last executing test programs:

6m13.065742753s ago: executing program 2 (id=6):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0)
unshare(0x2c020400)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0xc, @empty, 0x1}}, 0x6, 0x3}, &(0x7f0000000180)=0x90)

6m11.91497887s ago: executing program 2 (id=9):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, 0x5a, 0x1, 0x70bd28, 0x0, {}, [@generic]}, 0x14}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
dup3(r3, r1, 0x0)

6m10.827634494s ago: executing program 2 (id=10):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)

6m9.113187094s ago: executing program 2 (id=11):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa340e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x1, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x8}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x7000000)

6m1.766831975s ago: executing program 2 (id=19):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001d9000/0x6000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000feb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x20, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x1})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @sdr={0x47425247, 0x3}})

6m1.324577531s ago: executing program 2 (id=21):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b91f, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x7, 0x205, 0x1, 0xc}, 0xb, 0x800, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x5, {0xffff1c7a, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)

5m45.715493304s ago: executing program 32 (id=21):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b91f, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x7, 0x205, 0x1, 0xc}, 0xb, 0x800, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x5, {0xffff1c7a, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m53.857445126s ago: executing program 1 (id=606):
r0 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0x41, 0x20, 0xaefc}, &(0x7f0000000240)=0x18)

1m53.721821304s ago: executing program 1 (id=609):
syz_open_procfs(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4010000)
io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x7, 0x3)

1m50.760281517s ago: executing program 1 (id=627):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7, 0x3, [0x7, 0x2, 0x8]}, 0xe)

1m50.234950358s ago: executing program 1 (id=629):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

1m49.714734648s ago: executing program 1 (id=632):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000640)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x7, 0x1, 0x42}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3a, 0x29, 0x65, 0x0, 0x2, 0x6, 0x0, @loopback, @private=0xa010140}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8fd, 0x0, 0x4}, {"ff"}}}}}}}, 0x3b)

1m48.48699885s ago: executing program 1 (id=635):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

1m47.905926224s ago: executing program 33 (id=635):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

11.020458215s ago: executing program 0 (id=928):
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)

9.441037028s ago: executing program 4 (id=932):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)

9.119532917s ago: executing program 0 (id=934):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000500)={0x20, 0xf, 0x2, "5cf0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, 'W@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000200)={0x20, 0x14, 0x1, '^'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

7.853575501s ago: executing program 5 (id=936):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = fcntl$dupfd(r1, 0x406, r1)
recvmmsg$unix(r4, &(0x7f0000005280), 0x400018e, 0x10040, 0x0)

7.628744364s ago: executing program 4 (id=937):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3010000}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.531329929s ago: executing program 3 (id=938):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
fcntl$setlease(r4, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

6.593319675s ago: executing program 5 (id=939):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x8001)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = epoll_create1(0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000380)={{0x1, 0x2, 0x0, 0x3, 0x6}, 0x7, 0x84a, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x8000000000000000, 0x1, 0x2})
listen(r2, 0x3)
accept4$bt_l2cap(r2, &(0x7f0000000200), 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x10000005})
fcntl$getownex(r0, 0x10, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

5.517455777s ago: executing program 3 (id=940):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
fchdir(r2)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x2000000, 0x0)
r3 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00')
fchdir(r3)
capset(&(0x7f0000a31000)={0x20080522}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x18ba00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9)
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f00001bc000/0x2000)=nil})

5.166716958s ago: executing program 4 (id=941):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{0xeeeea000, 0x3000, 0xb, 0x6, 0x7, 0xff, 0xfe, 0x79, 0x0, 0xff, 0x4, 0x2}, {0x3000, 0x0, 0x10, 0x5, 0x5, 0x2, 0x8, 0xb, 0x82, 0x3, 0x27, 0xf}, {0xeeee0002, 0x10000, 0x10, 0x6, 0x5, 0x0, 0xa, 0x7, 0x5, 0x2, 0x0, 0x9}, {0x80a0000, 0x0, 0xd, 0x6, 0x8, 0x1, 0x1, 0x9, 0x8, 0x28, 0x7, 0xc5}, {0xe6e61000, 0x100000, 0x0, 0x6, 0x7, 0x0, 0xfb, 0xf8, 0xf7, 0x4, 0x4, 0xff}, {0xdddd1000, 0xffff3000, 0xe, 0xc, 0x7b, 0x6, 0x8, 0x5, 0x82, 0xc4, 0x2, 0x89}, {0xd000, 0x8080000, 0x4, 0x90, 0x0, 0x3, 0x2, 0x2, 0x2, 0x0, 0x59, 0xe2}, {0xffff1000, 0x2000, 0x4, 0xfa, 0x7, 0x1, 0x2, 0xb, 0x4c, 0xb, 0x3, 0xa}, {0x80a7000, 0x5}, {0x6000, 0x4382}, 0x28, 0x0, 0x1000, 0x500b2, 0x3, 0x7080, 0x5000, [0xe, 0x81, 0x80000000000, 0x7]})

5.000662838s ago: executing program 0 (id=942):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
fcntl$setlease(r4, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

4.61648333s ago: executing program 4 (id=943):
r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x80})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x54}}, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
io_uring_setup(0x56ab, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)
close_range(r0, 0xffffffffffffffff, 0x0)

3.801289718s ago: executing program 5 (id=944):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24048084)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
r5 = dup2(r3, r4)
close_range(r5, 0xffffffffffffffff, 0x0)

3.669702366s ago: executing program 0 (id=945):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000002, 0x0, 0x4, 0x7, 0x0, 0x5, 0x100000000, 0x2, 0xffffffffffffffff], 0x9000, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001e, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.580486351s ago: executing program 3 (id=946):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ff", 0x0, 0x6b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000)=r7, 0x20000010)

3.465145688s ago: executing program 3 (id=947):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x6, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x202, 0xd83f})

3.395593762s ago: executing program 3 (id=948):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
fcntl$setlease(r4, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

2.468434006s ago: executing program 4 (id=949):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000019300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0x4, [@datasec={0x8, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x1200, 0x2}, {0x1, 0x6, 0x3}], "d2e6"}, @union={0x10, 0x4, 0x0, 0x5, 0x1, 0x7, [{0x10, 0x0, 0x2}, {0xf, 0x4, 0x9}, {0xd, 0x4, 0xf76}, {0x7, 0x3, 0x2}]}, @const={0x8, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0x8c, 0x0, 0x0, 0x8}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r2, 0x7003)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x2b, 0x15, 0x0, 0x2, 0x6, 0xdae6, 0x3, 0x15a, 0x1})

2.429643139s ago: executing program 3 (id=950):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
syz_usb_connect(0x5, 0xb1c, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=@string={0x32, 0x3, "2b8943bf95e2bd3b4a0b20d7039f12df0f378772179ff881b64b7dd3255ff3ce514a4030b3215a2abcd79930216d95d3"}}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r4 = dup(r3)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa})
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x55e, 0x5, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0x7, 0x5, 0x80, 0x8, 0x794, 0xa, 0x40, 0xc976, 0x6], 0xa000, 0x20200})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.417704499s ago: executing program 5 (id=951):
socket$alg(0x26, 0x5, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.280411465s ago: executing program 4 (id=952):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e33635f0a596c324ad1e0f234f8b2a564b60e16aaca6f66f04d5bc8bc7ff4305c0b5174a7b9446d6a33e7053562eafcabf38cf3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
setreuid(0x0, 0xee00)
request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff)

939.118055ms ago: executing program 5 (id=953):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
readv(r4, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

724.998548ms ago: executing program 0 (id=954):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x2a00000, &(0x7f0000000440)=ANY=[], 0x1, 0x6224, &(0x7f0000007240)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x26)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x840013, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)

577.56µs ago: executing program 0 (id=955):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff)
syz_usb_connect(0x0, 0xfffffc4f, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000011, 0x200000006c832, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

0s ago: executing program 5 (id=956):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xf9, 0x577, &(0x7f00000017c0)="$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")
r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {0xbd, 0x4, 0x8000, 0x9}, 0x28, [0x7ff, 0x401, 0x5, 0x4, 0x4, 0xffffff94, 0x7fff, 0x81, 0x101, 0x811, 0xcc, 0x5, 0x4, 0xb420, 0x9, 0x800, 0xce7a, 0x5, 0x7, 0x101, 0x6, 0x80000000, 0x32b04cd, 0xffff42f2, 0x1, 0x7, 0x8, 0x1, 0x7, 0x7, 0x0, 0x3, 0x1, 0x7, 0x1, 0x8, 0xd, 0xcd2, 0xb, 0x0, 0x101, 0x9, 0x8, 0x52770264, 0x75, 0x98, 0x9, 0x45a, 0x4, 0x2, 0x81, 0x2, 0xc6b, 0x80000000, 0x4, 0xfffffff8, 0xfffff001, 0xffffffff, 0xcb03, 0x98, 0x8000, 0x7, 0x3a4, 0x6], [0x5, 0x6, 0x5, 0x81, 0xfffff800, 0x48, 0x1400000, 0x4, 0x3ff, 0xfffffffc, 0x5, 0x9, 0x8, 0x2820, 0x9, 0x7, 0x5, 0xffff0034, 0x101, 0xb07, 0x5, 0x7, 0xe682, 0x9, 0x7fff, 0x997, 0x7, 0x5, 0x1, 0xfffffff8, 0x80000000, 0x3, 0xf00, 0x4f3, 0x3, 0x2, 0x7fff, 0x6, 0x4, 0x3, 0xa3d, 0x86, 0xfffffffc, 0xc, 0xcf9d, 0x50, 0x6, 0x6, 0x1, 0xfffffffd, 0x40, 0x7fff, 0x7, 0x2, 0x6, 0x1000, 0x3, 0x25, 0x80000001, 0x40, 0x9, 0x9, 0x100008, 0x9c9], [0x1, 0x5, 0x800, 0xdc1, 0x6, 0x3, 0x7, 0x6, 0x8, 0xb, 0x7, 0x1, 0x200, 0x7, 0xfffff68f, 0x4, 0x6, 0x10000101, 0x1, 0x1, 0x8, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10, 0x7, 0xffe00000, 0x6, 0xfffffffe, 0xffff, 0x6, 0x20a0, 0xffffffff, 0x2, 0x40000000, 0x5, 0x9, 0x5, 0x0, 0x0, 0xbc47, 0x9, 0x8, 0x8, 0x2, 0xa57d, 0x9, 0x6f21, 0x6, 0x605, 0x800, 0x0, 0x7259, 0x8001, 0x400000, 0x1684000, 0x1, 0x95b, 0x8000, 0x8, 0x5, 0xfffffffc], [0x3, 0x156, 0x96, 0x7fff, 0x3543c784, 0x4, 0x400, 0xfffffffd, 0x8, 0xfffffe00, 0x4, 0x0, 0xffff, 0x3, 0x8, 0x0, 0x0, 0x1, 0x7fffffff, 0x8, 0x9b, 0xbd6, 0x7, 0x5, 0xd, 0xdc, 0x7, 0x8, 0x4, 0x4, 0x169, 0x95b, 0x2, 0x800, 0x6, 0x7, 0x3, 0x7, 0x4, 0xffffffff, 0x7fff, 0x7f0, 0xfffff827, 0x1ff, 0x33, 0x3, 0x9, 0x10, 0xfffffffd, 0x6, 0x3, 0xed3d, 0x101, 0x7f, 0x6, 0x232, 0x1, 0x48, 0x800, 0x6, 0x7, 0x8e1, 0x0, 0x4]}, 0x45c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
creat(&(0x7f0000000100)='./file1\x00', 0x186)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts.
[   63.828953][ T5755] cgroup: Unknown subsys name 'net'
[   63.963243][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.345891][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.836621][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.836955][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.844718][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.862589][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.866725][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.870320][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.877975][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.891449][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.893014][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.899958][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.907985][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.914906][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.928350][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   66.935726][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.944283][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.951592][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.961689][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.967612][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.976118][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.000232][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   67.009291][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   67.017055][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.025175][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   67.036102][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   67.433710][ T5766] chnl_net:caif_netlink_parms(): no params data found
[   67.481375][ T5767] chnl_net:caif_netlink_parms(): no params data found
[   67.543859][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   67.573058][ T5768] chnl_net:caif_netlink_parms(): no params data found
[   67.668539][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.675745][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.683675][ T5767] bridge_slave_0: entered allmulticast mode
[   67.690931][ T5767] bridge_slave_0: entered promiscuous mode
[   67.715238][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.722402][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.729765][ T5766] bridge_slave_0: entered allmulticast mode
[   67.739400][ T5766] bridge_slave_0: entered promiscuous mode
[   67.747285][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.754365][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.761704][ T5766] bridge_slave_1: entered allmulticast mode
[   67.768436][ T5766] bridge_slave_1: entered promiscuous mode
[   67.775548][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.783187][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.790678][ T5767] bridge_slave_1: entered allmulticast mode
[   67.798409][ T5767] bridge_slave_1: entered promiscuous mode
[   67.870780][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.882907][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.910296][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.917590][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.924728][ T5769] bridge_slave_0: entered allmulticast mode
[   67.932114][ T5769] bridge_slave_0: entered promiscuous mode
[   67.961353][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.975814][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.993762][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.001083][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.008808][ T5769] bridge_slave_1: entered allmulticast mode
[   68.015485][ T5769] bridge_slave_1: entered promiscuous mode
[   68.025162][ T5766] team0: Port device team_slave_0 added
[   68.034479][ T5766] team0: Port device team_slave_1 added
[   68.051284][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.058553][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.065695][ T5768] bridge_slave_0: entered allmulticast mode
[   68.072623][ T5768] bridge_slave_0: entered promiscuous mode
[   68.109680][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.117107][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.124254][ T5768] bridge_slave_1: entered allmulticast mode
[   68.131457][ T5768] bridge_slave_1: entered promiscuous mode
[   68.158592][ T5767] team0: Port device team_slave_0 added
[   68.165511][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.172757][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.199135][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.224115][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.236268][ T5767] team0: Port device team_slave_1 added
[   68.242765][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.250212][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.276715][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.299847][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.311090][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.344151][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.351209][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.377175][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.392624][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.419857][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.426991][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.453010][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.514529][ T5769] team0: Port device team_slave_0 added
[   68.525115][ T5769] team0: Port device team_slave_1 added
[   68.545534][ T5766] hsr_slave_0: entered promiscuous mode
[   68.551811][ T5766] hsr_slave_1: entered promiscuous mode
[   68.576954][ T5768] team0: Port device team_slave_0 added
[   68.606731][ T5768] team0: Port device team_slave_1 added
[   68.613714][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.620968][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.647324][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.697675][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.704650][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.730779][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.758497][ T5767] hsr_slave_0: entered promiscuous mode
[   68.764907][ T5767] hsr_slave_1: entered promiscuous mode
[   68.771586][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.780064][ T5767] Cannot create hsr debugfs directory
[   68.786601][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.793557][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.819676][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.836530][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.843498][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.870558][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.994365][ T5769] hsr_slave_0: entered promiscuous mode
[   69.000776][ T5769] hsr_slave_1: entered promiscuous mode
[   69.009270][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.016957][ T5769] Cannot create hsr debugfs directory
[   69.047059][ T5775] Bluetooth: hci0: command tx timeout
[   69.047538][ T5771] Bluetooth: hci1: command tx timeout
[   69.060726][ T5768] hsr_slave_0: entered promiscuous mode
[   69.067652][ T5768] hsr_slave_1: entered promiscuous mode
[   69.073679][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.082246][ T5768] Cannot create hsr debugfs directory
[   69.128096][ T5771] Bluetooth: hci3: command tx timeout
[   69.130220][ T5775] Bluetooth: hci2: command tx timeout
[   69.363558][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.382617][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.401877][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.413669][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.484026][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.501304][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.531528][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.557182][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.616126][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.647134][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.659621][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.670447][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.694596][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.740962][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.751432][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.762775][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.773591][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.815724][ T5766] 8021q: adding VLAN 0 to HW filter on device team0
[   69.843347][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.850808][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.906076][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.913204][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.997464][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.025375][ T5766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   70.040644][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.086793][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[   70.122293][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.129512][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.175897][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.183094][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.210329][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.232360][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.294234][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   70.320489][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   70.345489][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.352875][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.369861][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.377001][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.404314][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.411529][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.434659][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.441842][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.490587][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.711646][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.721391][ T5766] veth0_vlan: entered promiscuous mode
[   70.764243][ T5766] veth1_vlan: entered promiscuous mode
[   70.832314][ T5767] veth0_vlan: entered promiscuous mode
[   70.868792][ T5767] veth1_vlan: entered promiscuous mode
[   70.908483][ T5766] veth0_macvtap: entered promiscuous mode
[   70.943727][ T5766] veth1_macvtap: entered promiscuous mode
[   71.003702][ T5767] veth0_macvtap: entered promiscuous mode
[   71.023955][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.052874][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.065898][ T5767] veth1_macvtap: entered promiscuous mode
[   71.081091][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.090626][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.099940][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.109209][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.127412][ T5775] Bluetooth: hci0: command tx timeout
[   71.127615][ T5771] Bluetooth: hci1: command tx timeout
[   71.165140][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.182470][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.199101][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.206305][ T5771] Bluetooth: hci3: command tx timeout
[   71.210927][ T5775] Bluetooth: hci2: command tx timeout
[   71.225475][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.253737][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.270084][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.284075][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.295871][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.340319][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.349770][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.359373][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.370169][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.404132][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.422826][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.473251][ T5768] veth0_vlan: entered promiscuous mode
[   71.486749][ T5768] veth1_vlan: entered promiscuous mode
[   71.546343][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.554224][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.564047][ T5769] veth0_vlan: entered promiscuous mode
[   71.613167][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[   71.619880][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[   71.629144][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.637919][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.671251][ T5769] veth1_vlan: entered promiscuous mode
[   71.708524][ T5768] veth0_macvtap: entered promiscuous mode
[   71.738635][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.750559][ T5768] veth1_macvtap: entered promiscuous mode
[   71.769959][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.839483][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.851082][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.862314][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.875066][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.887057][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.907582][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.921913][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.932693][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.944014][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.963432][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.980312][ T5769] veth0_macvtap: entered promiscuous mode
[   71.998581][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.001094][ T5860] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.012738][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.033295][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.043120][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.060239][ T5769] veth1_macvtap: entered promiscuous mode
[   72.248864][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.267725][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.282651][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.297204][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.311891][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.324199][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.342820][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.363191][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.385763][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.396153][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.407495][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.417774][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.429696][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.531889][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.697931][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.857286][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.138403][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.172227][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.190635][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.206320][ T5775] Bluetooth: hci0: command tx timeout
[   73.211768][ T5775] Bluetooth: hci1: command tx timeout
[   73.230101][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.287330][ T5775] Bluetooth: hci3: command tx timeout
[   73.292985][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.301880][ T5775] Bluetooth: hci2: command tx timeout
[   73.423709][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.597999][ T5871] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[   74.329197][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.355548][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.446278][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   74.526877][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   74.535784][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[   74.632087][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   74.660131][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.782599][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.041762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   75.286390][ T5775] Bluetooth: hci1: command tx timeout
[   75.291955][ T5775] Bluetooth: hci0: command tx timeout
[   75.367356][ T5775] Bluetooth: hci2: command tx timeout
[   75.372831][ T5771] Bluetooth: hci3: command tx timeout
[   75.446398][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   75.539552][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   75.656099][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   76.017472][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   76.065758][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   78.771353][ T5895] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   81.876553][    T8] cfg80211: failed to load regulatory.db
[   84.643521][ T5930] syz.0.18[5930]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   84.912941][ T5930] loop0: detected capacity change from 0 to 32768
[   85.533811][ T5934] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   86.256245][ T5930] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.18 (5930)
[   86.310698][ T5930] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   86.321262][ T5930] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   86.334901][ T5930] BTRFS info (device loop0): enabling disk space caching
[   86.342058][ T5930] BTRFS info (device loop0): force clearing of disk cache
[   86.349542][ T5930] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   86.359366][ T5930] BTRFS info (device loop0): use zstd compression, level 3
[   86.366693][ T5930] BTRFS info (device loop0): disk space caching is enabled
[   86.951714][ T5930] BTRFS info (device loop0): enabling ssd optimizations
[   86.958785][ T5930] BTRFS info (device loop0): auto enabling async discard
[   86.986635][ T5930] BTRFS info (device loop0): rebuilding free space tree
[   87.055152][ T5930] BTRFS info (device loop0): disabling free space tree
[   87.062329][ T5930] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   87.072267][ T5930] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   87.112422][ T5937] syzkaller0: entered promiscuous mode
[   87.175630][ T5937] syzkaller0: entered allmulticast mode
[   88.629971][ T5769] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   88.777329][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   91.250478][ T5988] loop1: detected capacity change from 0 to 32768
[   91.257923][ T5988] =======================================================
[   91.257923][ T5988] WARNING: The mand mount option has been deprecated and
[   91.257923][ T5988]          and is ignored by this kernel. Remove the mand
[   91.257923][ T5988]          option from the mount to silence this warning.
[   91.257923][ T5988] =======================================================
[   91.321223][ T5988] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   91.544835][ T5998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.645774][ T5988] XFS (loop1): Ending clean mount
[   93.624785][ T5767] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   94.088179][ T6011] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.33' sets config #1
[  104.271433][ T5771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  104.286274][ T5771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  104.306107][ T5771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  104.338611][ T5771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  104.346849][ T5771] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  104.361964][ T5771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  105.739072][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.41'.
[  106.486142][ T5771] Bluetooth: hci4: command tx timeout
[  108.576049][ T5771] Bluetooth: hci4: command tx timeout
[  111.292601][ T5771] Bluetooth: hci4: command tx timeout
[  111.305565][ T6046] chnl_net:caif_netlink_parms(): no params data found
[  112.642361][  T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.971198][ T6096] loop3: detected capacity change from 0 to 256
[  113.337968][ T6096] FAT-fs (loop3): Directory bread(block 64) failed
[  113.345276][ T6096] FAT-fs (loop3): Directory bread(block 65) failed
[  113.352077][ T6096] FAT-fs (loop3): Directory bread(block 66) failed
[  113.358644][ T6096] FAT-fs (loop3): Directory bread(block 67) failed
[  113.365239][ T6096] FAT-fs (loop3): Directory bread(block 68) failed
[  113.372184][ T6096] FAT-fs (loop3): Directory bread(block 69) failed
[  113.378806][ T6096] FAT-fs (loop3): Directory bread(block 70) failed
[  113.385320][ T6096] FAT-fs (loop3): Directory bread(block 71) failed
[  113.391997][ T6096] FAT-fs (loop3): Directory bread(block 72) failed
[  113.398555][ T6096] FAT-fs (loop3): Directory bread(block 73) failed
[  113.413259][ T5771] Bluetooth: hci4: command tx timeout
[  113.449414][  T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.490801][    T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  113.546012][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.553263][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.560837][ T6046] bridge_slave_0: entered allmulticast mode
[  113.568309][ T6046] bridge_slave_0: entered promiscuous mode
[  113.616675][  T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.651179][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.659934][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.700196][ T6046] bridge_slave_1: entered allmulticast mode
[  113.717278][    T8] usb 2-1: Using ep0 maxpacket: 16
[  113.733855][ T6046] bridge_slave_1: entered promiscuous mode
[  113.735725][    T8] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  113.772239][    T8] usb 2-1: config 0 has no interface number 0
[  113.788520][    T8] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  113.791191][  T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.802975][    T8] usb 2-1: config 0 interface 251 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  115.362306][    T8] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  115.376519][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.384566][    T8] usb 2-1: Product: syz
[  115.390232][    T8] usb 2-1: Manufacturer: syz
[  115.405122][    T8] usb 2-1: SerialNumber: syz
[  115.437130][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.446400][    T8] usb 2-1: config 0 descriptor??
[  115.466892][ T6097] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.480273][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.500937][    T8] asix: probe of 2-1:0.251 failed with error -22
[  115.597771][ T6046] team0: Port device team_slave_0 added
[  115.614124][ T6046] team0: Port device team_slave_1 added
[  115.705453][   T23] usb 2-1: USB disconnect, device number 2
[  115.755293][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.804446][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.832432][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.135013][  T789] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  117.213376][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.221586][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.301784][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.318614][  T789] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  117.346375][  T789] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  117.375546][  T789] usb 4-1: config 0 interface 0 has no altsetting 0
[  117.403595][  T789] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  117.417544][  T789] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  117.436054][  T789] usb 4-1: Product: syz
[  117.440307][  T789] usb 4-1: Manufacturer: syz
[  117.444916][  T789] usb 4-1: SerialNumber: syz
[  117.476885][  T789] usb 4-1: config 0 descriptor??
[  117.524671][  T789] usb 4-1: selecting invalid altsetting 0
[  117.548719][ T6046] hsr_slave_0: entered promiscuous mode
[  117.607289][ T6046] hsr_slave_1: entered promiscuous mode
[  118.926305][ T6046] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.933997][ T6046] Cannot create hsr debugfs directory
[  119.034990][ T5157] usb 4-1: USB disconnect, device number 2
[  121.853742][ T6046] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  121.922236][ T6046] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  122.074736][ T6046] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  122.122765][ T6046] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  122.496676][  T155] hsr_slave_0: left promiscuous mode
[  122.513403][  T155] hsr_slave_1: left promiscuous mode
[  122.530129][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.538492][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.569889][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.590830][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.593148][ T6167] loop1: detected capacity change from 0 to 2048
[  122.627124][  T155] bridge_slave_1: left allmulticast mode
[  122.659612][  T155] bridge_slave_1: left promiscuous mode
[  122.691538][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.971486][ T6171] loop1: detected capacity change from 0 to 128
[  123.451550][  T155] bridge_slave_0: left allmulticast mode
[  123.472223][  T155] bridge_slave_0: left promiscuous mode
[  123.534178][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.075788][  T155] veth1_macvtap: left promiscuous mode
[  125.082014][  T155] veth0_macvtap: left promiscuous mode
[  125.088518][  T155] veth1_vlan: left promiscuous mode
[  125.094479][  T155] veth0_vlan: left promiscuous mode
[  129.190886][  T155] team0 (unregistering): Port device team_slave_1 removed
[  129.267840][  T155] team0 (unregistering): Port device team_slave_0 removed
[  129.348874][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.403999][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.861137][  T155] bond0 (unregistering): Released all slaves
[  130.210890][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.240218][ T6046] 8021q: adding VLAN 0 to HW filter on device team0
[  130.264011][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.271211][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.465050][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.472268][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.921098][ T6046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.443155][ T6218] loop0: detected capacity change from 0 to 512
[  132.519068][ T6220] loop1: detected capacity change from 0 to 2048
[  132.560757][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.574140][ T6218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.878183][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  133.884604][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  134.217063][ T6218] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.266279][ T6220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.428551][ T6234] batadv0: entered promiscuous mode
[  134.456411][ T6234] vlan2: entered promiscuous mode
[  134.743112][ T6242] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  135.390019][ T6248] loop3: detected capacity change from 0 to 1024
[  135.782562][ T6046] veth0_vlan: entered promiscuous mode
[  135.835319][ T6046] veth1_vlan: entered promiscuous mode
[  135.911436][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.231230][ T6046] veth0_macvtap: entered promiscuous mode
[  136.370342][ T6046] veth1_macvtap: entered promiscuous mode
[  136.642763][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.689553][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.722558][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.756491][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.812480][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.893147][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.960925][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.009633][   T42] hfsplus: b-tree write err: -5, ino 3
[  137.027796][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.049609][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.065503][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.076284][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.106145][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.156495][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.209458][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.272824][ T6271] loop1: detected capacity change from 0 to 128
[  137.282450][ T6046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.416055][ T6273] x_tables: duplicate underflow at hook 1
[  141.563153][ T6046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.625595][ T6046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.666104][ T6046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.718732][ T6273] vlan2: entered allmulticast mode
[  141.723920][ T6273] macsec0: entered allmulticast mode
[  141.729308][ T6273] veth1_macvtap: entered allmulticast mode
[  142.284607][ T6283] syzkaller0: entered promiscuous mode
[  142.401652][ T6283] syzkaller0: entered allmulticast mode
[  142.499178][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.536189][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.589700][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.626676][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.265778][ T6321] loop3: detected capacity change from 0 to 128
[  150.667059][ T6329] Zero length message leads to an empty skb
[  152.346627][ T6335] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  152.373333][ T6335] CIFS mount error: No usable UNC path provided in device string!
[  152.373333][ T6335] 
[  152.383628][ T6335] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  156.130317][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'.
[  157.146101][ T6368] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  157.166829][ T6368] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  159.575309][ T6384] loop4: detected capacity change from 0 to 40427
[  159.600080][ T6384] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  159.608684][ T6384] F2FS-fs (loop4): Image doesn't support compression
[  159.616118][ T6384] F2FS-fs (loop4): Image doesn't support compression
[  159.628211][ T6384] F2FS-fs (loop4): invalid crc value
[  159.661752][ T6384] F2FS-fs (loop4): Found nat_bits in checkpoint
[  159.700501][ T6384] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  160.310730][ T6397] syz.4.91: attempt to access beyond end of device
[  160.310730][ T6397] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  160.326839][ T6397] F2FS-fs (loop4): Remounting filesystem read-only
[  160.522216][ T5770] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  160.972631][ T6401] mmap: syz.0.100 (6401) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  162.088605][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.106024][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.126678][ T5770] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  162.165990][ T5770] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  162.206998][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.230500][ T5770] usb 2-1: config 0 descriptor??
[  162.435281][ T5770] usbhid 2-1:0.0: can't add hid device: -71
[  162.481019][ T5770] usbhid: probe of 2-1:0.0 failed with error -71
[  162.532964][ T5770] usb 2-1: USB disconnect, device number 3
[  162.617472][ T6409] input: syz0 as /devices/virtual/input/input5
[  163.393565][ T6424] vivid-007: disconnect
[  163.940996][ T6418] vivid-007: reconnect
[  164.535554][ T6439] virtio-fs: tag </dev/md0> not found
[  168.169269][ T6478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.155939][    C1] sched: RT throttling activated
[  171.481615][ T6503] loop0: detected capacity change from 0 to 32768
[  172.496176][ T6503] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.114 (6503)
[  172.606044][ T6503] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  172.617935][ T6503] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  172.626840][ T6503] BTRFS info (device loop0): setting nodatacow, compression disabled
[  172.635803][ T6503] BTRFS info (device loop0): enabling ssd optimizations
[  172.643097][ T6503] BTRFS info (device loop0): setting datacow
[  172.649530][ T6503] BTRFS info (device loop0): doing ref verification
[  172.656383][ T6503] BTRFS info (device loop0): force clearing of disk cache
[  172.663594][ T6503] BTRFS info (device loop0): turning off barriers
[  172.670309][ T6503] BTRFS info (device loop0): using spread ssd allocation scheme
[  172.678175][ T6503] BTRFS info (device loop0): using free space tree
[  173.595341][ T6503] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  173.597804][ T6503] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  173.607498][ T6503] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  173.618395][ T6503] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  173.627862][ T6503] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  173.637868][ T6503] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  173.655479][ T6503] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  173.665991][ T6503] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  173.774724][ T6503] BTRFS error (device loop0): open_ctree failed: -12
[  175.445515][ T6123] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (6123)
[  175.764694][ T6526] kvm: kvm [6525]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6926
[  175.798298][ T6526] kvm: kvm [6525]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3126
[  175.888935][ T6526] kvm: kvm [6525]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2980
[  175.918201][ T6537] netlink: 36 bytes leftover after parsing attributes in process `syz.4.119'.
[  175.954062][ T6526] kvm: kvm [6525]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x32e6
[  176.004905][ T6526] kvm: kvm [6525]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  176.112499][ T6526] kvm: kvm [6525]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  176.198230][ T6526] kvm: kvm [6525]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x6066
[  176.330676][ T6526] kvm: kvm [6525]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x6066
[  176.696165][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  176.744240][ T6552] loop0: detected capacity change from 0 to 16
[  176.831220][ T6552] erofs: (device loop0): erofs_read_inode: unsupported chunk format fe00 of nid 36
[  176.906930][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.953259][ T5817] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  176.985683][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.019274][ T5817] usb 4-1: config 0 descriptor??
[  177.048645][ T5817] pwc: Askey VC010 type 2 USB webcam detected.
[  177.507523][ T6563] IPVS: Error connecting to the multicast addr
[  178.176281][ T5817] pwc: recv_control_msg error -32 req 02 val 2b00
[  178.199611][ T5817] pwc: recv_control_msg error -32 req 02 val 2700
[  178.220316][ T5817] pwc: recv_control_msg error -32 req 02 val 2c00
[  178.254731][ T5817] pwc: recv_control_msg error -32 req 04 val 1000
[  178.418512][ T5817] pwc: recv_control_msg error -32 req 04 val 1300
[  178.428195][ T5817] pwc: recv_control_msg error -32 req 04 val 1400
[  178.435542][ T5817] pwc: recv_control_msg error -32 req 02 val 2000
[  178.447141][ T5817] pwc: recv_control_msg error -32 req 02 val 2100
[  179.166371][ T5817] pwc: recv_control_msg error -32 req 04 val 1500
[  179.247038][ T5817] pwc: recv_control_msg error -32 req 02 val 2500
[  179.257136][ T5817] pwc: recv_control_msg error -32 req 02 val 2400
[  179.264945][ T5817] pwc: recv_control_msg error -32 req 02 val 2600
[  179.306218][ T5817] pwc: recv_control_msg error -32 req 02 val 2900
[  179.630958][ T5817] pwc: recv_control_msg error -32 req 04 val 1100
[  180.426015][ T5817] pwc: Registered as video103.
[  180.435825][ T5817] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[  180.486864][ T5817] usb 4-1: USB disconnect, device number 3
[  181.234466][ T6589] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  181.243924][ T6589] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  181.252951][ T6589] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  181.262044][ T6589] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  181.271697][ T6589] geneve2: entered promiscuous mode
[  181.277343][ T6589] geneve2: entered allmulticast mode
[  184.316412][ T6606] overlayfs: failed to resolve './file0': -2
[  185.286124][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  186.296059][    T9] usb 1-1: Using ep0 maxpacket: 16
[  186.357121][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.386092][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.428713][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  186.438139][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.458414][    T9] usb 1-1: Product: syz
[  186.462630][    T9] usb 1-1: Manufacturer: syz
[  186.476060][    T9] usb 1-1: SerialNumber: syz
[  187.043723][    T9] usb 1-1: 0:2 : does not exist
[  187.118680][    T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  188.626650][    T9] usb 1-1: USB disconnect, device number 2
[  188.766867][ T6636] warning: `syz.4.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  188.782575][ T6123] udevd[6123]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  189.377343][ T6645] usb usb8: usbfs: process 6645 (syz.1.138) did not claim interface 0 before use
[  192.167188][ T5781] Bluetooth: hci3: command 0x0406 tx timeout
[  192.176227][ T5781] Bluetooth: hci1: command 0x0406 tx timeout
[  192.182313][ T5781] Bluetooth: hci2: command 0x0406 tx timeout
[  194.492555][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  194.503274][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  196.860292][ T6699] loop0: detected capacity change from 0 to 256
[  196.943587][ T6123] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  197.052893][ T6699] loop0: detected capacity change from 0 to 4096
[  197.339657][ T6699] ext4: Unknown parameter 'seclabel'
[  200.108967][ T6724] overlayfs: missing 'lowerdir'
[  201.752769][ T5908] IPVS: starting estimator thread 0...
[  201.927906][ T6734] IPVS: using max 17 ests per chain, 40800 per kthread
[  202.369508][ T6743] loop1: detected capacity change from 0 to 512
[  202.385453][ T6743] EXT4-fs: Ignoring removed i_version option
[  202.478242][ T6743] EXT4-fs (loop1): orphan cleanup on readonly fs
[  202.546977][ T6743] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.152: EA inode hash validation failed
[  202.565064][ T6743] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  202.589654][ T6743] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.152: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  202.721806][ T6743] EXT4-fs (loop1): Remounting filesystem read-only
[  202.745635][ T6743] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.152: ea_inode dec ref err=-117
[  202.857472][ T6743] EXT4-fs warning (device loop1): ext4_evict_inode:272: xattr delete (err -5)
[  202.999799][ T6743] EXT4-fs (loop1): 1 orphan inode deleted
[  203.025594][ T6743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  204.188991][ T6759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.153'.
[  205.757853][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.053305][ T5777] Bluetooth: unknown link type 128
[  207.194894][ T6793] loop0: detected capacity change from 0 to 128
[  208.136173][ T5777] Bluetooth: hci2: command 0x0406 tx timeout
[  212.140728][ T6831] futex_wake_op: syz.4.167 tries to shift op by -1; fix this program
[  213.375342][ T6845] loop1: detected capacity change from 0 to 40427
[  213.431567][ T6845] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff
[  213.456607][ T6845] F2FS-fs (loop1): invalid crc value
[  213.489275][ T6845] F2FS-fs (loop1): Found nat_bits in checkpoint
[  214.872718][ T6845] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  216.863109][ T5817] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  217.022336][ T5767] syz-executor: attempt to access beyond end of device
[  217.022336][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  217.082454][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  221.548932][ T6891] loop1: detected capacity change from 0 to 256
[  221.606743][ T6891] exfat: Deprecated parameter 'namecase'
[  221.612507][ T6891] exfat: Deprecated parameter 'utf8'
[  221.715293][ T6891] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  227.402107][ T6925] loop4: detected capacity change from 0 to 512
[  227.480899][ T6925] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  227.496697][ T6925] EXT4-fs (loop4): orphan cleanup on readonly fs
[  227.571193][ T6925] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present
[  227.674092][ T6925] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  227.689828][ T5775] Bluetooth: hci4: command 0x0406 tx timeout
[  227.746557][ T6925] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.180: Failed to acquire dquot type 1
[  227.906077][ T6925] EXT4-fs (loop4): Remounting filesystem read-only
[  227.912918][ T6925] EXT4-fs (loop4): 1 truncate cleaned up
[  227.950282][ T6925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  228.258870][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'.
[  228.729200][ T6046] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.338073][ T6945] overlayfs: missing 'lowerdir'
[  233.238136][ T6967] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  242.887241][   T23] IPVS: starting estimator thread 0...
[  242.986342][ T7014] IPVS: using max 35 ests per chain, 84000 per kthread
[  246.975367][ T7046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'.
[  250.536565][ T7058] process 'syz.0.202' launched './file2' with NULL argv: empty string added
[  251.865864][ T7081] loop4: detected capacity change from 0 to 1024
[  251.917366][ T7081] EXT4-fs: Ignoring removed orlov option
[  251.931359][ T7081] EXT4-fs: Ignoring removed bh option
[  252.650850][ T7081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.682809][ T7097] xt_socket: unknown flags 0xc
[  254.779961][ T6046] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.108610][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  256.114903][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  256.153214][ T7109] loop0: detected capacity change from 0 to 64
[  256.163991][ T7109] hfs: unable to parse mount options
[  257.861405][ T6123] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  258.786453][ T7127] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  265.113779][ T7151] capability: warning: `syz.0.224' uses deprecated v2 capabilities in a way that may be insecure
[  266.367456][ T7150] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  266.885006][ T5817] IPVS: starting estimator thread 0...
[  267.043490][ T7159] IPVS: using max 17 ests per chain, 40800 per kthread
[  267.488444][ T7162] netlink: 'syz.1.218': attribute type 1 has an invalid length.
[  268.442284][ T7164] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  271.354342][ T7184] loop1: detected capacity change from 0 to 4096
[  271.372469][ T7184] ntfs3: Unknown parameter 'hide_çízô¸¥áeFÎfV!iid0x0000000000000000'
[  273.409822][ T7202] lo speed is unknown, defaulting to 1000
[  273.426189][ T7202] lo speed is unknown, defaulting to 1000
[  273.446682][ T7202] lo speed is unknown, defaulting to 1000
[  273.493730][ T7202] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  273.615338][ T7202] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  273.743240][ T7202] lo speed is unknown, defaulting to 1000
[  273.763496][ T7202] lo speed is unknown, defaulting to 1000
[  273.771765][ T7202] lo speed is unknown, defaulting to 1000
[  273.785058][ T7202] lo speed is unknown, defaulting to 1000
[  278.521305][ T7224] netlink: 'syz.4.241': attribute type 1 has an invalid length.
[  280.279586][ T7236] loop0: detected capacity change from 0 to 164
[  280.332138][ T7236] rock: directory entry would overflow storage
[  280.374013][ T7236] rock: sig=0x5053, size=7, remaining=4
[  280.380508][ T7236] isofs_fill_super: root inode is not a directory. Corrupted media?
[  280.521581][ T7238] netlink: 300 bytes leftover after parsing attributes in process `syz.3.246'.
[  281.450354][ T7248] hub 9-0:1.0: USB hub found
[  281.456598][ T7248] hub 9-0:1.0: 1 port detected
[  282.189049][ T7247] autofs4:pid:7247:autofs_fill_super: called with bogus options
[  282.373553][ T7253] netlink: 'syz.0.254': attribute type 3 has an invalid length.
[  282.544240][ T7259] loop0: detected capacity change from 0 to 1024
[  282.863587][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'.
[  282.887108][   T59] hfsplus: b-tree write err: -5, ino 4
[  283.768008][ T7278] autofs4:pid:7278:autofs_fill_super: called with bogus options
[  284.322949][ T7277] loop1: detected capacity change from 0 to 32768
[  284.486321][ T7277] JBD2: Ignoring recovery information on journal
[  284.492923][ T7282] loop0: detected capacity change from 0 to 32768
[  284.556244][ T7282] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.604128][ T7277] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  284.671369][   T28] audit: type=1800 audit(1770745749.923:2): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.263" name="file0" dev="loop1" ino=17058 res=0 errno=0
[  284.716377][ T5777] Bluetooth: hci2: Invalid connection link type handle 0x00c9
[  284.823877][ T7282] XFS (loop0): Ending clean mount
[  284.921907][ T5767] ocfs2: Unmounting device (7,1) on (node local)
[  285.021802][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  285.283037][ T7318] (null): rxe_set_mtu: Set mtu to 4096
[  285.302085][ T7318] lo speed is unknown, defaulting to 1000
[  285.340411][ T7318] lo speed is unknown, defaulting to 1000
[  285.352899][ T7318] lo speed is unknown, defaulting to 1000
[  286.697743][ T5908] lo speed is unknown, defaulting to 1000
[  286.705421][ T7318] infiniband syz1: set active
[  286.710585][ T7318] infiniband syz1: added lo
[  286.717814][ T7318] syz1: rxe_create_cq: returned err = -12
[  286.723974][ T7318] infiniband syz1: Couldn't create ib_mad CQ
[  286.731579][ T7318] infiniband syz1: Couldn't open port 1
[  286.827642][ T7318] RDS/IB: syz1: added
[  286.832496][ T7318] smc: adding ib device syz1 with port count 1
[  286.876462][ T7318] smc:    ib device syz1 port 1 has pnetid 
[  286.882914][ T7340] loop1: detected capacity change from 0 to 512
[  286.885573][ T5908] lo speed is unknown, defaulting to 1000
[  286.938035][ T7318] lo speed is unknown, defaulting to 1000
[  287.009867][ T7340] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.284: Invalid block bitmap block 0 in block_group 0
[  287.071488][ T7340] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem
[  287.114405][ T7340] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.284: attempt to clear invalid blocks 983261 len 1
[  287.177052][ T7340] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.284: invalid indirect mapped block 2683928664 (level 0)
[  287.221796][ T7340] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.284: Invalid inode table block 0 in block_group 0
[  287.262048][ T7340] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  287.291198][ T7340] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  287.312397][ T7340] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.284: Invalid inode table block 0 in block_group 0
[  287.346699][ T7340] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  287.391272][ T7340] EXT4-fs error (device loop1): ext4_truncate:4294: inode #13: comm syz.1.284: mark_inode_dirty error
[  287.424618][ T7340] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  287.426288][ T7318] lo speed is unknown, defaulting to 1000
[  287.441072][ T7340] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.284: Invalid inode table block 0 in block_group 0
[  287.460268][ T7340] EXT4-fs (loop1): 1 truncate cleaned up
[  287.470546][ T7340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.336186][ T7340] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.284: Invalid inode table block 0 in block_group 0
[  288.382061][ T7340] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  288.527015][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.537594][ T7369] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  288.671007][ T7318] lo speed is unknown, defaulting to 1000
[  288.774446][ T5777] Bluetooth: hci4: unexpected event for opcode 0x0c24
[  288.931261][ T7382] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  289.203644][ T7318] lo speed is unknown, defaulting to 1000
[  289.283092][ T7397] loop0: detected capacity change from 0 to 64
[  289.287099][ T7396] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  289.380683][ T7399] loop1: detected capacity change from 0 to 256
[  289.407125][ T7399] exfat: Deprecated parameter 'utf8'
[  289.481253][ T7399] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  289.554718][ T7399] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  289.775723][ T7318] lo speed is unknown, defaulting to 1000
[  291.344576][ T7405] loop0: detected capacity change from 0 to 32768
[  291.555593][ T7405] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  291.712402][ T7429] loop1: detected capacity change from 0 to 256
[  291.822728][ T5769] ocfs2: Unmounting device (7,0) on (node local)
[  292.984877][ T7443] lo speed is unknown, defaulting to 1000
[  293.684594][ T7437] loop1: detected capacity change from 0 to 32768
[  294.686317][ T5777] Bluetooth: hci4: unexpected event for opcode 0x2003
[  294.728531][ T7472] loop1: detected capacity change from 0 to 256
[  294.804778][ T7472] FAT-fs (loop1): Directory bread(block 64) failed
[  294.823741][ T7472] FAT-fs (loop1): Directory bread(block 65) failed
[  294.844500][ T7472] FAT-fs (loop1): Directory bread(block 66) failed
[  294.854002][ T7472] FAT-fs (loop1): Directory bread(block 67) failed
[  294.863377][ T7472] FAT-fs (loop1): Directory bread(block 68) failed
[  294.876479][ T7472] FAT-fs (loop1): Directory bread(block 69) failed
[  294.889566][ T7472] FAT-fs (loop1): Directory bread(block 70) failed
[  294.917584][ T7472] FAT-fs (loop1): Directory bread(block 71) failed
[  294.945082][ T7472] FAT-fs (loop1): Directory bread(block 72) failed
[  294.953956][ T7472] FAT-fs (loop1): Directory bread(block 73) failed
[  296.593194][ T7481] lo speed is unknown, defaulting to 1000
[  297.876446][ T7508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.350'.
[  298.010750][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'.
[  299.571775][ T7512] hub 9-0:1.0: USB hub found
[  299.576793][ T7512] hub 9-0:1.0: 1 port detected
[  300.109318][ T7521] loop0: detected capacity change from 0 to 2048
[  300.296407][ T7521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.507775][ T7528] lo speed is unknown, defaulting to 1000
[  301.264121][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.394142][ T7533] loop1: detected capacity change from 0 to 4096
[  301.596382][ T7538] 9pnet_virtio: no channels available for device syz
[  301.638712][ T7533] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  301.997323][ T5767] ntfs3: loop1: ino=9, ntfs_sync_fs failed, -22.
[  302.197498][ T7544] netlink: 2184 bytes leftover after parsing attributes in process `syz.1.360'.
[  302.216151][ T7544] netlink: 144 bytes leftover after parsing attributes in process `syz.1.360'.
[  302.583813][ T7548] loop1: detected capacity change from 0 to 256
[  302.597000][ T7548] exfat: Deprecated parameter 'utf8'
[  302.615628][ T7548] exfat: Deprecated parameter 'utf8'
[  302.646653][ T7548] exfat: Deprecated parameter 'utf8'
[  302.700557][ T7548] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  302.751517][ T7542] loop0: detected capacity change from 0 to 32768
[  302.823948][ T7542] syz.0.359: attempt to access beyond end of device
[  302.823948][ T7542] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  302.864198][ T7542] lbmIODone: I/O error in JFS log
[  302.875078][ T7542] *** Log Format Error ! ***
[  302.896900][ T7542] lmLogInit: exit(-22)
[  302.901470][ T7542] lmLogOpen: exit(-22)
[  303.373787][ T5157] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  303.603364][ T5157] usb 1-1: Using ep0 maxpacket: 16
[  303.617931][ T5157] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.656048][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  303.696002][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  303.722995][ T5157] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  303.756206][ T5157] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  303.773402][ T7576] loop1: detected capacity change from 0 to 256
[  303.781062][ T5157] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  303.792841][ T5157] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  303.811490][ T7576] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  303.818475][ T5157] usb 1-1: Manufacturer: syz
[  303.852260][ T5157] usb 1-1: config 0 descriptor??
[  304.035563][ T7586] loop1: detected capacity change from 0 to 512
[  304.092226][ T7586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.114452][ T7586] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.299786][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.326182][ T5157] rc_core: IR keymap rc-hauppauge not found
[  304.332417][ T5157] Registered IR keymap rc-empty
[  304.338812][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.393950][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.438124][ T5157] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  304.460986][ T5157] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  304.486474][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.509986][ T7595] loop1: detected capacity change from 0 to 4096
[  304.521639][ T7595] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  304.547133][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.586294][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.637527][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.671015][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.716311][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.747564][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.786353][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.832335][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.876090][ T5157] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  304.928161][ T5157] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  304.956011][ T5157] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  304.992338][ T5157] usb 1-1: USB disconnect, device number 3
[  305.661279][ T7598] loop1: detected capacity change from 0 to 32768
[  305.739466][ T7598] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  305.774390][ T7598] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  305.967283][ T7598] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  306.058759][ T7598] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  306.146502][ T5157] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  306.350665][ T5157] usb 1-1: Using ep0 maxpacket: 16
[  306.378339][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.416144][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.454681][ T5157] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  307.268494][ T5157] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  307.278638][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.307468][ T5157] usb 1-1: config 0 descriptor??
[  307.444037][ T7641] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  307.525757][ T5777] Bluetooth: hci4: unexpected event for opcode 0x042c
[  307.533396][ T7645] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[  307.724745][ T7631] loop1: detected capacity change from 0 to 32768
[  307.777633][ T5157] microsoft 0003:045E:07DA.0001: No inputs registered, leaving
[  307.808438][ T5157] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  307.834859][ T7631] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  307.852688][ T5157] microsoft 0003:045E:07DA.0001: no inputs found
[  307.860270][ T5157] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway
[  307.937653][ T7631] XFS (loop1): Ending clean mount
[  307.976840][ T5157] usb 1-1: USB disconnect, device number 4
[  307.978390][ T7631] XFS (loop1): Quotacheck needed: Please wait.
[  308.121035][ T7631] XFS (loop1): Quotacheck: Done.
[  308.199160][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  308.526488][ T7671] loop0: detected capacity change from 0 to 16
[  308.533813][ T7671] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  308.719612][ T7675] loop0: detected capacity change from 0 to 2048
[  308.803090][ T7675] Alternate GPT is invalid, using primary GPT.
[  308.814164][ T7675]  loop0: p2 p3 p7
[  309.085754][ T7220] udevd[7220]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  309.099762][ T7555] udevd[7555]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  309.126758][ T7341] udevd[7341]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  309.434464][ T7684] loop0: detected capacity change from 0 to 32768
[  309.495113][ T7692] overlayfs: failed to resolve './file0': -2
[  309.511383][ T7684] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  309.524511][ T7684] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  309.546217][ T7684] BTRFS info (device loop0): setting nodatacow, compression disabled
[  309.572749][ T7684] BTRFS info (device loop0): force clearing of disk cache
[  309.596515][ T7684] BTRFS info (device loop0): enabling ssd optimizations
[  309.603530][ T7684] BTRFS info (device loop0): using spread ssd allocation scheme
[  309.611682][ T7684] BTRFS info (device loop0): turning off barriers
[  309.618318][ T7684] BTRFS info (device loop0): disabling free space tree
[  309.625387][ T7684] BTRFS info (device loop0): not using ssd optimizations
[  309.660974][ T7684] BTRFS info (device loop0): not using spread ssd allocation scheme
[  309.807049][ T7684] BTRFS info (device loop0): rebuilding free space tree
[  309.835710][ T7684] BTRFS info (device loop0): disabling free space tree
[  309.855927][ T7684] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  309.865618][ T7684] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  310.135534][ T7720] loop1: detected capacity change from 0 to 512
[  310.147230][ T5769] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  310.217256][ T7720] EXT4-fs: Ignoring removed i_version option
[  310.223317][ T7720] EXT4-fs: Ignoring removed oldalloc option
[  310.319002][ T7720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.484624][ T7555] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop0 scanned by udevd (7555)
[  310.496961][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.651252][ T5157] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  310.778683][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0c05
[  310.855266][ T5157] usb 1-1: Using ep0 maxpacket: 32
[  310.911918][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.941742][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.964720][ T5157] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  310.991241][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.014084][ T5157] usb 1-1: config 0 descriptor??
[  311.049200][ T5157] hub 1-1:0.0: USB hub found
[  311.347339][ T7752] lo speed is unknown, defaulting to 1000
[  312.039205][ T5157] hub 1-1:0.0: config failed, can't read hub descriptor (err -90)
[  312.323522][ T5157] usbhid 1-1:0.0: can't add hid device: -71
[  312.349670][ T5157] usbhid: probe of 1-1:0.0 failed with error -71
[  312.391691][ T5157] usb 1-1: USB disconnect, device number 5
[  312.464923][ T7764] loop1: detected capacity change from 0 to 16
[  312.495821][ T7764] erofs: (device loop1): mounted with root inode @ nid 36.
[  312.543618][ T7764] syz.1.443: attempt to access beyond end of device
[  312.543618][ T7764] loop1: rw=0, sector=14546590680, nr_sectors = 8 limit=16
[  312.573962][ T7764] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -2 in[1, 1440] out[1677]
[  312.591196][ T7764] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 87 of nid 36
[  314.798787][ T7783] loop1: detected capacity change from 0 to 32768
[  314.824488][ T7783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.453 (7783)
[  314.938805][ T7783] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  314.972842][ T7783] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  314.996458][ T7783] BTRFS info (device loop1): using free space tree
[  315.101195][ T7783] BTRFS info (device loop1): enabling ssd optimizations
[  315.118601][ T7783] BTRFS info (device loop1): auto enabling async discard
[  315.237846][ T5767] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  315.384995][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.414513][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.246381][ T5817] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  316.356044][ T5837] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  316.438278][ T5817] usb 2-1: unable to get BOS descriptor or descriptor too short
[  316.447509][ T5817] usb 2-1: config 6 has an invalid interface number: 200 but max is 0
[  316.455808][ T5817] usb 2-1: config 6 has no interface number 0
[  316.462095][ T5817] usb 2-1: config 6 interface 200 has no altsetting 0
[  316.471137][ T5817] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  316.480387][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.488642][ T5817] usb 2-1: Product: syz
[  316.492987][ T5817] usb 2-1: Manufacturer: syz
[  316.497653][ T5817] usb 2-1: SerialNumber: syz
[  316.537843][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.549862][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.560834][ T5837] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  316.570271][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.580498][ T5837] usb 1-1: config 0 descriptor??
[  316.909462][ T7879] netlink: 212 bytes leftover after parsing attributes in process `syz.4.485'.
[  316.924599][ T5817] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  317.135292][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  317.145767][ T5817] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  317.154282][ T5817] usb 2-1: media controller created
[  317.178856][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  317.204640][ T5817] dvb-usb: bulk message failed: -71 (6/0)
[  317.212371][ T5817] dvb-usb: bulk message failed: -71 (6/0)
[  317.219353][ T5817] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  317.220927][ T5837] usb 1-1: string descriptor 0 read error: -71
[  317.238117][ T5837] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71
[  317.247044][ T5817] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10
[  317.259877][ T5837] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71
[  317.263358][ T5817] dvb-usb: schedule remote query interval to 150 msecs.
[  317.268478][ T5837] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71
[  317.283314][ T5817] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  317.291756][ T5817] usb 2-1: USB disconnect, device number 4
[  317.322983][ T5837] uclogic 0003:256C:006D.0002: failed probing parameters: -71
[  317.338353][ T5837] uclogic: probe of 0003:256C:006D.0002 failed with error -71
[  317.382175][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  317.388996][ T5837] usb 1-1: USB disconnect, device number 6
[  317.397219][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  317.420330][ T5817] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  319.023409][ T7919] syz.4.501 uses obsolete (PF_INET,SOCK_PACKET)
[  319.710545][ T7938] input: syz1 as /devices/virtual/input/input11
[  319.816684][ T7935] loop1: detected capacity change from 0 to 32768
[  319.838893][ T7935] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.507 (7935)
[  319.915098][ T7935] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  319.930792][ T7935] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  319.960641][ T7935] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  319.996060][ T7935] BTRFS info (device loop1): use lzo compression, level 0
[  320.003240][ T7935] BTRFS info (device loop1): using free space tree
[  320.199769][ T7935] BTRFS info (device loop1): enabling ssd optimizations
[  320.220890][ T7935] BTRFS info (device loop1): auto enabling async discard
[  321.674714][ T7960] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  321.732061][ T5767] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  322.105451][ T5777] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  322.326814][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'.
[  322.785986][ T5837] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  322.988583][ T5837] usb 2-1: Using ep0 maxpacket: 16
[  323.009895][ T5837] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  323.044799][ T5837] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  323.778074][ T5837] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  323.791862][ T5837] usb 2-1: config 1 interface 0 has no altsetting 0
[  323.808826][ T5837] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  323.820489][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.831311][ T5837] usb 2-1: Product: syz
[  323.835602][ T5837] usb 2-1: Manufacturer: syz
[  323.843323][ T5837] usb 2-1: SerialNumber: syz
[  324.113966][ T5837] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  324.114339][ T8019] input: syz0 as /devices/virtual/input/input12
[  324.309844][ T5837] usb 2-1: USB disconnect, device number 5
[  324.510122][ T7996] usblp0: removed
[  324.740510][ T8028] loop0: detected capacity change from 0 to 256
[  325.190675][ T8034] loop1: detected capacity change from 0 to 512
[  325.240519][ T8034] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 5)!
[  325.279105][ T8034] EXT4-fs (loop1): group descriptors corrupted!
[  325.650552][ T8047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.541'.
[  325.678590][ T8047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.541'.
[  326.220529][ T8071] sctp: [Deprecated]: syz.0.548 (pid 8071) Use of int in max_burst socket option deprecated.
[  326.220529][ T8071] Use struct sctp_assoc_value instead
[  326.340625][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'.
[  326.365800][ T8079] loop0: detected capacity change from 0 to 512
[  326.428663][ T8079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.443536][ T8079] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  326.642859][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.263115][ T8096] loop0: detected capacity change from 0 to 32768
[  327.303622][ T8096] JBD2: Ignoring recovery information on journal
[  327.427317][ T8096] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  327.574037][ T8110] loop1: detected capacity change from 0 to 40427
[  327.587285][ T8110] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  327.623585][ T8110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  327.635314][ T8096] syz.0.554 (8096) used greatest stack depth: 19856 bytes left
[  327.660682][ T8110] F2FS-fs (loop1): Found nat_bits in checkpoint
[  327.748364][ T5769] ocfs2: Unmounting device (7,0) on (node local)
[  327.784701][ T8110] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  327.805970][ T8110] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  328.483529][ T8135] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  328.506182][ T8135] overlayfs: failed to set xattr on upper
[  328.524722][ T8135] overlayfs: ...falling back to index=off.
[  328.543453][ T8135] overlayfs: ...falling back to uuid=null.
[  328.555115][ T8139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  328.563120][ T8139] IPv6: NLM_F_CREATE should be set when creating new route
[  328.917963][ T8146] loop0: detected capacity change from 0 to 2048
[  328.989679][ T8146] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  329.023015][ T7555] udevd[7555]: incorrect nilfs2 checksum on /dev/loop0
[  329.076909][ T8151] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  330.164062][ T8167] loop1: detected capacity change from 0 to 128
[  330.303955][ T8167] syz.1.581: attempt to access beyond end of device
[  330.303955][ T8167] loop1: rw=34817, sector=102, nr_sectors = 32 limit=128
[  330.496479][ T2918] kworker/u4:9: attempt to access beyond end of device
[  330.496479][ T2918] loop1: rw=1, sector=137, nr_sectors = 25 limit=128
[  330.666714][ T5837] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  330.686116][ T8183] fuse: Bad value for 'fd'
[  330.852626][ T5837] usb 1-1: unable to get BOS descriptor or descriptor too short
[  330.870660][ T5837] usb 1-1: config 6 has an invalid interface number: 200 but max is 0
[  330.883390][ T5837] usb 1-1: config 6 has no interface number 0
[  330.893835][ T5837] usb 1-1: config 6 interface 200 has no altsetting 0
[  330.905345][ T5837] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  330.923334][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.932707][ T5837] usb 1-1: Product: syz
[  330.941626][ T5837] usb 1-1: Manufacturer: syz
[  330.947683][ T5837] usb 1-1: SerialNumber: syz
[  331.413556][ T5837] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  331.481645][ T8197] overlayfs: failed to clone lowerpath
[  331.498187][ T8197] overlayfs: failed to clone lowerpath
[  331.617962][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  331.633406][ T5837] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  331.677489][ T5837] usb 1-1: media controller created
[  331.733862][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  331.772398][ T5837] dvb-usb: bulk message failed: -71 (6/0)
[  331.778993][ T5837] dvb-usb: bulk message failed: -71 (6/0)
[  331.785362][ T5837] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  331.816037][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13
[  331.844167][ T5837] dvb-usb: schedule remote query interval to 150 msecs.
[  331.863450][ T5837] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  331.882541][ T5837] usb 1-1: USB disconnect, device number 7
[  331.972237][ T5837] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  332.271986][ T8221] pimreg: entered allmulticast mode
[  333.398874][ T8260] netlink: 'syz.3.620': attribute type 3 has an invalid length.
[  334.926781][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[  334.996348][ T8280] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  335.018922][ T8280] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  335.987486][ T8289] loop1: detected capacity change from 0 to 16
[  336.062003][ T8289] erofs: (device loop1): mounted with root inode @ nid 36.
[  336.414154][ T5767] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36
[  336.469756][ T5767] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36
[  337.171345][ T8293] loop0: detected capacity change from 0 to 131072
[  337.232712][ T8293] F2FS-fs (loop0): Found nat_bits in checkpoint
[  337.316031][ T8293] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  337.371161][   T28] audit: type=1804 audit(1770745802.623:3): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.630" name="/newroot/130/file0/bus" dev="loop0" ino=10 res=1 errno=0
[  337.935473][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.986905][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  338.180506][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.201389][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  338.379623][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.406668][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  338.628182][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.666431][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  339.198619][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  339.214146][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  339.226646][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  339.238468][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  339.249483][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  339.258286][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  339.486349][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'.
[  339.506616][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'.
[  339.515528][ T8330] netlink: 'syz.4.641': attribute type 6 has an invalid length.
[  339.580849][ T8330] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  339.590344][ T8330] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  339.599351][ T8330] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  339.608197][ T8330] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  339.824282][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'.
[  339.843752][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'.
[  339.874012][ T8330] netlink: 'syz.4.641': attribute type 6 has an invalid length.
[  340.005676][ T8325] lo speed is unknown, defaulting to 1000
[  340.370445][ T8343] lo speed is unknown, defaulting to 1000
[  340.860276][ T8367] overlayfs: failed to clone lowerpath
[  340.883017][ T8367] overlayfs: failed to clone lowerpath
[  341.159955][ T8325] chnl_net:caif_netlink_parms(): no params data found
[  341.374102][ T5771] Bluetooth: hci0: command tx timeout
[  342.171523][   T11] hsr_slave_0: left promiscuous mode
[  342.199388][   T11] hsr_slave_1: left promiscuous mode
[  342.238016][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  342.245475][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  342.264398][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  342.271984][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.310628][   T11] bridge_slave_1: left allmulticast mode
[  342.319994][   T11] bridge_slave_1: left promiscuous mode
[  342.325785][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.361664][   T11] bridge_slave_0: left allmulticast mode
[  342.374485][   T11] bridge_slave_0: left promiscuous mode
[  342.381377][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.439601][   T11] veth1_macvtap: left promiscuous mode
[  342.447391][   T11] veth0_macvtap: left promiscuous mode
[  342.456495][   T11] veth1_vlan: left promiscuous mode
[  342.464209][   T11] veth0_vlan: left promiscuous mode
[  343.034071][   T28] audit: type=1326 audit(1770745808.283:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.3.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f513a79bf79 code=0x0
[  343.454289][ T5771] Bluetooth: hci0: command tx timeout
[  344.436560][   T11] team0 (unregistering): Port device team_slave_1 removed
[  344.688524][   T11] team0 (unregistering): Port device team_slave_0 removed
[  344.816644][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  344.930372][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.534513][ T5777] Bluetooth: hci0: command tx timeout
[  345.834017][   T11] bond0 (unregistering): Released all slaves
[  345.992277][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.999651][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.007569][ T8325] bridge_slave_0: entered allmulticast mode
[  346.014889][ T8325] bridge_slave_0: entered promiscuous mode
[  346.076192][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.083355][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.126629][ T8325] bridge_slave_1: entered allmulticast mode
[  346.133983][ T8325] bridge_slave_1: entered promiscuous mode
[  346.280076][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.330339][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.599462][ T8325] team0: Port device team_slave_0 added
[  346.823202][ T8325] team0: Port device team_slave_1 added
[  347.100135][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.136457][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.388143][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.405514][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.429286][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.545999][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.606180][ T5777] Bluetooth: hci0: command tx timeout
[  348.548303][ T8325] hsr_slave_0: entered promiscuous mode
[  348.575587][ T8325] hsr_slave_1: entered promiscuous mode
[  348.673946][   T11] IPVS: stop unused estimator thread 0...
[  349.290005][ T8325] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  349.332717][ T8325] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  349.379496][ T8325] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  349.415596][ T8325] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  349.780932][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.836155][ T8455] overlayfs: statfs failed on './file0'
[  349.860398][ T8325] 8021q: adding VLAN 0 to HW filter on device team0
[  349.938320][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.945493][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.015745][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.022957][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.745762][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'.
[  350.769759][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.850244][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'.
[  351.312325][ T8425] udevd[8425]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  351.346472][ T8505] fuse: root generation should be zero
[  351.369804][ T8427] udevd[8427]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  351.844091][ T8325] veth0_vlan: entered promiscuous mode
[  351.904290][ T8325] veth1_vlan: entered promiscuous mode
[  352.025265][ T8325] veth0_macvtap: entered promiscuous mode
[  352.059831][ T8325] veth1_macvtap: entered promiscuous mode
[  352.122030][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'.
[  352.169355][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.216700][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.249805][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.277590][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.302914][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.314796][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.343230][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_0
[  352.371010][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.401456][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.440144][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.464776][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.488688][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.523460][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.548185][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_1
[  352.560490][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.678'.
[  352.680315][ T8325] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.738061][ T8325] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.766176][ T8325] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.774946][ T8325] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.079385][ T8549] xt_hashlimit: size too large, truncated to 1048576
[  353.116166][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.154608][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.264647][ T8552] loop0: detected capacity change from 0 to 1024
[  353.305504][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.339463][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.648387][ T8552] hfsplus: found bad thread record in catalog
[  353.710349][ T8552] hfsplus: found bad thread record in catalog
[  353.949801][   T11] hfsplus: found bad thread record in catalog
[  353.975014][   T11] hfsplus: found bad thread record in catalog
[  354.048756][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'.
[  354.302222][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'.
[  355.019424][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'.
[  355.712128][ T5837] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  355.908384][ T5837] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.939292][ T5837] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  355.977483][ T5837] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  356.006818][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  356.025459][ T5837] usb 6-1: SerialNumber: syz
[  356.258084][ T5837] usb 6-1: 0:2 : does not exist
[  356.283528][ T5837] usb 6-1: unit 5: unexpected type 0x0a
[  356.351837][ T5837] usb 6-1: USB disconnect, device number 2
[  356.434619][ T8427] udevd[8427]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  356.471944][ T8625] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  356.488921][ T8625] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  356.982546][ T8638] loop5: detected capacity change from 0 to 512
[  357.021104][ T8638] EXT4-fs: Ignoring removed bh option
[  357.077848][ T8638] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  357.184518][ T8638] EXT4-fs (loop5): 1 truncate cleaned up
[  357.199076][ T8638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.461444][ T8644] kernel profiling enabled (shift: 63)
[  357.467355][ T8644] profiling shift: 63 too large
[  357.688315][ T8325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.204173][ T8654] loop0: detected capacity change from 0 to 32768
[  358.243512][ T8654] JBD2: Ignoring recovery information on journal
[  358.355460][ T8654] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  358.511948][ T8654] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  358.534214][ T8654] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  358.544189][ T8654] OCFS2: File system is now read-only.
[  358.549876][ T8654] (syz.0.704,8654,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  358.558395][ T8654] (syz.0.704,8654,1):__ocfs2_claim_clusters:2365 ERROR: status = -30
[  358.566546][ T8654] (syz.0.704,8654,1):__ocfs2_claim_clusters:2373 ERROR: status = -30
[  358.574649][ T8654] (syz.0.704,8654,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30
[  358.583260][ T8654] (syz.0.704,8654,1):ocfs2_write_cluster:1153 ERROR: status = -30
[  358.591519][ T8654] (syz.0.704,8654,1):ocfs2_write_cluster_by_desc:1248 ERROR: status = -30
[  358.600168][ T8654] (syz.0.704,8654,1):ocfs2_write_begin_nolock:1820 ERROR: status = -30
[  358.610588][ T8654] (syz.0.704,8654,1):ocfs2_write_begin:1907 ERROR: status = -30
[  358.629418][ T8663] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  358.746325][ T8663] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  358.808979][ T8663] (syz.0.704,8663,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  358.868608][ T8663] (syz.0.704,8663,1):__ocfs2_claim_clusters:2365 ERROR: status = -30
[  358.920187][ T8663] (syz.0.704,8663,1):__ocfs2_claim_clusters:2373 ERROR: status = -30
[  358.985214][ T8663] (syz.0.704,8663,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30
[  359.064266][ T8663] (syz.0.704,8663,1):ocfs2_write_cluster:1153 ERROR: status = -30
[  359.112759][ T8663] (syz.0.704,8663,1):ocfs2_write_cluster_by_desc:1248 ERROR: status = -30
[  359.179408][ T8663] (syz.0.704,8663,1):ocfs2_write_begin_nolock:1820 ERROR: status = -30
[  359.266395][ T8663] (syz.0.704,8663,1):ocfs2_write_begin:1907 ERROR: status = -30
[  359.692086][ T8672] syzkaller0: entered promiscuous mode
[  359.725436][ T5769] ocfs2: Unmounting device (7,0) on (node local)
[  359.746016][ T8672] syzkaller0: entered allmulticast mode
[  366.058886][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.712'.
[  366.538397][ T8719] syz_tun: entered allmulticast mode
[  366.608103][ T8717] syz_tun: left allmulticast mode
[  369.474044][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.733'.
[  371.658459][ T8800] overlayfs: failed to clone upperpath
[  374.639951][ T8844] syz1: rxe_set_mtu: Set mtu to 256
[  374.794677][ T8849] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  374.884327][ T8844] infiniband syz1: set active
[  375.192689][ T8855] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  375.475680][   T23] lo speed is unknown, defaulting to 1000
[  375.649006][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.754'.
[  375.926315][ T5837] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  376.196005][ T5837] usb 1-1: Using ep0 maxpacket: 16
[  376.306276][ T5837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  377.121443][ T5837] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  377.388939][ T5837] usb 1-1: string descriptor 0 read error: -71
[  377.395268][ T5837] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  377.466110][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.545061][ T5837] usb 1-1: can't set config #1, error -71
[  377.577018][ T5837] usb 1-1: USB disconnect, device number 8
[  377.721578][ T8890] lo speed is unknown, defaulting to 1000
[  377.822948][ T8897] netlink: 'syz.5.760': attribute type 10 has an invalid length.
[  377.852352][ T8897] veth0_vlan: entered allmulticast mode
[  378.825921][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  378.832271][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  378.965439][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'.
[  379.036862][ T8897] veth0_vlan: left promiscuous mode
[  379.219494][ T8897] veth0_vlan: entered promiscuous mode
[  379.381290][ T8897] team0: Device veth0_vlan failed to register rx_handler
[  386.882135][ T9011] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  387.351065][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'.
[  395.286118][ T5777] Bluetooth: hci2: command 0x0406 tx timeout
[  397.396183][   T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  397.585993][   T27] usb 1-1: Using ep0 maxpacket: 32
[  397.607954][   T27] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  397.617734][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.700615][   T27] usb 1-1: config 0 descriptor??
[  397.934206][   T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  397.947710][ T5777] Bluetooth: hci2: unexpected event for opcode 0x202f
[  397.966453][ T5777] Bluetooth: hci2: hcon ffff88802ff5a000 sent 1 < count 56702
[  398.007828][   T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  398.027592][   T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  398.035366][   T27] usb 1-1: media controller created
[  398.063897][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  399.045967][   T27] stb0899_attach: Driver disabled by Kconfig
[  399.186184][   T27] az6027: no front-end attached
[  399.186184][   T27] 
[  399.974993][   T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  400.020287][   T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14
[  400.166432][   T27] dvb-usb: schedule remote query interval to 400 msecs.
[  400.195928][   T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  400.250109][   T27] usb 1-1: USB disconnect, device number 9
[  400.556776][   T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  402.009266][ T5777] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  402.019558][ T5777] Bluetooth: hci2: Injecting HCI hardware error event
[  402.029766][ T5771] Bluetooth: hci2: hardware error 0x00
[  403.187315][ T9218] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  404.806017][ T5771] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  407.440563][ T9267] binder: 9266:9267 ioctl c0306201 200000000180 returned -14
[  408.707838][ T9281] io-wq is not configured for unbound workers
[  413.701996][ T9335] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  413.722005][ T9335] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  417.745775][ T9383] x_tables: ip6_tables: mh match: only valid for protocol 135
[  418.411456][   T28] audit: type=1326 audit(1770745883.663:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.5.885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a60d9bf79 code=0x0
[  424.591904][ T9429] binder_alloc: 9428: pid 9428 spamming oneway? 2 buffers allocated for a total size of 5120
[  424.636551][ T9429] binder_alloc: 9428: pid 9428 spamming oneway? 3 buffers allocated for a total size of 5128
[  426.131153][ T5870] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  426.385984][ T5870] usb 6-1: Using ep0 maxpacket: 32
[  426.405657][ T5870] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  426.420308][ T5870] usb 6-1: config 0 has no interface number 0
[  426.436019][ T5870] usb 6-1: config 0 interface 12 has no altsetting 0
[  426.455389][ T5870] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  426.476152][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.501538][ T5870] usb 6-1: Product: syz
[  426.511723][ T5870] usb 6-1: Manufacturer: syz
[  426.529835][ T5870] usb 6-1: SerialNumber: syz
[  426.562093][ T5870] usb 6-1: config 0 descriptor??
[  429.964584][ T5870] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  429.994871][ T5870] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  430.039073][ T5870] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  430.086213][ T5870] f81534: probe of 6-1:0.12 failed with error -71
[  430.121897][ T5870] usb 6-1: USB disconnect, device number 3
[  432.867169][ T9502] loop5: detected capacity change from 0 to 1024
[  433.587145][   T59] hfsplus: b-tree write err: -5, ino 4
[  436.885171][ T9535] loop5: detected capacity change from 0 to 512
[  436.929601][ T9535] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.933: iget: bad extra_isize 90 (inode size 256)
[  437.000636][ T9535] EXT4-fs (loop5): Remounting filesystem read-only
[  437.008753][ T9535] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  437.022156][ T9535] EXT4-fs warning (device loop5): ext4_evict_inode:255: couldn't mark inode dirty (err -5)
[  437.036232][ T9535] EXT4-fs (loop5): 1 orphan inode deleted
[  437.059123][ T9535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.276393][ T5870] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  438.185932][ T5870] usb 1-1: Using ep0 maxpacket: 32
[  438.217885][ T5870] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  438.246028][ T5870] usb 1-1: config 0 has no interface number 0
[  438.262801][ T5870] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  438.278207][ T5870] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  438.288488][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.301866][ T5870] usb 1-1: Product: syz
[  438.309052][ T5870] usb 1-1: Manufacturer: syz
[  438.316476][ T5870] usb 1-1: SerialNumber: syz
[  438.319556][ T8325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.350597][ T5870] usb 1-1: config 0 descriptor??
[  438.391238][ T9540] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  438.757725][ T9540] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  440.594763][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  440.601168][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  441.039071][ T5870] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  441.103438][ T5870] asix: probe of 1-1:0.188 failed with error -71
[  441.155041][ T5870] usb 1-1: USB disconnect, device number 10
[  441.192730][ T5771] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  441.202972][ T5771] CPU: 1 PID: 5771 Comm: kworker/u5:2 Not tainted syzkaller #0
[  441.210551][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  441.220851][ T5771] Workqueue: hci0 hci_rx_work
[  441.225594][ T5771] Call Trace:
[  441.228895][ T5771]  <TASK>
[  441.231831][ T5771]  dump_stack_lvl+0x18c/0x250
[  441.236508][ T5771]  ? show_regs_print_info+0x20/0x20
[  441.241969][ T5771]  ? load_image+0x400/0x400
[  441.246495][ T5771]  sysfs_create_dir_ns+0x26e/0x2a0
[  441.251630][ T5771]  ? sysfs_warn_dup+0xa0/0xa0
[  441.256322][ T5771]  ? do_raw_spin_unlock+0x121/0x230
[  441.261544][ T5771]  kobject_add_internal+0x61c/0xcc0
[  441.266763][ T5771]  kobject_add+0x164/0x240
[  441.271188][ T5771]  ? __rwlock_init+0x150/0x150
[  441.275962][ T5771]  ? kobject_init+0x1e0/0x1e0
[  441.280653][ T5771]  ? _raw_spin_unlock+0x28/0x40
[  441.285507][ T5771]  ? get_device_parent+0x366/0x390
[  441.290630][ T5771]  device_add+0x408/0xc20
[  441.294968][ T5771]  hci_conn_add_sysfs+0xd5/0x1e0
[  441.299911][ T5771]  le_conn_complete_evt+0xf5d/0x1540
[  441.305199][ T5771]  ? hci_event_packet+0x4cb/0x1270
[  441.310317][ T5771]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  441.316574][ T5771]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  441.322233][ T5771]  ? skb_pull_data+0xfb/0x200
[  441.326931][ T5771]  hci_le_conn_complete_evt+0x187/0x440
[  441.332496][ T5771]  ? hci_remote_host_features_evt+0x150/0x150
[  441.338574][ T5771]  hci_event_packet+0x7ba/0x1270
[  441.343521][ T5771]  ? bis_list+0x290/0x290
[  441.347860][ T5771]  ? lockdep_hardirqs_on+0x98/0x150
[  441.353071][ T5771]  ? hci_send_to_monitor+0xd7/0x4f0
[  441.358280][ T5771]  hci_rx_work+0x43a/0xd60
[  441.362707][ T5771]  ? process_scheduled_works+0x96f/0x15d0
[  441.368433][ T5771]  process_scheduled_works+0xa5d/0x15d0
[  441.374004][ T5771]  ? assign_work+0x430/0x430
[  441.378606][ T5771]  ? assign_work+0x3d0/0x430
[  441.383199][ T5771]  worker_thread+0xa55/0xfc0
[  441.387807][ T5771]  kthread+0x2fa/0x390
[  441.391869][ T5771]  ? pr_cont_work+0x560/0x560
[  441.396553][ T5771]  ? kthread_blkcg+0xd0/0xd0
[  441.401137][ T5771]  ret_from_fork+0x48/0x80
[  441.405555][ T5771]  ? kthread_blkcg+0xd0/0xd0
[  441.410141][ T5771]  ret_from_fork_asm+0x11/0x20
[  441.414916][ T5771]  </TASK>
[  441.419205][ T5771] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  441.433527][ T5771] Bluetooth: hci0: failed to register connection device
[  445.802318][ T9614] loop0: detected capacity change from 0 to 32768
[  446.196653][ T9619] loop5: detected capacity change from 0 to 1024
[  446.265567][ T9619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.454214][ T9619] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5920: Out of memory
[  446.486450][ T9619] EXT4-fs error (device loop5): ext4_setattr:5602: inode #15: comm syz.5.956: mark_inode_dirty error
[  446.504339][ T9619] EXT4-fs error (device loop5) in ext4_setattr:5663: Out of memory
[  446.523940][ T9619] 
[  446.526312][ T9619] ======================================================
[  446.533336][ T9619] WARNING: possible circular locking dependency detected
[  446.540374][ T9619] syzkaller #0 Not tainted
[  446.544788][ T9619] ------------------------------------------------------
[  446.551809][ T9619] syz.5.956/9619 is trying to acquire lock:
[  446.557714][ T9619] ffff8880512050c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0
[  446.567496][ T9619] 
[  446.567496][ T9619] but task is already holding lock:
[  446.574866][ T9619] ffff88802803cbd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  446.584931][ T9619] 
[  446.584931][ T9619] which lock already depends on the new lock.
[  446.584931][ T9619] 
[  446.595343][ T9619] 
[  446.595343][ T9619] the existing dependency chain (in reverse order) is:
[  446.604370][ T9619] 
[  446.604370][ T9619] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  446.612826][ T9619]        percpu_down_read+0x44/0x1a0
[  446.618141][ T9619]        ext4_writepages+0x1a4/0x350
[  446.623478][ T9619]        do_writepages+0x3b3/0x630
[  446.628617][ T9619]        __writeback_single_inode+0x153/0xec0
[  446.634710][ T9619]        writeback_single_inode+0x21f/0x760
[  446.640626][ T9619]        write_inode_now+0x183/0x210
[  446.645927][ T9619]        iput+0x5ae/0x920
[  446.650267][ T9619]        ext4_xattr_block_set+0x273f/0x32b0
[  446.656355][ T9619]        ext4_expand_extra_isize_ea+0x12c5/0x1e80
[  446.662778][ T9619]        __ext4_expand_extra_isize+0x306/0x400
[  446.668935][ T9619]        __ext4_mark_inode_dirty+0x45d/0x6e0
[  446.674917][ T9619]        ext4_evict_inode+0x7f3/0xea0
[  446.680303][ T9619]        evict+0x4ca/0x8d0
[  446.684729][ T9619]        ext4_orphan_cleanup+0xbec/0x1420
[  446.690449][ T9619]        ext4_fill_super+0x5ed3/0x6790
[  446.695999][ T9619]        get_tree_bdev+0x3f3/0x520
[  446.701369][ T9619]        vfs_get_tree+0x8c/0x280
[  446.706301][ T9619]        do_new_mount+0x24b/0xa40
[  446.711316][ T9619]        __se_sys_mount+0x2e7/0x3d0
[  446.716507][ T9619]        do_syscall_64+0x55/0xa0
[  446.721438][ T9619]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  446.727845][ T9619] 
[  446.727845][ T9619] -> #0 (&ei->xattr_sem){++++}-{3:3}:
[  446.735404][ T9619]        __lock_acquire+0x2df1/0x7d40
[  446.740772][ T9619]        lock_acquire+0x19e/0x420
[  446.745787][ T9619]        down_write+0x97/0x200
[  446.750550][ T9619]        ext4_destroy_inline_data+0x28/0xe0
[  446.756444][ T9619]        ext4_do_writepages+0x4f0/0x3990
[  446.762078][ T9619]        ext4_writepages+0x1dd/0x350
[  446.767359][ T9619]        do_writepages+0x3b3/0x630
[  446.772465][ T9619]        filemap_fdatawrite_wbc+0x122/0x180
[  446.778356][ T9619]        filemap_flush+0xe4/0x150
[  446.783377][ T9619]        ext4_release_file+0x82/0x310
[  446.788744][ T9619]        __fput+0x234/0x970
[  446.793245][ T9619]        task_work_run+0x1d4/0x260
[  446.798350][ T9619]        exit_to_user_mode_loop+0xe6/0x110
[  446.804164][ T9619]        exit_to_user_mode_prepare+0xee/0x180
[  446.810225][ T9619]        syscall_exit_to_user_mode+0x1a/0x50
[  446.816194][ T9619]        do_syscall_64+0x61/0xa0
[  446.821126][ T9619]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  446.827532][ T9619] 
[  446.827532][ T9619] other info that might help us debug this:
[  446.827532][ T9619] 
[  446.837832][ T9619]  Possible unsafe locking scenario:
[  446.837832][ T9619] 
[  446.845288][ T9619]        CPU0                    CPU1
[  446.850639][ T9619]        ----                    ----
[  446.855999][ T9619]   rlock(&sbi->s_writepages_rwsem);
[  446.861288][ T9619]                                lock(&ei->xattr_sem);
[  446.868136][ T9619]                                lock(&sbi->s_writepages_rwsem);
[  446.875846][ T9619]   lock(&ei->xattr_sem);
[  446.880184][ T9619] 
[  446.880184][ T9619]  *** DEADLOCK ***
[  446.880184][ T9619] 
[  446.888316][ T9619] 1 lock held by syz.5.956/9619:
[  446.893242][ T9619]  #0: ffff88802803cbd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  446.903692][ T9619] 
[  446.903692][ T9619] stack backtrace:
[  446.909653][ T9619] CPU: 1 PID: 9619 Comm: syz.5.956 Not tainted syzkaller #0
[  446.917011][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  446.927059][ T9619] Call Trace:
[  446.930342][ T9619]  <TASK>
[  446.933263][ T9619]  dump_stack_lvl+0x18c/0x250
[  446.937960][ T9619]  ? load_image+0x400/0x400
[  446.942469][ T9619]  ? show_regs_print_info+0x20/0x20
[  446.947667][ T9619]  ? print_circular_bug+0x12b/0x1a0
[  446.952866][ T9619]  check_noncircular+0x2fc/0x400
[  446.957815][ T9619]  ? print_deadlock_bug+0x5d0/0x5d0
[  446.963027][ T9619]  ? lockdep_lock+0xf5/0x230
[  446.967620][ T9619]  ? _find_first_zero_bit+0xd3/0x100
[  446.972901][ T9619]  __lock_acquire+0x2df1/0x7d40
[  446.977750][ T9619]  ? __rcu_read_unlock+0x7c/0xd0
[  446.982687][ T9619]  ? blk_mq_submit_bio+0x12d5/0x2160
[  446.987966][ T9619]  ? verify_lock_unused+0x140/0x140
[  446.993180][ T9619]  ? blk_mq_plug_issue_direct+0x590/0x590
[  446.998899][ T9619]  lock_acquire+0x19e/0x420
[  447.003394][ T9619]  ? ext4_destroy_inline_data+0x28/0xe0
[  447.008965][ T9619]  ? __might_sleep+0xe0/0xe0
[  447.013552][ T9619]  ? read_lock_is_recursive+0x20/0x20
[  447.018919][ T9619]  ? deref_stack_reg+0x1bd/0x240
[  447.023845][ T9619]  ? __might_sleep+0xe0/0xe0
[  447.028432][ T9619]  ? register_lock_class+0xc4/0x8a0
[  447.033621][ T9619]  down_write+0x97/0x200
[  447.037866][ T9619]  ? ext4_destroy_inline_data+0x28/0xe0
[  447.043404][ T9619]  ? down_read_killable+0x340/0x340
[  447.048600][ T9619]  ? ext4_journal_check_start+0x178/0x250
[  447.054317][ T9619]  ext4_destroy_inline_data+0x28/0xe0
[  447.059684][ T9619]  ext4_do_writepages+0x4f0/0x3990
[  447.064800][ T9619]  ? verify_lock_unused+0x140/0x140
[  447.070008][ T9619]  ? __lock_acquire+0x1347/0x7d40
[  447.075036][ T9619]  ? ext4_normal_submit_inode_data_buffers+0x240/0x240
[  447.081903][ T9619]  ? rcu_read_lock_any_held+0xb4/0x140
[  447.087374][ T9619]  ext4_writepages+0x1dd/0x350
[  447.092147][ T9619]  ? ext4_read_folio+0x2f0/0x2f0
[  447.097093][ T9619]  ? __rwlock_init+0x150/0x150
[  447.101853][ T9619]  ? do_raw_spin_unlock+0x121/0x230
[  447.107046][ T9619]  ? ext4_read_folio+0x2f0/0x2f0
[  447.111986][ T9619]  do_writepages+0x3b3/0x630
[  447.116586][ T9619]  ? folio_clear_dirty_for_io+0xc30/0xc30
[  447.122305][ T9619]  ? __lock_acquire+0x7d40/0x7d40
[  447.127320][ T9619]  ? __rwlock_init+0x150/0x150
[  447.132102][ T9619]  ? do_raw_spin_unlock+0x121/0x230
[  447.137297][ T9619]  filemap_fdatawrite_wbc+0x122/0x180
[  447.142672][ T9619]  filemap_flush+0xe4/0x150
[  447.147173][ T9619]  ? filemap_fdatawrite_range+0x160/0x160
[  447.152959][ T9619]  ? __might_sleep+0xe0/0xe0
[  447.157544][ T9619]  ? rcu_is_watching+0x15/0xb0
[  447.162302][ T9619]  ext4_release_file+0x82/0x310
[  447.167152][ T9619]  ? ext4_file_open+0x780/0x780
[  447.171999][ T9619]  __fput+0x234/0x970
[  447.175981][ T9619]  task_work_run+0x1d4/0x260
[  447.180568][ T9619]  ? task_work_cancel+0x220/0x220
[  447.185592][ T9619]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  447.191666][ T9619]  ? exit_to_user_mode_loop+0x3b/0x110
[  447.197129][ T9619]  exit_to_user_mode_loop+0xe6/0x110
[  447.202412][ T9619]  exit_to_user_mode_prepare+0xee/0x180
[  447.207961][ T9619]  syscall_exit_to_user_mode+0x1a/0x50
[  447.213413][ T9619]  do_syscall_64+0x61/0xa0
[  447.217825][ T9619]  ? clear_bhb_loop+0x40/0x90
[  447.222516][ T9619]  ? clear_bhb_loop+0x40/0x90
[  447.227211][ T9619]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  447.233098][ T9619] RIP: 0033:0x7f6a60d9bf79
[  447.237537][ T9619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.257134][ T9619] RSP: 002b:00007f6a61d3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  447.265637][ T9619] RAX: fffffffffffffff4 RBX: 00007f6a61015fa0 RCX: 00007f6a60d9bf79
[  447.273649][ T9619] RDX: 0000000000000000 RSI: 0000000000000186 RDI: 0000200000000100
[  447.281628][ T9619] RBP: 00007f6a60e327e0 R08: 0000000000000000 R09: 0000000000000000
[  447.289606][ T9619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  447.297570][ T9619] R13: 00007f6a61016038 R14: 00007f6a61015fa0 R15: 00007ffcb90c1248
[  447.305542][ T9619]  </TASK>
[  447.341141][ T9619] syz.5.956: attempt to access beyond end of device
[  447.341141][ T9619] loop5: rw=1, sector=3606377190, nr_sectors = 2 limit=1024
[  447.356481][ T9619] EXT4-fs warning (device loop5): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 1803188595)
[  447.370576][ T9619] Buffer I/O error on device loop5, logical block 1803188595
[  447.379046][ T9619] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5920: Out of memory
[  447.389240][ T9619] EXT4-fs error (device loop5): mpage_map_and_submit_extent:2315: inode #15: comm syz.5.956: mark_inode_dirty error
[  447.404927][ T9619] EXT4-fs error (device loop5): mpage_map_and_submit_extent:2319: comm syz.5.956: Failed to mark inode 15 dirty
[  447.422058][ T9619] syz.5.956: attempt to access beyond end of device
[  447.422058][ T9619] loop5: rw=1, sector=3403208898, nr_sectors = 2 limit=1024
[  447.465958][ T9619] EXT4-fs warning (device loop5): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 1701604449)
[  447.745756][ T5777] Bluetooth: hci0: command 0x0406 tx timeout
[  447.751942][ T9619] Buffer I/O error on device loop5, logical block 1701604449
[  448.601027][ T8325] EXT4-fs (loop5): Inode 15 (ffff888051205000): i_reserved_data_blocks (1) not cleared!
[  448.612035][ T8325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.