last executing test programs:

7m42.947319752s ago: executing program 32 (id=63):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x5}, 0x94)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20)

6m45.351821859s ago: executing program 33 (id=409):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="1f", 0x1, 0xfffffffffffffffe)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_read(r1, 0x2, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x10, &(0x7f0000000080)="116b41319ef13386d7fd40ac5cf9181c")
r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a4", 0x5d, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}})

6m32.372504849s ago: executing program 34 (id=470):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/slab/skbuff_head_cache/failslab\x00', 0x1, 0x0)
write(r1, &(0x7f0000000450)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0)
write(r2, &(0x7f0000000550)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r3, &(0x7f0000000650)='100', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/failslab/times\x00', 0x1, 0x0)
write(r4, &(0x7f0000000750)='2', 0x1)
sendto$inet(r0, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10)

5m59.680208415s ago: executing program 1 (id=587):
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x1, 0xc8, @any, 0x1, 0x40, 0x0, 0x1, 0x4f58, 0x6}}}, 0x71)

5m59.33789196s ago: executing program 1 (id=588):
socket(0x10, 0x4, 0x7)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x100, 0x0)
r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027d000301061002080b0100010c200009040000000101200009240180ff071d00040c2403020403050400ff011c"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1c0)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000580)='./file0/file0\x00', 0x0, &(0x7f0000000040)={[{@grpid}, {@usrjquota}, {@orlov}]}, 0x1, 0xbdb, &(0x7f0000001c00)="$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")
quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000004c0)={0xa363, 0x7, 0x0, 0x3})
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00032e0000002e03"]}, 0x0)

5m59.234289419s ago: executing program 8 (id=589):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
write(r1, 0x0, 0x0)
read(r2, &(0x7f0000004000), 0x2000)

5m58.772817115s ago: executing program 8 (id=591):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000100)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@errors_continue}, {}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$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")
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x40080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x265083, &(0x7f0000000380)={[{@sb={'sb', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0xf37}}, {@data_err_abort}, {@discard}], [{@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}]}, 0x3, 0x589, &(0x7f0000001580)="$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")
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdir(&(0x7f0000000280)='./file1\x00', 0x89)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000004c00)=ANY=[@ANYBLOB="043e7022"], 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2400c800)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x95, {}, {}, @raw32}], 0xffc8)

5m57.326712391s ago: executing program 8 (id=595):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x80142, 0x100)

5m55.560491791s ago: executing program 1 (id=600):
r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f0000000040)=ANY=[@ANYBLOB='f,nonumtail=\",rodir,utf8=1,rodir,uni_xlate=1,nonumtail=0,iocharset=cp865,iocharset=ascii,uni_xlate=0,utf8=1,uni_xlate=1,nonumtail=0,dos1xfloppy,rodir,uni_xlate=1,errors=continue,shortname=winnt,gid=\x00'/214, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0xf5, 0x301, &(0x7f0000000300)="$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")
pread64(r0, &(0x7f0000000200)=""/125, 0x7d, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2b5e)
syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0xac502)

5m54.134224419s ago: executing program 8 (id=605):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)

5m52.64738206s ago: executing program 8 (id=614):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000500)='file net/sctp/', 0xe)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000600)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000600)=0x2, 0x4)
setsockopt(r3, 0x84, 0x7d, &(0x7f0000000700)="0000000001000000", 0x8)
setsockopt(r4, 0x84, 0x7d, &(0x7f0000000700)="0000000001000000", 0x8)
bind(r3, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10)
listen(r3, 0x5)
connect(r4, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000540)={[{@session={'session', 0x3d, 0x18}}, {@mode={'mode', 0x3d, 0xf78}}, {@map_normal}, {@mode={'mode', 0x3d, 0x1}}, {@check_strict}, {@uid}, {@mode={'mode', 0x3d, 0x2}}, {@block={'block', 0x3d, 0x800}}, {}, {@uid}]}, 0x1, 0x388, &(0x7f0000000b40)="$eJzs3e9v2kYcx/GPs0RD7Mm0TVUUpek11VYaMWIblQjlETKGuDN4wkRqHk3VkkpVkSa1j5p/vpMNpskKmC38Gnq/UHuH/c35AMtfHfhsAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWV7Tth1LYdC9fG2m85q9qDNjfdZe6V4xY7uSlfxToaD94aL9n76sfpT8d6zD4bNDFZKioNvvHn1//uPuTvb34+3O6Nkyffx0+/7NYHDzYU3bX7e23w3iKOg02r4J4sjUazX79KIVm1YQ+vFV3Pc7xuv5jX7UMyXvhXHq9arxK1fRZbfdbIR+tvDsV9e2a+ZV5Xe/0Yuj7umrSuxdBGEYdNtpTLI6iTlLdsTfgr7p+42OMW/fDW6qeZ1Mgpx5gty8INd2XcdxXaf2sv7yzLZ3v1pg/4O+irDWta9iQyzw6A08zM4o/ytUoK4u9Vpm4sNTUz1F6kxZP5Ll/59P/ZnbHef/3fGiw/0vqw+U5v+j4bOjafl/Sl9W9/ioT7rVe73RQAPd6MPae7TaR1u+ugoUK1KgjhrpEjNaYlRXTTXZ+kMXaimWUUuBQvmKdaVYffnpHuWpJ18N9RWpJ6OSPL2QkaO66qrKyFdFV4p0qa7aaqqRtvJW79L3vTqjj+MgZ54gd0bQv8//34z2Z/I/Mgs8egMP8znL/wAAAAAAYGtZ6W/syfh/T4/TWisIfXvd3QIAAAAAAAuU/vJ/mBR7Se2xLMb/AAAAAABsGyudY2dJKurJsJbNhOJLAAAAAAAAtkT6+/9RUhST2hNZjP8BAAAAANg2+dfYz42wytnlf831sLweRYyu81tsBaFf8aLw3NEv6VUG0pkGE1vbS6cfnOjpMOppcVgW77dYSKKcyrmjEx2PXkjpWVI8K02IdOeOrCaRAABsu+OcfDw7/+8kudM60fNhxPOD9Gr+uwcTMqtNZgUAYFPk32NnjrvwZKaM/38Yn1JQ0Z/6SwNdq5zONkjPOJjYavHOaQjlnG8Dinfu8FLOGeUX79zoZf7Y6pI/BQAAVus4Jw/Pkf+tcs74v8gphQAAbJTxHeyXWFn3awQAAPeRpQEAAAAAAAAAAAAAAAAAAAAA2HyLm+S3/HmEi698K+lh7RRG7+NGvBwq/7FS+L98gp+tlW1r5mHDW8nBCcBS/R0AAP//Gol2pw==")
close_range(r0, 0xffffffffffffffff, 0x0)

5m49.872706368s ago: executing program 1 (id=626):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)

5m49.67999732s ago: executing program 8 (id=628):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
write(r0, 0x0, 0x0)

5m46.277512437s ago: executing program 35 (id=628):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
write(r0, 0x0, 0x0)

5m46.264452174s ago: executing program 0 (id=632):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000007100000225bd70ff505e4b477a132db767481c66", @ANYRES32=0x0, @ANYBLOB="0c0001800800010027000300100001800c00048008000200110000000c00018005000300020000000c00018005000300040000000c00018008000100400001000c0001800800010017000000"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r4, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36)

5m46.261663786s ago: executing program 1 (id=633):
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
unshare(0x22020400)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x40, 0x6, 0xd}, 0x8, 0x5, 0x107f, 0x0, 0x1, 0x101, 0x0})
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000080))

5m45.180502933s ago: executing program 0 (id=639):
r0 = io_uring_setup(0x6dde, &(0x7f0000000400)={0x0, 0xd612, 0x1, 0x0, 0x28b})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x61, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20)

5m44.948210917s ago: executing program 1 (id=640):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff)
pipe2(&(0x7f0000000200)={<r0=>0x0, <r1=>0x0}, 0x0)
write(r1, &(0x7f0000000240)='functionfs', 0xa)
read(r0, &(0x7f0000000100)=""/11, 0xb)
mount(&(0x7f0000000500)=@filename='usb0\x00', 0x0, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r2, 0x0, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a00)='dummy_udc.0', 0xb)
close(r3)
close(r2)

5m43.97222489s ago: executing program 36 (id=640):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff)
pipe2(&(0x7f0000000200)={<r0=>0x0, <r1=>0x0}, 0x0)
write(r1, &(0x7f0000000240)='functionfs', 0xa)
read(r0, &(0x7f0000000100)=""/11, 0xb)
mount(&(0x7f0000000500)=@filename='usb0\x00', 0x0, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r2, 0x0, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a00)='dummy_udc.0', 0xb)
close(r3)
close(r2)

5m43.955789934s ago: executing program 0 (id=642):
r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x4255, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0xd4af48e9738743eb}], 0x1)

5m43.72821851s ago: executing program 0 (id=644):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed)
rmdir(&(0x7f0000000000)='./file0\x00')
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)

5m41.227279466s ago: executing program 0 (id=650):
r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000340)={0x2, 0x4, 0x1})

5m38.853139111s ago: executing program 7 (id=651):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4004)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xc, 0x7, 0x0, 0x55a})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0)
readv(r5, &(0x7f00000038c0)=[{&(0x7f0000001500)=""/4089, 0xff9}], 0x1)
write$binfmt_misc(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)

5m32.349354289s ago: executing program 7 (id=661):
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6ead"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

5m29.167431418s ago: executing program 0 (id=667):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9a, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, r1, 0x2e, 0x2000, 0xffffffffffffffff, @value=r0}, 0x20)

5m28.820902534s ago: executing program 37 (id=667):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9a, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, r1, 0x2e, 0x2000, 0xffffffffffffffff, @value=r0}, 0x20)

5m28.764037265s ago: executing program 7 (id=672):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071180a000000000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r1, 0x14, 0x0, @void}, 0x10)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r4, 0x14, 0x0, @void}, 0x10)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r6, 0xffffffffffffffff, 0x0)

5m28.327363173s ago: executing program 7 (id=674):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==")
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed)
rmdir(&(0x7f0000000000)='./file0\x00')
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)

5m27.450114668s ago: executing program 7 (id=678):
ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000670000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbddaf686c4f64d26b42e7d613e42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x2d}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6)
r3 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@nullb, 0x0, &(0x7f0000000500)='./dev\x00')
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

5m26.064622535s ago: executing program 7 (id=683):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x4008030)

5m25.612410867s ago: executing program 38 (id=683):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x4008030)

4m41.687434303s ago: executing program 2 (id=775):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
write(r1, 0x0, 0x0)
read(r2, &(0x7f0000004000), 0x2000)

4m41.085100093s ago: executing program 2 (id=782):
r0 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./pipefs\x00', 0x4080, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x1e00}}]}}, 0x0, 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./pipefs\x00', 0x46)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

4m38.868277976s ago: executing program 2 (id=788):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="0003000000010000", 0x8}, {&(0x7f0000000240)="7da501", 0x3}], 0x2}, 0x24000008)

4m38.33751466s ago: executing program 2 (id=790):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
rmdir(&(0x7f0000000000)='./file0\x00')
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)

4m37.244993226s ago: executing program 2 (id=797):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, 0x0)

4m31.076117963s ago: executing program 2 (id=809):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==")
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
rmdir(&(0x7f0000000000)='./file0\x00')
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, r2)
setpgid(0x0, r2)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)

4m30.155168176s ago: executing program 39 (id=809):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
rmdir(&(0x7f0000000000)='./file0\x00')
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, r2)
setpgid(0x0, r2)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)

3m23.936023023s ago: executing program 5 (id=995):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x2, 0x0, 0x0, 0x410fd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x20044044)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001080))
syz_open_dev$MSR(&(0x7f0000001280), 0x5, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xffffffff, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000004c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdc9, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000540)=<r8=>0x0)
syz_ublk_setup_queues(r2, r8, &(0x7f0000000580)={0x0, 0x1d8c, 0x8, 0x0, 0x228, 0x0, r2}, &(0x7f00000014c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcba3, 0x100, 0x3, 0x81, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x130d, 0x4000, 0x1, 0x1cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xece3, 0x8, 0x3, 0x8e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e19, 0x2, 0x2, 0x168, 0x0, r2}}], 0x4, &(0x7f0000002f00)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x3, 0xc0, 0x0, 0x0}}, &(0x7f0000002f80))

3m21.147870974s ago: executing program 5 (id=1001):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)

3m20.529596106s ago: executing program 5 (id=1003):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(0x0, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
r2 = socket(0x11, 0x2, 0x0)
setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a", 0xb)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
setsockopt(r2, 0x107, 0x2, &(0x7f00000001c0)="110000000200010001001a00002b4000", 0x10)

3m17.426909799s ago: executing program 5 (id=1010):
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x3)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0xfffffffffffffffe, 0x0, 0x1)

3m16.586358129s ago: executing program 5 (id=1014):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4004)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xc, 0x7, 0x0, 0x55a})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0)
readv(r4, &(0x7f00000038c0)=[{&(0x7f0000001500)=""/4089, 0xff9}], 0x1)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)

3m14.545958439s ago: executing program 5 (id=1015):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)

2m58.973951519s ago: executing program 40 (id=1015):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)

1m33.084293469s ago: executing program 4 (id=1186):
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
clock_gettime(0x0, &(0x7f00000003c0)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000280)={{}, {r1, r2+60000000}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
iopl(0x3)
syz_ublk_setup_io_uring(0x3bfc, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x100}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

1m20.653886856s ago: executing program 4 (id=1209):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x7, 0xb, 0x3}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0x24}], 0x2}, 0x8000)

1m13.766197813s ago: executing program 4 (id=1220):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
syz_emit_vhci(&(0x7f0000004c00)=ANY=[@ANYBLOB="043e7022"], 0x20)

1m12.823434966s ago: executing program 4 (id=1225):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4004)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xc, 0x7, 0x0, 0x55a})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0)
readv(r4, &(0x7f00000038c0)=[{&(0x7f0000001500)=""/4089, 0xff9}], 0x1)
write$binfmt_misc(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)

1m11.200068738s ago: executing program 4 (id=1227):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, 0x0)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000001500)={0x2020}, 0x2020)

1m9.324168175s ago: executing program 4 (id=1230):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x7, 0xb, 0x3}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0x24}], 0x2}, 0x8000)

53.741661681s ago: executing program 41 (id=1230):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x7, 0xb, 0x3}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0x24}], 0x2}, 0x8000)

7.13130336s ago: executing program 3 (id=1368):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000500)='file net/sctp/* +p', 0x12)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000600)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000600)=0x2, 0x4)
setsockopt(r3, 0x84, 0x7d, &(0x7f0000000700)="000000000100", 0x6)
setsockopt(r4, 0x84, 0x7d, &(0x7f0000000700)="0000000001000000", 0x8)
bind(r3, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10)
listen(r3, 0x5)
connect(r4, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000540)={[{@session={'session', 0x3d, 0x18}}, {@mode={'mode', 0x3d, 0xf78}}, {@map_normal}, {@mode={'mode', 0x3d, 0x1}}, {@check_strict}, {@uid}, {@mode={'mode', 0x3d, 0x2}}, {@block={'block', 0x3d, 0x800}}, {}, {@uid}]}, 0x1, 0x388, &(0x7f0000000b40)="$eJzs3e9v2kYcx/GPs0RD7Mm0TVUUpek11VYaMWIblQjlETKGuDN4wkRqHk3VkkpVkSa1j5p/vpMNpskKmC38Gnq/UHuH/c35AMtfHfhsAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWV7Tth1LYdC9fG2m85q9qDNjfdZe6V4xY7uSlfxToaD94aL9n76sfpT8d6zD4bNDFZKioNvvHn1//uPuTvb34+3O6Nkyffx0+/7NYHDzYU3bX7e23w3iKOg02r4J4sjUazX79KIVm1YQ+vFV3Pc7xuv5jX7UMyXvhXHq9arxK1fRZbfdbIR+tvDsV9e2a+ZV5Xe/0Yuj7umrSuxdBGEYdNtpTLI6iTlLdsTfgr7p+42OMW/fDW6qeZ1Mgpx5gty8INd2XcdxXaf2sv7yzLZ3v1pg/4O+irDWta9iQyzw6A08zM4o/ytUoK4u9Vpm4sNTUz1F6kxZP5Ll/59P/ZnbHef/3fGiw/0vqw+U5v+j4bOjafl/Sl9W9/ioT7rVe73RQAPd6MPae7TaR1u+ugoUK1KgjhrpEjNaYlRXTTXZ+kMXaimWUUuBQvmKdaVYffnpHuWpJ18N9RWpJ6OSPL2QkaO66qrKyFdFV4p0qa7aaqqRtvJW79L3vTqjj+MgZ54gd0bQv8//34z2Z/I/Mgs8egMP8znL/wAAAAAAYGtZ6W/syfh/T4/TWisIfXvd3QIAAAAAAAuU/vJ/mBR7Se2xLMb/AAAAAABsGyudY2dJKurJsJbNhOJLAAAAAAAAtkT6+/9RUhST2hNZjP8BAAAAANg2+dfYz42wytnlf831sLweRYyu81tsBaFf8aLw3NEv6VUG0pkGE1vbS6cfnOjpMOppcVgW77dYSKKcyrmjEx2PXkjpWVI8K02IdOeOrCaRAABsu+OcfDw7/+8kudM60fNhxPOD9Gr+uwcTMqtNZgUAYFPk32NnjrvwZKaM/38Yn1JQ0Z/6SwNdq5zONkjPOJjYavHOaQjlnG8Dinfu8FLOGeUX79zoZf7Y6pI/BQAAVus4Jw/Pkf+tcs74v8gphQAAbJTxHeyXWFn3awQAAPeRpQEAAAAAAAAAAAAAAAAAAAAA2HyLm+S3/HmEi698K+lh7RRG7+NGvBwq/7FS+L98gp+tlW1r5mHDW8nBCcBS/R0AAP//Gol2pw==")
close_range(r0, 0xffffffffffffffff, 0x0)

6.183371858s ago: executing program 6 (id=1369):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0)

6.150555365s ago: executing program 9 (id=1370):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f070000000000880000"}}}}}}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x4)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x30)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r3, 0x402, 0x40000029)
writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000380)="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", 0x104}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
add_key(&(0x7f0000000e80)='rxrpc\x00', 0x0, &(0x7f0000000f00)="791cc5909359f56bab7b1ac0ca86ffcb9f03ecc67f05f08d7b34cbc422", 0x1d, 0xfffffffffffffffc)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000a0000008000048013000100"], 0x94}}, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x111)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@rand_addr=0x64010101, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x28c, 0x4}, {0x2000000000000007, 0x20000, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x3, 0x3, 0xb5, 0x0, 0x7fffffd}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000100)=ANY=[], 0x40}, 0xfffe)
sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x7, 0x7, {{0x7, 0x4, 0x0, 0x20, 0x1c, 0x67, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @local, {[@generic={0x86, 0x7, "2c3c5f1cb2"}]}}}}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x24044080)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'})

5.033147355s ago: executing program 6 (id=1371):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@noquota}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff00}}, {@errors_remount}, {@commit={'commit', 0x3d, 0x7}}, {@orlov}], [{@subj_role={'subj_role', 0x3d, 'commit'}}]}, 0xfc, 0x587, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000086}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000cc0)={0xc, {"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", 0x1000}}, 0xffffffffffffff82)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xf0f, 0x2, 0x5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0xfc})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8001, 0x7, 0x802582})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x0)

4.445280792s ago: executing program 9 (id=1372):
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r2, 0x0, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = inotify_init1(0x800)
inotify_add_watch(r3, 0x0, 0x60000526)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

3.442687402s ago: executing program 6 (id=1373):
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r2, 0x0, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = inotify_init1(0x800)
inotify_add_watch(r3, 0x0, 0x60000526)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

2.87630287s ago: executing program 3 (id=1374):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000600)=0x5bb, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setns(0xc9, 0x0)
r2 = socket(0x8, 0x5, 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0)
close(0x3)
r3 = socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x44400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYBLOB=',group_id=', @ANYRES8=r3])
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x12810a4, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
r5 = epoll_create(0x7)
r6 = epoll_create1(0x0)
r7 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0))
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1008})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000000))

2.137462284s ago: executing program 9 (id=1375):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x3, 0x86)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0)
sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)

1.988238567s ago: executing program 6 (id=1376):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2a7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.887598716s ago: executing program 3 (id=1377):
r0 = syz_open_dev$sndpcmp(0x0, 0x7d, 0x2300)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8041)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)

1.733452124s ago: executing program 6 (id=1378):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0)

1.646889891s ago: executing program 3 (id=1379):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='file f_subset.c +p\n', 0x13)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00')
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000540)='dummy_udc.0', 0xb)
clock_nanosleep(0x0, 0x0, &(0x7f0000000580)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f00000005c0)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000640)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000680)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000740)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000780)={0x0, 0x5f5e100}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000840)='\n', 0x1)

1.581091394s ago: executing program 9 (id=1380):
syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xc, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)

1.301213928s ago: executing program 9 (id=1381):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='20', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0)
close(0xffffffffffffffff)
close(r1)

558.386399ms ago: executing program 3 (id=1382):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x5, 0x0)
io_submit(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sendto$inet(r1, &(0x7f0000000000)="a797c84ac737ff2dd1d916e565b796664e2fbda43abd2f4d3135fa8daa77d18dd1924f50241739bdd68792c3d208f7dd9f61dc79b7042cc0547399944b33f0b329d2019f6e8157d6017068600715f1e7d3d9009340fc8a144a0ef8caab88d7f19dec5363aa2cd7c3dc9a04b432b9977fd629b35720cd7f5ab6e4c17d8e80e75255ef4eab1e", 0x85, 0x40, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)

309.241612ms ago: executing program 6 (id=1383):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
read(r0, &(0x7f0000001000), 0x2000)

22.635025ms ago: executing program 3 (id=1384):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r3, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c)

0s ago: executing program 9 (id=1385):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='100\x00', 0x4)
write(r0, &(0x7f00000001c0)='200\x00', 0x4)
write(r0, &(0x7f0000000200)='300\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='8\x00', 0x2)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0)
read(r2, &(0x7f0000000340), 0x1000)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1\x00', 0x2)
write(r0, &(0x7f0000000400)='40', 0x2)
write(r1, &(0x7f0000000440)='4\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0)
read(r4, &(0x7f00000004c0), 0x1000)
close(r4)
write(0xffffffffffffffff, &(0x7f0000000540), 0x0)
close(0xffffffffffffffff)
close(r0)
close(r3)

kernel console output (not intermixed with test programs):

t for type 5 error -117
[  259.092822][ T8473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.169068][ T8306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.211918][ T8306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.336530][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.353085][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.384081][ T8329] bridge_slave_0: entered allmulticast mode
[  259.399609][ T8329] bridge_slave_0: entered promiscuous mode
[  259.419749][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.434516][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.450511][ T8329] bridge_slave_1: entered allmulticast mode
[  259.469678][ T8329] bridge_slave_1: entered promiscuous mode
[  259.489383][ T7415] EXT4-fs warning (device loop7): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  259.535988][ T7415] EXT4-fs warning (device loop7): dx_probe:848: Enable large directory feature to access it
[  259.569634][ T7415] EXT4-fs warning (device loop7): dx_probe:933: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended
[  259.584144][ T7415] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /10/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  259.617770][ T7415] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 8: comm syz-executor: path /10/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  259.808428][ T8306] team0: Port device team_slave_0 added
[  259.881538][ T7415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.957095][ T8306] team0: Port device team_slave_1 added
[  260.047079][ T8329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.098512][ T8329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.152700][ T8505] input: syz1 as /devices/virtual/input/input18
[  260.234239][ T7220] bridge_slave_1: left allmulticast mode
[  260.249857][ T7220] bridge_slave_1: left promiscuous mode
[  260.258193][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.286173][ T7220] bridge_slave_0: left allmulticast mode
[  260.302280][ T7220] bridge_slave_0: left promiscuous mode
[  260.310919][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.517172][   T50] Bluetooth: hci0: command tx timeout
[  260.560606][ T7220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.574073][ T7220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.586778][ T7220] bond0 (unregistering): Released all slaves
[  260.622631][ T5286] 8021q: adding VLAN 0 to HW filter on device eth15
[  260.693716][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.702375][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  260.752439][ T8306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.765712][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.774806][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  260.802836][ T8306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.822128][ T8329] team0: Port device team_slave_0 added
[  260.842561][ T8329] team0: Port device team_slave_1 added
[  261.027312][ T7220] tipc: Left network mode
[  261.046778][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.064365][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  261.106103][ T8524] loop5: detected capacity change from 0 to 2048
[  261.119446][ T8329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.151546][ T8524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.176278][   T30] audit: type=1800 audit(2000000055.319:14): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.684" name="file1" dev="loop5" ino=18 res=0 errno=0
[  261.364513][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.375563][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  261.407271][ T8329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.710621][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  261.841944][ T8306] hsr_slave_0: entered promiscuous mode
[  261.868406][ T8306] hsr_slave_1: entered promiscuous mode
[  261.896129][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  261.913600][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  261.934805][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  261.959363][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  262.201830][ T8306] debugfs: 'hsr0' already exists in 'hsr'
[  262.265690][ T8306] Cannot create hsr debugfs directory
[  262.478741][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.592010][   T50] Bluetooth: hci0: command tx timeout
[  262.637772][ T8541] loop5: detected capacity change from 0 to 512
[  262.670459][ T8541] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  262.684002][ T8329] hsr_slave_0: entered promiscuous mode
[  262.692049][ T8329] hsr_slave_1: entered promiscuous mode
[  262.704584][ T8329] debugfs: 'hsr0' already exists in 'hsr'
[  262.710367][ T8541] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it
[  262.721017][ T8329] Cannot create hsr debugfs directory
[  262.728369][ T8541] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.687: Corrupt directory, running e2fsck is recommended
[  262.755977][ T8541] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  262.780413][ T8541] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.687: corrupted in-inode xattr: e_name out of bounds
[  262.806499][ T7220] hsr_slave_0: left promiscuous mode
[  262.834703][ T7220] hsr_slave_1: left promiscuous mode
[  262.841943][ T7220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.842579][ T8541] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  262.853577][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.860988][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  262.876293][    C0] EXT4-fs (loop5): initial error at time 2000000056: ext4_iget_extra_inode:5179: inode 15
[  262.886289][    C0] EXT4-fs (loop5): last error at time 2000000056: ext4_iget_extra_inode:5179: inode 15
[  262.897351][ T8541] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.687: couldn't read orphan inode 15 (err -117)
[  262.924304][ T7220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.925679][ T8541] loop5: lost filesystem error report for type 5 error -117
[  262.946774][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.951956][ T8541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.007497][ T7220] veth1_macvtap: left promiscuous mode
[  263.013631][ T7220] veth0_macvtap: left promiscuous mode
[  263.019261][ T7220] veth1_vlan: left promiscuous mode
[  263.034031][ T7220] veth0_vlan: left promiscuous mode
[  263.264519][ T5632] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  263.294941][ T5632] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it
[  263.305621][ T5632] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended
[  263.319213][ T5632] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /129/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  263.379441][ T5632] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 8: comm syz-executor: path /129/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  263.458396][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.769464][ T7220] team0 (unregistering): Port device team_slave_1 removed
[  263.799384][ T7220] team0 (unregistering): Port device team_slave_0 removed
[  264.045628][ T5286] 8021q: adding VLAN 0 to HW filter on device eth16
[  264.115044][   T50] Bluetooth: hci1: command tx timeout
[  264.433252][ T8583] loop5: detected capacity change from 0 to 2048
[  264.497241][ T8583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  264.673089][   T50] Bluetooth: hci0: command tx timeout
[  264.692223][   T30] audit: type=1800 audit(2000000058.829:15): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.697" name="file1" dev="loop5" ino=1415 res=0 errno=0
[  266.536520][   T50] Bluetooth: hci1: command tx timeout
[  266.569181][ T8607] loop5: detected capacity change from 0 to 256
[  266.740420][ T8607] vfat: Bad value for 'gid'
[  266.755910][ T8607] vfat: Bad value for 'gid'
[  266.755924][   T50] Bluetooth: hci0: command tx timeout
[  267.567959][ T8622] input: syz1 as /devices/virtual/input/input19
[  267.729635][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.737925][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.745850][ T8457] bridge_slave_0: entered allmulticast mode
[  267.755011][ T8457] bridge_slave_0: entered promiscuous mode
[  267.765543][ T5286] 8021q: adding VLAN 0 to HW filter on device eth17
[  267.843524][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.850859][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.858653][ T8457] bridge_slave_1: entered allmulticast mode
[  267.867268][ T8457] bridge_slave_1: entered promiscuous mode
[  267.937680][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.971627][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.110417][ T8457] team0: Port device team_slave_0 added
[  268.172899][ T8457] team0: Port device team_slave_1 added
[  268.383021][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.390357][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  268.422393][ T8457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.505345][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.521353][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  268.555670][ T8457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.591722][   T50] Bluetooth: hci1: command tx timeout
[  268.704482][ T8306] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  268.726433][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  270.074586][ T8306] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  270.086944][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  270.272417][ T8306] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  270.301471][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  270.451985][ T8641] netlink: 72 bytes leftover after parsing attributes in process `syz.5.707'.
[  270.523609][ T8306] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  270.577054][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  270.671019][   T50] Bluetooth: hci1: command tx timeout
[  270.703320][ T8457] hsr_slave_0: entered promiscuous mode
[  270.722710][ T8457] hsr_slave_1: entered promiscuous mode
[  270.729213][ T8457] debugfs: 'hsr0' already exists in 'hsr'
[  270.742886][ T8457] Cannot create hsr debugfs directory
[  271.831020][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  272.565063][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.574418][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.582394][ T8532] bridge_slave_0: entered allmulticast mode
[  272.590655][ T8532] bridge_slave_0: entered promiscuous mode
[  272.604783][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.613596][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.620895][ T8532] bridge_slave_1: entered allmulticast mode
[  272.631313][ T8532] bridge_slave_1: entered promiscuous mode
[  272.837294][ T5286] 8021q: adding VLAN 0 to HW filter on device eth18
[  272.890904][ T8532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.011539][ T8532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.210395][ T8329] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  273.242650][ T8329] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  273.277222][ T8329] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  273.322039][ T8329] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  273.345214][ T8532] team0: Port device team_slave_0 added
[  273.376173][ T8532] team0: Port device team_slave_1 added
[  273.460731][ T8329] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  273.490304][ T8329] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  273.500252][ T8329] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  273.516627][ T8329] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  273.601838][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.609136][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.681106][ T8532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.714001][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.723325][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.772086][ T8532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.114913][ T8532] hsr_slave_0: entered promiscuous mode
[  276.127992][ T8532] hsr_slave_1: entered promiscuous mode
[  276.333774][ T8692] netlink: 96 bytes leftover after parsing attributes in process `syz.5.710'.
[  276.376010][ T8532] debugfs: 'hsr0' already exists in 'hsr'
[  276.401119][ T8532] Cannot create hsr debugfs directory
[  276.795956][ T5286] 8021q: adding VLAN 0 to HW filter on device eth19
[  276.920034][ T8703] loop5: detected capacity change from 0 to 1024
[  276.953380][ T8703] hfsplus: failed to load extents file
[  277.324946][ T8306] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.433006][ T8306] 8021q: adding VLAN 0 to HW filter on device team0
[  280.402725][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.409935][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.594859][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.602096][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.894967][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.920736][ T8457] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  280.947811][ T8457] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  280.995893][ T8457] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  281.034667][ T8457] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  281.203784][ T8457] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  281.239951][ T8457] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  281.262147][ T8457] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  281.293630][ T8457] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  281.496568][ T8329] 8021q: adding VLAN 0 to HW filter on device team0
[  281.505324][ T5286] 8021q: adding VLAN 0 to HW filter on device eth20
[  281.573424][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.580610][ T7217] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.628287][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.635509][ T7217] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.465796][ T8755] dyndbg: bad flag-op n, at start of net/sc
[  282.495590][ T8457] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.505485][ T8755] dyndbg: flags parse failed
[  282.601694][ T8457] 8021q: adding VLAN 0 to HW filter on device team0
[  282.682638][ T8760] loop5: detected capacity change from 0 to 160
[  282.756321][ T8760] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  282.756722][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.770869][ T7243] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.784961][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.792170][ T7243] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.272820][ T8770] loop5: detected capacity change from 0 to 128
[  283.285301][ T8532] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  283.338573][ T8532] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  283.368165][ T8532] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  283.425622][ T8532] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  283.470560][ T8532] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  283.510650][ T8532] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  283.544133][ T8532] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  283.587088][ T8532] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  284.631169][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  284.915070][ T8785] UDC core: g1: couldn't find an available UDC or it's busy
[  284.919940][ T8306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.697016][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.368765][ T8532] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.509603][ T8532] 8021q: adding VLAN 0 to HW filter on device team0
[  289.568886][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.576084][ T7268] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.669332][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.676504][ T7243] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.921494][ T8457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.374967][ T8306] veth0_vlan: entered promiscuous mode
[  290.474286][ T8306] veth1_vlan: entered promiscuous mode
[  290.816071][ T8306] veth0_macvtap: entered promiscuous mode
[  290.933933][ T8306] veth1_macvtap: entered promiscuous mode
[  291.211183][ T8306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.342590][ T8306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.501856][ T7225] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.568974][ T7243] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.652582][ T7228] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.761262][ T7217] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.074907][ T8329] veth0_vlan: entered promiscuous mode
[  292.095707][ T7228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.126104][ T7228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.153127][ T8329] veth1_vlan: entered promiscuous mode
[  292.217988][ T7217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.256048][ T7217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.318709][ T8457] veth0_vlan: entered promiscuous mode
[  292.379802][ T8329] veth0_macvtap: entered promiscuous mode
[  292.411850][ T8329] veth1_macvtap: entered promiscuous mode
[  292.434100][ T8457] veth1_vlan: entered promiscuous mode
[  292.547132][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.569390][ T8884] loop5: detected capacity change from 0 to 512
[  292.583761][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.611042][ T8884] EXT4-fs: Ignoring removed oldalloc option
[  292.634765][ T8884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  292.687777][ T7225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.690090][ T8884] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  292.717331][ T8884] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  292.763420][ T7225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.771445][ T8884] EXT4-fs (loop5): orphan cleanup on readonly fs
[  292.779270][ T8884] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  292.789025][ T8884] EXT4-fs warning (device loop5): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  292.803790][ T8884] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  292.813253][ T7228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.817704][ T8884] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.731: bg 0: block 40: padding at end of block bitmap is not set
[  292.839836][ T8884] loop5: lost filesystem error report for type 5 error -117
[  292.840975][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  292.854757][    C0] EXT4-fs (loop5): initial error at time 2000000086: ext4_validate_block_bitmap:440
[  292.860851][ T7217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.864186][    C0] EXT4-fs (loop5): last error at time 2000000086: ext4_validate_block_bitmap:440
[  292.889085][ T8884] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  292.913975][ T8884] loop5: lost filesystem error report for type 5 error -117
[  292.914730][ T8884] EXT4-fs (loop5): 1 truncate cleaned up
[  292.993234][ T8884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  293.013194][ T8457] veth0_macvtap: entered promiscuous mode
[  293.068127][ T8457] veth1_macvtap: entered promiscuous mode
[  293.256281][ T7225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.257292][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.293240][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.312714][ T7225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.413921][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.534053][ T8906] loop5: detected capacity change from 0 to 16
[  293.607618][ T8906] erofs (device loop5): mounted with root inode @ nid 36.
[  293.729651][ T8532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.762138][ T8909] loop9: detected capacity change from 0 to 1024
[  293.842203][ T7228] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.960600][ T8909] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  293.991303][ T8909] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.394523][ T7225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.475065][ T7225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.491737][ T7225] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.576958][ T7243] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.617443][ T8306] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  294.876586][ T7250] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.957191][ T8532] veth0_vlan: entered promiscuous mode
[  295.216479][ T8532] veth1_vlan: entered promiscuous mode
[  295.511254][ T7241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.553300][ T7241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.974453][ T8532] veth0_macvtap: entered promiscuous mode
[  295.996386][ T3288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.998908][ T8532] veth1_macvtap: entered promiscuous mode
[  296.996999][ T3288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.431147][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  297.812358][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.930168][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.948190][ T8936] loop9: detected capacity change from 0 to 256
[  298.011948][ T7217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.093519][ T7268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.140050][ T7268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.278250][ T8941] loop4: detected capacity change from 0 to 128
[  298.531543][ T1102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.323083][ T7268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.369484][ T7268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.991174][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  300.975426][ T8955] loop5: detected capacity change from 0 to 512
[  301.049419][ T8955] EXT4-fs (loop5): 1 truncate cleaned up
[  301.116377][ T7217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.134630][ T8955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.176094][ T7217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.395013][ T8954] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.755: bg 0: block 465: padding at end of block bitmap is not set
[  301.947440][ T8976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.059976][ T8979] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  302.161449][ T8985] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  302.392866][ T8983] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11)
[  302.399697][ T8983] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  302.437581][ T8983] vhci_hcd vhci_hcd.0: Device attached
[  302.470069][ T8994] vhci_hcd: connection closed
[  302.514225][ T7230] vhci_hcd vhci_hcd.9: stop threads
[  302.562760][ T7230] vhci_hcd vhci_hcd.9: release socket
[  302.587123][ T7230] vhci_hcd vhci_hcd.9: disconnect device
[  302.646739][ T5775] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  302.860577][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.976768][ T9005] loop4: detected capacity change from 0 to 164
[  303.216050][ T9012] dyndbg: bad flag-op n, at start of net/sc
[  303.252574][ T9012] dyndbg: flags parse failed
[  304.290564][ T9015] loop2: detected capacity change from 0 to 160
[  304.463912][ T9015] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  304.535865][ T9023] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  304.933887][ T9030] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  304.983171][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.993778][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.235186][ T9025] loop5: detected capacity change from 0 to 2048
[  305.489186][ T9039] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  305.543009][ T9044] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  305.848962][ T9053] loop5: detected capacity change from 0 to 512
[  305.948816][ T9053] EXT4-fs (loop5): 1 truncate cleaned up
[  306.009886][ T9053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.287797][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  306.735249][ T9065] fuse: Bad value for 'fd'
[  306.964952][ T9052] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.779: bg 0: block 465: padding at end of block bitmap is not set
[  306.991413][    T9] usb 5-1: Using ep0 maxpacket: 8
[  307.001409][    T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  307.015469][    T9] usb 5-1: config 179 has no interface number 0
[  307.021810][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  307.034113][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  307.098745][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  307.807451][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  307.834380][    T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  307.855930][    T9] usb 5-1: config 179 interface 65 has no altsetting 0
[  307.863342][    T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  307.880473][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.068153][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.090328][    T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input20
[  308.247768][ T9074] loop9: detected capacity change from 0 to 2048
[  308.335355][ T9074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.479834][ T5755] usb 5-1: USB disconnect, device number 2
[  308.479951][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  308.567598][ T9074] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #12: block 2: comm syz.9.784: lblock 0 mapped to illegal pblock 2 (length 1)
[  308.647187][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.785'.
[  308.723118][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.785'.
[  308.796647][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.785'.
[  308.831998][ T9098] loop2: detected capacity change from 0 to 512
[  308.907391][ T9098] EXT4-fs warning (device loop2): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  308.946479][ T9098] EXT4-fs warning (device loop2): dx_probe:848: Enable large directory feature to access it
[  308.989682][ T9098] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.790: Corrupt directory, running e2fsck is recommended
[  309.015577][ T9098] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  309.041841][ T9098] EXT4-fs error (device loop2): ext4_iget_extra_inode:5179: inode #15: comm syz.2.790: corrupted in-inode xattr: e_name out of bounds
[  309.084132][ T9098] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  309.089745][ T9098] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.790: couldn't read orphan inode 15 (err -117)
[  309.098971][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  309.099004][    C0] EXT4-fs (loop2): initial error at time 2000000103: ext4_iget_extra_inode:5179: inode 15
[  309.099059][    C0] EXT4-fs (loop2): last error at time 2000000103: ext4_iget_extra_inode:5179: inode 15
[  309.148156][ T9088] 8021q: adding VLAN 0 to HW filter on device bond1
[  309.236244][ T8306] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.307604][ T9093] bond0: left promiscuous mode
[  309.324994][ T9098] loop2: lost filesystem error report for type 5 error -117
[  309.333479][ T9098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.385724][ T9093] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.406541][ T9093] bond1: (slave bond0): Enslaving as an active interface with a down link
[  309.511472][ T5776] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  309.523118][ T9114] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  309.674178][ T5776] usb 7-1: Using ep0 maxpacket: 32
[  309.706003][ T5776] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  309.721333][ T8532] EXT4-fs warning (device loop2): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  309.763063][ T5776] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  309.779939][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.799363][ T8532] EXT4-fs warning (device loop2): dx_probe:848: Enable large directory feature to access it
[  309.816035][ T5776] usb 7-1: Product: syz
[  309.820421][ T5776] usb 7-1: Manufacturer: syz
[  309.833190][ T5776] usb 7-1: SerialNumber: syz
[  311.051535][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  311.461116][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  311.803344][ T9055] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  311.885934][ T5776] usb 7-1: config 0 descriptor??
[  311.889990][ T8532] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended
[  311.900076][ T9107] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  312.060964][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  313.879021][ T5776] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  313.891494][ T8532] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /7/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  314.660593][ T8532] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 8: comm syz-executor: path /7/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  314.847582][ T5776] usb 7-1: USB disconnect, device number 3
[  314.873382][ T9132] binder_alloc: 9131: pid 9131 spamming oneway? 1 buffers allocated for a total size of 4096
[  314.887297][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  314.946582][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.975354][ T9139] binder_alloc: 9131: pid 9131 spamming oneway? 2 buffers allocated for a total size of 5120
[  315.049483][ T8532] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.205701][ T9100] udevd[9100]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  315.254141][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.804'.
[  315.484101][ T9147] UDC core: g1: couldn't find an available UDC or it's busy
[  315.514036][ T9150] dyndbg: bad flag-op n, at start of net/sc
[  315.520098][ T9150] dyndbg: flags parse failed
[  315.716183][ T9154] loop6: detected capacity change from 0 to 160
[  315.772309][ T9154] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  315.898182][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.975034][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.240096][ T9162] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  316.345389][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.395500][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.532269][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  316.538588][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  316.654745][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.700966][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.123819][ T9180] loop6: detected capacity change from 0 to 256
[  317.165523][ T9180] exfat: Deprecated parameter 'namecase'
[  317.199901][ T9180] exfat: Deprecated parameter 'utf8'
[  317.229928][ T9180] exfat: Deprecated parameter 'namecase'
[  317.263970][ T9180] exfat: Deprecated parameter 'utf8'
[  317.425071][ T9180] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  317.474575][ T1102] netdevsim netdevsim120 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.486557][ T9180] exFAT-fs (loop6): failed to test first cluster bit of root dir(5)
[  317.550678][ T1102] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.598243][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  317.621749][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  317.635367][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  317.654089][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  317.664391][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  317.832296][   T30] audit: type=1804 audit(2000000111.969:16): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.813" name=2F6E6577726F6F742F31342FE91F7189591E9233614B2F627573 dev="loop6" ino=1048693 res=1 errno=0
[  318.872678][ T1102] bridge_slave_1: left allmulticast mode
[  318.912284][ T1102] bridge_slave_1: left promiscuous mode
[  319.004307][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.057997][ T1102] bridge_slave_0: left allmulticast mode
[  319.101478][ T1102] bridge_slave_0: left promiscuous mode
[  319.427149][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.950813][   T50] Bluetooth: hci1: command tx timeout
[  320.151353][ T9215] dyndbg: bad flag-op n, at start of net/sc
[  320.165760][ T9215] dyndbg: flags parse failed
[  320.396610][ T9220] loop5: detected capacity change from 0 to 160
[  320.443058][ T9220] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  320.689318][ T9223] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  320.746625][ T9226] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  321.178860][ T9232] UDC core: g1: couldn't find an available UDC or it's busy
[  321.278228][   T30] audit: type=1800 audit(2000000115.419:17): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.828" name="scan_secs" dev="configfs" ino=21384 res=0 errno=0
[  321.585416][ T1102] team0: Port device bridge0 removed
[  321.640835][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  321.683441][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  321.736225][ T1102] bond0 (unregistering): Released all slaves
[  321.835549][ T9249] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  322.031315][   T50] Bluetooth: hci1: command tx timeout
[  322.480759][ T9264] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  324.111257][   T50] Bluetooth: hci1: command tx timeout
[  324.891037][ T5904] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  325.022216][ T1102] hsr_slave_0: left promiscuous mode
[  325.061970][ T1102] hsr_slave_1: left promiscuous mode
[  325.081972][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.099379][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.119881][ T5904] usb 7-1: config 0 has no interfaces?
[  325.139734][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  325.163456][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.195418][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.224053][ T5904] usb 7-1: config 0 has no interfaces?
[  325.243451][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.358538][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.471463][ T5904] usb 7-1: config 0 has no interfaces?
[  325.825420][ T5904] usb 7-1: string descriptor 0 read error: -22
[  325.918138][ T5904] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  325.961061][ T1102] veth1_macvtap: left promiscuous mode
[  325.975282][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.983866][ T1102] veth0_macvtap: left promiscuous mode
[  325.991361][ T1102] veth1_vlan: left promiscuous mode
[  325.999474][ T5904] usb 7-1: config 0 descriptor??
[  326.007719][ T1102] veth0_vlan: left promiscuous mode
[  326.192972][   T50] Bluetooth: hci1: command tx timeout
[  326.821216][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  328.151572][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  328.424368][ T5777] usb 7-1: USB disconnect, device number 4
[  328.732548][  T187] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  328.780023][ T9326] netlink: 'syz.3.854': attribute type 1 has an invalid length.
[  328.922887][  T187] usb 5-1: Using ep0 maxpacket: 16
[  328.957402][  T187] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  329.006089][  T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.030582][  T187] usb 5-1: Product: syz
[  329.045604][  T187] usb 5-1: Manufacturer: syz
[  329.071021][  T187] usb 5-1: SerialNumber: syz
[  329.303191][ T1102] team0 (unregistering): Port device team_slave_1 removed
[  329.383549][  T187] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  329.412524][ T1102] team0 (unregistering): Port device team_slave_0 removed
[  329.434922][  T187] usb 5-1: USB disconnect, device number 3
[  329.857416][ T9349] UDC core: g1: couldn't find an available UDC or it's busy
[  330.020642][ T9326] gretap0: entered promiscuous mode
[  333.468105][ T9408] UDC core: g1: couldn't find an available UDC or it's busy
[  334.335151][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.424702][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.469270][ T9188] bridge_slave_0: entered allmulticast mode
[  334.539189][ T9188] bridge_slave_0: entered promiscuous mode
[  334.608519][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.657324][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.715581][ T9188] bridge_slave_1: entered allmulticast mode
[  334.774066][ T9188] bridge_slave_1: entered promiscuous mode
[  335.106830][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.176516][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.608458][ T9447] loop6: detected capacity change from 0 to 256
[  335.637887][ T9188] team0: Port device team_slave_0 added
[  335.654033][ T9447] vfat: Bad value for 'gid'
[  335.671330][ T9447] vfat: Bad value for 'gid'
[  336.275603][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.886'.
[  336.309608][ T9453] loop6: detected capacity change from 0 to 1024
[  336.348257][ T9188] team0: Port device team_slave_1 added
[  336.760282][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.792079][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.902288][ T9188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  336.948843][ T9467] UDC core: g1: couldn't find an available UDC or it's busy
[  337.217129][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.352271][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.379855][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  337.414037][ T9188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.635077][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.907276][ T9492] loop4: detected capacity change from 0 to 256
[  337.935156][ T9492] exfat: Deprecated parameter 'namecase'
[  337.949261][ T9492] exfat: Deprecated parameter 'utf8'
[  337.949711][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.985770][ T9492] exfat: Deprecated parameter 'namecase'
[  338.006099][ T9492] exfat: Deprecated parameter 'utf8'
[  338.054807][ T9492] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  339.781708][ T9492] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  340.061774][   T30] audit: type=1804 audit(2000000134.209:18): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.903" name=2F6E6577726F6F742F32372FE91F7189591E9233614B2F627573 dev="loop4" ino=1048694 res=1 errno=0
[  340.206693][ T9188] hsr_slave_0: entered promiscuous mode
[  340.246449][ T9188] hsr_slave_1: entered promiscuous mode
[  340.268231][ T9188] debugfs: 'hsr0' already exists in 'hsr'
[  340.292846][ T9188] Cannot create hsr debugfs directory
[  340.454547][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.421028][    T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  341.624265][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  341.654479][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  341.696546][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  341.736980][ T1102] bridge_slave_1: left allmulticast mode
[  341.756631][ T1102] bridge_slave_1: left promiscuous mode
[  341.773117][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64
[  341.779661][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.810009][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  341.827363][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  341.842913][ T1102] bridge_slave_0: left allmulticast mode
[  341.845723][    T9] usb 5-1: Product: syz
[  341.858266][    T9] usb 5-1: Manufacturer: syz
[  341.886276][ T1102] bridge_slave_0: left promiscuous mode
[  341.914286][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.925144][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  341.942692][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  342.181180][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  343.221480][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  343.236615][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  343.457887][    T9] usb 5-1: USB disconnect, device number 4
[  345.530790][   T50] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  345.541653][   T50] Bluetooth: hci5: Injecting HCI hardware error event
[  345.552589][ T5630] Bluetooth: hci5: hardware error 0x00
[  346.409116][ T9559] loop6: detected capacity change from 0 to 160
[  346.443339][ T9559] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  346.474701][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  346.596337][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  346.729828][ T1102] bond0 (unregistering): Released all slaves
[  347.848420][ T9566] loop6: detected capacity change from 0 to 256
[  347.877388][ T9566] vfat: Bad value for 'gid'
[  347.902614][ T9566] vfat: Bad value for 'gid'
[  348.032603][ T5630] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  348.322499][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.6.924'.
[  351.027335][ T1102] hsr_slave_0: left promiscuous mode
[  351.075301][ T1102] hsr_slave_1: left promiscuous mode
[  351.108107][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.145976][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.203350][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.364317][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.167627][ T1102] veth1_macvtap: left promiscuous mode
[  352.195330][ T1102] veth0_macvtap: left promiscuous mode
[  352.249623][ T1102] veth1_vlan: left promiscuous mode
[  352.285967][ T1102] veth0_vlan: left promiscuous mode
[  354.305270][ T5904] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  354.695459][ T9609] input: syz1 as /devices/virtual/input/input21
[  354.722054][ T5904] usb 7-1: Using ep0 maxpacket: 32
[  356.290737][ T5904] usb 7-1: device descriptor read/all, error -71
[  356.317247][ T9612] loop9: detected capacity change from 0 to 160
[  356.378863][ T9612] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  359.329678][ T1102] team0 (unregistering): Port device team_slave_1 removed
[  359.377372][ T1102] team0 (unregistering): Port device team_slave_0 removed
[  359.416097][ T9630] netlink: 24 bytes leftover after parsing attributes in process `syz.9.937'.
[  359.470250][ T9634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.481072][ T9633] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  359.798418][ T9642] loop5: detected capacity change from 0 to 128
[  359.822775][ T9642] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  364.673591][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  364.899076][ T9188] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  364.929628][ T9669] dyndbg: bad flag-op n, at start of net/
[  364.965883][ T9669] dyndbg: flags parse failed
[  364.992789][ T9188] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  365.060467][ T9188] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  365.446147][ T9671] loop5: detected capacity change from 0 to 160
[  365.472224][ T9671] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  366.588614][ T9188] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  366.718082][ T9188] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  366.966128][ T9188] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  367.064691][ T9188] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  367.143367][ T9188] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  368.790874][ T9703] syzkaller0: entered promiscuous mode
[  368.844006][ T9703] syzkaller0: entered allmulticast mode
[  369.107516][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.235722][ T9188] 8021q: adding VLAN 0 to HW filter on device team0
[  369.262360][ T5755] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  369.302490][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.309649][ T7220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.425821][ T7241] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.433011][ T7241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.445371][ T5755] usb 10-1: Using ep0 maxpacket: 16
[  369.469911][ T9715] overlayfs: failed to resolve './file2': -2
[  369.492974][ T5755] usb 10-1: too many configurations: 123, using maximum allowed: 8
[  369.739472][ T5755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  369.751236][ T5755] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  369.805135][ T5755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  369.821278][ T5755] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.077566][ T5755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.130688][ T5755] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.179474][ T5755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.213682][ T5755] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.232955][ T5755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.260576][ T5755] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.295908][ T5755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.319618][ T5755] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.346658][ T5755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.374011][ T5755] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.420726][ T5755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.456163][ T5755] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.478836][ T5755] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  370.504510][ T5755] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  370.535581][ T5755] usb 10-1: SerialNumber: syz
[  370.592023][ T5755] usb 10-1: config 0 descriptor??
[  370.910091][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'.
[  370.947688][ T9711] input: syz1 as /devices/virtual/input/input22
[  371.068668][ T5755] usb 10-1: USB disconnect, device number 2
[  371.230656][ T9733] 8021q: adding VLAN 0 to HW filter on device bond1
[  374.408677][ T9188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  375.781179][    T9] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  375.954486][    T9] usb 10-1: config index 0 descriptor too short (expected 164, got 36)
[  375.993875][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  376.046317][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.101385][    T9] usb 10-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  376.149301][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.232324][    T9] usb 10-1: config 0 descriptor??
[  376.530280][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'.
[  376.568997][ T9783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.680128][ T9783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.053946][    T9] logitech 0003:046D:C29C.0009: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.9-1/input0
[  377.134869][    T9] logitech 0003:046D:C29C.0009: no inputs found
[  377.240523][    T9] usb 10-1: USB disconnect, device number 3
[  377.279171][ T9820] FAT-fs (nbd6): unable to read boot sector
[  377.747245][ T9821] fido_id[9821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  377.954601][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  377.975701][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  378.351935][ T5630] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  378.365064][ T5630] Bluetooth: hci0: Injecting HCI hardware error event
[  378.374223][   T50] Bluetooth: hci0: hardware error 0x00
[  378.832747][ T9828] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  379.001886][ T9828] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  379.054444][ T9828] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  379.194913][ T9834] dyndbg: bad flag-op n, at start of net/sctp/
[  379.245566][ T9834] dyndbg: flags parse failed
[  379.269111][ T9828] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  379.294056][ T9828] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  379.526553][ T9828] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  379.537215][ T9837] loop6: detected capacity change from 0 to 160
[  379.587066][ T9837] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  379.693379][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  379.717927][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  379.728646][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  379.739559][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  379.756267][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  380.431392][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout
[  380.522657][ T9852] UDC core: g1: couldn't find an available UDC or it's busy
[  380.753104][   T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  380.811287][ T9859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.985'.
[  380.946187][ T9859] team0 (unregistering): Port device team_slave_0 removed
[  381.037052][ T9859] team0 (unregistering): Port device team_slave_1 removed
[  381.081020][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  381.668588][ T9875] xt_cgroup: path and classid specified
[  381.698420][ T9872] loop5: detected capacity change from 0 to 256
[  381.725249][ T9872] vfat: Bad value for 'gid'
[  381.737978][ T9872] vfat: Bad value for 'gid'
[  381.871276][   T50] Bluetooth: hci6: command tx timeout
[  382.891811][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.9.993'.
[  383.151233][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  383.174637][ T9895] 8021q: adding VLAN 0 to HW filter on device bond1
[  383.309117][ T9907] dyndbg: bad flag-op n, at start of net/sctp/
[  383.339739][ T9907] dyndbg: flags parse failed
[  383.569290][ T9911] loop4: detected capacity change from 0 to 160
[  383.632135][ T9911] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  383.951201][   T50] Bluetooth: hci6: command tx timeout
[  384.550074][ T9919] dyndbg: bad flag-op n, at start of net/sc
[  384.604667][ T9919] dyndbg: flags parse failed
[  384.863405][ T9925] loop4: detected capacity change from 0 to 160
[  384.920954][ T9925] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  385.740125][ T7228] bridge_slave_1: left allmulticast mode
[  385.749020][ T7228] bridge_slave_1: left promiscuous mode
[  385.754891][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.797471][ T7228] bridge_slave_0: left allmulticast mode
[  385.811091][ T7228] bridge_slave_0: left promiscuous mode
[  385.817072][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.031021][   T50] Bluetooth: hci6: command tx timeout
[  386.293556][ T9948] loop9: detected capacity change from 0 to 128
[  386.346322][ T9948] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  387.775094][ T7228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  387.910417][ T7228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  387.986628][ T7228] bond0 (unregistering): Released all slaves
[  388.111892][   T50] Bluetooth: hci6: command tx timeout
[  388.719181][ T9967] loop4: detected capacity change from 0 to 256
[  388.734222][ T9967] vfat: Bad value for 'gid'
[  388.738739][ T9967] vfat: Bad value for 'gid'
[  388.893154][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'.
[  388.975771][ T7228] hsr_slave_0: left promiscuous mode
[  389.211130][ T7228] hsr_slave_1: left promiscuous mode
[  389.222434][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_0
[  389.384920][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  389.655750][ T9982] dyndbg: bad flag-op n, at start of net/sctp/
[  389.688120][ T9982] dyndbg: flags parse failed
[  389.884844][ T9984] loop4: detected capacity change from 0 to 160
[  390.011077][ T9984] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  390.467197][ T9995] xt_hashlimit: size too large, truncated to 1048576
[  392.798685][T10008] overlayfs: failed to resolve './file2': -2
[  393.101610][ T7228] team0 (unregistering): Port device team_slave_1 removed
[  393.514219][ T7228] team0 (unregistering): Port device team_slave_0 removed
[  393.595167][T10008] netlink: 'syz.4.1016': attribute type 49 has an invalid length.
[  396.882482][ T5359] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  396.933860][ T9977] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  396.973955][T10008] bond0: (slave bond_slave_0): Releasing backup interface
[  397.056004][ T5359] usb 7-1: Using ep0 maxpacket: 8
[  397.062979][T10008] bond_slave_0: entered promiscuous mode
[  397.069623][T10008] bond_slave_0: entered allmulticast mode
[  397.122894][ T5359] usb 7-1: unable to get BOS descriptor or descriptor too short
[  397.162021][ T5359] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16
[  397.189134][ T5359] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40
[  397.224449][ T5359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.258517][ T5359] usb 7-1: Product: syz
[  397.279120][ T5359] usb 7-1: Manufacturer: syz
[  398.290741][ T5359] usb 7-1: SerialNumber: syz
[  398.752820][T10026] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  398.808047][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.840450][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.906971][ T9830] bridge_slave_0: entered allmulticast mode
[  398.942735][ T9830] bridge_slave_0: entered promiscuous mode
[  399.001229][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.039222][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.064248][ T9830] bridge_slave_1: entered allmulticast mode
[  399.099657][ T9830] bridge_slave_1: entered promiscuous mode
[  399.377398][ T9830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.386412][ T5359] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  399.444128][ T5359] usb 7-1: invalid MIDI in EP 0
[  399.461250][ T9830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.715105][ T9830] team0: Port device team_slave_0 added
[  403.463591][ T9830] team0: Port device team_slave_1 added
[  404.709608][T10059] loop6: detected capacity change from 0 to 128
[  404.713120][ T5359] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  405.048534][ T5359] usb 7-1: USB disconnect, device number 7
[  405.092481][T10059] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  405.179186][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.181386][T10059] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  405.274965][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.398006][ T9830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.480385][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.525817][ T9157] udevd[9157]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  405.528607][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.737670][ T9830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.800689][ T8457] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  406.063520][ T9830] hsr_slave_0: entered promiscuous mode
[  406.103164][ T9830] hsr_slave_1: entered promiscuous mode
[  406.128257][ T9830] debugfs: 'hsr0' already exists in 'hsr'
[  406.162806][T10071] syz.6.1031 uses obsolete (PF_INET,SOCK_PACKET)
[  406.170982][ T9830] Cannot create hsr debugfs directory
[  406.990457][T10080] dyndbg: bad flag-op n, at start of net/sctp/*
[  407.023624][T10080] dyndbg: flags parse failed
[  407.240544][T10082] loop4: detected capacity change from 0 to 160
[  407.373871][T10082] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  409.691711][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  409.711938][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  409.722912][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  409.735317][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  409.744696][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  411.911081][   T50] Bluetooth: hci1: command tx timeout
[  413.961450][ T5630] Bluetooth: hci1: command tx timeout
[  414.613861][ T9830] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  414.917529][ T9830] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  415.828942][ T9830] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  415.918817][ T9830] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  415.938314][T10138] loop6: detected capacity change from 0 to 128
[  415.954257][T10137] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1041'.
[  415.970217][ T9830] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  415.972295][T10143] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1042'.
[  416.039716][T10138] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  416.042024][ T5630] Bluetooth: hci1: command tx timeout
[  416.324185][ T9830] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  417.023677][ T9830] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  417.260019][T10138] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  417.305049][ T9830] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  417.526166][T10159] dyndbg: bad flag-op n, at start of net/sctp/*
[  417.564886][T10159] dyndbg: flags parse failed
[  417.753620][T10163] loop4: detected capacity change from 0 to 160
[  417.842468][T10163] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  418.027457][ T8457] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  418.111452][ T5630] Bluetooth: hci1: command tx timeout
[  418.344726][ T9830] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.588927][ T9830] 8021q: adding VLAN 0 to HW filter on device team0
[  418.936929][ T5630] Bluetooth: hci4: unexpected event for opcode 0x1003
[  419.058100][T10179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.069929][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.077116][ T7250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.267781][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.274966][ T7270] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.590413][ T7265] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.936610][ T7265] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.315498][ T5359] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  422.512261][ T5359] usb 7-1: Using ep0 maxpacket: 32
[  422.547105][ T5359] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  422.592257][ T5359] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  422.618097][ T7265] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.619904][ T5359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.707358][ T5359] usb 7-1: Product: syz
[  422.733961][ T5359] usb 7-1: Manufacturer: syz
[  422.758183][ T5359] usb 7-1: SerialNumber: syz
[  422.800366][T10229] loop4: detected capacity change from 0 to 256
[  422.821245][T10229] exfat: Deprecated parameter 'namecase'
[  422.848919][ T5359] usb 7-1: config 0 descriptor??
[  422.889288][T10229] exfat: Deprecated parameter 'utf8'
[  422.917675][ T5359] cdc_ether 7-1:0.0: skipping garbage
[  422.942623][T10229] exfat: Deprecated parameter 'namecase'
[  422.960565][ T5359] usb 7-1: No union descriptors
[  422.991957][ T5630] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  423.001052][ T5630] Bluetooth: hci4: Injecting HCI hardware error event
[  423.010207][   T50] Bluetooth: hci4: hardware error 0x00
[  423.026158][T10229] exfat: Deprecated parameter 'utf8'
[  423.042356][ T5359] usb 7-1: unsupported MDLM descriptors
[  423.169480][T10229] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  423.227573][ T5359] usb 7-1: USB disconnect, device number 8
[  423.257513][T10229] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  423.259384][ T7265] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.399735][   T30] audit: type=1804 audit(2000000217.539:19): pid=10229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1061" name=2F6E6577726F6F742F36312FE91F7189591E9233614B2F627573 dev="loop4" ino=1048697 res=1 errno=0
[  423.575271][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1063'.
[  424.006617][T10246] 8021q: adding VLAN 0 to HW filter on device bond1
[  424.164607][T10258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1065'.
[  425.071139][   T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  425.753642][   T30] audit: type=1804 audit(2000000219.749:20): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1068" name="/newroot/65/file0" dev="tmpfs" ino=376 res=1 errno=0
[  430.315044][T10102] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.343195][T10102] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.372607][T10102] bridge_slave_0: entered allmulticast mode
[  430.422396][T10102] bridge_slave_0: entered promiscuous mode
[  430.537719][T10297] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  430.546528][T10297] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  430.557040][T10297] netdevsim netdevsim9: Falling back to sysfs fallback for: .
[  430.650565][T10303] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  430.849992][T10102] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.922335][T10102] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.954299][T10102] bridge_slave_1: entered allmulticast mode
[  430.980032][T10102] bridge_slave_1: entered promiscuous mode
[  432.013121][T10313] loop6: detected capacity change from 0 to 256
[  432.164305][T10313] exfat: Deprecated parameter 'namecase'
[  432.194369][T10313] exfat: Deprecated parameter 'utf8'
[  432.219951][T10313] exfat: Deprecated parameter 'namecase'
[  432.277969][T10313] exfat: Deprecated parameter 'utf8'
[  432.396046][T10313] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  432.459241][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1077'.
[  432.463752][T10313] exFAT-fs (loop6): failed to test first cluster bit of root dir(5)
[  432.601202][   T30] audit: type=1804 audit(2000000226.749:21): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1075" name=2F6E6577726F6F742F37382FE91F7189591E9233614B2F627573 dev="loop6" ino=1048698 res=1 errno=0
[  433.019973][ T7265] bond1 (unregistering): (slave bond0): Releasing active interface
[  433.044020][ T7265] bond0 (unregistering): Released all slaves
[  433.127814][ T7265] bond1 (unregistering): Released all slaves
[  433.872435][T10347] loop9: detected capacity change from 0 to 512
[  435.343771][T10102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.649218][T10347] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  436.273201][T10325] bond1: option mode: unable to set because the bond device is up
[  436.314783][T10102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.403339][ T8306] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.727210][T10102] team0: Port device team_slave_0 added
[  437.714458][ T5755] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  438.342501][T10102] team0: Port device team_slave_1 added
[  438.357291][ T9830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.498854][ T5755] usb 10-1: Using ep0 maxpacket: 8
[  438.529710][ T5755] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  438.619373][ T5755] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  438.696045][ T5755] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  438.756530][ T5755] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  438.833776][ T5755] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  438.863797][ T7265] hsr_slave_0: left promiscuous mode
[  438.866016][ T5755] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.933698][ T7265] hsr_slave_1: left promiscuous mode
[  439.046739][ T7265] veth1_macvtap: left promiscuous mode
[  439.102526][ T7265] veth0_macvtap: left promiscuous mode
[  439.126472][ T7265] veth1_vlan: left promiscuous mode
[  439.150142][ T5755] usb 10-1: GET_CAPABILITIES returned 0
[  439.162562][ T7265] veth0_vlan: left promiscuous mode
[  439.185344][ T5755] usbtmc 10-1:16.0: can't read capabilities
[  440.900858][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  440.907283][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  441.555668][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  441.583399][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  441.598650][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  441.622507][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  441.636805][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  441.640963][ T5755] usb 10-1: USB disconnect, device number 4
[  442.517705][T10420] loop9: detected capacity change from 0 to 256
[  442.558082][T10420] exfat: Deprecated parameter 'namecase'
[  442.586895][T10420] exfat: Deprecated parameter 'utf8'
[  442.621976][T10420] exfat: Deprecated parameter 'namecase'
[  442.651880][T10420] exfat: Deprecated parameter 'utf8'
[  442.709919][T10420] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  442.760627][T10420] exFAT-fs (loop9): failed to test first cluster bit of root dir(5)
[  442.827328][   T30] audit: type=1804 audit(2000000236.969:22): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1097" name=2F6E6577726F6F742F37322FE91F7189591E9233614B2F627573 dev="loop9" ino=1048699 res=1 errno=0
[  443.458339][T10102] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.478342][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.478391][T10102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.492873][T10102] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.568350][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.637338][T10102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  443.712009][ T5630] Bluetooth: hci2: command tx timeout
[  444.165913][T10102] hsr_slave_0: entered promiscuous mode
[  444.205283][T10102] hsr_slave_1: entered promiscuous mode
[  444.232034][T10102] debugfs: 'hsr0' already exists in 'hsr'
[  444.279706][T10102] Cannot create hsr debugfs directory
[  444.289160][T10437] 9pnet_virtio: no channels available for device syz
[  444.322849][T10432] pim6reg: entered allmulticast mode
[  445.126139][T10445] loop4: detected capacity change from 0 to 32768
[  445.133601][T10445] btrfs: Deprecated parameter 'usebackuproot'
[  445.139668][T10445] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  445.173580][T10445] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1104 (10445)
[  445.215944][T10445] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  445.226081][T10445] BTRFS info (device loop4): using crc32c checksum algorithm
[  445.306788][ T7266] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  445.393502][T10445] BTRFS error (device loop4): failed to load root extent
[  445.401341][T10445] BTRFS warning (device loop4): try to load backup roots slot 1
[  445.413306][ T7266] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  445.440993][T10445] BTRFS warning (device loop4): couldn't read tree root
[  445.448020][T10445] BTRFS warning (device loop4): try to load backup roots slot 2
[  445.456094][ T7243] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  445.549359][T10445] BTRFS warning (device loop4): couldn't read tree root
[  445.556443][T10445] BTRFS warning (device loop4): try to load backup roots slot 3
[  445.583568][T10445] BTRFS info (device loop4): rebuilding free space tree
[  445.610426][T10445] BTRFS info (device loop4): checking UUID tree
[  445.617803][T10445] BTRFS info (device loop4): enabling ssd optimizations
[  445.624843][T10445] BTRFS info (device loop4): turning on async discard
[  445.631745][T10445] BTRFS info (device loop4): enabling free space tree
[  445.638527][T10445] BTRFS info (device loop4): force clearing of disk cache
[  445.645693][T10445] BTRFS info (device loop4): enabling auto defrag
[  445.652163][T10445] BTRFS info (device loop4): trying to use backup root at mount time
[  445.660250][T10445] BTRFS info (device loop4): use zstd compression, level 3
[  445.791266][ T5630] Bluetooth: hci2: command tx timeout
[  448.219593][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1107'.
[  449.148059][   T50] Bluetooth: hci2: command tx timeout
[  450.085829][ T8329] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  450.594226][T10477] fuse: Bad value for 'fd'
[  451.231181][ T5630] Bluetooth: hci2: command tx timeout
[  460.164342][ T7265] bridge_slave_1: left allmulticast mode
[  460.176661][ T7265] bridge_slave_1: left promiscuous mode
[  460.203877][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.245619][ T7265] bridge_slave_0: left allmulticast mode
[  460.266446][ T7265] bridge_slave_0: left promiscuous mode
[  460.284043][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.317643][ T7265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  461.371193][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1117'.
[  461.408121][ T7265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.485076][ T7265] bond0 (unregistering): Released all slaves
[  461.879771][ T7265] hsr_slave_0: left promiscuous mode
[  461.912321][ T7265] hsr_slave_1: left promiscuous mode
[  461.937466][T10566] loop4: detected capacity change from 0 to 128
[  461.952045][ T7265] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.990729][ T7265] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.983853][ T7265] team0 (unregistering): Port device team_slave_1 removed
[  465.073757][ T7265] team0 (unregistering): Port device team_slave_0 removed
[  467.168488][T10399] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.195832][T10399] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.240806][T10399] bridge_slave_0: entered allmulticast mode
[  467.257567][T10399] bridge_slave_0: entered promiscuous mode
[  467.274017][T10399] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.284778][T10399] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.298866][T10399] bridge_slave_1: entered allmulticast mode
[  467.324716][T10399] bridge_slave_1: entered promiscuous mode
[  467.542921][T10604] loop4: detected capacity change from 0 to 1024
[  467.674719][T10102] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  467.737860][T10102] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  467.774965][T10102] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  467.843197][T10102] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  467.890465][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.937323][T10102] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  468.044408][T10102] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  468.079696][T10102] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  468.715238][T10102] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  468.775633][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  469.125857][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1138'.
[  469.239887][   T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  469.252842][   T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  469.268542][   T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  469.280199][   T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  469.288002][   T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  469.494093][T10399] team0: Port device team_slave_0 added
[  469.545481][T10399] team0: Port device team_slave_1 added
[  469.882292][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.136925][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.016962][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.114848][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.148479][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.280749][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.321044][ T5630] Bluetooth: hci6: command tx timeout
[  471.730795][T10399] hsr_slave_0: entered promiscuous mode
[  471.754282][T10399] hsr_slave_1: entered promiscuous mode
[  471.891960][T10399] debugfs: 'hsr0' already exists in 'hsr'
[  471.914605][T10399] Cannot create hsr debugfs directory
[  474.093166][ T5630] Bluetooth: hci6: command tx timeout
[  476.113113][ T5630] Bluetooth: hci6: command tx timeout
[  476.212750][T10673] pim6reg: entered allmulticast mode
[  476.800308][T10689] loop9: detected capacity change from 0 to 128
[  476.865617][T10689] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  478.119120][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1
[  478.191420][ T5630] Bluetooth: hci6: command tx timeout
[  478.411018][ T5754] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  478.592158][ T5754] usb 5-1: Using ep0 maxpacket: 16
[  478.642058][ T5754] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  478.683233][ T5754] usb 5-1: config 1 has no interface number 0
[  478.708908][ T5754] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  478.752660][ T5754] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  478.794213][ T5754] usb 5-1: config 1 interface 105 has no altsetting 0
[  478.865321][ T5754] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  478.909772][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  478.966488][ T5754] usb 5-1: Product: syz
[  478.993335][ T5754] usb 5-1: Manufacturer: syz
[  479.020411][ T5754] usb 5-1: SerialNumber: syz
[  479.078672][T10699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  479.103730][T10699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  479.411296][T10713] usb usb8: usbfs: process 10713 (syz.6.1151) did not claim interface 0 before use
[  480.401454][T10699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  480.458527][T10699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  480.920149][ T5754] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  480.986693][ T5754] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  483.308668][   T30] audit: type=1326 audit(2000000277.449:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4ff9e019 code=0x7ffc0000
[  483.378293][ T5754] aqc111 5-1:1.105 eth14: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 7e:a9:6a:ca:e9:7c
[  483.419171][   T30] audit: type=1326 audit(2000000277.479:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.3.1156" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4ff9e019 code=0x7ffc0000
[  483.463073][T10738] loop6: detected capacity change from 0 to 128
[  483.513342][T10738] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  483.533574][   T30] audit: type=1326 audit(2000000277.479:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.3.1156" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4ff9e019 code=0x7ffc0000
[  483.578408][T10738] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  483.657146][   T30] audit: type=1326 audit(2000000277.479:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.3.1156" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4ff9e019 code=0x7ffc0000
[  483.738388][  T187] usb 5-1: USB disconnect, device number 5
[  483.762069][  T187] aqc111 5-1:1.105 eth14: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  483.857568][   T30] audit: type=1326 audit(2000000277.479:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda4ff9e019 code=0x7ffc0000
[  484.034916][   T30] audit: type=1326 audit(2000000277.479:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4ff9e019 code=0x7ffc0000
[  484.186021][   T30] audit: type=1326 audit(2000000277.479:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4ff9e019 code=0x7ffc0000
[  484.263953][ T8457] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  484.298347][  T187] aqc111 5-1:1.105 eth14 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  484.334083][  T187] aqc111 5-1:1.105 eth14 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  484.361025][  T187] aqc111 5-1:1.105 eth14 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  484.394339][   T30] audit: type=1326 audit(2000000277.479:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.3.1156" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda4ff9e019 code=0x7ffc0000
[  484.465527][T10750] dyndbg: bad flag-op n, at start of net/sc
[  484.490293][ T7220] bridge_slave_1: left allmulticast mode
[  484.507001][ T7220] bridge_slave_1: left promiscuous mode
[  484.522167][T10750] dyndbg: flags parse failed
[  484.528629][   T30] audit: type=1326 audit(2000000277.489:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.3.1156" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fda4ff9e019 code=0x7ffc0000
[  484.571129][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.646082][ T7220] bridge_slave_0: left allmulticast mode
[  484.680955][ T7220] bridge_slave_0: left promiscuous mode
[  484.702090][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.740387][T10757] loop4: detected capacity change from 0 to 160
[  484.848689][T10757] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  485.246803][T10763] loop9: detected capacity change from 0 to 160
[  485.367351][T10763] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  485.404997][ T7220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  485.519107][ T7220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  485.632893][ T7220] bond0 (unregistering): Released all slaves
[  485.797225][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2
[  488.835305][ T7220] hsr_slave_0: left promiscuous mode
[  488.875434][ T7220] hsr_slave_1: left promiscuous mode
[  488.897765][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.947721][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.998870][T10791] loop6: detected capacity change from 0 to 128
[  489.085869][T10791] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  489.168350][T10791] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  489.736184][ T8457] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  490.278081][ T7220] team0 (unregistering): Port device team_slave_1 removed
[  491.061045][T10809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1173'.
[  491.453149][ T7220] team0 (unregistering): Port device team_slave_0 removed
[  492.578487][T10822] loop4: detected capacity change from 0 to 32768
[  492.619147][T10822] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  492.627574][T10822] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  492.676953][T10822] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  492.693153][ T5754] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  492.748673][ T5754] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  493.014122][ T5754] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 265ms
[  493.051098][ T5754] gfs2: fsid=syz:syz.0: jid=0: Done
[  493.057334][T10822] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  493.162651][T10822] gfs2: fsid=syz:syz.0: found 1 quota changes
[  493.645807][T10399] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  493.707996][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  493.736871][T10628] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.777271][T10628] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.821064][T10628] bridge_slave_0: entered allmulticast mode
[  493.868674][T10628] bridge_slave_0: entered promiscuous mode
[  493.905747][T10628] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.935014][T10628] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.961309][T10628] bridge_slave_1: entered allmulticast mode
[  493.981289][T10628] bridge_slave_1: entered promiscuous mode
[  494.008338][T10399] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  494.088209][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  494.130615][T10399] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  494.202860][ T8329] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[  494.207180][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  494.313277][ T8329] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  494.377923][T10399] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  494.380690][ T8329] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:8329 [syz-executor] gfs2_quota_sync+0x322/0x570
[  494.489655][ T8329] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  494.544598][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  494.585607][ T8329] CPU: 1 UID: 0 PID: 8329 Comm: syz-executor Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  494.585663][ T8329] Tainted: [S]=CPU_OUT_OF_SPEC
[  494.585678][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  494.585700][ T8329] Call Trace:
[  494.585711][ T8329]  <TASK>
[  494.585726][ T8329]  dump_stack_lvl+0x100/0x190
[  494.585773][ T8329]  gfs2_withdraw.cold+0xa/0xed
[  494.585817][ T8329]  inode_go_instantiate+0xd56/0x1560
[  494.585863][ T8329]  ? __pfx_inode_go_instantiate+0x10/0x10
[  494.585908][ T8329]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.585966][ T8329]  gfs2_instantiate+0x16c/0x250
[  494.586019][ T8329]  gfs2_glock_wait+0x214/0x330
[  494.586078][ T8329]  ? __pfx_gfs2_glock_wait+0x10/0x10
[  494.586141][ T8329]  gfs2_glock_nq+0xa03/0x14f0
[  494.586205][ T8329]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.586259][ T8329]  do_sync+0x705/0xd60
[  494.586309][ T8329]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.586370][ T8329]  ? __pfx_do_sync+0x10/0x10
[  494.586420][ T8329]  ? __pfx_bh_get+0x10/0x10
[  494.586471][ T8329]  ? qd_grab_sync+0x415/0x560
[  494.586530][ T8329]  ? gfs2_quota_sync+0x322/0x570
[  494.586582][ T8329]  ? gfs2_quota_sync+0x278/0x570
[  494.586633][ T8329]  ? gfs2_quota_sync+0x278/0x570
[  494.586684][ T8329]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.586741][ T8329]  gfs2_quota_sync+0x322/0x570
[  494.586810][ T8329]  gfs2_sync_fs+0x44/0xb0
[  494.586850][ T8329]  ? __pfx_gfs2_sync_fs+0x10/0x10
[  494.586891][ T8329]  sync_filesystem+0x111/0x290
[  494.586931][ T8329]  generic_shutdown_super+0x86/0x360
[  494.586979][ T8329]  kill_block_super+0x3b/0xa0
[  494.587020][ T8329]  gfs2_kill_sb+0x4a9/0x590
[  494.587073][ T8329]  deactivate_locked_super+0xc1/0x1b0
[  494.587121][ T8329]  deactivate_super+0xe7/0x110
[  494.587168][ T8329]  cleanup_mnt+0x21f/0x450
[  494.587224][ T8329]  task_work_run+0x150/0x240
[  494.587266][ T8329]  ? __pfx_task_work_run+0x10/0x10
[  494.587300][ T8329]  ? find_held_lock+0x2b/0x80
[  494.587356][ T8329]  ? __might_fault+0xc5/0x140
[  494.587409][ T8329]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.587465][ T8329]  exit_to_user_mode_loop+0x1d8/0x6f0
[  494.587511][ T8329]  ? srso_alias_return_thunk+0x5/0xfbef5
[  494.587558][ T8329]  ? rcu_is_watching+0x12/0xc0
[  494.587618][ T8329]  do_syscall_64+0x666/0x870
[  494.587675][ T8329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.587714][ T8329] RIP: 0033:0x7f854039f257
[  494.587745][ T8329] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  494.587782][ T8329] RSP: 002b:00007ffc9bc75438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  494.587818][ T8329] RAX: 0000000000000000 RBX: 00007f854043445c RCX: 00007f854039f257
[  494.587844][ T8329] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9bc754f0
[  494.587868][ T8329] RBP: 00007ffc9bc754f0 R08: 00007ffc9bc764f0 R09: 00000000ffffffff
[  494.587893][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9bc76580
[  494.587918][ T8329] R13: 00007f854043445c R14: 00000000000787bc R15: 00007ffc9bc765c0
[  494.587968][ T8329]  </TASK>
[  494.994678][ T8329] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  496.616888][T10628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.700650][T10628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.814100][T10628] team0: Port device team_slave_0 added
[  496.848030][T10628] team0: Port device team_slave_1 added
[  497.027138][T10628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.035919][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.106631][T10628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.139196][T10628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.161975][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.193852][T10628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.627064][T10628] hsr_slave_0: entered promiscuous mode
[  497.652741][T10628] hsr_slave_1: entered promiscuous mode
[  497.678171][T10628] debugfs: 'hsr0' already exists in 'hsr'
[  497.715268][T10628] Cannot create hsr debugfs directory
[  498.089347][T10876] syzkaller0: entered promiscuous mode
[  498.107336][T10876] syzkaller0: entered allmulticast mode
[  498.693477][T10399] 8021q: adding VLAN 0 to HW filter on device bond0
[  499.024936][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1198'.
[  501.453208][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  501.459567][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  502.822627][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  502.837835][   T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  502.854468][   T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  502.877672][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  502.888061][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  503.533656][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3
[  504.991987][   T50] Bluetooth: hci1: command tx timeout
[  505.559369][T10628] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  505.629569][T10628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  505.669912][T10628] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  505.746031][T10628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  505.853218][T10628] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  505.907123][T10628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  505.936917][T10628] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  506.075954][T10628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  506.458544][   T30] audit: type=1804 audit(2000000300.569:32): pid=10955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1206" name="/newroot/94/file0" dev="tmpfs" ino=537 res=1 errno=0
[  507.073011][   T50] Bluetooth: hci1: command tx timeout
[  507.479425][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'.
[  508.770816][T10974] syzkaller0: entered promiscuous mode
[  508.792740][T10974] syzkaller0: entered allmulticast mode
[  509.151038][   T50] Bluetooth: hci1: command tx timeout
[  511.235274][   T50] Bluetooth: hci1: command tx timeout
[  513.418890][ T7243] bridge_slave_1: left allmulticast mode
[  513.670195][ T7243] bridge_slave_1: left promiscuous mode
[  513.676860][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.694842][ T7243] bridge_slave_0: left allmulticast mode
[  513.711101][ T7243] bridge_slave_0: left promiscuous mode
[  513.718395][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.039686][ T7243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  516.093803][ T7243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.109924][ T7243] bond0 (unregistering): Released all slaves
[  519.685340][T11082] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1232'.
[  520.242630][T11080] syzkaller0: entered promiscuous mode
[  520.261019][T11080] syzkaller0: entered allmulticast mode
[  523.515267][T11122] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1245'.
[  528.620689][T11156] loop5: detected capacity change from 0 to 2207
[  528.694102][T11156] loop5: detected capacity change from 2207 to 3679
[  529.306367][T11158] Buffer I/O error on dev loop5, logical block 459, async page read
[  529.601427][T11158] Buffer I/O error on dev loop5, logical block 459, async page read
[  529.780315][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  529.791836][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  529.804318][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  529.819071][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  529.836153][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  530.485453][T11178] loop6: detected capacity change from 0 to 256
[  530.488123][T11176] loop9: detected capacity change from 0 to 4096
[  530.500502][T11178] vfat: Bad value for 'gid'
[  530.526152][T11178] vfat: Bad value for 'gid'
[  530.531664][T11176] ext3: Unknown parameter 'seclabel'
[  531.199465][T11181] input: syz1 as /devices/virtual/input/input23
[  531.871947][ T5630] Bluetooth: hci2: command tx timeout
[  533.366064][ T7243] hsr_slave_0: left promiscuous mode
[  533.396190][ T7243] hsr_slave_1: left promiscuous mode
[  533.418198][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  533.461519][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.965316][ T5630] Bluetooth: hci2: command tx timeout
[  534.642065][   T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  534.676304][   T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  534.685589][   T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  534.700451][   T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  534.711239][   T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  536.041353][   T50] Bluetooth: hci2: command tx timeout
[  536.237521][ T7243] team0 (unregistering): Port device team_slave_1 removed
[  536.290367][ T7243] team0 (unregistering): Port device team_slave_0 removed
[  536.750957][   T50] Bluetooth: hci7: command tx timeout
[  538.190317][   T50] Bluetooth: hci2: command tx timeout
[  538.515231][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4
[  538.830988][   T50] Bluetooth: hci7: command tx timeout
[  539.960988][T10912] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.968371][T10912] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.976237][T10912] bridge_slave_0: entered allmulticast mode
[  539.996605][T10912] bridge_slave_0: entered promiscuous mode
[  540.031130][T10912] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.078464][T10912] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.149127][T10912] bridge_slave_1: entered allmulticast mode
[  540.183735][T10912] bridge_slave_1: entered promiscuous mode
[  540.921020][   T50] Bluetooth: hci7: command tx timeout
[  541.227068][T10912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.312732][T10912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.556306][T11317] futex_wake_op: syz.6.1288 tries to shift op by 144; fix this program
[  542.586702][T10912] team0: Port device team_slave_0 added
[  542.610435][T10912] team0: Port device team_slave_1 added
[  543.051210][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1289'.
[  543.070675][   T50] Bluetooth: hci7: command tx timeout
[  544.437054][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5
[  544.697121][T10912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  544.712192][T10912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.804888][T10912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  544.868075][T10912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  544.907499][T10912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.942691][T10912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.208250][T10912] hsr_slave_0: entered promiscuous mode
[  546.215442][T10912] hsr_slave_1: entered promiscuous mode
[  546.225105][T10912] debugfs: 'hsr0' already exists in 'hsr'
[  546.240872][T10912] Cannot create hsr debugfs directory
[  548.396653][T11418] capability: warning: `syz.9.1306' uses deprecated v2 capabilities in a way that may be insecure
[  549.114907][T11165] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.150341][T11165] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.176972][T11165] bridge_slave_0: entered allmulticast mode
[  549.207230][T11165] bridge_slave_0: entered promiscuous mode
[  549.278747][T11437] loop9: detected capacity change from 0 to 4096
[  549.661909][T11443] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  549.675992][ T7243] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.725971][T11445] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1313'.
[  549.897354][T11165] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.921339][T11165] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.941501][T11165] bridge_slave_1: entered allmulticast mode
[  549.966991][T11165] bridge_slave_1: entered promiscuous mode
[  550.534013][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1314'.
[  552.498259][T11437] netlink: 204 bytes leftover after parsing attributes in process `syz.9.1311'.
[  552.705634][ T7243] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.793240][T11165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  552.869402][T11165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  553.423094][ T7243] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.922319][T11468] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1319'.
[  554.411121][T11216] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.427817][T11216] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.468724][T11216] bridge_slave_0: entered allmulticast mode
[  554.488313][T11216] bridge_slave_0: entered promiscuous mode
[  555.484407][   T30] audit: type=1800 audit(2000000349.629:33): pid=11481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1323" name="bus" dev="ramfs" ino=30925 res=0 errno=0
[  555.549002][ T7243] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.613961][T11165] team0: Port device team_slave_0 added
[  555.649743][T11165] team0: Port device team_slave_1 added
[  555.711357][T11216] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.721218][T11216] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.728894][T11216] bridge_slave_1: entered allmulticast mode
[  555.770277][T11216] bridge_slave_1: entered promiscuous mode
[  555.854262][T11165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.871561][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.925714][T11165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.629389][T11165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.666176][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  556.696243][T11165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.168954][T11216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  557.213439][T11216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  557.919533][T11216] team0: Port device team_slave_0 added
[  558.036309][T11512] tmpfs: Unknown parameter 'quot'
[  558.715502][T11216] team0: Port device team_slave_1 added
[  558.760361][T11165] hsr_slave_0: entered promiscuous mode
[  558.793367][T11165] hsr_slave_1: entered promiscuous mode
[  558.804741][T11165] debugfs: 'hsr0' already exists in 'hsr'
[  558.820993][T11165] Cannot create hsr debugfs directory
[  559.120298][T11216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  559.127344][T11216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  559.153776][T11216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  559.797277][T11527] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1332'.
[  560.211273][T11216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  560.253009][T11216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  560.297196][T11533] loop9: detected capacity change from 0 to 256
[  560.344700][T11216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  560.367005][T11533] vfat: Deprecated parameter 'posix'
[  560.423020][T11533] FAT-fs: "posix" option is obsolete, not supported now
[  560.526662][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  560.553146][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  560.564585][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  560.576016][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  560.583843][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  560.958019][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6
[  562.716926][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  562.740983][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  562.870953][   T50] Bluetooth: hci5: command tx timeout
[  563.018879][ T7243] bridge_slave_1: left allmulticast mode
[  563.065065][ T7243] bridge_slave_1: left promiscuous mode
[  563.140079][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.488764][T11559] loop9: detected capacity change from 0 to 32768
[  563.496545][T11559] btrfs: Deprecated parameter 'usebackuproot'
[  563.502711][T11559] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  563.522241][T11559] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1337 (11559)
[  563.565143][ T7243] bridge_slave_0: left allmulticast mode
[  563.617277][ T7243] bridge_slave_0: left promiscuous mode
[  563.664434][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.040034][T11559] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  564.050847][T11559] BTRFS info (device loop9): using crc32c checksum algorithm
[  564.149769][T11560] loop6: detected capacity change from 0 to 160
[  564.181818][T11560] ISOFS: Logical zone size(1024) < hardware blocksize(2048)
[  564.280753][ T7243] bridge_slave_1: left allmulticast mode
[  564.301690][ T7230] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  564.323224][ T7243] bridge_slave_1: left promiscuous mode
[  564.329258][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.354927][T11559] BTRFS error (device loop9): failed to load root extent
[  564.362020][T11559] BTRFS warning (device loop9): try to load backup roots slot 1
[  564.372556][ T7268] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  564.437713][T11559] BTRFS warning (device loop9): couldn't read tree root
[  564.445645][T11559] BTRFS warning (device loop9): try to load backup roots slot 2
[  564.454982][ T7230] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  564.470434][ T7243] bridge_slave_0: left allmulticast mode
[  564.483655][T11559] BTRFS warning (device loop9): couldn't read tree root
[  564.491385][T11559] BTRFS warning (device loop9): try to load backup roots slot 3
[  564.509796][T11559] BTRFS info (device loop9): rebuilding free space tree
[  564.510264][ T7243] bridge_slave_0: left promiscuous mode
[  564.563247][T11559] BTRFS info (device loop9): checking UUID tree
[  564.567570][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.582921][T11559] BTRFS info (device loop9): enabling ssd optimizations
[  564.589876][T11559] BTRFS info (device loop9): turning on async discard
[  564.598181][T11559] BTRFS info (device loop9): enabling free space tree
[  564.605016][T11559] BTRFS info (device loop9): force clearing of disk cache
[  564.612399][T11559] BTRFS info (device loop9): enabling auto defrag
[  564.618839][T11559] BTRFS info (device loop9): trying to use backup root at mount time
[  564.626948][T11559] BTRFS info (device loop9): use zstd compression, level 3
[  564.657124][ T7243] pim6reg: left allmulticast mode
[  564.910929][   T50] Bluetooth: hci5: command tx timeout
[  565.598907][ T8306] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  566.714214][ T7243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  566.751834][ T7243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  566.865966][ T7243] bond0 (unregistering): Released all slaves
[  567.014150][   T50] Bluetooth: hci5: command tx timeout
[  567.848575][T11597] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1344'.
[  568.253856][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1345'.
[  569.186401][   T50] Bluetooth: hci5: command tx timeout
[  569.466866][ T7243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  569.492893][ T7243] bond0 (unregistering): Released all slaves
[  569.539391][ T7243] bond1 (unregistering): Released all slaves
[  569.781032][T11605] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1347'.
[  569.912255][T11216] hsr_slave_0: entered promiscuous mode
[  569.950370][T11216] hsr_slave_1: entered promiscuous mode
[  570.780569][T11216] debugfs: 'hsr0' already exists in 'hsr'
[  570.789787][T11216] Cannot create hsr debugfs directory
[  572.159633][ T7243] hsr_slave_0: left promiscuous mode
[  572.178594][ T7243] hsr_slave_1: left promiscuous mode
[  572.196978][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  572.234900][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  572.297615][ T7243] hsr_slave_0: left promiscuous mode
[  572.317129][ T7243] hsr_slave_1: left promiscuous mode
[  572.334600][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  572.356520][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  572.377454][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  572.400666][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  572.444087][ T7243] veth1_macvtap: left promiscuous mode
[  572.453482][ T7243] veth0_macvtap: left promiscuous mode
[  572.459592][ T7243] veth1_vlan: left promiscuous mode
[  572.466899][ T7243] veth0_vlan: left promiscuous mode
[  573.074749][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1356'.
[  574.563791][ T7243] team0 (unregistering): Port device team_slave_1 removed
[  574.664199][ T7243] team0 (unregistering): Port device team_slave_0 removed
[  576.863128][T11656] loop9: detected capacity change from 0 to 32768
[  576.870947][T11656] btrfs: Deprecated parameter 'usebackuproot'
[  576.877031][T11656] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  576.894828][T11656] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1360 (11656)
[  576.915065][T11656] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  576.925187][T11656] BTRFS info (device loop9): using crc32c checksum algorithm
[  577.021312][ T7265] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  577.075603][T11656] BTRFS error (device loop9): failed to load root extent
[  577.083399][T11656] BTRFS warning (device loop9): try to load backup roots slot 1
[  577.092415][ T7265] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  577.120741][T11656] BTRFS warning (device loop9): couldn't read tree root
[  577.127749][T11656] BTRFS warning (device loop9): try to load backup roots slot 2
[  577.135737][ T7267] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  577.193157][T11656] BTRFS warning (device loop9): couldn't read tree root
[  577.200130][T11656] BTRFS warning (device loop9): try to load backup roots slot 3
[  577.226193][T11656] BTRFS info (device loop9): rebuilding free space tree
[  577.260939][T11656] BTRFS info (device loop9): checking UUID tree
[  577.270590][T11656] BTRFS info (device loop9): enabling ssd optimizations
[  577.277980][T11656] BTRFS info (device loop9): turning on async discard
[  577.284946][T11656] BTRFS info (device loop9): enabling free space tree
[  577.292586][T11656] BTRFS info (device loop9): force clearing of disk cache
[  577.299690][T11656] BTRFS info (device loop9): enabling auto defrag
[  577.306149][T11656] BTRFS info (device loop9): trying to use backup root at mount time
[  577.314233][T11656] BTRFS info (device loop9): use zstd compression, level 3
[  577.839957][ T8306] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  578.668032][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'.
[  580.053128][T11701] UDC core: g1: couldn't find an available UDC or it's busy
[  580.768941][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7
[  581.172685][T11718] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1370'.
[  582.132346][T11727] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  582.287489][T11538] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.292529][T11727] loop6: detected capacity change from 0 to 1024
[  582.311575][T11538] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.325452][T11538] bridge_slave_0: entered allmulticast mode
[  582.349601][T11538] bridge_slave_0: entered promiscuous mode
[  582.372824][T11538] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.394763][T11538] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.398116][T11727] EXT4-fs: Invalid want_extra_isize 7
[  582.427143][T11538] bridge_slave_1: entered allmulticast mode
[  582.457621][T11538] bridge_slave_1: entered promiscuous mode
[  583.712582][T11538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  583.971218][T11538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.620663][T11731] ALSA: mixer_oss: invalid OSS volume ''
[  584.699306][T11538] team0: Port device team_slave_0 added
[  584.711217][T11737] ALSA: mixer_oss: invalid OSS volume ''
[  584.727217][T11538] team0: Port device team_slave_1 added
[  584.894202][T11538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.918268][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.999144][T11538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.035513][T11538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.087183][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  585.135850][T11538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.861657][T11761] Bluetooth: MGMT ver 1.23
[  586.701632][T11538] hsr_slave_0: entered promiscuous mode
[  586.722120][T11538] hsr_slave_1: entered promiscuous mode
[  586.732118][T11538] debugfs: 'hsr0' already exists in 'hsr'
[  586.741122][T11538] Cannot create hsr debugfs directory
[  587.010699][ T7243] bridge_slave_1: left allmulticast mode
[  587.024213][ T7243] bridge_slave_1: left promiscuous mode
[  587.033308][T11771] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  587.035323][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.075038][ T7243] bridge_slave_0: left allmulticast mode
[  587.091168][ T7243] bridge_slave_0: left promiscuous mode
[  587.097023][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.211163][T11771] ==================================================================
[  587.219238][T11771] BUG: KASAN: use-after-free in ignore_event+0x83e/0xaa0
[  587.226296][T11771] Read of size 2 at addr ffff88804705a1ac by task syz.6.1383/11771
[  587.234196][T11771] 
[  587.236524][T11771] CPU: 0 UID: 0 PID: 11771 Comm: syz.6.1383 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  587.236582][T11771] Tainted: [S]=CPU_OUT_OF_SPEC
[  587.236597][T11771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  587.236627][T11771] Call Trace:
[  587.236640][T11771]  <TASK>
[  587.236655][T11771]  dump_stack_lvl+0x100/0x190
[  587.236698][T11771]  print_report+0x13d/0x4b0
[  587.236755][T11771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  587.236802][T11771]  ? __virt_addr_valid+0x239/0x430
[  587.236851][T11771]  ? ignore_event+0x83e/0xaa0
[  587.236899][T11771]  kasan_report+0xdf/0x1c0
[  587.236941][T11771]  ? ignore_event+0x83e/0xaa0
[  587.236997][T11771]  ignore_event+0x83e/0xaa0
[  587.237046][T11771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  587.237093][T11771]  ? seq_buf_vprintf+0x124/0x1d0
[  587.237147][T11771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  587.237195][T11771]  ? trace_seq_printf+0x1f1/0x380
[  587.237252][T11771]  trace_event_printf+0xb5/0x160
[  587.237297][T11771]  ? __pfx_trace_event_printf+0x10/0x10
[  587.237347][T11771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  587.237403][T11771]  trace_raw_output_sys_enter+0x4c/0x60
[  587.237456][T11771]  print_trace_line+0x97d/0x1790
[  587.237515][T11771]  ? __pfx_print_trace_line+0x10/0x10
[  587.237577][T11771]  tracing_read_pipe+0x586/0xd60
[  587.237644][T11771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  587.237691][T11771]  ? rw_verify_area+0xce/0x6d0
[  587.237734][T11771]  ? __pfx_tracing_read_pipe+0x10/0x10
[  587.237791][T11771]  vfs_read+0x1e4/0xb40
[  587.237838][T11771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  587.237888][T11771]  ? __pfx_vfs_read+0x10/0x10
[  587.237935][T11771]  ? __fget_files+0x215/0x3d0
[  587.237996][T11771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  587.238043][T11771]  ? __fget_files+0x21f/0x3d0
[  587.238105][T11771]  ksys_read+0x12a/0x250
[  587.238152][T11771]  ? __pfx_ksys_read+0x10/0x10
[  587.238199][T11771]  ? trace_syscall_enter+0xd9/0x110
[  587.238251][T11771]  ? srso_alias_return_thunk+0x5/0xfbef5
[  587.238303][T11771]  do_syscall_64+0x115/0x870
[  587.238356][T11771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.238397][T11771] RIP: 0033:0x7f48cdd9e019
[  587.238426][T11771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.238465][T11771] RSP: 002b:00007f48cebb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  587.238503][T11771] RAX: ffffffffffffffda RBX: 00007f48ce025fa0 RCX: 00007f48cdd9e019
[  587.238530][T11771] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003
[  587.238556][T11771] RBP: 00007f48cde3500c R08: 0000000000000000 R09: 0000000000000000
[  587.238582][T11771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  587.238607][T11771] R13: 00007f48ce026038 R14: 00007f48ce025fa0 R15: 00007ffe7508fde8
[  587.238654][T11771]  </TASK>
[  587.238668][T11771] 
[  587.518588][T11771] The buggy address belongs to the physical page:
[  587.524989][T11771] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4705a
[  587.533749][T11771] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  587.540872][T11771] raw: 00fff00000000000 ffffea00009a6048 ffffea00007bac08 0000000000000000
[  587.549454][T11771] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  587.558027][T11771] page dumped because: kasan: bad access detected
[  587.564427][T11771] page_owner tracks the page as freed
[  587.569778][T11771] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x44dc0(GFP_KERNEL|__GFP_ZERO|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 9023, tgid 9022 (syz.6.770), ts 304966657874, free_ts 587151444439
[  587.589344][T11771]  post_alloc_hook+0xfd/0x120
[  587.594033][T11771]  get_page_from_freelist+0xf48/0x3530
[  587.599507][T11771]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  587.605413][T11771]  __alloc_pages_noprof+0xb/0x110
[  587.610452][T11771]  alloc_cpu_data+0x60/0x160
[  587.615053][T11771]  __rb_allocate_pages+0xbd5/0x10a0
[  587.620271][T11771]  ring_buffer_resize+0x6df/0x1e80
[  587.625381][T11771]  __tracing_resize_ring_buffer.part.0+0x52/0x1f0
[  587.631817][T11771]  tracing_update_buffers+0xd4/0xf0
[  587.637038][T11771]  event_enable_write+0x23f/0x340
[  587.642072][T11771]  vfs_write+0x2aa/0x1050
[  587.646411][T11771]  ksys_write+0x12a/0x250
[  587.650747][T11771]  do_syscall_64+0x115/0x870
[  587.655349][T11771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.661242][T11771] page last free pid 11775 tgid 11774 stack trace:
[  587.667731][T11771]  __free_frozen_pages+0x79f/0x1090
[  587.672937][T11771]  ring_buffer_subbuf_order_set+0x12d5/0x18a0
[  587.679026][T11771]  buffer_subbuf_size_write+0x182/0x280
[  587.684585][T11771]  vfs_write+0x2aa/0x1050
[  587.688925][T11771]  ksys_write+0x12a/0x250
[  587.693262][T11771]  do_syscall_64+0x115/0x870
[  587.697860][T11771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.703756][T11771] 
[  587.706068][T11771] Memory state around the buggy address:
[  587.711685][T11771]  ffff88804705a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  587.719740][T11771]  ffff88804705a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  587.727795][T11771] >ffff88804705a180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  587.735845][T11771]                                   ^
[  587.741206][T11771]  ffff88804705a200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  587.749263][T11771]  ffff88804705a280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
SYZFAIL: failed to recv rpc
[  587.757318][T11771] ==================================================================
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  588.211751][T11771] Disabling lock debugging due to kernel taint
[  588.267478][ T7243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  588.465627][ T7243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  588.540760][ T7243] bond0 (unregistering): Released all slaves
[  588.568750][T11165] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  588.594395][T11165] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  588.694424][ T7243] hsr_slave_0: left promiscuous mode
[  588.710300][ T7243] hsr_slave_1: left promiscuous mode
[  588.721488][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  588.761784][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  589.086989][ T7243] team0 (unregistering): Port device team_slave_1 removed
[  589.125833][ T7243] team0 (unregistering): Port device team_slave_0 removed
[  589.758457][ T7243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.877711][ T7243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.967484][ T7243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.046329][ T7243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.452261][ T7243] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.487538][ T7243] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.532521][ T7243] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.578674][ T7243] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.695413][ T7243] bridge_slave_1: left allmulticast mode
[  590.706320][ T7243] bridge_slave_1: left promiscuous mode
[  590.713158][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.726701][ T7243] bridge_slave_0: left allmulticast mode
[  590.732412][ T7243] bridge_slave_0: left promiscuous mode
[  590.738130][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.748690][ T7243] pim6reg: left allmulticast mode
[  590.757852][ T7243] bridge_slave_1: left allmulticast mode
[  590.763773][ T7243] bridge_slave_1: left promiscuous mode
[  590.769474][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.785674][ T7243] bridge_slave_0: left allmulticast mode
[  590.791439][ T7243] bridge_slave_0: left promiscuous mode
[  590.797137][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.808427][ T7243] bridge_slave_1: left allmulticast mode
[  590.814581][ T7243] bridge_slave_1: left promiscuous mode
[  590.820275][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.829073][ T7243] bridge_slave_0: left allmulticast mode
[  590.834965][ T7243] bridge_slave_0: left promiscuous mode
[  590.840659][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.853604][ T7243] bridge_slave_1: left allmulticast mode
[  590.859286][ T7243] bridge_slave_1: left promiscuous mode
[  590.865940][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.875416][ T7243] bridge_slave_0: left allmulticast mode
[  590.881157][ T7243] bridge_slave_0: left promiscuous mode
[  590.886857][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.047788][ T7243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  591.058619][ T7243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  591.069233][ T7243] bond0 (unregistering): Released all slaves
[  591.079491][ T7243] bond1 (unregistering): Released all slaves
[  591.134319][ T7243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  591.144752][ T7243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  591.158578][ T7243] bond0 (unregistering): Released all slaves
[  591.203648][ T7243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  591.214900][ T7243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  591.226261][ T7243] bond0 (unregistering): Released all slaves
[  591.297724][ T7243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  591.309170][ T7243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  591.323977][ T7243] bond0 (unregistering): Released all slaves
[  591.665723][ T7243] hsr_slave_0: left promiscuous mode
[  591.671591][ T7243] hsr_slave_1: left promiscuous mode
[  591.677372][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  591.684807][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.697005][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  591.704656][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  591.715520][ T7243] hsr_slave_0: left promiscuous mode
[  591.722453][ T7243] hsr_slave_1: left promiscuous mode
[  591.728776][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.738143][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  591.746517][ T7243] hsr_slave_0: left promiscuous mode
[  591.752478][ T7243] hsr_slave_1: left promiscuous mode
[  591.758246][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.766634][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  591.777961][ T7243] hsr_slave_0: left promiscuous mode
[  591.784053][ T7243] hsr_slave_1: left promiscuous mode
[  591.789826][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  591.797706][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.805709][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  591.813680][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  591.829366][ T7243] veth1_macvtap: left promiscuous mode
[  591.843455][ T7243] veth1_vlan: left promiscuous mode
[  591.848741][ T7243] veth0_vlan: left promiscuous mode
[  591.855224][ T7243] veth1_macvtap: left promiscuous mode
[  591.860744][ T7243] veth0_macvtap: left promiscuous mode
[  591.866514][ T7243] veth1_vlan: left promiscuous mode
[  591.872290][ T7243] veth0_vlan: left promiscuous mode
[  592.107206][ T7243] team0 (unregistering): Port device team_slave_1 removed
[  592.120977][ T7243] team0 (unregistering): Port device team_slave_0 removed
[  592.294883][ T7243] team0 (unregistering): Port device team_slave_1 removed
[  592.316016][ T7243] team0 (unregistering): Port device team_slave_0 removed
[  592.446140][ T7243] team0 (unregistering): Port device team_slave_1 removed
[  592.460707][ T7243] team0 (unregistering): Port device team_slave_0 removed
[  592.657446][ T7243] team0 (unregistering): Port device team_slave_1 removed
[  592.670699][ T7243] team0 (unregistering): Port device team_slave_0 removed
[  593.465344][ T5286] 8021q: adding VLAN 0 to HW filter on device eth8
[  593.889515][ T7243] bridge_slave_1: left allmulticast mode
[  593.901479][ T7243] bridge_slave_1: left promiscuous mode
[  593.907196][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.916553][ T7243] bridge_slave_0: left allmulticast mode
[  593.924342][ T7243] bridge_slave_0: left promiscuous mode
[  593.930053][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.987385][ T7243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  593.998524][ T7243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  594.008724][ T7243] bond0 (unregistering): Released all slaves
[  594.096524][ T7243] hsr_slave_0: left promiscuous mode
[  594.102408][ T7243] hsr_slave_1: left promiscuous mode
[  594.108177][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  594.117076][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  594.206762][ T7243] team0 (unregistering): Port device team_slave_1 removed
[  594.229886][ T7243] team0 (unregistering): Port device team_slave_0 removed
[  594.413984][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9
[  594.743118][ T5286] 8021q: adding VLAN 0 to HW filter on device eth10
[  595.058117][ T5286] 8021q: adding VLAN 0 to HW filter on device eth11
[  595.381675][ T5286] 8021q: adding VLAN 0 to HW filter on device eth12