last executing test programs:

6m52.859186876s ago: executing program 0 (id=1150):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000440)=0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@allocspi={0xf4, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x4e23}, {@in=@rand_addr=0x64010101, 0xffffffff, 0x6c}, @in, {0x0, 0x0, 0x4}, {0xfffffffffffffffe}, {0x0, 0xffffffff}}, 0x4}}, 0xf4}}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082038851000000600000018000000", @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x10, 0x3, 0x0)

6m49.001383939s ago: executing program 0 (id=1157):
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x7, 0x0, 0x2)
syz_open_dev$sndctrl(0x0, 0x1, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e)
inotify_init1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$TCFLSH(0xffffffffffffffff, 0x80045438, 0x300000000000000)
timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
gettid()
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0)
fchdir(r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2022)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

6m47.931774855s ago: executing program 0 (id=1162):
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x7, 0x0, 0x2)
syz_open_dev$sndctrl(&(0x7f00000022c0), 0x1, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e)
inotify_init1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$TCFLSH(0xffffffffffffffff, 0x80045438, 0x300000000000000)
timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
gettid()
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0)
fchdir(r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2022)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

6m44.033481279s ago: executing program 0 (id=1167):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r2, 0x409, 0x7)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@allocspi={0xf4, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x4e23}, {@in=@rand_addr=0x64010101, 0xffffffff, 0x6c}, @in, {0x0, 0x0, 0x4}, {0xfffffffffffffffe}, {0x0, 0xffffffff}}, 0x4}}, 0xf4}}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082038851000000600000018000000", @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x10, 0x3, 0x0)

6m36.345569997s ago: executing program 0 (id=1177):
socket$inet6_dccp(0xa, 0x6, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioperm(0x0, 0x6e, 0xe)
lstat(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000480)={0x3, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {0x0, 0xfffffffd}, {}, {}, {0x1000}]}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x20, 0x0, &(0x7f00000000c0))
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)

6m33.901504357s ago: executing program 0 (id=1180):
r0 = syz_open_dev$I2C(0x0, 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x0, 0x0, 0x4023deea, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {0x0, 0x1}, {0x0, 0x1000000}]}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3e0800450000200000000000119078ffffffffe000c80000040000000c9078e14987ec80d7e7727a2744ed139d1390cbefa8bee60d60a6f95318e605678c6be6d40c02bcafcda606f36962771c7cec1e288dbedeae008d5c4a9fa3cec079edf16b856a9e48f2f4709f0d3d8278679907dc61a42e5ed6b28b6ba1de0dfd3194d4b58b19d45930646f8331f3675e8b8e47e109dc1ff79c28b2900e3cd01919e878cebd6f8bcaf81ca6e863410d4c5dde538b12beb4e62b2e87d40636792139b123d96f94cde360"], 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
lseek(r3, 0x4, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dsp(0xffffff9c, 0x0, 0x100, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, r6, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r7, 0x5409, 0xffffffffffffffff)

6m17.98439148s ago: executing program 32 (id=1180):
r0 = syz_open_dev$I2C(0x0, 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x0, 0x0, 0x4023deea, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {0x0, 0x1}, {0x0, 0x1000000}]}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3e0800450000200000000000119078ffffffffe000c80000040000000c9078e14987ec80d7e7727a2744ed139d1390cbefa8bee60d60a6f95318e605678c6be6d40c02bcafcda606f36962771c7cec1e288dbedeae008d5c4a9fa3cec079edf16b856a9e48f2f4709f0d3d8278679907dc61a42e5ed6b28b6ba1de0dfd3194d4b58b19d45930646f8331f3675e8b8e47e109dc1ff79c28b2900e3cd01919e878cebd6f8bcaf81ca6e863410d4c5dde538b12beb4e62b2e87d40636792139b123d96f94cde360"], 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
lseek(r3, 0x4, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dsp(0xffffff9c, 0x0, 0x100, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, r6, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r7, 0x5409, 0xffffffffffffffff)

4m35.490500682s ago: executing program 3 (id=1343):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x1, 0x1000)

4m33.169968772s ago: executing program 3 (id=1344):
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r1, 0x4, 0x42000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

4m27.419782088s ago: executing program 3 (id=1354):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

4m18.27927174s ago: executing program 3 (id=1360):
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002502000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe5d6405000000000075040000000d00000701000000000000b70400001000e5206a0700fe00000000850000007d000000b70000000a00000095000000000000006458c2c62fc206000000f909a63796c113a80c19aab9d60700ffffffff483be3f0d3253730e78000000062c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766aeb39439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c013700e69274f8e9c31975e551558055dc2dc29edc33b375fa325dcf3e91e20f63d7030dbe7ff7f51fe89c3d17cf45a1616ad237682057034dfdc81f5a53cd640212c88e8b687a2446049577c75b76b775c1e301caf2465ed4b2ad56b848d046c52bfc3737127120ab17d82a294d174f240a3cdc725cfe6e839a1f80f59486578e45b008d39ab618f660e3c53ed4409aa92ae4fecd913060ca74ed8a303e22de12087a217d8d7be0ae1117cc791313b1318497dd5ebeef0d7e1795a6ff20f699870ebb137cffa79465da52ab2b3430ba0ba59152496a1ea5dd1e4dee46f6d3688603b5f25a588a31da4e481884074e211dd09a8b8039d0834507656ed7d552a990c1354d7638b2c2215dd9f606b01a92fabc6eb6fa033a86f8920e2168a80d7c86da5ad1d27c8d2a180e56046a49b989128ea736894d3eef8dca16ed63520be4654ddb14bfe4268c487c5a75c044e21021c089608c50adbc4e3f4c6a4ca86c7d2df5bc7c76e413d05e8f57b1e22d4af34f9d4d2e6e4d4f57f47aebdd5f98f67834c656b2fe09df4a1b15116fceaa404a6df278c7c629f584ba8d37c1137c2263ae02ad3718a03a886eb"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

4m16.554245032s ago: executing program 3 (id=1363):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})

4m9.538010103s ago: executing program 3 (id=1372):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r2 = semget(0x3, 0x1, 0x214)
semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000000000)=""/101)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = epoll_create1(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001})

3m49.906679151s ago: executing program 33 (id=1372):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r2 = semget(0x3, 0x1, 0x214)
semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000000000)=""/101)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = epoll_create1(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001})

3m17.841523167s ago: executing program 4 (id=1425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})

3m16.013421189s ago: executing program 4 (id=1426):
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00')
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

3m7.883844955s ago: executing program 4 (id=1439):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrlimit(0x6, &(0x7f0000000000))
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000a5c3c41f71972fececca9296", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000006000000000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
io_setup(0x200, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r6, r6}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
add_key$keyring(&(0x7f00000004c0), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0)

3m2.861993634s ago: executing program 4 (id=1444):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000076000344cd0f777fb4a483578c469e3a"], 0xfe33)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1a, 0x0, 0x0, @void, @value}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

3m1.256240178s ago: executing program 4 (id=1448):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})

2m57.486572652s ago: executing program 6 (id=1386):
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

2m55.589903714s ago: executing program 6 (id=1453):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6a6, &(0x7f00000007c0)="$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")
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x483, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x5)
pwrite64(r1, 0x0, 0x0, 0x8000c61)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

2m55.457711893s ago: executing program 4 (id=1454):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
semget(0x3, 0x1, 0x214)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create1(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001})

2m51.368215356s ago: executing program 6 (id=1462):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0xffffffffffffffc2, {0x2, 0x0, @remote}}, 0x94, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x18}, 0x44)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$rds(0x15, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe)
flock(r0, 0x0)

2m40.15092032s ago: executing program 34 (id=1454):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
semget(0x3, 0x1, 0x214)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create1(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001})

2m38.544222853s ago: executing program 6 (id=1478):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000)
msgctl$IPC_SET(0x0, 0x1, 0x0)

2m35.38769095s ago: executing program 6 (id=1481):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000076000344cd0f777fb4a483578c469e3a"], 0xfe33)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')

2m19.259662942s ago: executing program 35 (id=1481):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000076000344cd0f777fb4a483578c469e3a"], 0xfe33)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')

5.187842842s ago: executing program 2 (id=1704):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c000000080004"], 0x24}}, 0x0)

5.187597912s ago: executing program 5 (id=1705):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
unshare(0x400)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4, @void, @value}, 0x14)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1, @void, @value}, 0x11)

5.085172021s ago: executing program 2 (id=1706):
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3f4, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x1, 0x0, [0x8000, 0x2, 0x96, 0xb3a, 0x10001, 0x4, 0x6, 0x8, 0x400, 0x5, 0x5, 0x2, 0x3e8, 0x9, 0x100, 0x7, 0x0, 0x0, 0x7, 0x9, 0x80000001, 0xa3, 0xffff, 0x3, 0x0, 0x10000, 0xc9, 0x15, 0xca, 0x1, 0xae71, 0x7, 0x80000000, 0x6, 0x4, 0x400, 0xfffffff1, 0xfff, 0x4, 0x5, 0x7, 0x7b17c113, 0x2, 0x4, 0x6d4, 0xfffffffd, 0xa, 0x48b6, 0x0, 0x5, 0x10000, 0xc, 0x3, 0xf796, 0x5, 0xdc0, 0x401, 0xb, 0x0, 0x35, 0x18c, 0x8, 0x3, 0x7fff], [0x3, 0x7, 0x2, 0x8, 0x3, 0x10, 0x30d, 0x1, 0x4, 0x4, 0x2, 0x3, 0x2, 0x9, 0x0, 0x7, 0x5, 0x2, 0x7b15, 0x4e0, 0x101, 0x3, 0x7, 0x2a, 0x4, 0x4f, 0xd, 0x5aea, 0x5, 0x1, 0x1, 0x7b, 0x77, 0xb, 0x0, 0x4, 0xff, 0x1, 0xc, 0x1000, 0x16, 0x5, 0x857, 0x2, 0x3, 0x9a3d, 0x638b490a, 0x400, 0x1000, 0x9, 0xb8f5, 0x7, 0x10000, 0xbf19, 0x2, 0x81, 0x9, 0x9, 0xffffff38, 0x10000, 0x5, 0x490f, 0x0, 0x5], [0x1, 0x6, 0x8000, 0x1, 0x7, 0x7, 0x7, 0x1f, 0x800, 0x2, 0x1, 0x7f, 0x5, 0x5, 0x8383, 0x9, 0x80, 0x9, 0x1, 0x10001, 0x5, 0xfff, 0x7f, 0x0, 0x0, 0x7, 0x4, 0x9, 0x9, 0x3, 0x80, 0x3, 0x2fb00000, 0x3, 0xc, 0x9, 0x1, 0x6, 0xb428, 0xb00, 0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0x4, 0x1cc6, 0x1000, 0x10, 0x7a46, 0xb, 0x2, 0x6, 0x5c93, 0x1ff, 0x4, 0x4, 0xffff, 0x3, 0x8dd3, 0x7, 0x7, 0xe16a, 0x4], [0x0, 0x0, 0x0, 0x401, 0x1c00, 0x97f, 0x1c0000, 0xff, 0x0, 0x4, 0x4, 0x7, 0x8, 0x0, 0x1000, 0x81, 0x200, 0x0, 0x4, 0x4, 0x4d71, 0x2, 0x7fff, 0x0, 0x9, 0x0, 0x8, 0x7fff, 0x5, 0x11, 0x40, 0x2, 0xfffffffa, 0x1, 0x0, 0x3, 0x0, 0x7, 0x5, 0xe, 0xf, 0x4, 0x3, 0x8, 0x2285c7a7, 0x101, 0x8, 0x1, 0x9, 0x10001, 0x6, 0x5, 0x7fff8, 0xfb7a, 0x3, 0x3, 0xe4c, 0x9, 0x8000, 0xfffff140, 0x0, 0xfffff659, 0xde1, 0x9]}}, 0x420}, 0x1, 0x0, 0x0, 0x200040c4}, 0x20000880)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="4f3bf5cb8031e51b257f40", 0x48}], 0x1)

5.018868391s ago: executing program 5 (id=1707):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@init_itable}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

4.78399537s ago: executing program 2 (id=1708):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20)

4.6330537s ago: executing program 5 (id=1711):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0x1, 0x269, &(0x7f0000001000)="$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")
r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x140)
fcntl$setstatus(r0, 0x4, 0x46100)
write$cgroup_type(r0, 0x0, 0x0)

4.56771633s ago: executing program 2 (id=1712):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x3000046, &(0x7f00000005c0), 0x3, 0x553, &(0x7f0000001080)="$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")
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000340)={@multicast2, @remote, 0xffffffffffffffff, "54538467ada5f40c7b6404d04497b29cc185bd259957625e3eca9285fb8481ad", 0x6, 0x63, 0x4, 0x377f}, 0x3c)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0)
sync()

4.177657718s ago: executing program 2 (id=1714):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_usb_connect(0x2, 0x3b9, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a703010000000209046d000c3fdae20009050402ff03020eff0725010007050007250101067c0809050102ef010809"], 0x0)

3.574444145s ago: executing program 5 (id=1718):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20)

3.255422684s ago: executing program 7 (id=1719):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x2)

2.944058202s ago: executing program 7 (id=1721):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9)
ioctl$NBD_DO_IT(r1, 0xab03)

2.708358271s ago: executing program 1 (id=1723):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000003c0)=[{0x3, 0x8, 0x7f, 0x8}]})

2.515987321s ago: executing program 7 (id=1724):
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB="c4ecf0"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = epoll_create1(0x0)
r1 = socket(0x1, 0x80802, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001080), 0x101000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000010c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(r2)
shutdown(r1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.497474831s ago: executing program 1 (id=1726):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = dup2(r0, r0)
connect$netlink(r1, 0x0, 0x0)

2.26735019s ago: executing program 1 (id=1727):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)

2.098572059s ago: executing program 8 (id=1728):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

2.026690969s ago: executing program 1 (id=1729):
mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

1.869952558s ago: executing program 8 (id=1730):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x88)
sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0)

1.766705677s ago: executing program 2 (id=1731):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01d1c4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.643221687s ago: executing program 8 (id=1732):
r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x7fffffff, 0x1, 0x2})

1.457702836s ago: executing program 8 (id=1733):
io_uring_setup(0xc90, &(0x7f0000000080))
io_uring_setup(0x51c6, &(0x7f0000000000)={0x0, 0xef3f, 0x80, 0x3, 0x4000000})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xffffff7f)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)

1.208001335s ago: executing program 1 (id=1734):
r0 = socket(0x2, 0x80805, 0x0)
listen(r0, 0x5)
sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=':p', 0x2}], 0x1, &(0x7f0000000580)=[{0xc, 0x11, 0x7}], 0xc}, 0x20000040)

1.207613335s ago: executing program 8 (id=1735):
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000080)={0xc, "df1e970974a75196eeb58543bd9d2ba55aeacc9859bdc9f2472342370527626623"}})
openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x546042, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe, 0xfff], 0x0, 0x50184})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x7, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.038205104s ago: executing program 5 (id=1736):
mkdir(&(0x7f0000000400)='./file1\x00', 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

995.227634ms ago: executing program 8 (id=1737):
prctl$PR_MCE_KILL_GET(0x22)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0})
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r3, 0x4b2f, 0x1000000000011)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

731.855163ms ago: executing program 7 (id=1738):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x2, &(0x7f0000001500)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRES64], 0x1, 0x25f, &(0x7f0000000cc0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50)
open(&(0x7f0000000080)='./file1\x00', 0x3293c0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
inotify_init1(0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

731.247813ms ago: executing program 5 (id=1739):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0085666, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006)

632.337223ms ago: executing program 1 (id=1740):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "4e000000f000", "13f4036c5528f5e05dc70a4a0a0e4289", "27d5e718", "00ef8fc78b80988b"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000100), 0x4)

406.119542ms ago: executing program 7 (id=1741):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000000101040000ff0f00000000020000002400018014000180080001"], 0x48}}, 0x0)

0s ago: executing program 7 (id=1742):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4)

kernel console output (not intermixed with test programs):

unted with root inode @ nid 36.
[  755.277293][T10621] syz.2.1388: attempt to access beyond end of device
[  755.277293][T10621] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[  755.291321][T10621] syz.2.1388: attempt to access beyond end of device
[  755.291321][T10621] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[  756.632058][ T4269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  756.655480][ T4269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  756.861514][ T4269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  756.884421][ T4269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  757.177457][ T4269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  757.190603][ T4269] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  757.746012][T10638] lo speed is unknown, defaulting to 1000
[  759.263191][ T9614] Bluetooth: hci5: command 0x0409 tx timeout
[  761.343183][ T9614] Bluetooth: hci5: command 0x041b tx timeout
[  763.423023][ T9614] Bluetooth: hci5: command 0x040f tx timeout
[  766.492590][T10694] loop1: detected capacity change from 0 to 256
[  766.500793][T10694] exfat: Deprecated parameter 'utf8'
[  767.162554][T10696] loop2: detected capacity change from 0 to 256
[  767.170722][T10696] exfat: Deprecated parameter 'utf8'
[  768.823348][ T9614] Bluetooth: hci5: command 0x0419 tx timeout
[  769.148115][T10696] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  769.169868][T10694] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  769.590727][T10638] chnl_net:caif_netlink_parms(): no params data found
[  770.933833][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'.
[  771.156483][T10638] bridge0: port 1(bridge_slave_0) entered blocking state
[  771.203283][T10638] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.261364][T10638] device bridge_slave_0 entered promiscuous mode
[  771.509106][T10638] bridge0: port 2(bridge_slave_1) entered blocking state
[  771.523339][T10638] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.612500][T10737] loop4: detected capacity change from 0 to 256
[  771.619758][T10737] exfat: Deprecated parameter 'utf8'
[  772.824315][T10737] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  773.174180][T10638] device bridge_slave_1 entered promiscuous mode
[  773.685137][T10638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  773.795832][T10638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  774.429411][T10638] team0: Port device team_slave_0 added
[  776.827019][T10753] loop5: detected capacity change from 0 to 512
[  776.835194][T10753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  776.850819][T10638] team0: Port device team_slave_1 added
[  777.038636][T10753] EXT4-fs (loop5): orphan cleanup on readonly fs
[  777.049857][T10753] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1410: bg 0: block 248: padding at end of block bitmap is not set
[  777.070342][T10753] Quota error (device loop5): write_blk: dquota write failed
[  777.077968][T10753] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  777.088100][T10753] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1410: Failed to acquire dquot type 1
[  777.101365][T10753] EXT4-fs (loop5): 1 truncate cleaned up
[  777.108698][T10753] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  777.146510][T10638] batman_adv: batadv0: Adding interface: batadv_slave_0
[  777.184073][T10638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  777.431795][T10638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  777.501060][T10638] batman_adv: batadv0: Adding interface: batadv_slave_1
[  777.549910][T10638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  777.708561][T10638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  777.784047][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  778.081833][T10638] device hsr_slave_0 entered promiscuous mode
[  778.151964][T10638] device hsr_slave_1 entered promiscuous mode
[  778.189838][T10638] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  778.214161][T10638] Cannot create hsr debugfs directory
[  779.063177][T10790] loop1: detected capacity change from 0 to 256
[  779.072685][T10790] exfat: Deprecated parameter 'utf8'
[  779.121414][T10790] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  780.835311][T10638] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  780.918983][T10638] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  780.970267][T10638] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  781.069037][T10638] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  781.542185][T10807] loop4: detected capacity change from 0 to 512
[  783.043756][T10807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  783.579283][T10807] EXT4-fs (loop4): orphan cleanup on readonly fs
[  783.599635][T10807] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1417: bg 0: block 248: padding at end of block bitmap is not set
[  783.616490][T10807] Quota error (device loop4): write_blk: dquota write failed
[  783.624726][T10807] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  783.635000][T10807] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.1417: Failed to acquire dquot type 1
[  783.666985][T10807] EXT4-fs (loop4): 1 truncate cleaned up
[  783.678244][T10807] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  784.740846][T10638] 8021q: adding VLAN 0 to HW filter on device bond0
[  784.811806][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  784.831883][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  784.887411][T10638] 8021q: adding VLAN 0 to HW filter on device team0
[  784.944064][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  784.967554][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  785.016697][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.023937][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  785.054131][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  785.223357][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  785.241857][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  785.292325][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  785.332381][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.339642][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  785.401386][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  785.421812][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  785.461220][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  785.501785][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  785.521568][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  785.544437][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  785.600135][T10638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  785.622503][T10638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  785.894666][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  785.949676][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  786.255832][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  786.417647][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  786.429531][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  786.453625][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  789.307228][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  789.317848][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  789.359285][T10638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  789.804727][T10862] loop5: detected capacity change from 0 to 1024
[  793.030031][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  793.108395][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  793.250437][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  793.331209][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  793.446963][T10638] device veth0_vlan entered promiscuous mode
[  793.479770][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  793.525118][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  793.601469][T10638] device veth1_vlan entered promiscuous mode
[  793.666246][T10885] overlayfs: failed to resolve './file0': -2
[  793.805960][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  793.831659][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  793.914310][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  793.996143][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  794.069071][T10638] device veth0_macvtap entered promiscuous mode
[  794.105040][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  794.314803][T10638] device veth1_macvtap entered promiscuous mode
[  795.210502][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.221234][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.306952][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.384078][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.739518][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.849668][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.859689][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.874735][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.887257][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.900294][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.915886][T10638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  795.936033][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  795.959498][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  796.113773][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.162954][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.172823][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.282040][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.304371][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.324915][T10900] loop2: detected capacity change from 0 to 512
[  796.352342][T10900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  797.330707][T10900] EXT4-fs (loop2): orphan cleanup on readonly fs
[  797.345309][T10900] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1437: bg 0: block 248: padding at end of block bitmap is not set
[  798.349805][T10900] Quota error (device loop2): write_blk: dquota write failed
[  798.357739][T10900] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  798.367977][T10900] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1437: Failed to acquire dquot type 1
[  798.386926][T10900] EXT4-fs (loop2): 1 truncate cleaned up
[  798.631536][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  798.732805][T10900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  799.720969][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  799.731568][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  799.748609][T10638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  799.759438][T10638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  799.780471][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  799.781147][T10638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  799.984633][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  800.023669][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  800.957174][T10638] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  800.986976][T10638] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  801.042947][T10638] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  801.051727][T10638] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  801.090340][T10915] loop2: detected capacity change from 0 to 1024
[  801.752506][T10926] loop2: detected capacity change from 0 to 1024
[  802.393530][ T9850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  802.903867][ T9850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  802.945735][ T8334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  802.968500][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  802.976806][ T8334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.446798][   T27] audit: type=1326 audit(1734830224.783:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.5.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb124385d29 code=0x7ffc0000
[  804.462048][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  805.423072][   T27] audit: type=1326 audit(1734830224.783:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.5.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb124385d29 code=0x7ffc0000
[  805.445569][   T27] audit: type=1326 audit(1734830224.783:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.5.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb124385d29 code=0x7ffc0000
[  805.468346][   T27] audit: type=1326 audit(1734830224.783:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.5.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb124385d29 code=0x7ffc0000
[  805.607553][   T27] audit: type=1326 audit(1734830224.783:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.5.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb124385d29 code=0x7ffc0000
[  806.474622][   T27] audit: type=1326 audit(1734830224.783:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.5.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fb124385d29 code=0x7ffc0000
[  806.499506][   T27] audit: type=1326 audit(1734830224.783:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.5.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb124385d29 code=0x7ffc0000
[  806.523224][   T27] audit: type=1326 audit(1734830224.783:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.5.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb124385d29 code=0x7ffc0000
[  806.641189][   T27] audit: type=1326 audit(1734830224.783:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.5.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb124384690 code=0x7ffc0000
[  806.933276][   T27] audit: type=1326 audit(1734830224.783:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.5.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb124385d29 code=0x7ffc0000
[  808.626488][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  808.633332][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  810.013579][T10967] fuse: Bad value for 'fd'
[  811.652703][T10976] loop6: detected capacity change from 0 to 1024
[  811.901166][T10981] fuse: Bad value for 'fd'
[  814.445121][T11002] fuse: Bad value for 'fd'
[  815.312504][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1464'.
[  816.473089][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  816.473183][   T27] audit: type=1326 audit(1734830237.783:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  817.583034][T11019] loop1: detected capacity change from 0 to 16
[  817.619386][T11019] erofs: (device loop1): mounted with root inode @ nid 36.
[  817.636918][T11019] syz.1.1467: attempt to access beyond end of device
[  817.636918][T11019] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  817.653680][T11019] syz.1.1467: attempt to access beyond end of device
[  817.653680][T11019] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  817.999107][   T27] audit: type=1326 audit(1734830237.783:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  818.022263][   T27] audit: type=1326 audit(1734830237.783:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  818.132478][   T27] audit: type=1326 audit(1734830237.783:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  818.304226][T11025] fuse: Bad value for 'fd'
[  818.547966][   T27] audit: type=1326 audit(1734830237.783:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  818.723029][   T27] audit: type=1326 audit(1734830237.793:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  818.751727][   T27] audit: type=1326 audit(1734830237.793:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  818.781720][   T27] audit: type=1326 audit(1734830237.793:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  819.015093][T11029] fuse: Bad value for 'fd'
[  819.066484][   T27] audit: type=1326 audit(1734830237.793:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3291f84690 code=0x7ffc0000
[  820.383277][   T27] audit: type=1326 audit(1734830237.793:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  823.282775][T11042] overlayfs: failed to resolve './file0': -2
[  823.712972][   T27] audit: type=1326 audit(1734830237.793:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  823.922946][   T27] audit: type=1326 audit(1734830237.803:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  824.142950][   T27] audit: type=1326 audit(1734830237.803:50): auid=2 uid=0 gid=0 ses=4 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  824.912921][   T27] audit: type=1326 audit(1734830237.803:51): auid=2 uid=0 gid=0 ses=4 subj=unconfined pid=11010 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3291f85d29 code=0x7ffc0000
[  825.633678][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1477'.
[  828.983491][T11067] fuse: Bad value for 'fd'
[  829.529093][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  829.538811][ T4264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  829.547749][ T4264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  829.555739][ T4264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  829.566166][ T4264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  829.573650][ T4264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  829.975437][T11069] lo speed is unknown, defaulting to 1000
[  831.747721][ T4264] Bluetooth: hci2: command 0x0409 tx timeout
[  833.427484][T11098] overlayfs: failed to resolve './file0': -2
[  835.308298][ T4264] Bluetooth: hci2: command 0x041b tx timeout
[  837.192531][T11069] chnl_net:caif_netlink_parms(): no params data found
[  837.296877][T11108] fuse: Bad value for 'fd'
[  837.343205][ T4264] Bluetooth: hci2: command 0x040f tx timeout
[  838.983414][T11069] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.060304][T11120] fuse: Bad value for 'fd'
[  839.303383][T11069] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.341329][T11069] device bridge_slave_0 entered promiscuous mode
[  839.423196][ T4264] Bluetooth: hci2: command 0x0419 tx timeout
[  839.525665][T11069] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.533446][T11069] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.541813][T11069] device bridge_slave_1 entered promiscuous mode
[  839.831437][T11069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  840.714453][T11069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.878268][T11069] team0: Port device team_slave_0 added
[  840.928466][T11069] team0: Port device team_slave_1 added
[  843.484133][T11142] overlayfs: failed to resolve './file0': -2
[  844.935529][T11069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  845.007578][T11069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  845.158144][T11069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  845.311840][T11069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  845.384477][T11069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  845.565447][T11069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  845.717844][T11069] device hsr_slave_0 entered promiscuous mode
[  845.739534][T11069] device hsr_slave_1 entered promiscuous mode
[  845.772008][T11069] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  845.851448][ T9614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  845.863254][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  845.872341][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  845.882174][ T9614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  845.892634][ T9614] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  845.903417][ T9614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  845.930386][T11069] Cannot create hsr debugfs directory
[  846.154928][T11155] lo speed is unknown, defaulting to 1000
[  847.983119][ T9614] Bluetooth: hci1: command 0x0409 tx timeout
[  848.089920][    T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.316137][T11166] overlayfs: failed to resolve './file0': -2
[  848.623640][    T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.765050][    T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.066311][T11069] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  849.388436][T11069] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  850.045208][    T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.062941][ T9614] Bluetooth: hci1: command 0x041b tx timeout
[  850.167299][T11069] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  852.733916][ T9614] Bluetooth: hci1: command 0x040f tx timeout
[  852.809283][T11069] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  852.886835][T11181] fuse: Bad value for 'fd'
[  854.612078][T11155] chnl_net:caif_netlink_parms(): no params data found
[  854.809548][ T9614] Bluetooth: hci1: command 0x0419 tx timeout
[  854.905186][T11069] 8021q: adding VLAN 0 to HW filter on device bond0
[  855.401940][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  855.410218][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  855.487541][T11069] 8021q: adding VLAN 0 to HW filter on device team0
[  855.673596][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  855.684772][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  855.717044][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.724301][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  855.753075][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  855.772445][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  855.830563][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  855.837822][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  855.881043][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  855.964386][T11155] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.992989][T11155] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.001595][T11155] device bridge_slave_0 entered promiscuous mode
[  856.086131][T11155] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.115286][T11155] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.134969][T11155] device bridge_slave_1 entered promiscuous mode
[  856.145235][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  857.072764][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  857.094779][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  857.158813][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  857.447699][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  857.860559][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  858.577914][T11155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  858.618045][T11232] fuse: Bad value for 'fd'
[  858.689219][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  858.881911][T11155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  859.269558][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  859.293718][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  859.514198][T11069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  859.553142][T11069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  860.111218][T11155] team0: Port device team_slave_0 added
[  860.168287][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  860.218553][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  860.707866][T11155] team0: Port device team_slave_1 added
[  861.561732][T11155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  861.640385][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  862.041785][T11155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  862.058754][T11155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  862.066363][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  862.092945][T11155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  862.321313][T11155] device hsr_slave_0 entered promiscuous mode
[  862.353920][T11155] device hsr_slave_1 entered promiscuous mode
[  862.385911][T11155] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  862.410471][T11155] Cannot create hsr debugfs directory
[  862.648961][    T9] device hsr_slave_0 left promiscuous mode
[  862.751768][    T9] device hsr_slave_1 left promiscuous mode
[  862.964455][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  863.192962][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  863.263700][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  863.271234][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  863.360780][    T9] device bridge_slave_1 left promiscuous mode
[  863.394890][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.489247][    T9] device bridge_slave_0 left promiscuous mode
[  863.526278][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.845486][    T9] device veth1_macvtap left promiscuous mode
[  863.851605][    T9] device veth0_macvtap left promiscuous mode
[  863.923049][    T9] device veth1_vlan left promiscuous mode
[  863.963143][    T9] device veth0_vlan left promiscuous mode
[  866.113546][T11292] loop1: detected capacity change from 0 to 512
[  866.632298][T11292] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  866.653976][T11292] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  866.663692][T11292] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1523: Failed to acquire dquot type 0
[  866.698528][T11292] EXT4-fs (loop1): Remounting filesystem read-only
[  866.726943][T11292] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  866.774066][T11292] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  866.820011][T11292] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1523: Failed to acquire dquot type 0
[  866.916878][T11292] EXT4-fs (loop1): Remounting filesystem read-only
[  866.957973][T11292] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  866.990576][T11292] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  867.030825][T11292] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1523: Failed to acquire dquot type 0
[  867.066319][T11292] EXT4-fs (loop1): Remounting filesystem read-only
[  867.077694][T11292] EXT4-fs (loop1): 1 orphan inode deleted
[  867.093122][T11292] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  867.112343][T11292] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  867.281077][    T9] team0 (unregistering): Port device team_slave_1 removed
[  867.413224][T11301] EXT4-fs (loop1): shut down requested (2)
[  867.802486][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  867.991163][    T9] team0 (unregistering): Port device team_slave_0 removed
[  868.881499][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  869.431041][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  869.530284][T11314] loop1: detected capacity change from 0 to 512
[  869.619682][T11314] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  869.630563][T11314] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  869.640484][T11314] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1529: Failed to acquire dquot type 0
[  869.658327][T11314] EXT4-fs (loop1): Remounting filesystem read-only
[  869.672995][T11314] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  869.693076][T11314] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  869.702631][T11314] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1529: Failed to acquire dquot type 0
[  869.723096][T11314] EXT4-fs (loop1): Remounting filesystem read-only
[  869.744457][T11314] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1529: Failed to acquire dquot type 0
[  869.771507][T11314] EXT4-fs (loop1): Remounting filesystem read-only
[  869.778384][T11314] EXT4-fs (loop1): 1 orphan inode deleted
[  869.784755][T11314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  869.794268][T11314] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  869.968355][T11318] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  869.983378][T11318] EXT4-fs (loop1): shut down requested (2)
[  870.070882][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  870.078920][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  870.495293][T11320] loop5: detected capacity change from 0 to 512
[  870.517048][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  870.546594][T11320] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1531: Failed to acquire dquot type 0
[  870.558829][T11320] EXT4-fs (loop5): Remounting filesystem read-only
[  870.634635][T11320] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1531: Failed to acquire dquot type 0
[  870.656188][T11320] EXT4-fs (loop5): Remounting filesystem read-only
[  870.688054][T11320] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1531: Failed to acquire dquot type 0
[  870.779826][T11320] EXT4-fs (loop5): Remounting filesystem read-only
[  870.813195][T11320] EXT4-fs (loop5): 1 orphan inode deleted
[  870.834790][T11320] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  870.858929][T11320] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  871.115023][T11328] EXT4-fs (loop5): shut down requested (2)
[  871.521455][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  871.830418][T11335] fuse: Bad value for 'fd'
[  872.055225][    T9] bond0 (unregistering): Released all slaves
[  874.167627][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  874.300371][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  874.510446][T11069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  874.874587][T11155] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  874.933454][T11155] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  875.154372][T11155] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  875.295642][T11155] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  877.373337][T11155] 8021q: adding VLAN 0 to HW filter on device bond0
[  877.436071][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  877.455091][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  877.529585][T11155] 8021q: adding VLAN 0 to HW filter on device team0
[  877.630554][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  877.669152][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  880.986141][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  881.026199][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  881.073591][T11224] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.080761][T11224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  881.150032][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  881.183858][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  881.213911][T11224] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.221055][T11224] bridge0: port 2(bridge_slave_1) entered forwarding state
[  881.280612][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  881.311345][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  881.356676][T11069] device veth0_vlan entered promiscuous mode
[  881.377179][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  881.392159][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  881.422398][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  881.450096][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  881.477179][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  881.540746][T11069] device veth1_vlan entered promiscuous mode
[  881.593095][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  881.621977][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  881.654090][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  881.681139][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  881.702664][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  881.732323][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  881.755130][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  881.764490][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  881.773652][T11224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  881.789693][T11134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  881.831469][T11134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  881.863974][T11155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  881.885845][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  881.909582][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  881.944206][T11069] device veth0_macvtap entered promiscuous mode
[  881.985485][T11069] device veth1_macvtap entered promiscuous mode
[  882.356592][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  882.425547][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  882.529707][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  882.571200][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  882.632959][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  882.670026][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  882.686033][T11424] fuse: Bad value for 'fd'
[  882.711148][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  882.761638][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  882.802709][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  882.834990][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  882.865867][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  882.896887][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  882.948588][T11069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  882.981024][T11134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  883.007849][T11134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  883.061457][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  883.093323][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.152444][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  883.205659][T11431] loop2: detected capacity change from 0 to 512
[  883.214986][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.248122][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  883.287438][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.299251][T11431] __quota_error: 8 callbacks suppressed
[  883.299269][T11431] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  883.315605][T11431] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  883.325207][T11431] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1552: Failed to acquire dquot type 0
[  883.338110][T11431] EXT4-fs (loop2): Remounting filesystem read-only
[  883.345402][T11431] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  883.354332][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  883.356125][T11431] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  883.375954][T11431] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1552: Failed to acquire dquot type 0
[  883.388269][T11431] EXT4-fs (loop2): Remounting filesystem read-only
[  883.403374][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.412029][T11431] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  883.413337][T11069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  883.413357][T11069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.415039][T11069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  883.469042][T11134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  883.483821][T11134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  883.506745][T11431] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  883.525896][T11069] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  883.550218][T11069] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  883.568244][T11069] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  883.573274][T11431] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1552: Failed to acquire dquot type 0
[  883.606167][T11069] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  883.628760][T11431] EXT4-fs (loop2): Remounting filesystem read-only
[  883.635982][T11134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  883.651138][T11431] EXT4-fs (loop2): 1 orphan inode deleted
[  883.653181][T11134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  883.670523][T11431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  883.691531][T11155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  883.710994][T11431] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  883.988388][T11444] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  883.999741][T11444] EXT4-fs (loop2): shut down requested (2)
[  884.095646][T11215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  884.140310][T11215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  884.287188][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  884.461855][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  884.950222][T11455] loop1: detected capacity change from 0 to 512
[  886.680060][T11455] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  886.723330][T11455] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  886.732776][T11455] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1554: Failed to acquire dquot type 0
[  886.803514][T11455] EXT4-fs (loop1): Remounting filesystem read-only
[  886.829682][T11455] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  886.860832][T11455] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  886.871098][T11470] fuse: Bad value for 'fd'
[  886.905363][T11455] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1554: Failed to acquire dquot type 0
[  886.976620][T11455] EXT4-fs (loop1): Remounting filesystem read-only
[  887.014470][T11455] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1554: Failed to acquire dquot type 0
[  887.046563][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  887.066365][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  887.086275][T11455] EXT4-fs (loop1): Remounting filesystem read-only
[  887.118530][T11455] EXT4-fs (loop1): 1 orphan inode deleted
[  887.155114][T11455] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  887.209064][T11455] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  887.449738][T11474] EXT4-fs (loop1): shut down requested (2)
[  887.528083][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  887.619472][ T9614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  887.632769][ T9614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  887.643439][ T9614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  887.662287][ T9614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  887.680396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  887.699770][ T9614] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  887.708346][ T9614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  887.726644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  887.738075][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  887.976079][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  888.020860][   T63] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.139233][T11155] device veth0_vlan entered promiscuous mode
[  888.364244][   T63] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.728084][T11155] device veth1_vlan entered promiscuous mode
[  888.746068][T11475] lo speed is unknown, defaulting to 1000
[  888.866398][   T63] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.042188][T11155] device veth0_macvtap entered promiscuous mode
[  889.735663][T11495] loop5: detected capacity change from 0 to 512
[  889.813096][ T4264] Bluetooth: hci2: command 0x0409 tx timeout
[  889.895169][T11495] __quota_error: 2 callbacks suppressed
[  889.895192][T11495] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  889.984032][T11495] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  890.033032][T11495] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1560: Failed to acquire dquot type 0
[  890.152981][T11495] EXT4-fs (loop5): Remounting filesystem read-only
[  890.160418][T11495] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  890.233424][T11495] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  890.320075][T11495] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1560: Failed to acquire dquot type 0
[  891.698550][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  891.753047][T11495] EXT4-fs (loop5): Remounting filesystem read-only
[  891.761705][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  891.778925][T11495] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  891.806636][T11155] device veth1_macvtap entered promiscuous mode
[  891.833330][ T4264] Bluetooth: hci2: command 0x041b tx timeout
[  891.869552][T11495] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  891.881657][   T63] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.892300][T11495] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1560: Failed to acquire dquot type 0
[  891.930281][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  891.946424][T11495] EXT4-fs (loop5): Remounting filesystem read-only
[  891.965438][T11495] EXT4-fs (loop5): 1 orphan inode deleted
[  891.971245][T11495] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  891.989889][T11495] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  892.111085][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.142734][T11513] fuse: Bad value for 'fd'
[  892.209706][T11516] loop1: detected capacity change from 0 to 16
[  892.295278][T11516] erofs: (device loop1): mounted with root inode @ nid 36.
[  892.313485][T11516] syz.1.1562: attempt to access beyond end of device
[  892.313485][T11516] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  892.332403][T11516] syz.1.1562: attempt to access beyond end of device
[  892.332403][T11516] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  892.442378][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.562422][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.716212][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.757325][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.780427][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.795991][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.822054][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.834553][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.852591][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.873216][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  892.883766][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  892.897648][T11155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  892.984241][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  892.992636][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  893.003309][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  893.024462][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  893.070557][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.112945][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  893.129636][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.142002][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  893.154409][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.168950][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  893.180642][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.200861][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  893.224903][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.235871][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  893.253667][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.298425][T11155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  893.336133][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  893.368921][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  893.403551][T11155] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  893.424559][T11155] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  893.450445][T11155] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  893.478714][T11155] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  893.905970][ T4264] Bluetooth: hci2: command 0x040f tx timeout
[  894.161274][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.182876][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.230924][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  894.345424][T11475] chnl_net:caif_netlink_parms(): no params data found
[  894.354152][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.362543][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.533114][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  894.927343][T11475] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.948043][T11475] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.037686][T11475] device bridge_slave_0 entered promiscuous mode
[  895.168914][T11475] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.197329][T11475] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.242711][T11475] device bridge_slave_1 entered promiscuous mode
[  895.399801][T11475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.123030][ T4264] Bluetooth: hci2: command 0x0419 tx timeout
[  896.207719][T11475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.848253][T11475] team0: Port device team_slave_0 added
[  897.950210][T11475] team0: Port device team_slave_1 added
[  898.859172][T11578] loop5: detected capacity change from 0 to 512
[  898.876134][T11475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  898.887983][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  898.972916][T11475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  899.025456][T11475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  899.032452][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  899.169088][T11475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  899.662450][T11591] loop2: detected capacity change from 0 to 16
[  901.017613][T11591] erofs: (device loop2): mounted with root inode @ nid 36.
[  901.036107][T11591] syz.2.1574: attempt to access beyond end of device
[  901.036107][T11591] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[  901.053913][T11591] syz.2.1574: attempt to access beyond end of device
[  901.053913][T11591] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[  901.279117][T11578] EXT4-fs: failed to create workqueue
[  901.300654][T11578] EXT4-fs (loop5): mount failed
[  901.453107][   T63] device hsr_slave_0 left promiscuous mode
[  901.492991][   T63] device hsr_slave_1 left promiscuous mode
[  901.510175][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  901.532189][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  901.584410][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  901.591988][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  901.985323][T11601] rdma_rxe: rxe_register_device failed with error -23
[  901.992779][T11601] rdma_rxe: failed to add lo
[  902.164860][T11603] overlayfs: failed to resolve './file0': -2
[  903.046871][   T63] device bridge_slave_1 left promiscuous mode
[  903.083423][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  903.268268][   T63] device bridge_slave_0 left promiscuous mode
[  903.283339][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.491690][   T63] device veth1_macvtap left promiscuous mode
[  904.057402][   T63] device veth0_macvtap left promiscuous mode
[  904.113130][   T63] device veth1_vlan left promiscuous mode
[  904.153142][   T63] device veth0_vlan left promiscuous mode
[  904.324355][T11609] fuse: Bad value for 'fd'
[  904.528943][T11613] loop1: detected capacity change from 0 to 2048
[  904.566556][T11613] EXT4-fs: Ignoring removed mblk_io_submit option
[  904.576449][T11613] EXT4-fs: Ignoring removed i_version option
[  904.651581][T11617] fuse: Bad value for 'fd'
[  904.748783][T11613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  905.236181][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  907.997619][T11634] loop2: detected capacity change from 0 to 512
[  908.081487][T11634] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  908.114679][T11634] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  908.142977][T11634] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1584: Failed to acquire dquot type 0
[  908.182950][T11634] EXT4-fs (loop2): Remounting filesystem read-only
[  908.189632][T11634] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  908.223654][T11639] fuse: Bad value for 'fd'
[  908.250694][T11634] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  908.263539][T11634] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1584: Failed to acquire dquot type 0
[  908.276843][T11634] EXT4-fs (loop2): Remounting filesystem read-only
[  908.284652][T11634] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  908.296408][T11634] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  908.308529][T11634] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1584: Failed to acquire dquot type 0
[  908.322188][T11634] EXT4-fs (loop2): Remounting filesystem read-only
[  908.329507][T11634] EXT4-fs (loop2): 1 orphan inode deleted
[  908.335868][T11634] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  908.364068][T11634] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  908.563950][T11640] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  908.574378][T11640] EXT4-fs (loop2): shut down requested (2)
[  908.754982][   T63] team0 (unregistering): Port device team_slave_1 removed
[  909.007881][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  909.124296][   T63] team0 (unregistering): Port device team_slave_0 removed
[  909.311873][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  910.418078][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  910.677900][T11655] overlayfs: failed to resolve './file0': -2
[  911.031064][T11658] loop1: detected capacity change from 0 to 512
[  911.148863][T11658] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  911.178668][T11658] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  911.188139][T11658] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  911.244826][T11650] kvm: emulating exchange as write
[  911.587566][T11660] loop8: detected capacity change from 0 to 32768
[  911.603174][T11660] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.1590 (11660)
[  911.621290][T11660] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  911.631616][T11660] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  911.640356][T11660] BTRFS info (device loop8): using free space tree
[  911.967840][T11660] BTRFS info (device loop8): enabling ssd optimizations
[  913.116703][   T27] audit: type=1800 audit(1734830334.453:52): pid=11660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1590" name="file1" dev="loop8" ino=261 res=0 errno=0
[  913.290317][T11660] BTRFS error (device loop8: state M): unrecognized mount option '.
[  913.290317][T11660] #)|:��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  913.290317][T11660] ://�8�x'+��?[e�\J銹�95/'
[  913.407802][T11155] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  913.469986][T11684] loop1: detected capacity change from 0 to 512
[  913.577192][T11684] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  913.617036][T11684] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  913.683580][T11684] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1592: Failed to acquire dquot type 0
[  913.707125][T11684] EXT4-fs (loop1): Remounting filesystem read-only
[  913.730279][T11684] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  913.739974][T11691] loop2: detected capacity change from 0 to 512
[  913.748356][T11684] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  913.762621][T11684] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1592: Failed to acquire dquot type 0
[  913.775063][T11684] EXT4-fs (loop1): Remounting filesystem read-only
[  913.851539][T11684] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  913.862179][T11684] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  913.911044][T11684] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1592: Failed to acquire dquot type 0
[  913.925693][T11684] EXT4-fs (loop1): Remounting filesystem read-only
[  913.932376][T11684] EXT4-fs (loop1): 1 orphan inode deleted
[  913.952471][T11691] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  914.014136][T11696] loop8: detected capacity change from 0 to 512
[  914.021816][T11684] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  914.032157][T11684] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  914.053037][T11691] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  914.062491][T11691] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1594: Failed to acquire dquot type 0
[  914.076092][   T63] bond0 (unregistering): Released all slaves
[  914.089073][T11691] EXT4-fs (loop2): Remounting filesystem read-only
[  914.097368][T11691] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  914.109165][T11691] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1594: Failed to acquire dquot type 0
[  914.131950][T11691] EXT4-fs (loop2): Remounting filesystem read-only
[  914.185477][T11699] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  914.197026][T11699] EXT4-fs (loop1): shut down requested (2)
[  914.217581][T11696] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1593: Failed to acquire dquot type 0
[  914.247373][T11691] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1594: Failed to acquire dquot type 0
[  914.268173][T11696] EXT4-fs (loop8): Remounting filesystem read-only
[  914.275447][T11696] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1593: Failed to acquire dquot type 0
[  914.281073][T11691] EXT4-fs (loop2): Remounting filesystem read-only
[  914.308185][T11696] EXT4-fs (loop8): Remounting filesystem read-only
[  914.333752][T11691] EXT4-fs (loop2): 1 orphan inode deleted
[  914.359019][T11691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  914.369347][T11696] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1593: Failed to acquire dquot type 0
[  914.380592][T11691] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  914.480032][T11696] EXT4-fs (loop8): Remounting filesystem read-only
[  914.503278][T11696] EXT4-fs (loop8): 1 orphan inode deleted
[  914.509213][T11696] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  914.810179][T11696] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  914.862468][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  914.871315][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  915.008660][T11701] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  915.019791][T11701] EXT4-fs (loop8): shut down requested (2)
[  915.270637][T11475] device hsr_slave_0 entered promiscuous mode
[  915.339353][T11475] device hsr_slave_1 entered promiscuous mode
[  915.403956][T11704] loop5: detected capacity change from 0 to 512
[  915.482434][T11475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  915.498557][T11155] EXT4-fs (loop8): unmounting filesystem.
[  915.501097][T11704] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1595: Failed to acquire dquot type 0
[  915.518564][T11475] Cannot create hsr debugfs directory
[  915.972028][T11704] EXT4-fs (loop5): Remounting filesystem read-only
[  916.023077][T11704] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1595: Failed to acquire dquot type 0
[  916.129849][T11704] EXT4-fs (loop5): Remounting filesystem read-only
[  916.153017][T11704] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1595: Failed to acquire dquot type 0
[  916.180738][T11704] EXT4-fs (loop5): Remounting filesystem read-only
[  916.296604][T11704] EXT4-fs (loop5): 1 orphan inode deleted
[  916.350654][T11704] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  916.370438][T11716] loop1: detected capacity change from 0 to 512
[  916.463139][T11704] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  916.926713][T11716] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1599: Failed to acquire dquot type 0
[  917.256082][T11716] EXT4-fs (loop1): Remounting filesystem read-only
[  917.283139][T11716] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1599: Failed to acquire dquot type 0
[  917.335172][T11716] EXT4-fs (loop1): Remounting filesystem read-only
[  917.481716][T11726] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  917.495702][T11726] EXT4-fs (loop5): shut down requested (2)
[  917.761286][T11716] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1599: Failed to acquire dquot type 0
[  917.913446][T11716] EXT4-fs (loop1): Remounting filesystem read-only
[  917.920124][T11716] EXT4-fs (loop1): 1 orphan inode deleted
[  917.970785][T11716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  918.015911][T11716] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  918.090983][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  919.312261][T11732] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  919.326429][T11732] EXT4-fs (loop1): shut down requested (2)
[  919.374904][T11731] loop8: detected capacity change from 0 to 256
[  919.383562][T11731] exfat: Deprecated parameter 'utf8'
[  919.468433][T11731] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  919.732684][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  920.309529][T11741] loop1: detected capacity change from 0 to 40427
[  920.336096][T11741] F2FS-fs (loop1): invalid crc value
[  920.356978][T11743] overlayfs: failed to resolve './file0': -2
[  920.410588][T11741] F2FS-fs (loop1): Found nat_bits in checkpoint
[  920.492110][T11741] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  921.586208][T11754] loop5: detected capacity change from 0 to 512
[  921.644953][ T4252] syz-executor: attempt to access beyond end of device
[  921.644953][ T4252] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  921.764975][T11754] __quota_error: 21 callbacks suppressed
[  921.764997][T11754] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  921.853030][T11754] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  921.862503][T11754] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1604: Failed to acquire dquot type 0
[  921.934940][T11754] EXT4-fs (loop5): Remounting filesystem read-only
[  921.941607][T11754] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  922.012982][T11754] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  922.059796][T11754] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1604: Failed to acquire dquot type 0
[  922.087005][T11475] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  922.107762][T11754] EXT4-fs (loop5): Remounting filesystem read-only
[  922.134444][T11475] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  922.282664][T11754] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  922.511249][T11475] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  922.564526][T11754] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  922.607140][T11475] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  922.634629][T11754] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1604: Failed to acquire dquot type 0
[  922.673429][T11754] EXT4-fs (loop5): Remounting filesystem read-only
[  922.680119][T11754] EXT4-fs (loop5): 1 orphan inode deleted
[  922.751792][T11754] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  922.788211][T11754] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  922.827777][T11770] loop8: detected capacity change from 0 to 512
[  923.002465][T11770] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  923.080788][T11770] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  923.122725][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  923.141873][T11475] 8021q: adding VLAN 0 to HW filter on device bond0
[  923.151877][T11770] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1608: Failed to acquire dquot type 0
[  923.274748][T11770] EXT4-fs (loop8): Remounting filesystem read-only
[  923.301909][T11770] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  923.313697][T11475] 8021q: adding VLAN 0 to HW filter on device team0
[  923.321160][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  923.339728][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  923.383121][T11770] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  923.453887][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  923.475569][T11770] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1608: Failed to acquire dquot type 0
[  923.518675][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  923.548586][T11770] EXT4-fs (loop8): Remounting filesystem read-only
[  923.579277][T11780] loop2: detected capacity change from 0 to 40427
[  923.587936][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state
[  923.595132][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state
[  923.603224][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  923.612237][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  923.620984][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state
[  923.628174][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state
[  923.641529][T11787] overlayfs: failed to resolve './file0': -2
[  923.648435][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  923.661192][T11780] F2FS-fs (loop2): invalid crc value
[  923.673102][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  923.711978][T11770] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1608: Failed to acquire dquot type 0
[  923.742735][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  923.765138][T11780] F2FS-fs (loop2): Found nat_bits in checkpoint
[  924.080132][T11780] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  924.123718][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  924.173968][T11770] EXT4-fs (loop8): Remounting filesystem read-only
[  924.230188][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  924.251739][T11770] EXT4-fs (loop8): 1 orphan inode deleted
[  924.258819][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  924.263863][T11770] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  924.275746][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  924.321727][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  924.332451][T11770] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  924.581998][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  924.592230][T11155] EXT4-fs (loop8): unmounting filesystem.
[  925.722759][T11734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  925.743952][ T4261] syz-executor: attempt to access beyond end of device
[  925.743952][ T4261] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  925.838086][T11134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  925.873956][T11134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  925.915144][T11475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  926.155797][T11809] loop8: detected capacity change from 0 to 512
[  926.257569][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1615'.
[  926.551823][T11809] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1612: Failed to acquire dquot type 0
[  926.911790][T11809] EXT4-fs (loop8): Remounting filesystem read-only
[  926.959683][T11818] loop1: detected capacity change from 0 to 512
[  926.970800][T11809] __quota_error: 4 callbacks suppressed
[  926.970817][T11809] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  927.094854][T11809] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  927.110814][T11818] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  927.133105][T11809] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1612: Failed to acquire dquot type 0
[  927.152403][T11818] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  927.179798][T11820] loop5: detected capacity change from 0 to 512
[  927.196397][T11809] EXT4-fs (loop8): Remounting filesystem read-only
[  927.207865][T11820] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  927.221193][T11809] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  927.261868][T11809] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  927.289297][T11820] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  927.325915][T11809] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1612: Failed to acquire dquot type 0
[  927.349133][T11820] EXT4-fs (loop5): 1 truncate cleaned up
[  927.355763][T11820] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  927.383331][T11809] EXT4-fs (loop8): Remounting filesystem read-only
[  927.400291][T11809] EXT4-fs (loop8): 1 orphan inode deleted
[  927.406397][T11809] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  927.423107][T11809] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  927.715063][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  927.778791][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  928.881571][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  928.903106][T11475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  929.004981][T11155] EXT4-fs (loop8): unmounting filesystem.
[  929.115985][T11832] loop5: detected capacity change from 0 to 256
[  929.163970][T11832] exfat: Deprecated parameter 'utf8'
[  929.229263][T11832] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  929.596340][T11837] loop8: detected capacity change from 0 to 40427
[  929.608947][T11843] overlayfs: failed to resolve './file0': -2
[  929.646613][T11837] F2FS-fs (loop8): invalid crc value
[  929.708612][T11837] F2FS-fs (loop8): Found nat_bits in checkpoint
[  929.788019][T11837] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  930.889340][T11857] loop5: detected capacity change from 0 to 256
[  930.905632][T11857] exfat: Deprecated parameter 'utf8'
[  931.825989][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  931.832413][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  931.856967][T11857] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  932.244400][T11155] syz-executor: attempt to access beyond end of device
[  932.244400][T11155] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  933.124906][T11872] loop5: detected capacity change from 0 to 512
[  933.340075][T11872] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  933.424123][T11872] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  933.436598][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  933.462160][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  933.517008][T11872] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1622: Failed to acquire dquot type 0
[  933.619376][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  933.627947][T11872] EXT4-fs (loop5): Remounting filesystem read-only
[  933.653260][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  933.688225][T11872] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  933.745678][T11475] device veth0_vlan entered promiscuous mode
[  933.768209][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  933.810246][T11872] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  933.873065][ T8334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  933.895862][T11872] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1622: Failed to acquire dquot type 0
[  933.950058][T11475] device veth1_vlan entered promiscuous mode
[  933.985412][T11885] loop2: detected capacity change from 0 to 512
[  933.991909][T11872] EXT4-fs (loop5): Remounting filesystem read-only
[  934.056877][T11872] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  934.196019][T11885] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  934.243015][T11872] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  934.285209][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  934.285461][T11885] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  934.294704][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  934.310249][T11872] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1622: Failed to acquire dquot type 0
[  934.322342][T11872] EXT4-fs (loop5): Remounting filesystem read-only
[  934.429100][T11892] loop8: detected capacity change from 0 to 256
[  934.439005][T11892] exfat: Deprecated parameter 'utf8'
[  934.521487][T11892] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  934.703895][T11885] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1626: Failed to acquire dquot type 0
[  934.748708][T11872] EXT4-fs (loop5): 1 orphan inode deleted
[  935.084021][T11872] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  935.096754][T11885] EXT4-fs (loop2): Remounting filesystem read-only
[  935.117455][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  935.129138][T11872] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  935.140396][T11885] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  935.182511][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  935.193909][T11475] device veth0_macvtap entered promiscuous mode
[  935.215073][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  935.237399][T11475] device veth1_macvtap entered promiscuous mode
[  935.248988][T11885] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  935.755070][T11885] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1626: Failed to acquire dquot type 0
[  935.815440][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  935.827379][T11885] EXT4-fs (loop2): Remounting filesystem read-only
[  935.851108][T11899] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  935.861852][T11899] EXT4-fs (loop5): shut down requested (2)
[  935.940988][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.014589][T11885] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1626: Failed to acquire dquot type 0
[  936.059876][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.109200][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.110633][T11901] loop8: detected capacity change from 0 to 512
[  936.124155][T11885] EXT4-fs (loop2): Remounting filesystem read-only
[  936.190176][T11885] EXT4-fs (loop2): 1 orphan inode deleted
[  936.199026][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.201001][T11903] loop1: detected capacity change from 0 to 512
[  936.217285][T11885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  936.218775][T11901] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  936.245135][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.315221][T11885] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  936.352984][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.391524][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.404654][T11901] EXT4-fs (loop8): 1 truncate cleaned up
[  936.413685][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.422526][T11901] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  936.424540][T11903] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1629: Failed to acquire dquot type 0
[  936.444782][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.463794][T11903] EXT4-fs (loop1): Remounting filesystem read-only
[  936.503141][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.508733][T11903] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1629: Failed to acquire dquot type 0
[  936.513929][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.549004][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  936.551176][T11475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  936.567599][T11907] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  936.578587][T11907] EXT4-fs (loop2): shut down requested (2)
[  936.593710][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.608190][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.619215][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.639593][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.651271][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.669430][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.681534][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.708155][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.728798][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.748039][T11903] EXT4-fs (loop1): Remounting filesystem read-only
[  936.757464][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.776487][T11903] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1629: Failed to acquire dquot type 0
[  936.793097][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.811809][T11903] EXT4-fs (loop1): Remounting filesystem read-only
[  936.815368][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.836667][T11475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  936.898229][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  936.898465][T11903] EXT4-fs (loop1): 1 orphan inode deleted
[  936.915528][T11903] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  937.813252][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  937.837528][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  937.866145][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  937.948646][T11903] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  937.958774][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  937.967038][T11155] EXT4-fs (loop8): unmounting filesystem.
[  937.979264][T11475] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  938.002889][T11475] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  938.030394][T11475] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  938.056930][T11475] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  938.706450][T11919] loop2: detected capacity change from 0 to 256
[  938.716152][T11919] exfat: Deprecated parameter 'utf8'
[  938.791652][T11919] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  938.977408][T11903] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  938.989772][T11903] EXT4-fs (loop1): shut down requested (2)
[  939.430561][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  939.702465][T11224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  939.731100][T11927] loop1: detected capacity change from 0 to 512
[  939.797243][T11931] loop2: detected capacity change from 0 to 256
[  939.840716][T11224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  940.311612][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  940.783502][T11927] __quota_error: 8 callbacks suppressed
[  940.783524][T11927] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  940.882403][T11927] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  940.914113][T11927] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1633: Failed to acquire dquot type 0
[  940.931249][ T9850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  940.968996][ T9850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  940.991857][T11927] EXT4-fs (loop1): Remounting filesystem read-only
[  941.032402][T11927] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  941.071706][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  941.111619][T11927] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  941.186210][T11927] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1633: Failed to acquire dquot type 0
[  941.284094][T11927] EXT4-fs (loop1): Remounting filesystem read-only
[  941.289657][T11940] loop2: detected capacity change from 0 to 32768
[  941.301541][T11940] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1635 (11940)
[  941.318078][T11940] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  941.328385][T11940] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  941.337125][T11940] BTRFS info (device loop2): using free space tree
[  941.377880][T11927] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  941.419120][T11940] BTRFS info (device loop2): enabling ssd optimizations
[  941.505607][T11927] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  941.542868][   T27] audit: type=1800 audit(1734830362.873:53): pid=11940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1635" name="file1" dev="loop2" ino=261 res=0 errno=0
[  941.572948][T11927] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1633: Failed to acquire dquot type 0
[  941.643297][T11927] EXT4-fs (loop1): Remounting filesystem read-only
[  941.650600][T11940] BTRFS error (device loop2: state M): unrecognized mount option '.
[  941.650600][T11940] #)|:��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  941.650600][T11940] ://�8�x'+��?[e�\J銹�95/'
[  941.676094][T11927] EXT4-fs (loop1): 1 orphan inode deleted
[  941.681962][T11927] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  941.723165][T11927] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  941.748395][ T4261] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  942.721052][T11967] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  942.735301][T11967] EXT4-fs (loop1): shut down requested (2)
[  943.157932][T11969] loop7: detected capacity change from 0 to 512
[  943.252408][T11969] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  943.302978][T11969] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  943.312425][T11969] EXT4-fs error (device loop7): ext4_acquire_dquot:6794: comm syz.7.1637: Failed to acquire dquot type 0
[  943.453946][T11969] EXT4-fs (loop7): Remounting filesystem read-only
[  943.460601][T11969] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  943.503515][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  943.548087][T11969] EXT4-fs error (device loop7): ext4_acquire_dquot:6794: comm syz.7.1637: Failed to acquire dquot type 0
[  943.627954][T11969] EXT4-fs (loop7): Remounting filesystem read-only
[  943.674333][T11969] EXT4-fs error (device loop7): ext4_acquire_dquot:6794: comm syz.7.1637: Failed to acquire dquot type 0
[  943.714460][T11986] loop2: detected capacity change from 0 to 512
[  943.757199][T11986] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  943.773373][T11969] EXT4-fs (loop7): Remounting filesystem read-only
[  943.810522][T11969] EXT4-fs (loop7): 1 orphan inode deleted
[  943.823665][T11969] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  943.859577][T11969] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  943.879247][T11986] EXT4-fs (loop2): 1 truncate cleaned up
[  943.899848][T11986] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  945.203293][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  945.326163][T11999] loop5: detected capacity change from 0 to 512
[  945.482912][T11999] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1640: Failed to acquire dquot type 0
[  945.610901][T12007] loop2: detected capacity change from 0 to 512
[  945.617512][T11999] EXT4-fs (loop5): Remounting filesystem read-only
[  945.657605][T11999] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1640: Failed to acquire dquot type 0
[  945.740825][T11999] EXT4-fs (loop5): Remounting filesystem read-only
[  945.778666][T12007] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1641: Failed to acquire dquot type 0
[  945.809515][T11999] __quota_error: 9 callbacks suppressed
[  945.809536][T11999] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  945.842765][T12007] EXT4-fs (loop2): Remounting filesystem read-only
[  945.871456][T12007] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  945.918685][T12013] loop8: detected capacity change from 0 to 512
[  945.927292][T12007] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  945.929696][T11999] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  945.978704][T12013] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  945.993504][T12007] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1641: Failed to acquire dquot type 0
[  946.047589][T11999] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1640: Failed to acquire dquot type 0
[  946.089149][T12013] EXT4-fs (loop8): 1 truncate cleaned up
[  946.113268][T12007] EXT4-fs (loop2): Remounting filesystem read-only
[  946.183001][T12013] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  946.207271][T11999] EXT4-fs (loop5): Remounting filesystem read-only
[  946.245009][T12007] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  946.263083][T11999] EXT4-fs (loop5): 1 orphan inode deleted
[  946.289988][T11999] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  946.323071][T12007] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  946.355819][T11999] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  946.372928][T12007] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1641: Failed to acquire dquot type 0
[  946.476566][T12007] EXT4-fs (loop2): Remounting filesystem read-only
[  948.839911][T11999] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  948.848366][T11999] EXT4-fs (loop5): shut down requested (2)
[  948.916296][T12007] EXT4-fs (loop2): 1 orphan inode deleted
[  948.952308][T12007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  949.020041][T12007] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  949.023300][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  949.038326][T11475] EXT4-fs (loop7): unmounting filesystem.
[  949.047900][T11155] EXT4-fs (loop8): unmounting filesystem.
[  949.060662][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  951.122347][T12042] loop8: detected capacity change from 0 to 256
[  951.129436][T12042] exfat: Deprecated parameter 'utf8'
[  951.989010][T12042] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  952.749050][T12046] loop7: detected capacity change from 0 to 256
[  952.770367][T12051] loop1: detected capacity change from 0 to 256
[  953.576348][T12053] loop2: detected capacity change from 0 to 512
[  953.709513][T12056] loop5: detected capacity change from 0 to 256
[  953.850950][T12053] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  954.589608][T12053] EXT4-fs (loop2): 1 truncate cleaned up
[  954.629209][T12053] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  955.990706][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  956.335207][T12088] loop8: detected capacity change from 0 to 512
[  956.352636][T12089] loop2: detected capacity change from 0 to 512
[  956.376907][T12088] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  956.431289][T12088] EXT4-fs (loop8): 1 truncate cleaned up
[  956.463764][T12088] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  956.635608][T12089] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  958.553669][T12099] loop1: detected capacity change from 0 to 256
[  958.569332][T12099] exfat: Deprecated parameter 'utf8'
[  958.736327][T12099] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  958.830968][T11155] EXT4-fs (loop8): unmounting filesystem.
[  958.861095][T12089] EXT4-fs (loop2): 1 truncate cleaned up
[  958.903028][T12089] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  959.613194][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  960.149693][T12113] loop2: detected capacity change from 0 to 40427
[  960.166206][T12113] F2FS-fs (loop2): invalid crc value
[  960.378116][T12113] F2FS-fs (loop2): Found nat_bits in checkpoint
[  960.496416][T12113] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  961.238431][T12123] loop8: detected capacity change from 0 to 40427
[  961.251101][T12123] F2FS-fs (loop8): invalid crc value
[  961.285864][T12123] F2FS-fs (loop8): Found nat_bits in checkpoint
[  961.515880][T12123] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  961.566820][T12128] loop7: detected capacity change from 0 to 512
[  961.664844][T12128] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  962.080612][ T4261] syz-executor: attempt to access beyond end of device
[  962.080612][ T4261] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  962.108929][T12128] EXT4-fs (loop7): 1 truncate cleaned up
[  962.340357][T12128] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  962.957737][T11155] syz-executor: attempt to access beyond end of device
[  962.957737][T11155] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  963.384564][T11475] EXT4-fs (loop7): unmounting filesystem.
[  964.049581][T12154] loop7: detected capacity change from 0 to 512
[  964.118545][T12154] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  964.200377][T12154] EXT4-fs (loop7): 1 truncate cleaned up
[  964.237693][T12154] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  964.324145][T12160] loop8: detected capacity change from 0 to 256
[  966.338335][T12161] loop2: detected capacity change from 0 to 32768
[  966.353847][T12161] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1667 (12161)
[  966.405056][T12161] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  966.415442][T12161] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  966.424200][T12161] BTRFS info (device loop2): using free space tree
[  966.528896][T11475] EXT4-fs (loop7): unmounting filesystem.
[  966.673057][T12179] loop8: detected capacity change from 0 to 512
[  966.695265][T12164] loop1: detected capacity change from 0 to 512
[  966.735378][T12179] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  966.749910][T12179] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  966.763320][T12164] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  966.772416][T12164] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  966.772914][T12179] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1673: Failed to acquire dquot type 0
[  966.809783][T12197] loop7: detected capacity change from 0 to 512
[  966.821398][T12179] EXT4-fs (loop8): Remounting filesystem read-only
[  966.821417][T12197] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  966.828209][T12179] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  966.848590][T12179] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  966.858524][T12179] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1673: Failed to acquire dquot type 0
[  966.880585][T12179] EXT4-fs (loop8): Remounting filesystem read-only
[  966.887865][T12161] BTRFS info (device loop2): enabling ssd optimizations
[  966.953384][T12179] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  966.967714][T12197] EXT4-fs (loop7): 1 truncate cleaned up
[  966.984871][T12200] loop5: detected capacity change from 0 to 736
[  967.007512][T12179] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  967.017857][T12179] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1673: Failed to acquire dquot type 0
[  967.030074][T12179] EXT4-fs (loop8): Remounting filesystem read-only
[  967.037482][T12197] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  967.069816][T12164] loop1: detected capacity change from 0 to 736
[  967.077099][ T9887] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  967.077185][T12179] EXT4-fs (loop8): 1 orphan inode deleted
[  967.099871][T12179] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  967.124852][T12179] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  967.192252][   T27] audit: type=1800 audit(1734830388.523:54): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1667" name="file1" dev="loop2" ino=261 res=0 errno=0
[  967.439646][T12161] BTRFS error (device loop2: state M): unrecognized mount option '.
[  967.439646][T12161] #)|:��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  967.439646][T12161] ://�8�x'+��?[e�\J銹�95/'
[  968.479786][T11475] EXT4-fs (loop7): unmounting filesystem.
[  968.539254][T12211] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  968.549817][T12211] EXT4-fs (loop8): shut down requested (2)
[  968.598617][ T4261] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  969.035325][T11155] EXT4-fs (loop8): unmounting filesystem.
[  969.149540][T12214] loop5: detected capacity change from 0 to 512
[  969.453017][ T4264] Bluetooth: hci1: command 0x0406 tx timeout
[  969.713844][T12214] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  969.762431][T12225] loop8: detected capacity change from 0 to 512
[  969.769110][T12214] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  969.885230][T12227] loop7: detected capacity change from 0 to 256
[  970.251717][T12214] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1677: Failed to acquire dquot type 0
[  970.404340][T12214] EXT4-fs (loop5): Remounting filesystem read-only
[  970.409475][T12225] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  970.411052][T12214] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1677: Failed to acquire dquot type 0
[  970.621331][T12225] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1680: Failed to acquire dquot type 0
[  970.635503][T12225] EXT4-fs (loop8): Remounting filesystem read-only
[  970.642192][T12225] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1680: Failed to acquire dquot type 0
[  970.656532][T12225] EXT4-fs (loop8): Remounting filesystem read-only
[  970.672957][T12214] EXT4-fs (loop5): Remounting filesystem read-only
[  970.743235][T12225] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1680: Failed to acquire dquot type 0
[  970.782253][T12214] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1677: Failed to acquire dquot type 0
[  970.803553][T12225] EXT4-fs (loop8): Remounting filesystem read-only
[  970.810350][T12225] EXT4-fs (loop8): 1 orphan inode deleted
[  970.820798][T12214] EXT4-fs (loop5): Remounting filesystem read-only
[  970.830522][T12225] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  970.843094][T12214] EXT4-fs (loop5): 1 orphan inode deleted
[  970.848899][T12214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  970.875784][T12214] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  970.903055][T12225] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  971.507384][T12214] EXT4-fs (loop5): shut down requested (2)
[  971.514721][T12225] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  971.523206][T12225] EXT4-fs (loop8): shut down requested (2)
[  971.602655][T12236] loop7: detected capacity change from 0 to 512
[  971.645866][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  971.653918][T11155] EXT4-fs (loop8): unmounting filesystem.
[  971.667766][T12236] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  971.718008][T12236] EXT4-fs (loop7): 1 truncate cleaned up
[  971.754332][T12236] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  972.097546][T12258] loop8: detected capacity change from 0 to 512
[  972.127294][T12258] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  972.143979][T12249] loop2: detected capacity change from 0 to 736
[  972.429148][T12259] loop5: detected capacity change from 0 to 40427
[  972.511936][T12259] F2FS-fs (loop5): invalid crc value
[  973.023043][T12258] EXT4-fs (loop8): 1 truncate cleaned up
[  973.042307][T12258] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  973.135536][T12259] F2FS-fs (loop5): Found nat_bits in checkpoint
[  973.190837][T12259] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  973.221288][T11475] EXT4-fs (loop7): unmounting filesystem.
[  974.393969][T12281] loop2: detected capacity change from 0 to 512
[  974.554384][ T9612] syz-executor: attempt to access beyond end of device
[  974.554384][ T9612] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  974.560518][T11155] EXT4-fs (loop8): unmounting filesystem.
[  974.586631][T12281] __quota_error: 9 callbacks suppressed
[  974.586651][T12281] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  974.624181][T12281] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  974.742761][T12281] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1687: Failed to acquire dquot type 0
[  974.818691][T12281] EXT4-fs (loop2): Remounting filesystem read-only
[  974.908939][T12281] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  974.952133][T12281] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  974.961937][T12281] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1687: Failed to acquire dquot type 0
[  974.995429][T12281] EXT4-fs (loop2): Remounting filesystem read-only
[  975.005360][T12281] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  975.054806][T12281] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  975.187315][T12298] loop7: detected capacity change from 0 to 256
[  975.431521][T12281] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.1687: Failed to acquire dquot type 0
[  976.153648][T12281] EXT4-fs (loop2): Remounting filesystem read-only
[  976.193016][T12281] EXT4-fs (loop2): 1 orphan inode deleted
[  976.223341][T12281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  976.262944][T12281] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  976.299575][T12294] loop8: detected capacity change from 0 to 736
[  976.436279][T12305] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  976.447095][T12305] EXT4-fs (loop2): shut down requested (2)
[  976.847499][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  976.931466][T12303] loop7: detected capacity change from 0 to 32768
[  976.943403][T12303] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1692 (12303)
[  976.959460][T12303] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  976.969794][T12303] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  976.978775][T12303] BTRFS info (device loop7): using free space tree
[  976.983454][ T9856] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  977.067882][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'.
[  977.176007][T12324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1694'.
[  977.358930][ T4973] kernel write not supported for file /snd/seq (pid: 4973 comm: kworker/1:11)
[  977.427434][T12303] BTRFS info (device loop7): enabling ssd optimizations
[  977.633456][   T27] audit: type=1800 audit(1734830398.953:55): pid=12303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1692" name="file1" dev="loop7" ino=261 res=0 errno=0
[  977.834086][T12340] loop5: detected capacity change from 0 to 256
[  977.843898][T12340] exfat: Deprecated parameter 'utf8'
[  977.910976][T12340] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  978.112658][T12303] BTRFS error (device loop7: state M): unrecognized mount option '.
[  978.112658][T12303] #)|:��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  978.112658][T12303] ://�8�x'+��?[e�\J銹�95/'
[  978.904573][T11475] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  979.149627][T12369] loop5: detected capacity change from 0 to 1024
[  979.216841][T12369] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  979.407738][ T9614] Bluetooth: hci1: unexpected cc 0x202d length: 5 > 1
[  979.523416][T12379] loop2: detected capacity change from 0 to 1024
[  979.548613][T12379] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  979.610029][T12385] loop8: detected capacity change from 0 to 2048
[  979.652584][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  979.673929][T12385]  loop8: p1 < > p4
[  979.783014][T12385] loop8: p4 size 8388608 extends beyond EOD, truncated
[  979.895915][T12390] loop5: detected capacity change from 0 to 128
[  979.941648][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  979.966463][T12390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  979.976151][T12395] loop7: detected capacity change from 0 to 16
[  979.995281][T12395] erofs: (device loop7): mounted with root inode @ nid 36.
[  980.005604][T12390] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  980.055624][T11155] __loop_clr_fd: partition scan of loop8 failed (rc=-16)
[  980.063089][ T9856] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  980.083025][ T9856] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  980.128611][ T9856] Buffer I/O error on dev loop8p1, logical block 0, async page read
[  980.153003][ T9904] I/O error, dev loop8, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  980.181228][ T9856] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  980.201248][ T9904] I/O error, dev loop8, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  980.221443][ T9856] Buffer I/O error on dev loop8p1, logical block 0, async page read
[  980.249336][ T9614] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  980.251845][ T9904] Buffer I/O error on dev loop8p4, logical block 1, async page read
[  980.259877][ T9614] CPU: 1 PID: 9614 Comm: kworker/u5:0 Tainted: G        W          6.1.121-syzkaller #0
[  980.269051][ T9856] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  980.277402][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  980.277424][ T9614] Workqueue: hci1 hci_rx_work
[  980.277464][ T9614] Call Trace:
[  980.277474][ T9614]  <TASK>
[  980.277483][ T9614]  dump_stack_lvl+0x1e3/0x2cb
[  980.277523][ T9614]  ? nf_tcp_handle_invalid+0x642/0x642
[  980.292695][T12402] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1717'.
[  980.296675][ T9614]  ? panic+0x764/0x764
[  980.296719][ T9614]  sysfs_create_dir_ns+0x2c6/0x390
[  980.296749][ T9614]  ? sysfs_warn_dup+0xa0/0xa0
[  980.296780][ T9614]  kobject_add_internal+0x6df/0xd10
[  980.296817][ T9614]  kobject_add+0x14e/0x210
[  980.296845][ T9614]  ? device_add+0x3c2/0xfd0
[  980.296878][ T9614]  ? kobject_init+0x1d0/0x1d0
[  980.296905][ T9614]  ? __raw_spin_lock_init+0x41/0x100
[  980.296931][ T9614]  ? get_device_parent+0x128/0x400
[  980.296967][ T9614]  device_add+0x476/0xfd0
[  980.374580][ T9614]  hci_conn_add_sysfs+0xe4/0x1f0
[  980.379541][ T9614]  le_conn_complete_evt+0xcc6/0x1320
[  980.384841][ T9614]  ? hci_le_big_info_adv_report_evt+0x390/0x390
[  980.391091][ T9614]  ? __mutex_unlock_slowpath+0x218/0x750
[  980.396741][ T9614]  ? mutex_unlock+0x10/0x10
[  980.401255][ T9614]  ? skb_pull_data+0x10e/0x220
[  980.406047][ T9614]  hci_le_enh_conn_complete_evt+0x181/0x410
[  980.411968][ T9614]  hci_event_packet+0xa40/0x1510
[  980.417006][ T9614]  ? hci_remote_host_features_evt+0x210/0x210
[  980.423091][ T9614]  ? bis_list+0x290/0x290
[  980.427530][ T9614]  ? do_raw_spin_unlock+0x137/0x8a0
[  980.432740][ T9614]  ? kcov_remote_start+0x4ae/0x7c0
[  980.437888][ T9614]  ? lockdep_hardirqs_on+0x40/0x130
[  980.443131][ T9614]  ? hci_send_to_monitor+0x99/0x4d0
[  980.448378][ T9614]  hci_rx_work+0x3a6/0xd10
[  980.452891][ T9614]  ? process_one_work+0x7a9/0x11d0
[  980.458054][ T9614]  process_one_work+0x8a9/0x11d0
[  980.463083][ T9614]  ? worker_detach_from_pool+0x260/0x260
[  980.468783][ T9614]  ? _raw_spin_lock_irqsave+0x120/0x120
[  980.474401][ T9614]  ? kthread_data+0x4e/0xc0
[  980.478965][ T9614]  ? wq_worker_running+0x97/0x190
[  980.484030][ T9614]  worker_thread+0xa47/0x1200
[  980.488789][ T9614]  ? _raw_spin_unlock+0x40/0x40
[  980.493708][ T9614]  ? release_firmware_map_entry+0x186/0x186
[  980.499744][ T9614]  ? _raw_spin_unlock+0x40/0x40
[  980.504664][ T9614]  kthread+0x28d/0x320
[  980.508788][ T9614]  ? worker_clr_flags+0x190/0x190
[  980.513880][ T9614]  ? kthread_blkcg+0xd0/0xd0
[  980.518512][ T9614]  ret_from_fork+0x1f/0x30
[  980.522993][ T9614]  </TASK>
[  980.529291][ T9614] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  980.542645][ T9614] Bluetooth: hci1: failed to register connection device
[  980.551707][ T9612] EXT4-fs (loop5): unmounting filesystem.
[  980.571562][ T9856] Buffer I/O error on dev loop8p1, logical block 0, async page read
[  980.624655][ T9856] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  980.634294][ T9856] Buffer I/O error on dev loop8p1, logical block 0, async page read
[  980.642505][ T9856] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  980.651849][ T9856] Buffer I/O error on dev loop8p1, logical block 0, async page read
[  980.673144][ T4301] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  980.874822][ T4301] usb 3-1: config 0 has an invalid interface number: 109 but max is 0
[  980.901865][ T4301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  980.954189][ T4301] usb 3-1: config 0 has no interface number 0
[  980.960368][ T4301] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  980.990608][ T9887] udevd[9887]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  981.016998][ T9856] udevd[9856]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  981.045568][ T4301] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 495, setting to 64
[  981.082936][ T4301] usb 3-1: config 0 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[  981.172057][ T4301] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[  981.208524][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.228273][T12421] loop8: detected capacity change from 0 to 512
[  981.240634][ T4301] usb 3-1: Product: syz
[  981.265866][ T4301] usb 3-1: Manufacturer: syz
[  981.270576][ T4301] usb 3-1: SerialNumber: syz
[  981.312502][ T4301] usb 3-1: config 0 descriptor??
[  981.317869][T12422] block nbd7: shutting down sockets
[  981.320882][T12421] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  981.337002][T12398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  981.379709][T12398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  981.407649][T12421] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  981.460695][T12421] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.1720: Failed to acquire dquot type 1
[  981.494322][T12421] EXT4-fs (loop8): 1 truncate cleaned up
[  981.500042][T12421] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  981.513088][T12421] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  981.532914][T11302] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  981.557831][T11155] EXT4-fs (loop8): unmounting filesystem.
[  981.646082][ T4301] ath6kl: Failed to submit usb control message: -71
[  981.663076][ T4301] ath6kl: unable to send the bmi data to the device: -71
[  981.670244][ T4301] ath6kl: Unable to send get target info: -71
[  981.736961][ T4301] ath6kl: Failed to init ath6kl core: -71
[  981.753410][T11302] usb 6-1: Using ep0 maxpacket: 8
[  981.761880][T11302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  981.811832][T11302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  981.852905][T11302] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  981.882371][T11302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  981.913903][T11302] usb 6-1: config 0 descriptor??
[  981.947413][ T4301] ath6kl_usb: probe of 3-1:0.109 failed with error -71
[  981.994394][ T4301] usb 3-1: USB disconnect, device number 3
[  982.010458][T12384] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  982.134143][T12412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  982.163924][T12412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  982.197507][T11302] usbhid 6-1:0.0: can't add hid device: -71
[  982.205893][T12384] usb 8-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  982.208097][T11302] usbhid: probe of 6-1:0.0 failed with error -71
[  982.237997][T12384] usb 8-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping
[  982.280738][T11302] usb 6-1: USB disconnect, device number 2
[  982.300728][T12384] usb 8-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  982.344991][T12384] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  982.372103][T12384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.693284][ T4301] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  982.720244][T12384] ath6kl: Failed to submit usb control message: -71
[  982.733016][T12384] ath6kl: unable to send the bmi data to the device: -71
[  982.750501][T12384] ath6kl: Unable to send get target info: -71
[  982.759228][T12384] ath6kl: Failed to init ath6kl core: -71
[  982.871769][T12384] ath6kl_usb: probe of 8-1:4.0 failed with error -71
[  982.889266][T12384] usb 8-1: USB disconnect, device number 2
[  982.904828][ T4301] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  982.936515][ T4301] usb 3-1: config 0 has no interface number 0
[  982.942691][ T4301] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  983.041765][ T4301] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  983.091396][ T4301] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  983.138751][ T4301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.165192][ T4301] usb 3-1: config 0 descriptor??
[  983.229850][T12483] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  983.447320][T12490] loop7: detected capacity change from 0 to 128
[  983.507218][ T8609] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  983.586175][ T4301] prodikeys 0003:041E:2801.0008: unknown main item tag 0x0
[  983.630523][ T4301] prodikeys 0003:041E:2801.0008: unknown main item tag 0x0
[  983.630602][ T4301] prodikeys 0003:041E:2801.0008: unknown global tag 0xc
[  983.630622][ T4301] prodikeys 0003:041E:2801.0008: item 0 0 1 12 parsing failed
[  983.631350][ T4301] prodikeys 0003:041E:2801.0008: hid parse failed
[  983.631419][ T4301] prodikeys: probe of 0003:041E:2801.0008 failed with error -22
[  983.703467][ T8609] usb 9-1: Using ep0 maxpacket: 16
[  983.719065][ T8609] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[  983.719130][ T8609] usb 9-1: config 0 has no interface number 0
[  983.719164][ T8609] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  983.727838][ T8609] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  983.727871][ T8609] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  983.727895][ T8609] usb 9-1: Product: syz
[  983.727911][ T8609] usb 9-1: SerialNumber: syz
[  983.729911][ T8609] usb 9-1: config 0 descriptor??
[  983.735914][ T8609] cm109 9-1:0.8: invalid payload size 2, expected 4
[  983.738245][ T8609] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input5
[  983.783178][T12387] usb 3-1: USB disconnect, device number 4
[  983.994593][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1741'.
[  983.994673][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1741'.
[  983.994887][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1741'.
[  983.994905][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1741'.
[  984.146777][    C1] cm109 9-1:0.8: cm109_urb_irq_callback: urb status -71
[  984.146856][    C1] ------------[ cut here ]------------
[  984.147007][    C1] URB ffff888024d50300 submitted while active
[  984.147719][    C1] WARNING: CPU: 1 PID: 12482 at drivers/usb/core/urb.c:379 usb_submit_urb+0x10b1/0x1990
[  984.147775][    C1] Modules linked in:
[  984.147797][    C1] CPU: 1 PID: 12482 Comm: syz.8.1737 Tainted: G        W          6.1.121-syzkaller #0
[  984.147824][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  984.147845][    C1] RIP: 0010:usb_submit_urb+0x10b1/0x1990
[  984.147882][    C1] Code: 91 11 fb eb 4d e8 cf 91 11 fb e9 fc ef ff ff e8 c5 91 11 fb c6 05 87 a5 0d 08 01 48 c7 c7 a0 de ac 8b 4c 89 ee e8 ff aa d9 fa <0f> 0b e9 c7 ef ff ff e8 a3 91 11 fb eb 1a e8 9c 91 11 fb eb 13 e8
[  984.147903][    C1] RSP: 0018:ffffc900001e07f8 EFLAGS: 00010046
[  984.147927][    C1] RAX: 05af88a8c93cb900 RBX: ffff88807af06048 RCX: 0000000000040000
[  984.147945][    C1] RDX: ffffc900022f1000 RSI: 00000000000015a4 RDI: 00000000000015a5
[  984.147962][    C1] RBP: ffff888024d50308 R08: ffffffff8152b84e R09: ffffed10171e4f1c
[  984.147989][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  984.148006][    C1] R13: ffff888024d50300 R14: 0000000000000a20 R15: ffff888071773939
[  984.148025][    C1] FS:  0000555574882500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  984.148046][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  984.148063][    C1] CR2: 0000000000000000 CR3: 000000007344a000 CR4: 00000000003506e0
[  984.148083][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  984.148097][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  984.148112][    C1] Call Trace:
[  984.148120][    C1]  <IRQ>
[  984.148129][    C1]  ? __warn+0x15a/0x520
[  984.148156][    C1]  ? usb_submit_urb+0x10b1/0x1990
[  984.148195][    C1]  ? report_bug+0x2af/0x500
[  984.148218][    C1]  ? usb_submit_urb+0x10b1/0x1990
[  984.148257][    C1]  ? handle_bug+0x3d/0x70
[  984.148292][    C1]  ? exc_invalid_op+0x16/0x40
[  984.148327][    C1]  ? asm_exc_invalid_op+0x16/0x20
[  984.148368][    C1]  ? __warn_printk+0x28e/0x350
[  984.148398][    C1]  ? usb_submit_urb+0x10b1/0x1990
[  984.148433][    C1]  ? usb_submit_urb+0x10b1/0x1990
[  984.148478][    C1]  cm109_urb_irq_callback+0x6c4/0xc20
[  984.148517][    C1]  __usb_hcd_giveback_urb+0x371/0x530
[  984.148556][    C1]  dummy_timer+0x8dc/0x32b0
[  984.148605][    C1]  ? mark_lock+0x9a/0x340
[  984.148657][    C1]  ? mark_lock+0x9a/0x340
[  984.148701][    C1]  ? print_irqtrace_events+0x210/0x210
[  984.148737][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  984.148768][    C1]  ? dummy_free_streams+0x310/0x310
[  984.148800][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  984.148833][    C1]  ? _raw_spin_unlock+0x40/0x40
[  984.148861][    C1]  ? debug_object_deactivate+0x63/0x380
[  984.148900][    C1]  ? dummy_free_streams+0x310/0x310
[  984.148934][    C1]  ? dummy_free_streams+0x310/0x310
[  984.148968][    C1]  __hrtimer_run_queues+0x5e5/0xe50
[  984.149026][    C1]  ? hrtimer_interrupt+0x980/0x980
[  984.149055][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  984.149098][    C1]  hrtimer_run_softirq+0x196/0x2c0
[  984.149133][    C1]  handle_softirqs+0x2ee/0xa40
[  984.149177][    C1]  ? __irq_exit_rcu+0x157/0x240
[  984.149218][    C1]  ? do_softirq+0x240/0x240
[  984.149258][    C1]  ? irqtime_account_irq+0xd0/0x1e0
[  984.149288][    C1]  __irq_exit_rcu+0x157/0x240
[  984.149323][    C1]  ? irq_exit_rcu+0x20/0x20
[  984.149371][    C1]  irq_exit_rcu+0x5/0x20
[  984.149404][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  984.149431][    C1]  </IRQ>
[  984.149439][    C1]  <TASK>
[  984.149448][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  984.149484][    C1] RIP: 0010:___slab_alloc+0x109f/0x1270
[  984.149517][    C1] Code: c7 44 24 70 00 00 00 00 9c 8f 44 24 70 f7 44 24 70 00 02 00 00 75 40 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 78 0f 85 f9 00 00 00 4c 89 f8 48 81 c4 80 00 00 00 5b
[  984.149537][    C1] RSP: 0018:ffffc9000d1d7978 EFLAGS: 00000206
[  984.149558][    C1] RAX: 05af88a8c93cb900 RBX: ffff8880b8f440f0 RCX: ffffffff816b123a
[  984.149577][    C1] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: ffffffff8b5e6400
[  984.149595][    C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff2249c51
[  984.149612][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246
[  984.149628][    C1] R13: ffff88801aa4e000 R14: ffff8880b8f440d0 R15: ffff88803130e8c0
[  984.149656][    C1]  ? mark_lock+0x9a/0x340
[  984.149705][    C1]  ? __alloc_skb+0xde/0x670
[  984.149745][    C1]  kmem_cache_alloc_node+0x1cf/0x310
[  984.149775][    C1]  ? __alloc_skb+0xde/0x670
[  984.149811][    C1]  __alloc_skb+0xde/0x670
[  984.149848][    C1]  alloc_uevent_skb+0x74/0x220
[  984.149881][    C1]  kobject_uevent_net_broadcast+0x2e5/0x560
[  984.149919][    C1]  kobject_uevent_env+0x576/0x8c0
[  984.149958][    C1]  ? gadget_bind_driver+0x7f0/0x7f0
[  984.149993][    C1]  device_release_driver_internal+0x4f3/0x880
[  984.150033][    C1]  driver_detach+0x1f7/0x2d0
[  984.150063][    C1]  bus_remove_driver+0xf9/0x250
[  984.150086][    C1]  ? sysfs_remove_groups+0x8a/0xa0
[  984.150115][    C1]  usb_gadget_unregister_driver+0x4a/0x70
[  984.150145][    C1]  raw_release+0xf5/0x1e0
[  984.150174][    C1]  ? raw_open+0x4c0/0x4c0
[  984.150206][    C1]  __fput+0x3f6/0x8d0
[  984.150248][    C1]  task_work_run+0x246/0x300
[  984.150286][    C1]  ? task_work_cancel+0x2e0/0x2e0
[  984.150322][    C1]  ? exit_to_user_mode_loop+0x39/0x100
[  984.150349][    C1]  exit_to_user_mode_loop+0xde/0x100
[  984.150374][    C1]  exit_to_user_mode_prepare+0xb1/0x140
[  984.150399][    C1]  syscall_exit_to_user_mode+0x60/0x270
[  984.150430][    C1]  do_syscall_64+0x47/0xb0
[  984.150463][    C1]  ? clear_bhb_loop+0x45/0xa0
[  984.150486][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  984.150519][    C1] RIP: 0033:0x7f2c31985d29
[  984.150546][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  984.150566][    C1] RSP: 002b:00007ffed8e75588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  984.150591][    C1] RAX: 0000000000000000 RBX: 00000000000f007b RCX: 00007f2c31985d29
[  984.150608][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  984.150623][    C1] RBP: 00007f2c31b77ba0 R08: 0000000000000001 R09: 00007ffed8e7587f
[  984.150640][    C1] R10: 00007f2c31600000 R11: 0000000000000246 R12: 00000000000f0458
[  984.150657][    C1] R13: 00007f2c31b75fa0 R14: 0000000000000032 R15: ffffffffffffffff
[  984.150690][    C1]  </TASK>
[  984.150701][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  984.150713][    C1] CPU: 1 PID: 12482 Comm: syz.8.1737 Tainted: G        W          6.1.121-syzkaller #0
[  984.150739][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  984.150752][    C1] Call Trace:
[  984.150759][    C1]  <IRQ>
[  984.150767][    C1]  dump_stack_lvl+0x1e3/0x2cb
[  984.150805][    C1]  ? nf_tcp_handle_invalid+0x642/0x642
[  984.150841][    C1]  ? panic+0x764/0x764
[  984.150872][    C1]  ? vscnprintf+0x59/0x80
[  984.150902][    C1]  panic+0x318/0x764
[  984.150927][    C1]  ? __warn+0x169/0x520
[  984.150954][    C1]  ? memcpy_page_flushcache+0xfc/0xfc
[  984.151003][    C1]  __warn+0x348/0x520
[  984.151027][    C1]  ? usb_submit_urb+0x10b1/0x1990
[  984.151065][    C1]  report_bug+0x2af/0x500
[  984.151085][    C1]  ? usb_submit_urb+0x10b1/0x1990
[  984.151123][    C1]  handle_bug+0x3d/0x70
[  984.151157][    C1]  exc_invalid_op+0x16/0x40
[  984.151191][    C1]  asm_exc_invalid_op+0x16/0x20
[  984.151223][    C1] RIP: 0010:usb_submit_urb+0x10b1/0x1990
[  984.151257][    C1] Code: 91 11 fb eb 4d e8 cf 91 11 fb e9 fc ef ff ff e8 c5 91 11 fb c6 05 87 a5 0d 08 01 48 c7 c7 a0 de ac 8b 4c 89 ee e8 ff aa d9 fa <0f> 0b e9 c7 ef ff ff e8 a3 91 11 fb eb 1a e8 9c 91 11 fb eb 13 e8
[  984.151276][    C1] RSP: 0018:ffffc900001e07f8 EFLAGS: 00010046
[  984.151296][    C1] RAX: 05af88a8c93cb900 RBX: ffff88807af06048 RCX: 0000000000040000
[  984.151313][    C1] RDX: ffffc900022f1000 RSI: 00000000000015a4 RDI: 00000000000015a5
[  984.151329][    C1] RBP: ffff888024d50308 R08: ffffffff8152b84e R09: ffffed10171e4f1c
[  984.151347][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  984.151363][    C1] R13: ffff888024d50300 R14: 0000000000000a20 R15: ffff888071773939
[  984.151387][    C1]  ? __warn_printk+0x28e/0x350
[  984.151420][    C1]  ? usb_submit_urb+0x10b1/0x1990
[  984.151464][    C1]  cm109_urb_irq_callback+0x6c4/0xc20
[  984.151502][    C1]  __usb_hcd_giveback_urb+0x371/0x530
[  984.151540][    C1]  dummy_timer+0x8dc/0x32b0
[  984.151587][    C1]  ? mark_lock+0x9a/0x340
[  984.151642][    C1]  ? mark_lock+0x9a/0x340
[  984.151685][    C1]  ? print_irqtrace_events+0x210/0x210
[  984.151720][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  984.151750][    C1]  ? dummy_free_streams+0x310/0x310
[  984.151782][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  984.151813][    C1]  ? _raw_spin_unlock+0x40/0x40
[  984.151841][    C1]  ? debug_object_deactivate+0x63/0x380
[  984.151879][    C1]  ? dummy_free_streams+0x310/0x310
[  984.151912][    C1]  ? dummy_free_streams+0x310/0x310
[  984.151945][    C1]  __hrtimer_run_queues+0x5e5/0xe50
[  984.151997][    C1]  ? hrtimer_interrupt+0x980/0x980
[  984.152027][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  984.152068][    C1]  hrtimer_run_softirq+0x196/0x2c0
[  984.152101][    C1]  handle_softirqs+0x2ee/0xa40
[  984.152141][    C1]  ? __irq_exit_rcu+0x157/0x240
[  984.152181][    C1]  ? do_softirq+0x240/0x240
[  984.152217][    C1]  ? irqtime_account_irq+0xd0/0x1e0
[  984.152244][    C1]  __irq_exit_rcu+0x157/0x240
[  984.152279][    C1]  ? irq_exit_rcu+0x20/0x20
[  984.152322][    C1]  irq_exit_rcu+0x5/0x20
[  985.082619][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  985.088312][    C1]  </IRQ>
[  985.091332][    C1]  <TASK>
[  985.094270][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  985.100292][    C1] RIP: 0010:___slab_alloc+0x109f/0x1270
[  985.105877][    C1] Code: c7 44 24 70 00 00 00 00 9c 8f 44 24 70 f7 44 24 70 00 02 00 00 75 40 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 78 0f 85 f9 00 00 00 4c 89 f8 48 81 c4 80 00 00 00 5b
[  985.125500][    C1] RSP: 0018:ffffc9000d1d7978 EFLAGS: 00000206
[  985.131586][    C1] RAX: 05af88a8c93cb900 RBX: ffff8880b8f440f0 RCX: ffffffff816b123a
[  985.139572][    C1] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: ffffffff8b5e6400
[  985.147549][    C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff2249c51
[  985.155525][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246
[  985.163519][    C1] R13: ffff88801aa4e000 R14: ffff8880b8f440d0 R15: ffff88803130e8c0
[  985.171503][    C1]  ? mark_lock+0x9a/0x340
[  985.175863][    C1]  ? __alloc_skb+0xde/0x670
[  985.180407][    C1]  kmem_cache_alloc_node+0x1cf/0x310
[  985.185706][    C1]  ? __alloc_skb+0xde/0x670
[  985.190313][    C1]  __alloc_skb+0xde/0x670
[  985.194654][    C1]  alloc_uevent_skb+0x74/0x220
[  985.199434][    C1]  kobject_uevent_net_broadcast+0x2e5/0x560
[  985.205340][    C1]  kobject_uevent_env+0x576/0x8c0
[  985.210376][    C1]  ? gadget_bind_driver+0x7f0/0x7f0
[  985.215581][    C1]  device_release_driver_internal+0x4f3/0x880
[  985.221666][    C1]  driver_detach+0x1f7/0x2d0
[  985.226266][    C1]  bus_remove_driver+0xf9/0x250
[  985.231138][    C1]  ? sysfs_remove_groups+0x8a/0xa0
[  985.236253][    C1]  usb_gadget_unregister_driver+0x4a/0x70
[  985.241988][    C1]  raw_release+0xf5/0x1e0
[  985.246412][    C1]  ? raw_open+0x4c0/0x4c0
[  985.250750][    C1]  __fput+0x3f6/0x8d0
[  985.254747][    C1]  task_work_run+0x246/0x300
[  985.259350][    C1]  ? task_work_cancel+0x2e0/0x2e0
[  985.264384][    C1]  ? exit_to_user_mode_loop+0x39/0x100
[  985.269848][    C1]  exit_to_user_mode_loop+0xde/0x100
[  985.275142][    C1]  exit_to_user_mode_prepare+0xb1/0x140
[  985.280690][    C1]  syscall_exit_to_user_mode+0x60/0x270
[  985.286246][    C1]  do_syscall_64+0x47/0xb0
[  985.290671][    C1]  ? clear_bhb_loop+0x45/0xa0
[  985.295349][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  985.301312][    C1] RIP: 0033:0x7f2c31985d29
[  985.305757][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  985.325412][    C1] RSP: 002b:00007ffed8e75588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  985.333846][    C1] RAX: 0000000000000000 RBX: 00000000000f007b RCX: 00007f2c31985d29
[  985.341839][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  985.349817][    C1] RBP: 00007f2c31b77ba0 R08: 0000000000000001 R09: 00007ffed8e7587f
[  985.357807][    C1] R10: 00007f2c31600000 R11: 0000000000000246 R12: 00000000000f0458
[  985.365876][    C1] R13: 00007f2c31b75fa0 R14: 0000000000000032 R15: ffffffffffffffff
[  985.373873][    C1]  </TASK>
[  985.377025][    C1] Kernel Offset: disabled
[  985.381445][    C1] Rebooting in 86400 seconds..