfs: 'hsr0' already exists in 'hsr'
[   85.708841][ T5627] Cannot create hsr debugfs directory
[   85.771994][ T4929] Bluetooth: hci1: command tx timeout
[   85.772337][ T4929] Bluetooth: hci0: command tx timeout
[   85.819171][ T5610] hsr_slave_0: entered promiscuous mode
[   85.820025][ T5610] hsr_slave_1: entered promiscuous mode
[   85.820642][ T5610] debugfs: 'hsr0' already exists in 'hsr'
[   85.820669][ T5610] Cannot create hsr debugfs directory
[   85.852595][ T4929] Bluetooth: hci3: command tx timeout
[   85.932224][ T5616] Bluetooth: hci5: command tx timeout
[   85.932314][ T4929] Bluetooth: hci4: command tx timeout
[   86.017239][   T10] cfg80211: failed to load regulatory.db
[   86.451468][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.463331][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.464231][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.470170][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.471377][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   86.484856][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.506945][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   86.517390][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.568746][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.576114][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.577031][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.584765][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.589364][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.599690][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.619849][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.625295][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.712343][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   86.716326][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.717095][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   86.721224][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.760061][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.766504][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.791647][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.802455][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.844296][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.887528][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.894365][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.909101][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.914756][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.926564][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   86.940775][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.945120][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.970755][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.981298][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.995308][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.995406][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.050957][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.051049][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.119647][ T5629] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   87.125138][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.127595][ T5629] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   87.138370][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.157402][ T5629] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   87.160665][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.196118][ T5629] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   87.199562][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.226922][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.297582][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.303494][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.306244][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.313065][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.338338][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.347355][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.360256][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.361582][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.372607][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.402539][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   87.455739][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.455854][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.499154][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.499265][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.521667][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   87.569964][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.570086][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.611547][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.653413][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.653528][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.707263][ T5627] 8021q: adding VLAN 0 to HW filter on device team0
[   87.756227][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.756312][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.758640][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.758720][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.771106][ T5620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.779213][ T4929] Bluetooth: hci2: command tx timeout
[   87.852671][ T4929] Bluetooth: hci0: command tx timeout
[   87.852710][ T4929] Bluetooth: hci1: command tx timeout
[   87.871566][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.932051][ T5616] Bluetooth: hci3: command tx timeout
[   88.012307][ T5616] Bluetooth: hci4: command tx timeout
[   88.012351][ T5616] Bluetooth: hci5: command tx timeout
[   88.051084][ T5629] 8021q: adding VLAN 0 to HW filter on device team0
[   88.067728][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.156785][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.156899][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.190224][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.190336][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.224580][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   88.297344][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.297482][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.394213][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.394326][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.439684][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.799803][ T5617] veth0_vlan: entered promiscuous mode
[   88.927493][ T5617] veth1_vlan: entered promiscuous mode
[   88.995290][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.204132][ T5617] veth0_macvtap: entered promiscuous mode
[   89.220442][ T5617] veth1_macvtap: entered promiscuous mode
[   89.343292][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.393198][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.477088][ T1044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.578060][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.687994][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.688058][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.690623][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.852169][ T4929] Bluetooth: hci2: command tx timeout
[   89.861479][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.932474][ T4929] Bluetooth: hci1: command tx timeout
[   89.932512][ T4929] Bluetooth: hci0: command tx timeout
[   89.986097][ T3310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.986121][ T3310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.013224][ T5616] Bluetooth: hci3: command tx timeout
[   90.059805][ T5611] veth0_vlan: entered promiscuous mode
[   90.092573][ T5616] Bluetooth: hci5: command tx timeout
[   90.092610][ T5616] Bluetooth: hci4: command tx timeout
[   90.127069][ T5611] veth1_vlan: entered promiscuous mode
[   90.147898][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.158839][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.158859][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.215979][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.276561][ T5620] veth0_vlan: entered promiscuous mode
[   90.315219][ T5627] veth0_vlan: entered promiscuous mode
[   90.321534][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.347884][ T5620] veth1_vlan: entered promiscuous mode
[   90.360463][ T5611] veth0_macvtap: entered promiscuous mode
[   90.388888][ T5627] veth1_vlan: entered promiscuous mode
[   90.401872][ T5611] veth1_macvtap: entered promiscuous mode
[   90.509873][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.555226][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.601283][ T5610] veth0_vlan: entered promiscuous mode
[   90.609122][ T5620] veth0_macvtap: entered promiscuous mode
[   90.642093][ T5620] veth1_macvtap: entered promiscuous mode
[   90.644659][ T5845] loop3: detected capacity change from 0 to 512
[   90.684042][ T1044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.685621][ T5845] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   90.685639][ T5845] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   90.686604][ T1044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.713822][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.715193][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.768921][ T5610] veth1_vlan: entered promiscuous mode
[   90.770380][ T5845] EXT4-fs (loop3): 1 truncate cleaned up
[   90.780925][ T5627] veth0_macvtap: entered promiscuous mode
[   90.785484][ T5845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.795582][ T5845] EXT4-fs (loop3): shut down requested (1)
[   90.798497][ T5627] veth1_macvtap: entered promiscuous mode
[   90.856237][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.857923][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.932075][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.004873][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.032653][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.032707][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.037406][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.039056][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.039075][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.115916][   T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.115970][   T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.267652][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.267677][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.295529][  T109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.299737][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.301486][ T5629] veth0_vlan: entered promiscuous mode
[   91.313853][ T1044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.313924][ T1044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.349301][ T5610] veth0_macvtap: entered promiscuous mode
[   91.442712][ T5610] veth1_macvtap: entered promiscuous mode
[   91.477525][ T5629] veth1_vlan: entered promiscuous mode
[   91.603281][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.603305][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.785767][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.817700][  T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.817724][  T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.836932][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.883476][  T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.883500][  T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.925738][ T5629] veth0_macvtap: entered promiscuous mode
[   91.932957][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.933016][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.933061][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.933104][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.983850][  T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.983875][  T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.991451][ T5629] veth1_macvtap: entered promiscuous mode
[   92.032098][ T5735] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   92.163103][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.181961][ T5735] usb 2-1: Using ep0 maxpacket: 16
[   92.183618][ T5735] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   92.188016][ T5735] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[   92.188044][ T5735] usb 2-1: config 0 has no interface number 0
[   92.188090][ T5735] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[   92.188120][ T5735] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   92.231557][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.256780][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.256812][ T5735] usb 2-1: Product: syz
[   92.256830][ T5735] usb 2-1: Manufacturer: syz
[   92.256848][ T5735] usb 2-1: SerialNumber: syz
[   92.298858][ T5735] usb 2-1: config 0 descriptor??
[   92.300399][ T5856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   92.300561][ T5856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   92.410994][  T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.411027][  T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.523705][ T3376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.524763][ T3376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.524813][ T3376] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.524859][ T3376] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.622360][ T5856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   92.622486][ T5856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   92.688343][  T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.688368][  T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.750719][ T5867] Zero length message leads to an empty skb
[   92.944116][ T5869] Illegal XDP return value 4291452928 on prog  (id 2) dev syz_tun, expect packet loss!
[   92.949820][ T3376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.949871][ T3376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.179462][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.179487][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.411596][ T5873] serio: Serial port ptm0
[   93.593858][ T5774] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   93.751981][ T5774] usb 3-1: Using ep0 maxpacket: 16
[   93.752707][ T5774] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.757415][ T5774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.757442][ T5774] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.759842][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.759869][ T5774] usb 3-1: Product: syz
[   93.759888][ T5774] usb 3-1: Manufacturer: syz
[   93.759906][ T5774] usb 3-1: SerialNumber: syz
[   93.884310][ T5774] usb 3-1: 0:2 : does not exist
[   94.039537][ T5774] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   94.153867][ T5858] loop4: detected capacity change from 0 to 131072
[   94.195595][ T5858] F2FS-fs (loop4): Test dummy encryption mode enabled
[   94.206942][ T5858] F2FS-fs (loop4): invalid crc value
[   94.277651][ T5735] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   95.319585][ T5774] usb 3-1: USB disconnect, device number 2
[   95.584265][ T5858] F2FS-fs (loop4): access invalid blkaddr:0
[   95.584299][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) 
[   95.584328][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[   95.584344][ T5858] Call Trace:
[   95.584354][ T5858]  <TASK>
[   95.584368][ T5858]  dump_stack_lvl+0xe8/0x150
[   95.584412][ T5858]  __f2fs_is_valid_blkaddr+0xe62/0x14f0
[   95.584466][ T5858]  sanity_check_extent_cache+0x1ab/0xa30
[   95.584511][ T5858]  ? srso_alias_return_thunk+0x5/0xfbef5
[   95.584544][ T5858]  ? f2fs_sanity_check_inline_data+0x70/0x740
[   95.584584][ T5858]  f2fs_iget+0x4211/0x6270
[   95.584654][ T5858]  f2fs_fill_super+0x543a/0x7a60
[   95.584741][ T5858]  get_tree_bdev_flags+0x430/0x4f0
[   95.584769][ T5858]  ? __pfx_f2fs_fill_super+0x10/0x10
[   95.584796][ T5858]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   95.584841][ T5858]  ? srso_alias_return_thunk+0x5/0xfbef5
[   95.584877][ T5858]  ? srso_alias_return_thunk+0x5/0xfbef5
[   95.584914][ T5858]  vfs_get_tree+0x92/0x2a0
[   95.584944][ T5858]  do_new_mount+0x319/0xdc0
[   95.584981][ T5858]  ? srso_alias_return_thunk+0x5/0xfbef5
[   95.585024][ T5858]  ? __pfx_do_new_mount+0x10/0x10
[   95.585063][ T5858]  ? srso_alias_return_thunk+0x5/0xfbef5
[   95.585095][ T5858]  ? ns_capable+0x89/0xe0
[   95.585133][ T5858]  ? srso_alias_return_thunk+0x5/0xfbef5
[   95.585164][ T5858]  ? path_mount+0x647/0x1050
[   95.585204][ T5858]  ? srso_alias_return_thunk+0x5/0xfbef5
[   95.585235][ T5858]  ? user_path_at+0xd4/0x160
[   95.585279][ T5858]  __se_sys_mount+0x31d/0x420
[   95.585325][ T5858]  ? __pfx___se_sys_mount+0x10/0x10
[   95.585361][ T5858]  ? srso_alias_return_thunk+0x5/0xfbef5
[   95.585400][ T5858]  ? srso_alias_return_thunk+0x5/0xfbef5
[   95.585432][ T5858]  ? __x64_sys_mount+0x20/0xc0
[   95.585473][ T5858]  do_syscall_64+0x166/0x520
[   95.585502][ T5858]  ? trace_irq_disable+0x3b/0x140
[   95.585530][ T5858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.585565][ T5858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.585592][ T5858] RIP: 0033:0x7fe98999f3ca
[   95.585616][ T5858] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.585637][ T5858] RSP: 002b:00007fe98a829e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   95.585665][ T5858] RAX: ffffffffffffffda RBX: 00007fe98a829ee0 RCX: 00007fe98999f3ca
[   95.585685][ T5858] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 00007fe98a829ea0
[   95.585705][ T5858] RBP: 0000200000000100 R08: 00007fe98a829ee0 R09: 0000000000000010
[   95.585723][ T5858] R10: 0000000000000010 R11: 0000000000000246 R12: 00002000000000c0
[   95.585740][ T5858] R13: 00007fe98a829ea0 R14: 00000000000105eb R15: 0000200000000280
[   95.585781][ T5858]  </TASK>
[   95.675132][ T5858] loop4: lost filesystem error report for type 5 error -117
[   95.675153][ T5858] F2FS-fs (loop4): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix
[   95.675217][ T5858] loop4: lost filesystem error report for type 5 error -117
[   95.675330][ T5858] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   95.675806][ T5858] F2FS-fs (loop4): Failed to read root inode
[   95.942233][ T5735] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71
[   96.454455][ T5735] asix 2-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus
[   96.454967][ T5735] asix 2-1:0.251: probe with driver asix failed with error -5
[   96.489231][ T5735] usb 2-1: USB disconnect, device number 2
[   96.830121][ T5905] FAULT_INJECTION: forcing a failure.
[   96.830121][ T5905] name failslab, interval 1, probability 0, space 0, times 1
[   96.830161][ T5905] CPU: 1 UID: 0 PID: 5905 Comm: syz.5.19 Not tainted syzkaller #0 PREEMPT(full) 
[   96.830190][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[   96.830206][ T5905] Call Trace:
[   96.830216][ T5905]  <TASK>
[   96.830230][ T5905]  dump_stack_lvl+0xe8/0x150
[   96.830275][ T5905]  should_fail_ex+0x410/0x560
[   96.830310][ T5905]  ? alloc_pwq+0xaa6/0xe00
[   96.830345][ T5905]  should_failslab+0xa8/0x100
[   96.830380][ T5905]  ? alloc_pwq+0xaa6/0xe00
[   96.830412][ T5905]  kmem_cache_alloc_node_noprof+0xa1/0x610
[   96.830459][ T5905]  ? alloc_pwq+0xaa6/0xe00
[   96.830495][ T5905]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.830533][ T5905]  alloc_pwq+0xaa6/0xe00
[   96.830582][ T5905]  apply_wqattrs_prepare+0x389/0xdc0
[   96.830621][ T5905]  ? pcpu_alloc_noprof+0x100f/0x1900
[   96.830687][ T5905]  __alloc_workqueue+0x11be/0x1fe0
[   96.830738][ T5905]  alloc_workqueue_noprof+0xe3/0x210
[   96.830766][ T5905]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.830803][ T5905]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[   96.830838][ T5905]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   96.830883][ T5905]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.830921][ T5905]  nci_register_device+0x22c/0xa00
[   96.830966][ T5905]  ? __pfx_nci_register_device+0x10/0x10
[   96.831000][ T5905]  ? __raw_spin_lock_init+0x45/0x100
[   96.831048][ T5905]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.831079][ T5905]  ? __raw_spin_lock_init+0x45/0x100
[   96.831119][ T5905]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.831151][ T5905]  ? __init_waitqueue_head+0xa8/0x150
[   96.831193][ T5905]  virtual_ncidev_open+0x129/0x1a0
[   96.831231][ T5905]  ? __pfx_virtual_ncidev_open+0x10/0x10
[   96.831263][ T5905]  misc_open+0x2d5/0x350
[   96.831308][ T5905]  chrdev_open+0x4d9/0x600
[   96.831342][ T5905]  ? __pfx_chrdev_open+0x10/0x10
[   96.831373][ T5905]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.831405][ T5905]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[   96.831442][ T5905]  ? __pfx_chrdev_open+0x10/0x10
[   96.831473][ T5905]  do_dentry_open+0x816/0x1380
[   96.831520][ T5905]  vfs_open+0x3b/0x340
[   96.831550][ T5905]  ? path_openat+0x1428/0x1d60
[   96.831580][ T5905]  path_openat+0x1443/0x1d60
[   96.831632][ T5905]  do_file_open+0x23e/0x4a0
[   96.831667][ T5905]  ? __pfx_do_file_open+0x10/0x10
[   96.831720][ T5905]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.831752][ T5905]  ? _raw_spin_unlock+0x28/0x50
[   96.831793][ T5905]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.831825][ T5905]  ? alloc_fd+0x651/0x6c0
[   96.831875][ T5905]  do_sys_openat2+0x115/0x200
[   96.831910][ T5905]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.831941][ T5905]  ? __se_sys_futex+0x3a8/0x450
[   96.831980][ T5905]  ? __pfx_do_sys_openat2+0x10/0x10
[   96.832025][ T5905]  ? rcu_is_watching+0x16/0xb0
[   96.832054][ T5905]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.832086][ T5905]  __x64_sys_openat+0x138/0x170
[   96.832124][ T5905]  do_syscall_64+0x166/0x520
[   96.832150][ T5905]  ? trace_irq_disable+0x3b/0x140
[   96.832175][ T5905]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.832206][ T5905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.832233][ T5905] RIP: 0033:0x7fe49e99e159
[   96.832258][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.832279][ T5905] RSP: 002b:00007fe49f8d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   96.832307][ T5905] RAX: ffffffffffffffda RBX: 00007fe49ec25fa0 RCX: 00007fe49e99e159
[   96.832328][ T5905] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c
[   96.832346][ T5905] RBP: 00007fe49ea3503b R08: 0000000000000000 R09: 0000000000000000
[   96.832364][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.832380][ T5905] R13: 00007fe49ec26038 R14: 00007fe49ec25fa0 R15: 00007ffe55232768
[   96.832421][ T5905]  </TASK>
[   96.929691][ T5910] futex_wake_op: syz.0.20 tries to shift op by 144; fix this program
[   97.486446][ T5910] loop0: detected capacity change from 0 to 256
[   97.493749][ T5727] udevd[5727]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.602456][ T5910] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   97.625825][ T5909] exFAT-fs (loop0): valid_size(562949953421322) is greater than size(10)
[   97.640680][   T31] audit: type=1800 audit(1789115710.956:2): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=1048610 res=0 errno=0
[   97.911161][   T31] audit: type=1326 audit(1789115967.287:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b479e159 code=0x7ffc0000
[   97.974538][   T31] audit: type=1326 audit(1789115967.357:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b479e159 code=0x7ffc0000
[   98.739733][   T31] audit: type=1326 audit(1789115968.117:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc5b479e159 code=0x7ffc0000
[   98.739795][   T31] audit: type=1326 audit(1789115968.117:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b479e159 code=0x7ffc0000
[   98.739846][   T31] audit: type=1326 audit(1789115968.117:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b479e159 code=0x7ffc0000
[   99.852202][   T31] audit: type=1326 audit(1789115969.227:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc5b475e98e code=0x7ffc0000
[   99.915217][   T31] audit: type=1326 audit(1789115969.287:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b479e159 code=0x7ffc0000
[   99.915281][   T31] audit: type=1326 audit(1789115969.287:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b479e159 code=0x7ffc0000
[  100.607952][ T5937] loop0: detected capacity change from 0 to 16
[  101.501219][ T5937] erofs (device loop0): mounted with root inode @ nid 36.
[  101.510528][ T5937] erofs (device loop0): compressed inode (nid 89) is invalid in a plain filesystem
[  103.429253][ T5945] loop5: detected capacity change from 0 to 16
[  103.458583][ T5945] erofs (device loop5): invalid ishare xattr prefix id 0
[  104.057807][ T5951] loop4: detected capacity change from 0 to 512
[  105.325091][ T5951] EXT4-fs (loop4): Test dummy encryption mode enabled
[  105.664805][   T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  105.670679][ T5951] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.30: bg 0: block 7: invalid block bitmap
[  105.670715][ T5951] loop4: lost filesystem error report for type 5 error -117
[  105.671954][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  105.671977][    C1] EXT4-fs (loop4): initial error at time 1789115975: ext4_validate_block_bitmap:436
[  105.672005][    C1] EXT4-fs (loop4): last error at time 1789115975: ext4_validate_block_bitmap:436
[  105.696503][ T5951] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  105.696530][ T5951] loop4: lost filesystem error report for type 5 error -117
[  105.724579][ T5951] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.30: corrupted xattr block 95: invalid header
[  105.724671][ T5951] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  105.869689][ T5959] loop3: detected capacity change from 0 to 1024
[  105.986989][ T5951] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117)
[  105.988393][ T5951] EXT4-fs (loop4): 1 orphan inode deleted
[  106.007090][ T5951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.639027][   T25] usb 2-1: Using ep0 maxpacket: 16
[  107.147367][ T5968] loop2: detected capacity change from 0 to 128
[  107.186883][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.210908][ T5959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.245887][   T25] usb 2-1: device descriptor read/all, error -71
[  107.246154][ T5968] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  107.273121][ T5968] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  107.399650][ T5971] loop5: detected capacity change from 0 to 128
[  109.614621][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.658013][ T5988] loop5: detected capacity change from 0 to 128
[  110.452817][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.590222][ T6002] overlayfs: missing 'workdir'
[  110.810835][ T6016] loop2: detected capacity change from 0 to 256
[  110.823090][ T5748] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  110.877901][ T6017] loop4: detected capacity change from 0 to 256
[  110.880806][ T6017] =======================================================
[  110.880806][ T6017] WARNING: The mand mount option has been deprecated and
[  110.880806][ T6017]          and is ignored by this kernel. Remove the mand
[  110.880806][ T6017]          option from the mount to silence this warning.
[  110.880806][ T6017] =======================================================
[  110.945422][ T6017] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  110.999462][ T6017] exFAT-fs (loop4): start_clu is invalid cluster(0x0)
[  111.014871][ T5748] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  111.019049][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.019077][ T5748] usb 6-1: Product: syz
[  111.019096][ T5748] usb 6-1: Manufacturer: syz
[  111.019114][ T5748] usb 6-1: SerialNumber: syz
[  111.061266][ T5748] usb 6-1: config 0 descriptor??
[  111.075445][ T5748] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 002
[  111.494514][ T5748]  (null): failure reading functionality
[  111.499129][   T31] audit: type=1326 audit(1789115980.877:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.56" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  111.500655][   T31] audit: type=1326 audit(1789115980.877:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.56" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  111.507423][   T31] audit: type=1326 audit(1789115980.887:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.56" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  111.508363][   T31] audit: type=1326 audit(1789115980.887:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.56" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  111.508661][   T31] audit: type=1326 audit(1789115980.887:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.56" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  111.511516][   T31] audit: type=1326 audit(1789115980.887:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.56" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  111.511573][   T31] audit: type=1326 audit(1789115980.887:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.56" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  111.512369][   T31] audit: type=1326 audit(1789115980.897:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.56" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  111.513504][   T31] audit: type=1326 audit(1789115980.897:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz.2.56" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  111.783967][ T5748] i2c i2c-1: failure reading functionality
[  111.813006][ T5748] i2c i2c-1: connected i2c-tiny-usb device
[  111.828853][ T5748] usb 6-1: USB disconnect, device number 2
[  111.966745][ T6045] overlayfs: missing 'workdir'
[  111.989671][ T6039] loop2: detected capacity change from 0 to 512
[  112.017424][ T6039] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  112.060633][ T6039] EXT4-fs (loop2): 1 truncate cleaned up
[  112.115629][ T6039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.230184][ T6052] loop4: detected capacity change from 0 to 256
[  112.405592][ T6039] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.454832][ T6054] loop3: detected capacity change from 0 to 256
[  112.952219][ T6054] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  112.952434][ T6054] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  113.136894][ T6054] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  113.137791][ T6054] exFAT-fs (loop3): failed to load alloc-bitmap
[  113.137805][ T6054] exFAT-fs (loop3): failed to recognize exfat type
[  113.265031][ T6038] loop1: detected capacity change from 0 to 40427
[  113.286041][ T6038] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  113.286068][ T6038] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  113.292206][ T6038] F2FS-fs (loop1): invalid crc value
[  113.923135][ T6038] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  113.966138][ T6038] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  113.966293][ T6038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  114.348877][ T6069] loop0: detected capacity change from 0 to 256
[  114.388398][ T6069] FAT-fs (loop0): data area starts beyond volume (274 > 64)
[  114.388426][ T6069] FAT-fs (loop0): Can't find a valid FAT filesystem
[  116.206357][ T6090] overlayfs: missing 'workdir'
[  116.291964][  T981] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  117.380737][  T981] usb 3-1: Using ep0 maxpacket: 16
[  117.406682][  T981] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  117.418300][  T981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.418328][  T981] usb 3-1: config 0 has no interfaces?
[  117.425404][  T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.425432][  T981] usb 3-1: Product: syz
[  117.425450][  T981] usb 3-1: Manufacturer: syz
[  117.425468][  T981] usb 3-1: SerialNumber: syz
[  118.188820][ T6108] binder: 6107:6108 ioctl c0306201 0 returned -14
[  118.394843][  T981] usb 3-1: config 0 descriptor??
[  118.399037][  T981] usb 3-1: can't set config #0, error -71
[  118.409622][  T981] usb 3-1: USB disconnect, device number 3
[  118.459608][ T5848] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  119.940865][ T5848] usb 4-1: device descriptor read/all, error -71
[  120.041801][   T30] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  120.194032][   T30] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  120.195453][   T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.195488][   T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.195529][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.247237][   T30] usb 1-1: config 0 descriptor??
[  120.717813][   T30] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[  120.765218][   T30] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input6
[  121.027372][   T30] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  121.059496][   T30] usb 1-1: USB disconnect, device number 2
[  121.453005][ T6130] syz.1.76 (6130) used greatest stack depth: 18088 bytes left
[  121.483956][ T6131] fido_id[6131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  122.051536][ T6144] loop0: detected capacity change from 0 to 128
[  122.514153][ T6149] binder: 6148:6149 ioctl c0306201 0 returned -14
[  123.379089][ T6153] loop4: detected capacity change from 0 to 512
[  123.400938][ T6153] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  123.426605][ T6153] EXT4-fs (loop4): invalid journal inode
[  123.426706][ T6153] EXT4-fs (loop4): can't get journal size
[  123.476034][ T6153] EXT4-fs (loop4): 1 truncate cleaned up
[  123.544684][ T6153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.635575][ T6161] loop0: detected capacity change from 0 to 256
[  123.693581][ T6161] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  123.745711][ T6158] loop2: detected capacity change from 0 to 4096
[  123.755452][ T6158] EXT4-fs: Ignoring removed orlov option
[  123.757742][   T31] audit: type=1800 audit(1789115993.138:20): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.98" name="file1" dev="loop0" ino=1048617 res=0 errno=0
[  123.768540][ T6158] EXT4-fs (loop2): Test dummy encryption mode enabled
[  123.818780][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.879713][ T6158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.921582][  T981] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  124.252284][  T981] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  124.257328][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.257359][  T981] usb 2-1: Product: syz
[  124.257377][  T981] usb 2-1: Manufacturer: syz
[  124.257396][  T981] usb 2-1: SerialNumber: syz
[  125.442123][  T981] usb 2-1: config 0 descriptor??
[  125.443740][ T6177] loop5: detected capacity change from 0 to 4096
[  125.444826][ T6177] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.447324][ T6177] EXT4-fs (loop5): Test dummy encryption mode enabled
[  126.422471][  T981] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 005
[  126.471843][ T6177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.289809][  T981]  (null): failure reading functionality
[  127.323597][   T30] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  127.662395][ T6183] loop0: detected capacity change from 0 to 512
[  127.664135][  T981] i2c i2c-1: failure reading functionality
[  127.702265][  T981] i2c i2c-1: connected i2c-tiny-usb device
[  127.704023][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.762889][  T981] usb 2-1: USB disconnect, device number 5
[  127.792410][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.868275][ T6188] binder: 6186:6188 ioctl c0306201 0 returned -14
[  127.895778][ T6183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.895876][ T6183] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.981182][ T6183] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.105: corrupted xattr block 33: invalid ea_ino
[  128.217659][ T6195] loop4: detected capacity change from 0 to 512
[  128.299419][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.357345][ T6195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.357455][ T6195] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.062428][ T6195] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.101834][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  132.101913][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  132.156601][ T6214] loop5: detected capacity change from 0 to 256
[  132.164299][ T6214] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  132.164317][ T6214] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  132.209920][ T6214] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  132.210594][ T6214] exFAT-fs (loop5): failed to load alloc-bitmap
[  132.210608][ T6214] exFAT-fs (loop5): failed to recognize exfat type
[  132.584923][   T30] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  133.032265][   T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  133.574758][   T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  133.574799][   T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  133.574844][   T30] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  133.574877][   T30] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  133.641211][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.641242][   T30] usb 4-1: Product: syz
[  133.641260][   T30] usb 4-1: Manufacturer: syz
[  133.641279][   T30] usb 4-1: SerialNumber: syz
[  133.755334][ T6217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  133.994868][ T6217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  133.995024][ T6217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  134.354202][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.355989][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.427146][   T30] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[  134.427256][   T30] cdc_ncm 4-1:1.0: bind() failure
[  134.516072][   T30] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  134.516125][   T30] cdc_ncm 4-1:1.1: bind() failure
[  134.590832][   T30] usb 4-1: USB disconnect, device number 4
[  134.761501][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.767518][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.135868][  T966] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.394837][  T966] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.633116][  T966] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.671766][  T966] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.954287][ T6244] loop3: detected capacity change from 0 to 512
[  136.012561][ T6244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.012694][ T6244] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.025766][ T6244] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.591115][ T6242] binder: 6241:6242 ioctl c0306201 2000000007c0 returned -14
[  137.340875][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  138.964315][ T6264] FAULT_INJECTION: forcing a failure.
[  138.964315][ T6264] name failslab, interval 1, probability 0, space 0, times 0
[  138.964353][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT(full) 
[  138.964383][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  138.964399][ T6264] Call Trace:
[  138.964409][ T6264]  <TASK>
[  138.964420][ T6264]  dump_stack_lvl+0xe8/0x150
[  138.964465][ T6264]  should_fail_ex+0x410/0x560
[  138.964499][ T6264]  ? __pfx_sock_alloc_inode+0x10/0x10
[  138.964544][ T6264]  should_failslab+0xa8/0x100
[  138.964580][ T6264]  ? __pfx_sock_alloc_inode+0x10/0x10
[  138.964631][ T6264]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  138.964677][ T6264]  ? sock_alloc_inode+0x2c/0x1a0
[  138.964700][ T6264]  ? sock_alloc_inode+0x2c/0x1a0
[  138.964726][ T6264]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.964763][ T6264]  ? __pfx_sock_alloc_inode+0x10/0x10
[  138.964805][ T6264]  sock_alloc_inode+0x2c/0x1a0
[  138.964831][ T6264]  ? __pfx_sock_alloc_inode+0x10/0x10
[  138.964872][ T6264]  alloc_inode+0x6a/0x1b0
[  138.964910][ T6264]  __sock_create+0x12d/0x9d0
[  138.964950][ T6264]  __sys_socket+0xd6/0x1b0
[  138.964987][ T6264]  __x64_sys_socket+0x7a/0x90
[  138.965016][ T6264]  do_syscall_64+0x166/0x520
[  138.965045][ T6264]  ? trace_irq_disable+0x3b/0x140
[  138.965076][ T6264]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.965112][ T6264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.965142][ T6264] RIP: 0033:0x7fb46979e159
[  138.965166][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.965187][ T6264] RSP: 002b:00007fb46a594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  138.965215][ T6264] RAX: ffffffffffffffda RBX: 00007fb469a25fa0 RCX: 00007fb46979e159
[  138.965236][ T6264] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  138.965252][ T6264] RBP: 00007fb46983503b R08: 0000000000000000 R09: 0000000000000000
[  138.965269][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.965286][ T6264] R13: 00007fb469a26038 R14: 00007fb469a25fa0 R15: 00007ffd2bb901a8
[  138.965327][ T6264]  </TASK>
[  138.965489][ T6264] socket: no more sockets
[  139.168328][ T6272] binder: 6270:6272 ioctl c018620c 200000000000 returned -22
[  139.694863][ T6275] loop4: detected capacity change from 0 to 512
[  139.927976][ T6275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.719539][ T6280] loop3: detected capacity change from 0 to 40427
[  140.721960][ T6280] f2fs: Unknown parameter 'noinlin*šxattr'
[  142.677302][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.093888][ T6294] loop3: detected capacity change from 0 to 256
[  143.107242][ T6294] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  143.107260][ T6294] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  143.136652][ T6294] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  143.149251][ T6294] exFAT-fs (loop3): failed to load alloc-bitmap
[  143.149267][ T6294] exFAT-fs (loop3): failed to recognize exfat type
[  145.268198][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  145.278861][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  145.280135][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  145.298868][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  145.307863][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.458761][ T6319] loop1: detected capacity change from 0 to 256
[  146.480098][ T6319] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  146.480117][ T6319] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  146.526118][ T6319] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  146.529473][ T6319] exFAT-fs (loop1): failed to load alloc-bitmap
[  146.529487][ T6319] exFAT-fs (loop1): failed to recognize exfat type
[  146.902161][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.904246][ T6325] 8021q: adding VLAN 0 to HW filter on device team0
[  146.908987][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.610700][ T4929] Bluetooth: hci6: command tx timeout
[  148.729176][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.732105][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.739266][ T6325] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  148.903687][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.903800][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.906353][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.906458][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.037867][ T6330] FAULT_INJECTION: forcing a failure.
[  149.037867][ T6330] name failslab, interval 1, probability 0, space 0, times 0
[  149.037908][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.2.147 Not tainted syzkaller #0 PREEMPT(full) 
[  149.037937][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  149.037954][ T6330] Call Trace:
[  149.037964][ T6330]  <TASK>
[  149.037976][ T6330]  dump_stack_lvl+0xe8/0x150
[  149.038021][ T6330]  should_fail_ex+0x410/0x560
[  149.038056][ T6330]  ? __pfx_sock_alloc_inode+0x10/0x10
[  149.038102][ T6330]  should_failslab+0xa8/0x100
[  149.038139][ T6330]  ? __pfx_sock_alloc_inode+0x10/0x10
[  149.038181][ T6330]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  149.038227][ T6330]  ? sock_alloc_inode+0x2c/0x1a0
[  149.038251][ T6330]  ? sock_alloc_inode+0x2c/0x1a0
[  149.038277][ T6330]  ? srso_alias_return_thunk+0x5/0xfbef5
[  149.038314][ T6330]  ? __pfx_sock_alloc_inode+0x10/0x10
[  149.038357][ T6330]  sock_alloc_inode+0x2c/0x1a0
[  149.038383][ T6330]  ? __pfx_sock_alloc_inode+0x10/0x10
[  149.038426][ T6330]  alloc_inode+0x6a/0x1b0
[  149.038464][ T6330]  __sock_create+0x12d/0x9d0
[  149.038504][ T6330]  __sys_socket+0xd6/0x1b0
[  149.038538][ T6330]  __x64_sys_socket+0x7a/0x90
[  149.038568][ T6330]  do_syscall_64+0x166/0x520
[  149.038605][ T6330]  ? trace_irq_disable+0x3b/0x140
[  149.038633][ T6330]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.038668][ T6330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.038696][ T6330] RIP: 0033:0x7fc8d879e159
[  149.038720][ T6330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.038741][ T6330] RSP: 002b:00007fc8d958f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  149.038769][ T6330] RAX: ffffffffffffffda RBX: 00007fc8d8a25fa0 RCX: 00007fc8d879e159
[  149.038790][ T6330] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  149.038806][ T6330] RBP: 00007fc8d883503b R08: 0000000000000000 R09: 0000000000000000
[  149.038823][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.038840][ T6330] R13: 00007fc8d8a26038 R14: 00007fc8d8a25fa0 R15: 00007ffc686f9d78
[  149.038882][ T6330]  </TASK>
[  149.038894][ T6330] socket: no more sockets
[  149.398863][ T6337] loop1: detected capacity change from 0 to 16
[  149.443757][ T6337] erofs (device loop1): mounted with root inode @ nid 36.
[  149.491837][ T6337] erofs (device loop1): readahead error at folio 2 @ nid 89
[  149.545856][ T6337] syz.1.148: attempt to access beyond end of device
[  149.545856][ T6337] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  149.616268][ T6337] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  149.616311][ T6337] erofs (device loop1): read error -117 @ 0 of nid 89
[  149.616765][   T31] audit: type=1800 audit(1789116018.999:21): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.148" name="file2" dev="loop1" ino=89 res=0 errno=0
[  150.654260][ T4929] Bluetooth: hci6: command tx timeout
[  150.862708][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.869914][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.870138][ T6301] bridge_slave_0: entered allmulticast mode
[  150.910696][ T6301] bridge_slave_0: entered promiscuous mode
[  150.922383][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.924080][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.924229][ T6301] bridge_slave_1: entered allmulticast mode
[  150.935703][ T6301] bridge_slave_1: entered promiscuous mode
[  151.125500][ T6301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.235879][ T6301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.422226][ T6301] team0: Port device team_slave_0 added
[  151.441107][ T6301] team0: Port device team_slave_1 added
[  152.195585][ T6369] loop3: detected capacity change from 0 to 256
[  152.260840][ T6348] workqueue: Failed to create a rescuer kthread for wq "dio/fuse": -EINTR
[  152.404363][ T6369] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.404387][ T6369] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  152.472217][ T5911] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.528435][  T981] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  152.552173][ T6369] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  152.552985][ T6369] exFAT-fs (loop3): failed to load alloc-bitmap
[  152.553000][ T6369] exFAT-fs (loop3): failed to recognize exfat type
[  152.614218][ T6301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.614239][ T6301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.614272][ T6301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.616407][ T6301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.616423][ T6301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.616453][ T6301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.909717][ T4929] Bluetooth: hci6: command tx timeout
[  153.652568][  T981] usb 3-1: unable to get BOS descriptor or descriptor too short
[  153.652624][  T981] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  153.655623][  T981] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.655649][  T981] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.663791][  T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.663820][  T981] usb 3-1: Product: syz
[  153.663838][  T981] usb 3-1: Manufacturer: syz
[  153.663857][  T981] usb 3-1: SerialNumber: syz
[  154.639130][ T6382] loop0: detected capacity change from 0 to 1024
[  154.643214][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  154.643539][  T981] usb 3-1: can't set config #1, error -32
[  154.672994][ T5755] usb 3-1: USB disconnect, device number 4
[  154.714722][ T6382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.003792][ T4929] Bluetooth: hci6: command tx timeout
[  156.027256][   T31] audit: type=1326 audit(1789116025.409:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  156.035472][   T31] audit: type=1326 audit(1789116025.409:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  156.038401][   T31] audit: type=1326 audit(1789116025.419:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d879e159 code=0x7ffc0000
[  156.073280][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  156.900774][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  158.968756][ T5911] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.136829][ T6301] hsr_slave_0: entered promiscuous mode
[  159.154870][ T6301] hsr_slave_1: entered promiscuous mode
[  159.156385][ T6301] debugfs: 'hsr0' already exists in 'hsr'
[  159.156406][ T6301] Cannot create hsr debugfs directory
[  159.310205][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  159.460250][    T9] usb 4-1: Using ep0 maxpacket: 8
[  159.463592][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  159.496270][    T9] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  159.496308][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  159.496346][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.596987][    T9] usb 4-1: config 0 descriptor??
[  159.631352][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.786484][ T5911] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.856398][ T6395] loop3: detected capacity change from 0 to 2048
[  160.102130][ T6413] loop1: detected capacity change from 0 to 1024
[  160.147116][ T6413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.163983][ T6395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00ff07000000 r/w without journal. Quota mode: none.
[  160.164084][ T6395] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.364959][ T5911] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.542197][ T6425] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.160: bg 0: block 345: padding at end of block bitmap is not set
[  160.543125][ T6425] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 117
[  160.543158][ T6425] EXT4-fs (loop3): This should not happen!! Data will be lost
[  160.543158][ T6425] 
[  160.722579][ T6424] loop2: detected capacity change from 0 to 512
[  161.515328][    T9] logitech-djreceiver 0003:046D:C532.0002: collection stack underflow
[  161.515360][    T9] logitech-djreceiver 0003:046D:C532.0002: item 0 2 0 12 parsing failed
[  161.519140][    T9] logitech-djreceiver 0003:046D:C532.0002: logi_dj_probe: parse failed
[  161.519221][    T9] logitech-djreceiver 0003:046D:C532.0002: probe with driver logitech-djreceiver failed with error -22
[  161.616185][ T6424] FAT-fs (loop2): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1)
[  161.668185][    T9] usb 4-1: USB disconnect, device number 5
[  162.576647][ T5953] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[  162.576686][ T5953] EXT4-fs (loop3): This should not happen!! Data will be lost
[  162.576686][ T5953] 
[  162.576704][ T5953] EXT4-fs (loop3): Total free blocks count 0
[  162.576721][ T5953] EXT4-fs (loop3): Free/Dirty block details
[  162.583438][ T5953] EXT4-fs (loop3): free_blocks=0
[  162.583473][ T5953] EXT4-fs (loop3): dirty_blocks=32
[  162.583489][ T5953] EXT4-fs (loop3): Block reservation details
[  162.587148][ T6433] loop0: detected capacity change from 0 to 512
[  162.587591][ T5617] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[  162.614918][ T6433] msdos: Bad value for 'errors'
[  162.731670][ T6433] syz.0.173 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  164.721827][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.421905][ T6435] loop2: detected capacity change from 0 to 512
[  165.427810][ T6435] EXT4-fs: Ignoring removed nobh option
[  165.839536][ T6435] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  165.854489][ T6435] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.171: attempt to clear invalid blocks 1 len 1
[  165.854526][ T6435] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  165.856041][ T6435] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  165.857585][ T6435] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.171: invalid indirect mapped block 1819239214 (level 0)
[  165.857625][ T6435] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  165.858054][ T6435] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.171: invalid indirect mapped block 1819239214 (level 1)
[  165.858091][ T6435] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  165.859460][    C0] EXT4-fs (loop2): error count since last fsck: 4
[  165.859481][    C0] EXT4-fs (loop2): initial error at time 1789116035: ext4_clear_blocks:876: inode 13
[  165.859828][    C0] EXT4-fs (loop2): last error at time 1789116035: ext4_free_branches:1023: inode 13
[  165.897581][ T6435] EXT4-fs (loop2): 1 truncate cleaned up
[  165.899697][ T6435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.905438][ T6435] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.084491][ T5911] bridge_slave_1: left allmulticast mode
[  171.084536][ T5911] bridge_slave_1: left promiscuous mode
[  171.085423][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.155358][ T5911] bridge_slave_0: left allmulticast mode
[  171.155389][ T5911] bridge_slave_0: left promiscuous mode
[  171.171807][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.407737][ T6494] xt_CONNSECMARK: invalid mode: 66
[  175.223193][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  175.297341][   T30] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  176.792537][   T30] usb 2-1: Using ep0 maxpacket: 16
[  181.912164][   T30] usb 2-1: device descriptor read/all, error -110
[  183.488039][   T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  185.790478][   T30] usb 2-1: device descriptor read/64, error -32
[  186.056117][   T30] usb usb2-port1: attempt power cycle
[  188.922612][   T30] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  189.152276][   T30] usb 2-1: device descriptor read/8, error -32
[  190.551529][   T30] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  191.037332][   T30] usb 2-1: device descriptor read/8, error -32
[  191.565489][   T30] usb usb2-port1: unable to enumerate USB device
[  193.650622][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  193.651840][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  205.949447][ T6502] Bluetooth: hci3: command 0x0406 tx timeout
[  207.802657][ T5616] Bluetooth: hci1: command 0x0406 tx timeout
[  207.803283][ T5616] Bluetooth: hci4: command 0x0406 tx timeout
[  208.032499][ T4929] Bluetooth: hci2: command 0x0406 tx timeout
[  208.033099][ T4929] Bluetooth: hci0: command 0x0406 tx timeout
[  211.675961][    C0] sched: DL replenish lagged too much
[  255.378826][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  255.417734][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  272.407358][   T52] Bluetooth: hci6: command 0x0406 tx timeout
[  275.249984][ T5911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.996489][ T5911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.105253][ T5911] bond0 (unregistering): Released all slaves
[  316.484108][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  316.504287][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  322.843410][   T32] INFO: task kworker/0:0:9 blocked for more than 143 seconds.
[  322.843492][   T32]       Not tainted syzkaller #0
[  322.843562][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  322.843636][   T32] task:kworker/0:0     state:D stack:22248 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00080000
[  322.843888][   T32] Workqueue: events switchdev_deferred_process_work
[  322.844177][   T32] Call Trace:
[  322.844287][   T32]  <TASK>
[  323.068203][   T32]  __schedule+0x17db/0x58f0
[  323.068570][   T32]  ? update_protect_slice+0x128/0x210
[  323.069459][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.231638][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.232463][   T32]  ? do_raw_spin_unlock+0xf5/0x200
[  323.232955][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.317668][   T32]  ? __pfx___schedule+0x10/0x10
[  323.318650][   T32]  ? schedule+0x90/0x2b0
[  323.396395][   T32]  schedule+0x164/0x2b0
[  323.396772][   T32]  schedule_preempt_disabled+0x13/0x30
[  323.396988][   T32]  __mutex_lock+0x7c1/0x1550
[  323.504347][   T32]  ? __mutex_lock+0x5d4/0x1550
[  323.505233][   T32]  ? switchdev_deferred_process_work+0xe/0x20
[  323.505504][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  323.594860][   T32]  ? lock_acquire+0x115/0x350
[  323.596047][   T32]  ? rcu_is_watching+0x16/0xb0
[  323.688028][   T32]  ? process_scheduled_works+0x97a/0x1630
[  323.688584][   T32]  switchdev_deferred_process_work+0xe/0x20
[  323.688824][   T32]  process_scheduled_works+0xc3d/0x1630
[  323.688976][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.916976][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  323.918175][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.918325][   T32]  ? assign_work+0x3cf/0x5d0
[  323.919760][   T32]  worker_thread+0xa47/0xfb0
[  324.036429][   T32]  kthread+0x38b/0x480
[  324.036777][   T32]  ? __pfx_worker_thread+0x10/0x10
[  324.036969][   T32]  ? __pfx_kthread+0x10/0x10
[  324.037643][   T32]  ret_from_fork+0x514/0xb70
[  324.267577][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  324.267788][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  324.267930][   T32]  ? __switch_to+0xc89/0x1420
[  324.455416][   T32]  ? __pfx_kthread+0x10/0x10
[  324.455744][   T32]  ret_from_fork_asm+0x1a/0x30
[  324.539157][   T32]  </TASK>
[  324.539790][   T32] INFO: task kworker/1:2:1213 blocked for more than 144 seconds.
[  324.539862][   T32]       Not tainted syzkaller #0
[  324.539931][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  324.540004][   T32] task:kworker/1:2     state:D stack:23400 pid:1213  tgid:1213  ppid:2      task_flags:0x4208060 flags:0x00080000
[  324.871244][   T32] Workqueue: events netdev_work_proc
[  324.871552][   T32] Call Trace:
[  324.871666][   T32]  <TASK>
[  324.872414][   T32]  __schedule+0x17db/0x58f0
[  325.130941][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  325.131339][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.132005][   T32]  ? __pfx___schedule+0x10/0x10
[  325.132272][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.257682][   T32]  ? schedule+0x90/0x2b0
[  325.258306][   T32]  schedule+0x164/0x2b0
[  325.259001][   T32]  schedule_preempt_disabled+0x13/0x30
[  325.259092][   T32]  __mutex_lock+0x7c1/0x1550
[  325.259214][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.401570][   T32]  ? __mutex_lock+0x5d4/0x1550
[  325.402343][   T32]  ? netdev_work_proc+0x6f/0x770
[  325.503302][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  325.503571][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.504171][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.504721][   T32]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  325.604264][   T32]  netdev_work_proc+0x6f/0x770
[  325.604743][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.605173][   T32]  ? __pfx_netdev_work_proc+0x10/0x10
[  325.605511][   T32]  ? rcu_is_watching+0x16/0xb0
[  325.738188][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.738506][   T32]  ? process_scheduled_works+0x97a/0x1630
[  325.738697][   T32]  process_scheduled_works+0xc3d/0x1630
[  325.738963][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.988418][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  325.989451][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  325.989521][   T32]  ? assign_work+0x3cf/0x5d0
[  326.131989][   T32]  worker_thread+0xa47/0xfb0
[  326.132658][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  326.217985][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  326.218269][   T32]  ? __kthread_parkme+0x71/0x1f0
[  326.323652][   T32]  kthread+0x38b/0x480
[  326.323990][   T32]  ? __pfx_worker_thread+0x10/0x10
[  326.324092][   T32]  ? __pfx_kthread+0x10/0x10
[  326.324470][   T32]  ret_from_fork+0x514/0xb70
[  326.492152][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  326.492529][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  326.492690][   T32]  ? __switch_to+0xc89/0x1420
[  326.493478][   T32]  ? __pfx_kthread+0x10/0x10
[  326.626523][   T32]  ret_from_fork_asm+0x1a/0x30
[  326.828167][   T32]  </TASK>
[  326.828468][   T32] INFO: task kworker/u8:9:3310 blocked for more than 147 seconds.
[  326.828564][   T32]       Not tainted syzkaller #0
[  326.828659][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  326.828760][   T32] task:kworker/u8:9    state:D stack:24224 pid:3310  tgid:3310  ppid:2      task_flags:0x4208060 flags:0x00080000
[  326.829079][   T32] Workqueue: ipv6_addrconf addrconf_verify_work
[  327.025523][   T32] Call Trace:
[  327.025661][   T32]  <TASK>
[  327.026175][   T32]  __schedule+0x17db/0x58f0
[  327.026414][   T32]  ? trace_event_buffer_commit+0x258/0x7a0
[  327.158610][   T32]  ? trace_event_raw_event_lock+0x1c7/0x280
[  327.556474][   T32]  ? __pfx___schedule+0x10/0x10
[  327.557065][   T32]  ? schedule+0x90/0x2b0
[  327.557571][   T32]  ? schedule+0x90/0x2b0
[  327.558442][   T32]  schedule+0x164/0x2b0
[  327.558722][   T32]  schedule_preempt_disabled+0x13/0x30
[  327.558889][   T32]  __mutex_lock+0x7c1/0x1550
[  327.559759][   T32]  ? __mutex_lock+0x5d4/0x1550
[  327.560605][   T32]  ? addrconf_verify_work+0x19/0x30
[  327.561298][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  327.562499][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.562886][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.563041][   T32]  ? rcu_is_watching+0x16/0xb0
[  327.563429][   T32]  ? process_scheduled_works+0x97a/0x1630
[  327.563932][   T32]  addrconf_verify_work+0x19/0x30
[  327.564153][   T32]  process_scheduled_works+0xc3d/0x1630
[  327.564326][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.566850][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  327.567406][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.567592][   T32]  ? assign_work+0x3cf/0x5d0
[  327.568430][   T32]  worker_thread+0xa47/0xfb0
[  327.956796][   T32]  kthread+0x38b/0x480
[  327.957238][   T32]  ? __pfx_worker_thread+0x10/0x10
[  327.957470][   T32]  ? __pfx_kthread+0x10/0x10
[  328.057809][   T32]  ret_from_fork+0x514/0xb70
[  328.058189][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  328.058563][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.058766][   T32]  ? __switch_to+0xc89/0x1420
[  328.235533][   T32]  ? __pfx_kthread+0x10/0x10
[  328.236116][   T32]  ret_from_fork_asm+0x1a/0x30
[  328.238173][   T32]  </TASK>
[  328.238433][   T32] INFO: task kworker/u8:18:5953 blocked for more than 148 seconds.
[  328.238517][   T32]       Not tainted syzkaller #0
[  328.238599][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  328.238685][   T32] task:kworker/u8:18   state:D stack:23872 pid:5953  tgid:5953  ppid:2      task_flags:0x4208060 flags:0x00080000
[  328.238967][   T32] Workqueue: events_unbound linkwatch_event
[  328.239293][   T32] Call Trace:
[  328.239423][   T32]  <TASK>
[  328.240024][   T32]  __schedule+0x17db/0x58f0
[  328.772823][   T32]  ? stack_depot_save_flags+0x33/0x7f0
[  328.853966][   T32]  ? __lock_acquire+0x747/0x2de0
[  328.854826][   T32]  ? __pfx___schedule+0x10/0x10
[  328.947969][   T32]  ? schedule+0x90/0x2b0
[  328.948385][   T32]  schedule+0x164/0x2b0
[  329.051393][   T32]  schedule_preempt_disabled+0x13/0x30
[  329.051722][   T32]  __mutex_lock+0x7c1/0x1550
[  329.052231][   T32]  ? __mutex_lock+0x5d4/0x1550
[  329.139932][   T32]  ? linkwatch_event+0xe/0x60
[  329.291650][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  329.291833][   T32]  ? lock_acquire+0x115/0x350
[  329.293813][   T32]  ? rcu_is_watching+0x16/0xb0
[  329.294403][   T32]  ? process_scheduled_works+0x97a/0x1630
[  329.294570][   T32]  linkwatch_event+0xe/0x60
[  329.294719][   T32]  process_scheduled_works+0xc3d/0x1630
[  329.295036][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  329.297439][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  329.298292][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  329.298537][   T32]  ? assign_work+0x3cf/0x5d0
[  329.299115][   T32]  worker_thread+0xa47/0xfb0
[  329.763982][   T32]  kthread+0x38b/0x480
[  329.764280][   T32]  ? __pfx_worker_thread+0x10/0x10
[  329.764453][   T32]  ? __pfx_kthread+0x10/0x10
[  329.765060][   T32]  ret_from_fork+0x514/0xb70
[  329.868864][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  329.869023][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  329.869142][   T32]  ? __switch_to+0xc89/0x1420
[  329.966297][   T32]  ? __pfx_kthread+0x10/0x10
[  329.966538][   T32]  ret_from_fork_asm+0x1a/0x30
[  330.081837][   T32]  </TASK>
[  330.345012][   T32] INFO: task syz.2.186:6480 blocked for more than 150 seconds.
[  330.345079][   T32]       Not tainted syzkaller #0
[  330.345140][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  330.345205][   T32] task:syz.2.186       state:D stack:25392 pid:6480  tgid:6479  ppid:5610   task_flags:0x400140 flags:0x00080002
[  330.345439][   T32] Call Trace:
[  330.345531][   T32]  <TASK>
[  330.346143][   T32]  __schedule+0x17db/0x58f0
[  330.557922][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  330.558577][   T32]  ? __pfx___schedule+0x10/0x10
[  330.638351][   T32]  ? schedule+0x90/0x2b0
[  330.833080][   T32]  schedule+0x164/0x2b0
[  330.834071][   T32]  schedule_preempt_disabled+0x13/0x30
[  330.834188][   T32]  __mutex_lock+0x7c1/0x1550
[  330.898861][   T32]  ? __mutex_lock+0x5d4/0x1550
[  330.899400][   T32]  ? rtnetlink_rcv_msg+0x767/0xc00
[  330.976343][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  330.976577][   T32]  ? lock_acquire+0x115/0x350
[  330.977287][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.072772][   T32]  rtnetlink_rcv_msg+0x767/0xc00
[  331.073365][   T32]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  331.199203][   T32]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  331.199378][   T32]  ? ref_tracker_free+0x689/0x830
[  331.200175][   T32]  ? __pfx_ref_tracker_free+0x10/0x10
[  331.200415][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.200621][   T32]  ? __asan_memcpy+0x40/0x70
[  331.374641][   T32]  ? __skb_clone+0x5c/0x6c0
[  331.375387][   T32]  netlink_rcv_skb+0x226/0x4a0
[  331.376056][   T32]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  331.491741][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  331.570801][   T32]  ? netlink_deliver_tap+0x2e/0x1b0
[  331.571171][   T32]  ? netlink_deliver_tap+0x2e/0x1b0
[  331.571728][   T32]  netlink_unicast+0x7bd/0x940
[  331.649379][   T32]  netlink_sendmsg+0x813/0xb40
[  331.720565][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.923543][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.923725][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  331.923917][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.019084][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  332.019202][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  332.019644][   T32]  ____sys_sendmsg+0x54e/0x850
[  332.113948][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  332.165889][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.166407][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.166602][   T32]  ? import_iovec+0x73/0xa0
[  332.167317][   T32]  ___sys_sendmsg+0x2a5/0x360
[  332.315597][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  332.316282][   T32]  ? futex_wait+0x2a2/0x390
[  332.522536][   T32]  ? __pfx_do_futex+0x10/0x10
[  332.523434][   T32]  __x64_sys_sendmsg+0x1b1/0x290
[  332.523643][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.524087][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  332.524968][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.526153][   T32]  do_syscall_64+0x166/0x520
[  332.526265][   T32]  ? trace_irq_disable+0x3b/0x140
[  332.526380][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.527071][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.527344][   T32] RIP: 0033:0x7fc8d879e159
[  332.527642][   T32] RSP: 002b:00007fc8d958f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  332.527727][   T32] RAX: ffffffffffffffda RBX: 00007fc8d8a25fa0 RCX: 00007fc8d879e159
[  332.527784][   T32] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 000000000000000a
[  332.527846][   T32] RBP: 00007fc8d883503b R08: 0000000000000000 R09: 0000000000000000
[  332.527912][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.527984][   T32] R13: 00007fc8d8a26038 R14: 00007fc8d8a25fa0 R15: 00007ffc686f9d78
[  332.529460][   T32]  </TASK>
[  332.529742][   T32] 
[  332.529742][   T32] Showing all locks held in the system: