last executing test programs:

2m10.827819628s ago: executing program 0 (id=1):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3a, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f0000000a40)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2m10.569184023s ago: executing program 0 (id=5):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

2m9.325562427s ago: executing program 0 (id=10):
r0 = socket$kcm(0xa, 0x1, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x8081)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})

2m8.926203995s ago: executing program 32 (id=10):
r0 = socket$kcm(0xa, 0x1, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x8081)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})

1m15.21942404s ago: executing program 1 (id=322):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m14.929233496s ago: executing program 1 (id=325):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m14.282050268s ago: executing program 1 (id=329):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000720000/0x4000)=nil, 0x4000)

1m13.10855916s ago: executing program 1 (id=334):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x105042, 0x1db)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

1m11.779130466s ago: executing program 1 (id=339):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r0}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000880)={r2, r0}, 0xc)

1m11.029622861s ago: executing program 1 (id=345):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202d437b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000008c0)='sys_enter\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6a53198af9b87849"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000008"], 0x80}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x48}}, 0x0)

1m10.53604876s ago: executing program 33 (id=345):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202d437b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000008c0)='sys_enter\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6a53198af9b87849"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000008"], 0x80}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x48}}, 0x0)

51.108672224s ago: executing program 5 (id=411):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000488000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x7d}], 0x0, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

50.556249495s ago: executing program 5 (id=413):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000000c0)='personality\x00')
read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020)

50.071929834s ago: executing program 5 (id=416):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x21, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xffffffff}}, 0xe8)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)

47.421704306s ago: executing program 5 (id=426):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0)

47.012909153s ago: executing program 5 (id=429):
r0 = inotify_init()
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, 0x0, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=r0, @ANYRES16=r1], 0x0)

41.713735546s ago: executing program 5 (id=459):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r1 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0)

41.083325867s ago: executing program 34 (id=459):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r1 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0)

6.320357558s ago: executing program 2 (id=596):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
unshare(0x2c020400)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

5.978559765s ago: executing program 2 (id=597):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = creat(&(0x7f0000000580)='./file1\x00', 0x219)
r1 = fanotify_init(0xf00, 0x1)
fanotify_mark(r1, 0x105, 0x8000000, r0, 0x0)

5.792647468s ago: executing program 4 (id=599):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
close(0x3)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)

5.568290502s ago: executing program 3 (id=600):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000001700)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x45d, &(0x7f0000001780)="$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")
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
rename(&(0x7f0000000000)='./file2\x00', 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61)

4.817035937s ago: executing program 4 (id=601):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

4.816799747s ago: executing program 2 (id=602):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000000014000000000000000071323f3202cba36b33103ea59d2dfcfa6037dd58560d7067447a32daa122e553b51a6597d3ef88d8ec0278086b6909"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

3.884313024s ago: executing program 2 (id=603):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="8393d2da86", 0x5}], 0x1}}], 0x1, 0x1)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, "74c05283a1348b4b", "1cf5a5faf8b5ccf7f96995cc78f3d68a426a5475a68e5c77de9d320ac6db84e7", "5e69db2c", "aaa5c6f27ae3cda6"}, 0x38)

3.59149945s ago: executing program 6 (id=604):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r1 = syz_io_uring_setup(0x22f, &(0x7f0000000240)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)

3.559122311s ago: executing program 2 (id=605):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000300)={0x0, 0x23, 0x2, "7699"}, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40010)

3.358000785s ago: executing program 3 (id=606):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0)
write(r1, &(0x7f0000000140)="6967ae42cbea486d00a74e3deec6fcb4391f745de504000000000000007190ba2b6d59c8958d6f1501000000c4677b000900ffffffffffffff200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

3.202998878s ago: executing program 4 (id=607):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@access_client}, {@cache_mmap}, {@posixacl}, {@cache_mmap}], [], 0x6b}})
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440))

3.198528918s ago: executing program 3 (id=608):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x406, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.649258079s ago: executing program 3 (id=609):
r0 = fanotify_init(0x200, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x71, 0x40000009, r1, 0x0)
r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
truncate(&(0x7f0000000040)='./bus\x00', 0x9472)
dup3(r3, r2, 0x0)
finit_module(r3, 0x0, 0x0)

2.479014362s ago: executing program 6 (id=610):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2.319283595s ago: executing program 4 (id=611):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x59076100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="1827dacb7cd53e01b4852de2d748e21fa033071acb841f449efc23d452101807ae5c485596338a6d31388444ae8ade7b60a85a37d3db29ef19ae4c4d4db9c2c82c7908debb2e2b5ebef336aad77bef942d064955079af4e914f372cec8ed0440f6ee0bded3c565283bdb75124011227712d5f01e8c1eb86cf69205a8b5b374edee58ebaf09d62191cf41190260c30a719bbc9bc29be0d60c678791de6b236c9b5a057247c281937c2b2ae747c858532113e0a1e7af49298ef54f15572301d3c907b02529bc470beab8f9208cf92b17a9df99ceff90a1e384d6bda3fe823d8eff0e2229a43c31781935de69466b1082c0f88d3716f234e1d6e17e1360f6621e686d661af20eaf08cc97c261590ac3291667a87bbf66f86d9005f034ea5517b2187b6dfecebc1cb8fc4dab511a2890a68ed185483c548168803f353520cc6f820d1349ac985e12a3ff6e8a78b29ed97213962fca3ba7d04d1ab4dbcfe93a88831f784ed278d079eb3e2e69d3161600fc7b0dae825b510a59c14315fc6ca0ce68dafd088f02a92ae0ab3f15ca1a863b640e8e4a89407a8b8d752892e1f8b0e793d430c3ec46cbe2b6a4bdad728c34e734864aeac2b6b2eb51c3a2f9e6773c5834166511086dc35847cfa17974889795ed305353d41c9399bb95936a3c1be1099f21795cfc04d9699929eca65a0edcae5d4e564404e5292dc15f40d78d94be9e8dca92983bc71729ab30a70455bbfd5a98d97cab9778d9b7b69fb20019e7e7c7bc17c84da1dab53a187a116ac229e00312c95b1074afff18a8771a4ab47be2205745836dc3cc1ce531fe697e9a734698fb2343b331ad9f13214d1d7d511dc646fb8b3b70fb4611e6d102a0e2bda6311ca824537f699efdefbd8a3a523e26272f07abd75504188edc788af9c75aabf77f4ac883573f63ded319fa5a8b6317d4490391879629446fa5ea4c695f3db9739f7bc1da7a19f3e1c0ccca98307b3a7a38272b7455c8957b17138c9e170c27895fcf47eb5530948b7cc43d61a621293b0c83dc893f02def2b42a8bd7ad6c9cdfeb7a3bde141e98e5af7500b07d85c6314949b754c88cc666bdaaec89271f56ec11bfa0aa337feb1140b8a07fbd5c79bdd0239f8aa1d454c0e5a16e99d38d1212ff709bb1964c317c98bfef37b56944666f0320ec85b5b1e07731de5584901f8c65e14fd2ba83b500fdbb137c7cdf91d66400688a5da6405ca7e0b8107ed65be0ef5c6234b62f613e7e76d6f3d5cc12bde4342391524e25bab6ec0a358c6c66b7cdbdd9301f91589af65cb7c02fe8271a798c5e122fef9e7581d28884d33d01f0475c9ac052d2d014bdc09e2738487742f7bff40facf2e96dcdfefa336c46923b77b334daf7b01a9fd5d957a29b83adf6f23acc507a58dabe6b2804532bc1a865a01b1126127f7c6a8029531db8a51d8472c0abffca5be97b9b5433ad220ab9ad65cf94a1167f3fb2b8804ce66f9f5cae212724b2b3a04343580f5919f446f40eaa0177f25ebe68ee7c7a35d9d5ef6e1cb220eaf8ad9b269b15c2ab9692c345f3c3bd5965f06adfdfa2d672b5e3184ebe192f73e70e829adfac2e6318d238dceb6e3d7d1422d57ff7124793b92966bd229c0725b0d591e59c57f98841b5ffad16d0ae903406014d3e632d0654e9084f870e124046f3ebae3ecbf5c5365aa32ebf169ccf1243dc8fb296cef006d5f00447ecd2980abb98e3b6e6bf6181e5df7994ea1c1273784af0d92a57394c71926dc143228a8ade103ff61860d21ffd467b2c41bbbd2490dd36add865828fb64396f16831a3a74f57ee2254cc93b25b7219bc00339a2518be3caa4765ed63295c84f1d59144e96aacfb57c6441f64f29729bb7d68127ae2472bbf089570003b1e820191878ab6f53db01c180751e34672cf5a96edfefe164580d6101672281b59f58f3c7b1222f2b6d19c8a8e5f9ad539045f7dbadaa767f993da974dae20744bf5ad0e0ec71ee97696659981e067463c78bd9337b8bcfc070e7e5b47303eaaf9651c19f19a15eab8e2c47041828be50994b5695ee5fbc9a9ecacf9de714215eb7992c07f262db8843937934fdf6fdd31d0f3a44f074f3a1dd6622dbdb3364df79d5ec90ead64c29e05a6c5358cc6b9d8493b7e1c53a91c37aa3653cf2002072461f4b99fcdec142e53b87f61ea55cdb834dd4e03f2f57a206cabe2f3f3cbfad3b4117bf4434718022b09a8419959a9bb97fba50a6b3b9a844cd1301de7bae89f8d1bf549b88dd2bd0697e70ce89cc2e383221ca2ae9d3671a730466c250a8963f6411a42ecc85a00c01b2b43c39432d5065a5fd11c29a23169891cd674cf3a31e82587a26c8d48aa3debeaf067a26669599fae850126dd516512e0cf5ab556b5582add7d2f665723a2244007ddc302f0ec29da73578a80c998849be2f766a334c7ade4dd46f37d648899da5cf7437af2d6e8d03d934903387c4c7e260909d59b546dfac9ffdce11fb92e5bb6ff6836fa0e6d0c5942b4660fdd68d3cc8a76ce0960584dbf634695ca75752b19067ba535e4779189b111c9a3e0ea877067c046d10021b0e60eae8d5dd7536b4474d8ab74679e2d8e68bc9208db5561e28d0bec177cda1e2f944a4cd97b6432033ce40063cbced6b36e486b096adffd699c9fdf58d5ec54bf4afdf52493fbfcd91e807da31ff675b567058697aa088118a6ecf1b7c7dceba3ba87d59d882fce3b3b676763ed658e991c4fd5746946815af0a2c1e96aeb27383cf6638d6d7e1932b3a028250fee18db7c46acd7fab33ab22ff91cf78029a4ed96494151652213fb7dcca0a8944568bf84aded113e20e6897d6b8f6f9fe5f6975c7cbf999d15ce5f8d50454d58e7a5b285fce4ef9d14758cf4a9619b17275fa66f2c6c48d44da95657708062bec9b633ba2df082766f549c5c1b661fc8a5f7b8b6699503da733a66df44f116c4a470b73648cb64bf04101e7bc1d048d230addbf22a5b98aea08beda847e33552faf771d9b181f610ce34530543096257856ea3a08276bec1ea40e7bf6957143623ef47b5c41e61d076eef0a5195431b49beab9fd7f07b1a153491a7250a889b26ce657df550b226fb94cb5f52306f47ee3af4627ef0cdc0c50536af7b386440b878ed5d672670abdb3ea3e3c3c031e67293104a4d6476cf325f6fe4762ce2351dffac116387baadb82f987cab7fe88ce1be7d44ccd572bfd29114d2ce4d5e90f4d6bf7be39ce25ab7de52815e4059d783564d518dd208714de1c524ff69a4ec5f29bb631eff605cc6f30a0bcfba44810a3a6fc263891791b51cb4be0d60d3d0798e38b01b9a21150589a436fb4df4584bf6e7094176884921bbb0f87b1bcdfb6df8aef8f58393800816c15647650448da0ba5bb76f7bf76c3be83aceab79eedae80e1fb46a2557a9485aa7a8053a5835e609fdf54222f5b43cba63c9508dbbd0e22953768f88e2070236d7255f682464d09c7ba12b2e8787a1bc889af686d2c355961d8f92f877bb09baef09d70b5b306047d8d3cb97fb06ba8d09bfbae02314dddf98092b6ef275743e9deb391995003d83b549ecd604daa9bd34ef311aeced5db504242241c0717f8302efedcd3fd43686a7ee21c73ba3c5af98c93d09158c9011e11bc4b51a3a4e904c4b6ced1a786adf310073405c27df6aae6d5da4398d78622ba9144ad09902da49b77046ad22fd303f07c1533f271eb82794b402382d2971f46c7907069907a7afb9e94dd4071685f91cfca10d86aad7c385e4d90f0d44d37588a8f1f267c1d8445634ca4194d1a0c5894a6d00cae3af3aec991cfefda59e3f46c0a6e2fac55b35259a9960ec7dbd1c7dd128368393f0de1e0994ba1f5b41762c22213f56bbf4c2cca458dd5731f9379f0651ba61fbf17a5861eb417e20a7fc9df12c6771f5ab322213ec95beff96dc1811dd0f45be8fb1ed93c2cc01e694620b550e45bd265fb357f52699cf9ca3ddf331fe4d11c5e97bb57631d9c7620b5c19562c85ef8e04ecd5cd5b713fbd94b6b76331a83f304cd8ae1a903ffa722cf5697b1e1bde206735656ce57254744daff8013f47f9aa4f062d8c5956fa8df5ee79d6e6ffbc0c47cd0c99517a6d92fe8ad18c001be4b55af7a6533712c6a2ccb7e813016e7cb74a94bf2a2ce9b3b440faae19210d43320cb81a6472d1da775ca27f2b5bbe5964271eefccdfa0bd6b163357af4539fdb5d5e2e7e1795040776d4d75b70928b8efa954556f4d225bd9b6f9e5a71a8e7a3ef5c36d459233c66650ada1c55dfa02bca3997f93b92028881d9c3ec0e7e1a42c587482b0cfbc77e8520c6ca0f3e5127c96b41056b7279d9e62358e39dc95e779affaaaddc8e9ee66ba336feca8b957ccb4f352c0d162390e3bde27b15132407c97c3a6b5f1704e1e559ee12655a71d7dce3711c8af907d7d2875e2407ff8c59c5457678058d3d00a7971d239c1b1c67dac3ff3fbcc2d8c8035e31040118ac46ba5110a16aedd0b7f731a4f86a63a697501a664946eaf7da6d3cc2a296f294ee765b8f26363ba6116e0ea0ef8eabb0f1e7cc429611194cf0bb66463d26a82dd118cbbd3f1040dca2f5f82ac5eb5df41a4658fcb34b68066c5708a4a16c48fd290b32e392e7f5b662f4e3fa2d79a814f52824cf737872604672bdaf80fc527deb1f690339c92b6c6c6c8635de5a2e1a7ff617d0f1c11bc3a3504d0de94d77678025ab5bea511d783df148e58b0793251db3b7b9e03bb201be89d5939c0a60ab548460d543d015082e00ad9d05418c327ebafbad7924aaf70e5fa6eb0be359b65ac2fbbcad495b17712e033cbf1853d1e2450ac4c8d19287074e76ca3d087d376b0f861b525d4949098dd4e3a3cc50118c8587adf6587ed9aa0352b7d812fe66bb64eb0c0f4d46822aa9c3d4848454d49b61cca24d7d6b82fafc5d8eb4e40e3665f24a95182b70b22c5f9303a49d1278f25de9855246c729fc8ba300fad799a949b9b0ce303477d22337d599d4c8441461d25725965183210a729fc59c4e5ddb45c0b9db06a09619e6009aa0653cd1e8b06d0e55c133d5022dcf91f12a21e9f977de2485f886c5133a8837987e7bc90662156b0250cc76cb03ad9fa36733ef371479ea9c1313682866b963f1f96bba8c658e2c6a10e5e29d8a07d4999b735bdef7f60326aa64fc198c3f2670fa4a44717fc613f1282fc324fd9476e6da7866cb6ce1efa8a1577088f2aa757584b8ade9f2ba34a2287870da2cc7704008b6e057eaf8bfe2fd0d6d60cf03e1751d2284c6439ee6079708451e64b1f7e7dc8400ae99e0d834a7daba6c3a8219812adff0760129e18a41eb0448c57a909714cd395933436e9ae040277f213e30ab7b6e7e3109642ffa051b3c423f6ffa7830c75d229acd617d6bc1f7948f09238f5437ff4fb302034fec1fed96c55c46c7d70d6ab3018c1a3d76120077f815fa67ec8815f44fd0cae7d1509d217a432ce904c778f201a508fdea4672e9cff797bd1d0f58d46f39396e148573ae9b2468e4ee5bd9a5abce8166333c524f0a104da2e3c99ddbc51fc6f4e7c628af79c93d0fbe61b1c4a72b11fe423597f126467a01ee6dad848f24abdfe453592f02c84e017fe553f27e639f88824d70aeeaca54758184f95f12d696291798046bb075fefd6876e8ef893f5b9340e21fc63c67feb6f03055f2f394a591164a61b1aab14c468998175b75974543e79b241dc69a6e346374dec5eebae154e36f29d17273e608ce69d539a5e4702f474bad66fbf3348f0c859bf884576faeeac754e290ec97e863526e55420da72b6b6cd209e6685ffb64e9865d00eb017c843d3c0cf3ab26f53f76316fbe009f0b2c4932b0694fecf1a148dbead458ca9f5f6d678d6c6fbd23fb6aea9e951914300eaaaf69bf35d4ce11c0349a02aa14529a083e701eac0177d4ddb305a9f9a5cf8bacd96327a161bb8b877813ea022d62bac8f0ab9eb5e9d145dda4b1fe79c0bee34c8bbfe866ba376d3a71b9809adda06e64eafaa6cf53fff8ed63e15525fd409e13b1809ae6e6e937acf858a59d2073b304171d5ab35ec92f66fbb2d4e34d46e886c3546c1026d0ff27821a15aa397dbc686540d546ea66fb43dcb9beaeadde6250cfe8e563f9033b432018c88bec07279c6a0228f3eb11031d3435d95c9c1789a5338f74aa6db2c853c87f8f2397f9067fa59774770f64b8ae42b9a07f85f1bcabbc6d3b3456a253bdb73ad3de0aa416589b722053c81db90e7b66a835d636615701e6869fef016bfaba9da0a869005ffc3174b605fdabdb8c7346262ce78a64aa7036960913edfffad202d664d1771018de43b6548a6672f48979b8e30017a93da2c093266306e09eb203fb37d7d54466fb26d4414ba88346d02d8811f100dcb0a3e50ae46247b986b928f12c1ad506c6b33b49d7e6955ae9619f73c79b72a95b053d53c4c54d36dceb8ae780b321aa41b5d61caa21a6c65329f08da522bbbb3d07501b39cc6bfbe4a2ef8054d7c57666bc805ed451517a1432b958141f3ce94752a67a17aadb41590037da8efdb251eb56de30b0e0e75adfbf4e06d4777f843a8d7c31e2ab62d98764217491d46960d67d3ee1213d150c28e75d1f440d41ffc3cf876554e2d4a354f70fce17e4c0fdc64992c32e785263ca4ffcab57d3d46d220627ed05f1628551e9843137996bc7a0b773e1ccfe5364216a8003757ffdc052d93793a3463baf4eef5dd283826f8510bb1f20505a6e61cb3d571d0f77e67ff3c0aa5ca91f6d68c7e0d2d79c649b091b30b2911c5c47157c9c531296eba681e039eaecab83722cc2fd5b91913a463ba9f693e34da60b1adb8ee9f4a83fa67e25f19e4cd6e19ed1381cba8b5b4591109637ae1f7f29b5495fc5f8057da565d937e7577735bd98fe626ce8568897d240f054ad69c8e0ca424d1be51b17d5e639253fb2fe6791e01edcf9c4f8404233d7f98b52c31c4996b6b63112d0126036ca20cf52a2da2478683c41bfd8fb5b34de59d5e87b5075e5e1d78ad06c6a2f6e662145be3d30d140b62c49df203350ea4412c97aaeec7aaa00d81b89f3b7295607840de2a8386f52012b5c4e6e0e1986565bc4f99b6bc10f3a2ab59783a8b9f3c696f741af0f51b6592c68ddff861fc7d2b16876b05a54eae9ec0e170fbf26d9358941c6cba50a5c41e77f72c7f41e0bbf6023f04f7701f676a64cb63ea1a8d373ee6a99ba56449699ccdf8a11dc7d840d695cd5ef987f74e5b16594cc8c6c2251c47b429281b6e34c0288c7242052ac3c9c63213f6ddb08726001e0afe1fb312d463db8722f1617972dc7f365de498027ef0b5c6d100e583348cd777a2afbfd60ef59969c8f88358b6995c177a7d7e69d86b11e36f42bae8c9af599d3f828447c31004000163bb74ef20f656f6a1c8159bd0f867f2e283c10656a40a397b2e514c19efb5d5a5f54316509801bd8208a2c84b2ef13e54d7b8af8787b826b50095a15e33a5e8e306454312a83af7869b7ba0039ca601751b580a9190435d35a8ce9d8e9558ca1bcea3cc3604f4e991aee79fd0d2393b9f87e8dac7782e837e1de5e88a7c79385a2b14556041f49c1113df43efd8aea14c4b651d713fc9989b2fd77ce13a98efef5e83cc6843d313117753d82870c5efec8cc6fd855ab6e0fc6d48c66874fdcb2d007db7fbb9371da3836eb23da1106283a20e32617bcaba574b7b6298d48334eaeef905ff348c2bfbc1c83a88d6915b644d1854161ab4f1d1db12e74de2853e48d1a10f9835c226bca6944d0de6a18e0e07df45ad72a7d354045a6997ffdee010e37091a3a5280e5db8aeea0245217a6f1160a6287d9a28c0eeabaebe755b9485da5b7ccb85166ed902e63200e5e8ac464124bef0196eddee6cfe90fce770b416817e1ca78494786bdaeafa3538841f74bbdb2585d63f667ef227287efa56c030c0999e9ead590f1ce383a138233235494ecec0aed97c803b4d7c4fb80ac9a3bcb1dd2bab51382a94195bee034c3f3d3d9efc44add83ec580a5cfe8f5942b1694b0ab3ef4b2d9f7c0b8634b056c6b6eeb946be1825fa452abdbc1545cd94774abed3fdc2b0399929298221030f6cd0a2b38490f5e4bfd53ee20de10eeb2ffacca980d40e0885cb91c94a4d81a61d863efd0f7a12da233e1dacf7af728950892ef887abcc5e4d08c6b57834a1e5dd1dfc69418fc681b47d8cd34c6a3846b0e1afdc7c7f9033ff817a72ac617c0a1e59e4e6ea40bd668c499f221c5f63700e74b68ba3045b4460f0fa60308cf8964d95237d888d5c1b1be0fa7bd2703eaeb0d2914b8d22cbd8693c16f21bb72566f38aa97e86f212557d40e10b285e1d4de0b153c8f91e168e9d0031bb7ee7fec5f0c3fbf15bc6fbceeae6dd363b7e9835b175b0be16a3348a2c2d07468449fbb2fcfca9e7d8b72b623355715a6a1edc87ea4c699ffeacb2277fbb5658a1eb12d0a7a93bf100ab11cf49b35c16a14044ac8e5bd69af05b252325f0eca41f90681b4a1ec399096939a96685926655a0c4d172d06646c87f35b65c0d7654882b79838f78c35febbdb378f9f28d7e6ba1c1fa191bbcdbf991731f546439a966e4f7a15c77367161bde14b731c9f2b91114fa46e02e70f07d3c40988e8140866ed3dcd98ef5524700deb75c1a6414016da0ce6845e936a8692b7beac01bc855a72a490c667c3b755ffaaa57af54af1bd07ae7b203be85f3653aa63cc5ae10f6e585c7bd8a5257604e82fad6c7be6f1a47eb665c1422c03d3263f351671a48bd5eed22077b8c16e706f009880941c29b90c29a11ef008a371b29200f32523b9847d911fab4ee1468bf98a49ff73703e2d9d7bbf6ae37459c3cb502541f304e1d5918518a06225b65f3b38b91f8e0b49a29ef9aacca369ce5cf8b45738e29118ab06078b885189acf4d0a5200b86cb2269dde90dfada27975dbe6ded12232c0faf7ea12ecacbdf416cff8632e48346478a75c0279c1920b7556fc6670704d5d97912c75d3a9cffe6891abdf747a6850ba7d9668e56c7e7ecc03c5c388e886bc984c8bfd9f470b7e4ea4d146c3c28e4f8ff82b9558266343036e6239a26f567f7633911ccc51522c29ff3ca36ad5b8cfd6ec1c86ae08f30d87a503c909e66dc278e9d14f3fae4bfa4813f315b1610ed76fc149d92f319044e813c3769d4978637e0ee732d3bb86e9fa584181f41d4304c07a1cb71d10f07da649288275a213eff161c536c7366d4c010cf9a4b1c2f2940607dc7468e51204c6983c554d616d48f93ae51e6a7769b3285785ae7bcba3cfb27879df1d7f1f18849a70814eb51df6d1d8cbe80b736cb38326f7db7a06e49cd4fe41b3f7a9156cfac9222ac23d13765e7f2910a365fb23a208f192cfca97b2b8a3de44a2d90d3c865bec109f4bdfb1d37216cf5f71a27c39a83b5562b0c06d76b46b2d8f5b15cb1765d6c78d065d24bedf72405dcb8e795fe183196a6b620f918a2dd7fdfac142aa653fd431ec153e3daac8f615a45b3a0d665d5fe36efb6e2f18b8399429e4f363748eddd5cd2a637e9a0a553fac6d05a3e2bd1b26f2f99433f8f59a3691417a4f35ff7d46a22e39e94641d942706850cb2843ff4a34122e37dcc8224ae9f6ab7f64ff4a0bcb0aaff2f429e4f0f5fcf90ab6a2c45e8f2408d9bbd4f60d6b01a0cf527895e1cd063b178b8973930b9488d81d3f0f7985b900d0a894c29642b809ef39294bfaaa5401f5ed50cbb91a047b60ad54b323a2f2ada04d19d6dbda02e0f22d4d6520f9db2263181c97c9bb74dd8a90adedc80bfd064eb103f67d02ea17571f870c779470bb6460c658da4c502b9a10c8050fc26ad5cc1ae1eb02f0d703d05b48f48ab8c9f9a1bd000181ccf929d45544b44e9a3cd0bcd412ad639323283ed229e5486a2a93babb165880a0a7329834bb51a0631cba5caa30637ca3f07074051c608b7c7170c8c415c2eb88bd6a798bd86953ff71052506ccf0e2357deff6cef24de5b7f68a17082c08d096e43fbe727ab0ab1aa27a703ccd58168039e50dce2d400ed7f2a217c1eea7b29455fbf910d36db324d1c6b53343a78484883ad100a0b5b28c74ab6296df5bf8048fb916e8ddda0ded3f5b08d262b9b1cb1ecb149c02a21490ebebe8856c844d448d2a3878dcc930c3c88d9addf73917e9d3f878fb12fba3e602cfde199a0e69eab56e3d4ffa01135b3145baa613be01f0b94af5bd3b8b432339c954f52b8551fd13790bc1ee18be226b819d8001a3da8e097f84c166e4002e4c1043d3a3721f05105cd17a278b9509d7a04826e8a5b4956bbf976ffb4857fd88da99cfea8d2e0a1c4f52f71f87cbee8c02fbf59b12bdaccb67d0b95f0a56693eafafeefce1953d708b56532ed5bbe12626a3d041c031b48a47b34c504f7dd57e21147b920c058385ddc8cbea5332086c269b0d5c2439f30fa431f88d1a10e25eba0df70d8617ecd5546314ffeae9c4baab872ab82a45eeaf0e1e1533e8a6189c324f31b652aeadc52981b66161313999c5a7bd7c79ef4ee55c7cb00ebd9637ffe01924508a44ab72ab16b70b8b815ce7d27772db315122f4a5a7679af5ac685c26320a71cdd8066b19f749705e2e35d1d9166ecb066053dd05a759270e119944cf99b918cb5e4e6c931031ae2eeffe349ac246c92174091c687c58879e1f05c43b010f7ec3f204c106cf60740b0bc2d355f57bbaec7d060dedab9aebaa4094e72ebffbf61cdfb7d69fbd146daea59339fa83c19c5f75b866af5e7f387740e675e1e2ba29c261d9e7237c6e9ef1b39a8fdacb44de0eaff5f4f9e3e42b75d0a37834eab0cf47acf65e882f0962e01982e783c0dae7efbc95dccb235562e5a2e04fd2b4b43388c0292e6e8198c6df0348920d6e1c8acdd2e892d3f7aef7703824dbb08695642f0e444ade6c4f1ec1e267feb5135cccd50fcde643acb66dbd18f507496957ced435e0db0a8e8441a8e2ebc365f995c32399f7d180b6faeb85ee1921b95f82f3194bed7d157e842257d2da26dfac90f32fb53147e48e232d5115f1cd12b45c55330b29775ab776599afa504b7fe114cd7fb3ab4eb6c30becb82f448b284b20010bea918019af99b2a9ccab1585aec19fd1abe8365a6023f96dddf1a37cce2734bb6585143729850bcd811787bd07cb5fdd57cc987f9278b7f5ef3c7529a9b6d20d18cc4446f1036cf7635da6732986c38df4785e2e428f14b84957319772bdbb7d2d2d20321e522b1ec6c807f3a3f575643d4b71e1bbd1e843b5816aa68900298f5058c65a9fe1022978a44a77bde2b99e221de97cd7fa6a2ea440220bac20e3e4c1e4224958aca15681d3a18f74218114c3e5eefa1fc16de8c07f1d1297b0e772d05f205337175c1dbe88dfc876dcfce367304afac68c41b98ed2ba3f04fd1b37db27dd5d9c9aafaeadfcc44585908ea655ffce1fc2516b060256777e8953e2a6861ec4460034691aed001ea2971627615fc7972773d6a8c343117bae3fc68cfd1f187c478c0f52e86b118c65c39848a8c582ed908fb1242ad3455288cc858e52e119d368e00783c2b8c2916ba564a3501326baefe1dcadac8b4b8b666f20a3a245ca171b43af", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, r2, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004280)="ba5b8ea61489f0f38300fd701eb516b4c60bbe2ff4823e4606fb2bb264192217c6fa28b332cf26b91e1d9164bd551945a835ae0d1cbd61c683a32fcfc15e84e91526d14a8f3a5e20426db65cd52292757c753315dcfc610cc8fec0689484ec083ec9b5abb9fae2bf0a3b615f0dea062169cf61a9f0cb3f29a6c28752f80c082728c300e1ecca8a70b8e500dea6d9152bc6627bfd3018cfb624a1b541defe58da6df08027d67434aaa60468d9fc3772251814262313bc9f879561d5479379d0bcc9736efeb8b2927751c83c2beb3cebe9a44b8962332c6298095dd686e96a86ff0ea7add27ad201b64b7340ce6dfa43464a8270f0f11b1485389f8b4e85756be2ebcc8a560a2edf06e44cc43d256501a1e44283fc4c14cd5a17a8538c602de6eaa0db28eb73343825ef7d295cf1af0d4a3154db224d319f1c109a09bf3a723e5bf7c69aa82ce7150de7713ac205e73945a7f94b1cdfb1376f2e41a70fb7d39cc4e38e60c2ca1ab7937defac79abe448aed5be52805b47f4811729cccc363b0dd88472950ce5afedf7e3ee53e567540674d48528c0dd9c341ba63fe213d5c907889e1a048e7c239306ef73a03cdd8c2636831949418bc4b651e523f781f3588ce069c174e7195d6a15a14f09d14b1f7bb2b33d37421e63ddfa269ab8b62a0ee3d97d516a5bb00b8125e38eb3a536a0b17b54621febb2936dbba1079139474afcbdb0ce42811d1e4c345eddf278b16de9ef061afa842c4596f93d7f4b25a1e04efa933b7c3c9f69a6e998acc68e22b11bb935fa8715134028a6cdaecec54089c2a0c689dbb9b54114b03889ffc4230be929a2b27b04f8db25c52f0e994d55197cf4a035a060a5d0a5bb702bb1c5c4cd8762cfa2bd55440960be8fa8a21193cefb0ea9fd71854f8201129ea98e89224f80b50d3280b2ca4675719b12be1544eb3d1c9aa6d0b8fb3bbc76895d9bb836683f84fdd22fe08add2f5b05afdc35c1ca9464ff38c5023c6e83c08d4782056cfa79f5afcb6a64b3588611d728a201dd5347a476b41e230ca9d495df26795e8f3f3aaa3bf94f9b7480c2a6c699cf91a48f7b1f6cd489f65fe73e13c009e18d70ba6f14d2d6f1553ebda5e195342486f18229b2627418b336bebce7c27aab37618dc9f2451d9eb0680101af466f33aff9a8b12961e2cd01e815f673190e7c3cbf84cf0d233679cdd5cac74c4fc4d784398fedd4f52c098632d8e10a12f34cbfb256ba61362432ec74732abc64c3b711f2aab8273ef88e31897d2e503bb80493c0a1182d638420beb6ef9e11aca868c9fc61aa787ca8dbac99df545ce2d5d5c4fc7e31e430e56678e12345c8b7306c528bd22c23135e94fafa4271ad4bb229871909786a2252b8214a30f09bea5913b84079d2fe6845d75013a15069002b0e0956e4c81c2a9f75fcc040c47ad4c23a4f2797c8d9c43f87cbbe0786b11967d5ad1dcbc5fe39b61615ba16392337b78bd5e5fc9ad9d646be0ab3a8d246309e056fa66d34ddef99b7371713b9e2827a30d54645664743af794ebbe927e43df9146950aa24058b81ce7f9555d1987baa47c486bc4180db65b897eb21ff2529423c88f2227ef4eef0b035ccc9d11f895d18ed9f00504d9db260d1561a5cc3692a52dac20d64ed22c50da171b223fcfe0a7e451c8341deb63e3ed6ffca9fd79aac6c8cd4e58a4c2af8acd487bea4846b7c222add7872d21ab64567800fee1b1669f631201335fbc5d1b3d9045b000055edc3bd551518216893d708a44b438e4479e33508c12fe031e8f7a1968912eb7cbe4053f5940063c2fb5770387db74dd8707a71b7671cc5abf42012a9ee638c60f59d9678b22fc536ffb953843ed6c66ab9bcf7cf5ff249a440aa726339b9a96fd3a0e3c3ed11ab910ebdc3e0eba99809fbd8bf1580f0a140924bedce7e90ee7e0d8bb9f8cbc990da15772e67d36991a25c38b77ef6d01357ccbbf6549103955a4dc82e0b1cd5e16907a4e7f488b0949934947a7b69f3956b3b62c9d357c9a3329dda4b827437c6d0efc7f5b767253c0a7b463ec9ec9064142f0b14a1c617ef9b7130a51cc2b98079337edfac68c8b777b73bd58097daa9f64ca3b9daabcc53dfce7be8dcd83b73f453023d5732ab3bb95a80845e6e427ba688518ef7425cf036ad42df97b339ab880c949081ebe5f4c051823cd12679164984abc2a2e3676e7e44c20643e48a2f2440ef1b541b9baf3e8a7db7a0f01c5217ef20038474d9c1207e72fd71a25d5a8f7b91be13b3a3b9d57edcf7c88b0a3b4a060a7e03a5667e5b444b0057dd5ab4e1c85e09f5552faa5654bba884bdca0247f12b3244a0f7a0492e321eb418cfa75915d76e9e26d734345fbd6e9b40f9c47b203ebbfbad6b330ec90adac0e1b03745e48a1eb3fa3c079d47062bf5a779c3479e6f5c4b8800a1e7513fcdfa0a6c6bcaccc6f736a0ec4031d7fa23c89bb6a8702a694aa87e88521490a5dbd5d0e5775b561ef9d4376e367e31a83df641c55d3801f573ef7a2ea945379f9d07a04cf8bae55e51599719f79ca33917c421ff63a335e11b4f266f5171e27b60b544f893cc8fec2bd191ff7ed87476e31979df4f01d71af376541bf09c0147d3ccb91285e6eff7c44fc8031e3a03b47abea0828e42861d2747259e1f7815d1d18bc8efcc36a27643fbbbf33eeed6b5036773a305a901da08f858e1909ff3ea335bb48200020044b0711b67615a0626017da66274e804883aa858d04707d443805caceb8bd239e31ea7a446752fe789205bb083f1ca90d1589c43e8bb152801fff7bf3853d8bfcdd630b41aa3fe1f09bdc4cb1ec33885c21b883935468dfa05063f9d7c1faf14115ed359122187a90b2045c96650b2be20f1519edaa1d3597d2bb22e08954d00f7addb14b639258c75698a98046028c6f9ff187086b569cd4856d97ea1799722158e8418dde709acb7fcf890edeedf6f49c7d79ee5df4c535d53bb54ecd4a3031471262190d44b1d86a5410f34b80e387eee07acb83acb7de24b2df74b0b9bd6179e132d1a5e70fb52a2f704df3851e264192663297183b1dcf9e7f1a2c746991c2f239308201a1daa8b2478079af02204c8244adc87dfcc0397a4db01f1f079c39bed4b12a5c5e4cc0b0c66e83691ddb7e7c30d23a1b97ae7e0fdb56564ba2999c7aecced3e0fd1d185bdc1c27f4404f11177275563d1303dbdd6947277d90ff461425f6e6aa64a69a1463861f83fedd00d0c3f8c21eb9184cc02f501ab353cdcd3ec8da677e8da8472d22bf14f34bd5c4335dcb59d8a645a7074f604cf2defbd2fa005b0b88d64f010f1902612a3006dbd0c0c6af178ae888dcddd074845fd691dfe45d56311f491549581b225d6997703eb55cbd60beabb8d468d07ef9e6d8ad78521a455dd0595a66c2d5bef407cf266c4837e8b41ec5b08e7f097abc73e0e36ab26e101e5f994f672c741a49e608d93843e84a42162f0774436fded89e7e753902869178a9346c237266943780da10ac18b6a8abb97b558d4fb331fd90820b2a3b64b11776e7d4f53a1bb0f6695319120905d8d32f9042c3a40c2c47f89b4622cde88af69f732bb6438085a7c614a9cb913a7753feacbc54e32c33431230c78b252b4bc0874b1e07d85e7cb3b07957916d448bba0e9d97c320a7fca0e01948cf7507fb3bd94221e3b92ba3c55f00a4569d64c3eb3936a2fae6db0d527b55e40171f2df19b84cfcd57332eba0765eebabbd9e6a9bc8e1f43829d170025cd465318a28ef062815445264aee30b5976da2480cd70d23255b6f240ea6f211560b767ea16b8738f8e85398d4df771b1005e5d590062d55434d504b5e9be5a8b3d2b3b41413cfc2a808318679ef0b2607d6ef00496234956cdf74ba8332051a8facb438dceada860d3aad5cb33385023d224715cc28cec354686541f66902a883c4552528b078aadc8528a442dab2e68451d9ad0966687c6d8fd696652af8d43ffd37e7ccb96d5a0bf6d72c37685512e90bd085d5f46d36ef55af96e2eaa1f5d5ce44460413578d716f963df48ac4ce00130bb44db351e4fb52f8b2ae0a944c49514da5d740f3891c34b0681066f0c2f7c26a80a44018832051d2c358df63f6e339da476150cf834100f26e73ed4bbd82107c2fcd401955bcf1c83c2a1a1b1f72c60da8f9c5647113364cff4a204af27f131883e993e436c186b5319f1d2475842d032baaf41722e697e2d1fe83717e1fb6be097fea1fba7d354ebf8d688d78b0df5c11a49f3f3a2a134ba1157372820cf67138b7672bc6e115219df45ffbc31074cd6ef7ce0ec8574bda2c839a086335164894a9ccd2da9b53c95ea12f6499ced7e2011720f0fcc32fc6fd00a8a206754abec3525674040f63cad36056425d329cae87d1e76cdcb43fa95151f250362666eed4a3924551919da9d6ffb8094d836340ea3cfd1d4916b6b631bb0886f696e60b604c4d7fdd55e282e22c549814ce6f75bd3460488d3500ce58aa241a6a8c5d50af901df1b85dbd32fced3dfc4d510f08ccaf81fdae78db2d5bf7676f0b2ab72fe3f43878f7dc43e4bab02047ff51c02b37b1db2f68068fdee95f59248a633ee9dd1153b0a54129197fe8fea93fc473ce6097704da00fc25c99adbd1e24e5532868e8b1c2649699385a480785c88d837513a33ea024af35adf57c6c7a0bc8f5495d7424235116a79739c86842bb35e9ca5da7798f7ae3ccd9434dad566b70bed82c644cb65ddb37e94a2f06c332b32a829aad2ddc813ebcc07e07e5587f7f7ab27bafa0aac1441a809fba549bd3fa7b8c16851c3d22d7ba41ebb1b19f8e9f5d114950a5798ad8ed4d1b5bb4ddc6f3cecdd719baa78ad32d0fb94b8156811f9ef54ab2a29738e2e596b1424b19ef39d0a354c3e8aa6227f4fb2787b10cfc615dc356800066f800718edb658bb3b85d775c0724e7c2942c8cacf420a0e23fc2bc40d078ca5f4fb9d95236c8c35008c43e864b2ee0d7f2a634978c6c34bc2b5040a29ca1b1c60a92d7ff86b3c9dd90ebf3fb212d4c23d69be399837b92fa04dca5075ea7877561ab64664d12a1e1ff39cc20f4518b460ae9f87995bd3ae66272f3f24a47c6340cb0318b67acdb26064bcccf7ccba386e07127d9ffbda288cf2924623902d9f4be97605ab5dd02a969f44de8a94abd68020c1f47033ac2b7d0e9431035e358f7d876a119e31b154b6e66815f286a41a23cba9fea4dc4febb5210b291202e8dbeb6ee9e006f108ddf891ece25c7311e7f4c788c37e8a39382405627a547e609393cffd1cbfadf90ff9060a14700539d497dafb6a249e4ec814a9e68d7a954a3c51776af6fd839b9b4b1af37797431c15794508731fd5be32edc6514ee16681f9934b0d83185ca69820d3a590d511e9f5f3ee5bf33f6ed22d507481bd7f05aa644ff19809d49a3c2924cc408ddb839d6f07cf0894ec6a6372c453d23aa324802308833027861946679abd540548abb956743cf0ccb3925caff0c597334b72e8d081c7aa9822207426b16539e370678a2fda3f34555d721570e725e3eab5cce6e0f7faaa3580f6c7d7eedbab4a0b7af72d3daa450e467917181bb2c3eaec374209f7e74a4e9195487316e7c934d3f4d0a0ffd73ae1c0855690d5f03d04ad567dcdfc366f92bf13c3e667dbce23e2b64232c11f641bd7cac7f1f9eee72eb98a5cc28226afcd1fefec1b275186c48f063fc2e99448569bb5a903ad450a5812b17c8fa3a7ae639734974d368ad0968b2ff1381c128ab00b837d765e36bfdaf8d5284975faf739b9882a0db327ea522fbd71c3a708cc674bee98602540804d856829826a95543c0168af63ff084c46ed81320f5d6bcca8fe5955091caeb78ddf53b819ff91bce937e02025beaff559462045263a3ff132dfdb5024747bb5afcdf8dee04a8085a9268790256483e7f33fde71478f8772339154952dff0e1acffe87ee37f830c30b89042b778cc87fbbb7967fb0110a54ea4a7bbdc575a93dfcd4f1841c9a75dce63f90afed202aceb7a9593d0deece3adfd66b4f40f50c0cc1822835bfba2b20f25d991f8ed85204e9b56da4709e3c1544a96fcb914c327aa8d6e7e22b21c3745f579483a1959a2766cb34a961572c6b1cedc06cbb4299053514fbb384f8192f4a5e0483667c685b3fd032a9c01471651bd7f8503eb7a9b564f779f9d33b120fb9eae779e37b28c82790917da2d763186401bf9b9d3a50572dbd7f7ac54a5afed50594e175ecb23f9c9fb949bbf84b94ec580a1d70aa405d645ee0848517d239d5dd0c0474e0b50991236b57d6af5325621399fa647946be8b27bff179dabfbf084cd7bc3fdb5313636ba7ee5264e90d76add5b41c3d23fbcb2e9066f187bba2770abea27f2aaf8cbe545f216e5bdecb3a584511970314058474803a24f88903bbd69e333e2c9046183c7945736a0f39676b64b12b319c3ce11107679c67d87ab6e9e1d2d28905674e9da798e2026cb544d4ae356991d29ed4bd38f2a5a7c6cf2a30b1b6d48700cce7eb573e84a46c25070525f67d45538704ca3cf53be6c44e84fbb40387803e6db47b373cd36783689b7f93eb27287570dae90d21214a85d6bfa898fcc2181af6e25daea786d7d50afa58731b4fac9c9d2861c802cfa6ef854e747217c0a894a28d21d0a43b9de43985c4756c29b561029ef95cfdc27bf38f26dac2fdf97cc58d9c1c59bf4ee59768ad51a1d0d8de92d0e2c723b1ddf411d23566ce0b72cc227d41fb63b6a13188fe72525ad316fae05f5aa7233f7bfed187f1b1f87a861afb173552f5d7c9bc7acc95107bbc323c376044a01ab13da42d1ab27b86dc3de3b157e47790b78896bcb2c532a7b7487bb6f24c4021c42357df52e4d5848b5584609a482dea46d173d2a695958002abd093c25f002116f8afc55e729024a4dedf5a4d3c626ebd9367fc18e7e4c7554fba0ad7349c5d526ea6dbd2c03ff33580b15fec3c1f827e885db592b47015544f6b1d400bde1133afa0071f68feebd987a807cc6d5b1b8827410c0b6d46c4b0cf6a5df999f71ba3ef4d9dae246d3e58e7428d98a33076ffc525946780d0100000000000000b872f0999d47c6e424317bd8b0e2f70ac10dfaa19990e2a3f744ea5b32996dc228ff8de836b5ecb7e56cfb3dbf48172b5ff09eecf14439b8bbc5cf3ccc9863ef5547fa2896b73196cdcab97954f9acbec8e7d2626b1a3b8983fa31961ef8c8684ee824f343933cd73d516e1f8086556ab718010022319ab39f72b9e7989e50ec8681f3f6a778e7d23c8be2f4c26bc0ed855947107e93cc9e7515fe67b0c3b6e43d9fb157be2b2f2d9c799de55214974ec254f54cb6c20a76e656cd753502499750238164f1cefc37636e9eb4038053b631c95d040050e248ef5692eeb3f0c86aa50476eeb8f80f7115a4c410dd80264c123ff0b62b6291db85865816cc36871b061984a4afc440029c338684330a640e9b31e06eea4ded4e15d92c44a28368138aed08699aee772ac5734e74a65a6b8acd6cb86b2bcf12330ea808524ee838adfa3c185d24e3b2e5e89a5c9b95a659298a4935549e218d4bb4da58a2a663251ffae5c6137f8e70a86a3a26f4bdf2187fa4b9fb3c822ab961846fc01d247530c89daed7ef18a14cba3b47d369980cf48049021cbaa271caee8e00aea56ac7b5c29899348ae129ba840c39f33a7c2f0b2fefb5291d23ea7e5aa91101585576d9996a05897341e41063bf9cae137ed985283bbe3abe8e5a2754378e2ca7f1287056c8a05459d6a47ae4933c43879287b7ee557f3af6b047775ce76aa064be50caec22382a5e735765910fdd926d148ff77f42ee9f60fedb0c4158e02a385934c84521d52be0e0e0dddb0bae54acc1685919cc0d62192950c2e476d169f3533ff9dd440c6092450e15e5199d1d302bd81c3f1df78e71a39df0194beb1ff8dac956129b7be3d39b6505b17d2fb309859d6de62cf58760a4623267ec5496588d2ab5407e31a132f26fe29ece80ad80653ca190b83c9ac8345259087f0a84a001fbfb49c7442ab371d30897b94779039f17857ea96afb9fa41db33d7f3dcf123244975a1714a96db05fc1bcac173081dfaae090b16c05aca4dc98afd5798347b2cfc60ba92eb5e237752d64df1982ef13b116f6b010b0d2eca243f0f991a3f34a486bf58e06d6f922e07413d5844ff279559f8c401785e0207ece4ce7dc53c7705e2647a3c352902efb136fb0f6952eb8acebf90e7e56e831c2280300000000000000ff1d43fc1a1139c2d7893ae246747a8c0c1c34c28cf5d6ea9b6c71b3e966b3f32259a19c3e35e4a08d4dd27052033fd7f1437ce9cd2088b31b8ba974558dedb1f8d4355e224e1b8df8da3bc93cb3f9b582ac379dcd0104a3f146d6d3fb699de99cccd099beabe63841a2dba61a465b258692fd98c9d4ff1fbc7212ea2066c5367f64707e7b2e14c51d78a5328d044ac33b1313502b986ac0462c6c3455f60f727e3e895b1e4df196d4f7a9e21c53a6500f0dc6e957530164bc648ebfedb6c973ae8fe49a92fca7274f29edcb202356775baab723f9e3a03a1d24d6dda56853ef0a91ca8bc7c530e28ee896efd1a1f5866206dd82e0eb554f4afedd9e87562903b49963d72d8caca7bb0975252f8f5578287e583aac618995a941299fa0973e67ae44469336e45b68f978fedfc8785e333610f8029b194226f86e770ac987cb84f9c76e5ccaaefe64bfcadf5635bee6077e05364e8872100003c9442e1c7cadd6f98e0dc9e2db17eabc8e6307ffd485dd06935a423d5c9cff832cc1d481e49d6dc00176d0342fdab19cec251b6fbed3ab6374ecd022de617cb2720ffebfb8b98b426cb445439b7b088fc7d9ed9a91989f2bbad8519070a6f916df7c49e3184fef1753387a5a2b5b991e04de915e053c471d198b843fb0afe5a68cf8fffe65bab08f6f5425d458a55de6355558bc5049e3a176977630a45de0b7076cdda2a167003090bbbfba5618ba2f6481cdb1386d1fb3c44a35c4d0cf9ca14dad697078fa4a062e55515c8cd69c6b2e911b19f637cba7c6ca26b3b4b2a74fd5cbc64f269fa5d6f9628830962db2d7ee04a6c37673c593771e568e8dd6cb965e67e6f4be91e625c1015160c234e8893eac8ba39708b9f32e519abfb9c5b2562e424d6eb2c8a737a830997821fc294c559d14d7c0bc8fb03ceb44f1bce3f63c46607ba95d70cb8098d30e1e3e6c5957ed3b4bb1b96d3c3879098247483e6c4f669bd556387b346bfc5497fd76a8e89bf185968f3e3dd58214ec024f5a4a180b31eefef8233bbcac8d9706b35476cd5d4cbe86034928f5c4a3c07fbd3e19ec89536aaa4fcbc2c7212ad2b5c3213a32d760e9883149f1770ef77a1313bcbbd41ebe246e847aac1baf975fdd326bf81fc68e19ce8cc7f056f5be524f35fdc7f4c0420c36846ce5415c725291ebe4964090e5c59d6844ad02acb37c437486e677b0b48c8bfced79275ff64f4be33b3492d40b8496754a36b9657efbaeb2e958de29b2de4c2346de000039c2877e1a21bf2b550d0ac6cce5feb72faaccb3ba47f498c460669ca345b5561f99b5f2f020a2c01b9d95399064eed1b7e75b802f3e70239b1c58c75f9067ca4543ec5d5e32fbfbb36d9ba9db1682c7c63e91f399752c155dc5077a2dacfdd6f9e52031290be704314d5ebdcccf9f30985dbae514d0283f6c4b7e3ebdd46b6279e8031b3847a8b46240053ce76bee81fa7b62266a1b501153aacda0803809cb4671d53f6e55dad8fd508373c1c2c9353a1c9f8de2509eacbe8e1733477880c549e327a8db5aae29169ac886cd5086b7f4e8823549c44e48fcc3683fd045dd93677336998c4016dc31823ec36a0d2ceca92c131cb3d8d5e08275f40f70943de8bbcf583a8985c30dbacef8425aaca57dc860753c31c17194f71c5d316572bcf81ab8db62e06c1ee39c6a24dd0f68d82c75762842c9bbb70127029154cb768aafd308471eb518c8aecf27c0efd01883961ce002a6231189293d00dc4d71824d2af860b7b3efc3c282b2719dc737bc5c3ac23dd7dd1420472d64acf6bb2d97503804a67cf9516e28167ab8fd38acf90ce56cfb304b59a5960f4f38963db71bd7ead69178d8ce52b74297ea3a0cdd55bb1eb849c02f8a87610bc7fc48a7af7d6e56cc41cff303afadeb6b4592605c3c3c2385c9a165c1c7e30194c0e994499472b08aaaaca3707b9baf3185f5b1314853d50d7b86f255615fd4009f07b87085bcc44c865f7e14d29e64f95001bc00c68afc3a0a0555027d460519f15264289c0918cf594b5ad37252575a9484a1de681f70745d2c6248581cd3702767115637c7cf7bc15a63775b90c285be77db8b85dc08ab81bb307694417a8d1c4aa1ed8716bc58a35e1dc8e23cde3748c6a93370397dd5c41371fbe45b86e3180e410dec137bd47730c7fdb7e062cafae686201b69071f6027ac38c191c333d27f5cc814c4522859598e7e54a04a7deae272533ae39e296785124efb6714089e6567b8db2cb403d87bea3a718b925825b914764ead06b48727e4c42bee1a36e9844f35c79fb50c89e4d9ad6a7b464299fcd10037166c2cecd017bfc184ef59fe2575e93a139a47e2baf5482f3a5d248413c87a39baf7e1eb1441ceb37f5df211844834808cd4df62b2e0b0b0a75da0e27720b5ae54fe00518e951e21ba4e1bc2d454e7bbfb86e3aaf7b9a25e354e56aeebd11e832471fc8edd0d3b4d3c123779cee870c86d97d703bc44b639a2fc49855fa54e9304de1dcedf90df397733fa94792c1bf0685335b027f3de1ac8f7f007f61ea9e51988f1fcbaf982b5b808645c4eb2fcaaca3c10667eddc4007061eaf3c250744baae0332bff7c9f077ede4b593853f4a165dcfee11b75d5107d1a86a6669c231415eef1dbb58f0b829ef03f4ee0e6acc787b1ad31807852ec4269d23322304842ac0cb13cd53e7e4479cb7fd9d7b4ecd722ecfea4c59f69760323d9930b03cba558cbe30711447ca93a01596d2bc245e9908738b1de17f07c9eeaa28472e08570a3129e81c874a894b23b1d8a77c1b4275fdea8adf5ff10bad0ebd41073059c3a900801699d4c1b023336ed5d675b57db4770f85b0cf1e0dab135633936ceaffbc4a8a1dd58bec1fd3fbcee9be9874158abd4376928b2023191d2c87f3657943a60dcb16212704cfbee381e58194c5671b594494c60325512773dc7dc38da37d8b275becb97f472067bfd7d3594afd78a0803839248c75fdce6b62711026cc32e1e3aa01152175a3096603394e773883790e96622a2b347ebe569eb26d4010115cfa611d4deb83ae4b0753b528fea440c95d5650acb53931f8ef6b6614b2aefd0754c5484b6139ad18a0cc23efbc3def8595ca45ef24cb6083c93261381a111f2ef450f5f95a343de96d4d426d3a7a72526b09b825a75df24dbf4d51a5b77f8cb948bcb78c4b4c09da92aeaf9855d40b0d5d8eabc5fe57c555f58ba0125e29512d2295b0c9ddba45f37a346e7826a4e3bcfa40a54be096f695adf9e66bc9f369556ac26c6fe46d4bd80ac949cd31e1390c14387a81cb5cf814944e60a2937", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x90, 0x0, 0xe81, {0x100006, 0x7, 0x80002, 0x0, 0x8081, 0x3, {0x101, 0x7, 0x80000000000, 0x80000000004, 0x400000000000, 0x4000000000006, 0x0, 0xfffffff8, 0x5, 0x4000, 0x4000000, r2, r3, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

2.170757888s ago: executing program 3 (id=612):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6eb, &(0x7f0000000dc0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x0, 0xffffffffffffffff, 0x40000004}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)

2.07621121s ago: executing program 6 (id=613):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
ftruncate(r2, 0xee72)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19)

1.53565939s ago: executing program 6 (id=614):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0xa10082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2c1, &(0x7f0000000c00)="$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")
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

1.400191373s ago: executing program 4 (id=615):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c)
listen(r1, 0x1000)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x1fe, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

1.084104459s ago: executing program 6 (id=616):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

943.402781ms ago: executing program 4 (id=617):
tkill(0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068)

192.176976ms ago: executing program 2 (id=618):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r1, 0x25, &(0x7f00000000c0))
close(r0)

25.870839ms ago: executing program 6 (id=619):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101c80a, &(0x7f0000000040)=ANY=[], 0x1, 0x551c, &(0x7f000000cf00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4012011, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))

0s ago: executing program 3 (id=620):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x1087, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000002c0)={0x400002})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts.
[   81.007066][ T5774] cgroup: Unknown subsys name 'net'
[   81.172544][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.911462][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.000911][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.016802][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.025151][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.034558][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.055080][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.083574][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.091788][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.103227][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.113936][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.126007][   T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.136749][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.146195][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.156071][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.166100][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.175321][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.185242][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.194195][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   85.194271][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.202501][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.217821][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.227059][   T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   85.237554][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.240017][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.245223][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.702825][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   85.836356][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   85.957832][ T5794] chnl_net:caif_netlink_parms(): no params data found
[   85.993991][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.001250][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.016706][ T5784] bridge_slave_0: entered allmulticast mode
[   86.025398][ T5784] bridge_slave_0: entered promiscuous mode
[   86.058032][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.066244][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.074827][ T5784] bridge_slave_1: entered allmulticast mode
[   86.082147][ T5784] bridge_slave_1: entered promiscuous mode
[   86.141949][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.149761][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.158007][ T5788] bridge_slave_0: entered allmulticast mode
[   86.165406][ T5788] bridge_slave_0: entered promiscuous mode
[   86.173974][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.181422][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.188976][ T5788] bridge_slave_1: entered allmulticast mode
[   86.196952][ T5788] bridge_slave_1: entered promiscuous mode
[   86.204187][ T5791] chnl_net:caif_netlink_parms(): no params data found
[   86.271529][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.324739][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.337409][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.347596][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.355356][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.363047][ T5794] bridge_slave_0: entered allmulticast mode
[   86.370401][ T5794] bridge_slave_0: entered promiscuous mode
[   86.426216][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.440730][ T5784] team0: Port device team_slave_0 added
[   86.451314][ T5784] team0: Port device team_slave_1 added
[   86.458113][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.466461][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.474405][ T5794] bridge_slave_1: entered allmulticast mode
[   86.481892][ T5794] bridge_slave_1: entered promiscuous mode
[   86.574412][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.581630][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.609339][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.661367][ T5788] team0: Port device team_slave_0 added
[   86.671092][ T5788] team0: Port device team_slave_1 added
[   86.687538][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.694966][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.722077][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.736450][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.749188][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.759076][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.766818][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.774759][ T5791] bridge_slave_0: entered allmulticast mode
[   86.782423][ T5791] bridge_slave_0: entered promiscuous mode
[   86.791110][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.798667][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.805970][ T5791] bridge_slave_1: entered allmulticast mode
[   86.813718][ T5791] bridge_slave_1: entered promiscuous mode
[   86.923882][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.931335][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.959184][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.973620][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.980976][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.007711][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.034361][ T5794] team0: Port device team_slave_0 added
[   87.044227][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.057402][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.091329][ T5784] hsr_slave_0: entered promiscuous mode
[   87.101318][ T5784] hsr_slave_1: entered promiscuous mode
[   87.110769][ T5794] team0: Port device team_slave_1 added
[   87.150101][ T5791] team0: Port device team_slave_0 added
[   87.187549][ T5791] team0: Port device team_slave_1 added
[   87.209962][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.218520][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.235236][ T5101] Bluetooth: hci0: command tx timeout
[   87.246764][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.312881][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.320792][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.323170][ T5790] Bluetooth: hci3: command tx timeout
[   87.349576][ T5795] Bluetooth: hci1: command tx timeout
[   87.360546][ T5101] Bluetooth: hci2: command tx timeout
[   87.371316][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.399023][ T5788] hsr_slave_0: entered promiscuous mode
[   87.424056][ T5788] hsr_slave_1: entered promiscuous mode
[   87.453407][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.461637][ T5788] Cannot create hsr debugfs directory
[   87.491206][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.504533][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.532413][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.546908][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.554599][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.581751][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.667680][ T5794] hsr_slave_0: entered promiscuous mode
[   87.679125][ T5794] hsr_slave_1: entered promiscuous mode
[   87.687009][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.700464][ T5794] Cannot create hsr debugfs directory
[   87.853124][ T5791] hsr_slave_0: entered promiscuous mode
[   87.862805][ T5791] hsr_slave_1: entered promiscuous mode
[   87.871091][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.880023][ T5791] Cannot create hsr debugfs directory
[   88.249078][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.273605][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.286315][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.298497][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.364074][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.390382][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.401902][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.415519][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.530102][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.542884][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.586324][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.615201][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.666785][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.679147][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.690607][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.702650][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.794609][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.821994][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.885868][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   88.931475][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.939102][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.956269][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[   88.970060][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.977680][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.007156][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.030503][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.037718][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.047721][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.055081][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.179575][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.200115][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   89.217141][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.237675][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.244925][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.267800][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.275605][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.313847][ T5101] Bluetooth: hci0: command tx timeout
[   89.377559][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[   89.394011][ T5101] Bluetooth: hci2: command tx timeout
[   89.399712][ T5101] Bluetooth: hci3: command tx timeout
[   89.406854][ T5790] Bluetooth: hci1: command tx timeout
[   89.461423][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.469228][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.500588][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.507897][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.791774][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.857715][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.979551][ T5788] veth0_vlan: entered promiscuous mode
[   90.052249][ T5794] veth0_vlan: entered promiscuous mode
[   90.069418][ T5788] veth1_vlan: entered promiscuous mode
[   90.118911][ T5794] veth1_vlan: entered promiscuous mode
[   90.139636][ T5788] veth0_macvtap: entered promiscuous mode
[   90.159918][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.175129][ T5788] veth1_macvtap: entered promiscuous mode
[   90.200395][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.241858][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.271706][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.290236][ T5794] veth0_macvtap: entered promiscuous mode
[   90.302420][ T5794] veth1_macvtap: entered promiscuous mode
[   90.321770][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.331421][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.342370][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.351758][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.398234][ T5791] veth0_vlan: entered promiscuous mode
[   90.418740][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.431113][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.447940][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.468576][ T5791] veth1_vlan: entered promiscuous mode
[   90.482628][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.495759][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.508852][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.530147][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.540826][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.550739][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.560176][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.648483][ T5784] veth0_vlan: entered promiscuous mode
[   90.690128][ T5784] veth1_vlan: entered promiscuous mode
[   90.712366][ T5791] veth0_macvtap: entered promiscuous mode
[   90.746654][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.757125][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.761953][ T5791] veth1_macvtap: entered promiscuous mode
[   90.864545][ T5784] veth0_macvtap: entered promiscuous mode
[   90.889643][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.900722][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.910652][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.923054][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.935957][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.952315][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.963554][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.971635][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.976119][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.989546][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.010066][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.025385][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.048662][ T5784] veth1_macvtap: entered promiscuous mode
[   91.062396][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.075506][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.086398][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.096224][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.115526][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.133324][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.199659][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.211240][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.221458][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.232369][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.243999][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.255095][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.267252][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.279278][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.291515][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.301744][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.314346][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.325533][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.336478][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.349515][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.359747][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.369906][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.391647][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.394449][ T5101] Bluetooth: hci0: command tx timeout
[   91.441187][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.450407][ T5873] =======================================================
[   91.450407][ T5873] WARNING: The mand mount option has been deprecated and
[   91.450407][ T5873]          and is ignored by this kernel. Remove the mand
[   91.450407][ T5873]          option from the mount to silence this warning.
[   91.450407][ T5873] =======================================================
[   91.495292][ T5101] Bluetooth: hci3: command tx timeout
[   91.500806][ T5101] Bluetooth: hci1: command tx timeout
[   91.506308][ T5790] Bluetooth: hci2: command tx timeout
[   91.512646][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.527570][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.795126][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.803210][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.928131][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.951491][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.962334][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.979377][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.074479][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.099134][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.268940][ T5883] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.354225][ T5885] syz.2.3[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   92.445562][  T787] cfg80211: failed to load regulatory.db
[   92.791265][ T5788] syz-executor (5788) used greatest stack depth: 20936 bytes left
[   92.858384][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.999398][ T5885] loop2: detected capacity change from 0 to 32768
[   93.065002][ T5885] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   93.261079][   T28] audit: type=1804 audit(1759379290.175:2): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/file1/file1" dev="loop2" ino=17059 res=1 errno=0
[   93.383962][  T967] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.474527][ T5790] Bluetooth: hci0: command tx timeout
[   93.553883][ T5790] Bluetooth: hci3: command tx timeout
[   93.560129][ T5790] Bluetooth: hci2: command tx timeout
[   93.575780][ T5784] ocfs2: Unmounting device (7,2) on (node local)
[   93.604463][  T967] usb 4-1: Using ep0 maxpacket: 8
[   93.621521][  T967] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[   93.632775][ T5905] loop1: detected capacity change from 0 to 128
[   93.644940][  T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.673571][  T967] usb 4-1: Product: syz
[   93.677921][  T967] usb 4-1: Manufacturer: syz
[   93.682746][  T967] usb 4-1: SerialNumber: syz
[   93.736093][  T967] usb 4-1: config 0 descriptor??
[   93.981767][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.007059][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.024320][  T967] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   94.035070][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.064342][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.075122][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   94.083043][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.168901][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.463607][  T967] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[   94.534699][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.540292][  T967] usb 4-1: USB disconnect, device number 2
[   94.668515][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.859604][ T5907] chnl_net:caif_netlink_parms(): no params data found
[   95.533699][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.541707][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.572730][ T5907] bridge_slave_0: entered allmulticast mode
[   95.620303][ T5907] bridge_slave_0: entered promiscuous mode
[   95.697475][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.714273][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.733996][ T5948] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET)
[   95.742499][ T5907] bridge_slave_1: entered allmulticast mode
[   95.760547][ T5907] bridge_slave_1: entered promiscuous mode
[   95.968783][ T5957] nbd1: detected capacity change from 0 to 67108884
[   95.989748][   T95] block nbd1: Send control failed (result -89)
[   96.004078][   T95] block nbd1: Request send failed, requeueing
[   96.013174][ T5790] block nbd1: Receive control failed (result -32)
[   96.025013][   T95] block nbd1: Dead connection, failed to find a fallback
[   96.032489][   T95] block nbd1: shutting down sockets
[   96.041633][   T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.053009][   T95] Buffer I/O error on dev nbd1, logical block 0, async page read
[   96.063523][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.075682][   T54] Buffer I/O error on dev nbd1, logical block 0, async page read
[   96.101575][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.115096][   T54] Buffer I/O error on dev nbd1, logical block 0, async page read
[   96.119009][ T5790] Bluetooth: hci1: command tx timeout
[   96.123841][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.139994][   T54] Buffer I/O error on dev nbd1, logical block 0, async page read
[   96.150759][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.160438][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.160473][   T54] Buffer I/O error on dev nbd1, logical block 0, async page read
[   96.160702][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.160728][   T54] Buffer I/O error on dev nbd1, logical block 0, async page read
[   96.160928][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.160955][   T54] Buffer I/O error on dev nbd1, logical block 0, async page read
[   96.161113][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.161139][   T54] Buffer I/O error on dev nbd1, logical block 0, async page read
[   96.161188][ T5957] ldm_validate_partition_table(): Disk read failed.
[   96.161359][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.161385][   T54] Buffer I/O error on dev nbd1, logical block 0, async page read
[   96.161558][   T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.161584][   T54] Buffer I/O error on dev nbd1, logical block 0, async page read
[   96.161985][ T5957] Dev nbd1: unable to read RDB block 0
[   96.300785][ T5957]  nbd1: unable to read partition table
[   96.316867][ T5957] erofs: (device nbd1): erofs_read_superblock: cannot read erofs superblock
[   96.331749][ T5876] ldm_validate_partition_table(): Disk read failed.
[   96.364346][ T5876] Dev nbd1: unable to read RDB block 0
[   96.372974][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.383725][ T5876]  nbd1: unable to read partition table
[   96.409396][ T5876] ldm_validate_partition_table(): Disk read failed.
[   96.422370][ T5876] Dev nbd1: unable to read RDB block 0
[   96.429444][ T5876]  nbd1: unable to read partition table
[   96.680447][ T5907] team0: Port device team_slave_0 added
[   96.749362][ T5907] team0: Port device team_slave_1 added
[   96.859305][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.875455][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.913206][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.004202][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.011226][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.085560][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.368126][ T5975] wireguard0: entered promiscuous mode
[   97.383752][ T5975] wireguard0: entered allmulticast mode
[   97.728379][ T5985] mmap: syz.2.32 (5985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   97.937063][ T5907] hsr_slave_0: entered promiscuous mode
[   97.971333][ T5907] hsr_slave_1: entered promiscuous mode
[   97.992975][ T5907] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.013754][ T5907] Cannot create hsr debugfs directory
[   98.196860][ T5790] Bluetooth: hci1: command tx timeout
[   98.640422][   T12] hsr_slave_0: left promiscuous mode
[   98.673435][   T12] hsr_slave_1: left promiscuous mode
[   98.711011][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.733200][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.757245][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.773475][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.787590][   T12] bridge_slave_1: left allmulticast mode
[   98.794007][   T12] bridge_slave_1: left promiscuous mode
[   98.812276][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.862372][   T12] bridge_slave_0: left allmulticast mode
[   98.884447][   T12] bridge_slave_0: left promiscuous mode
[   98.890335][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.983150][   T12] veth1_macvtap: left promiscuous mode
[   98.990067][   T12] veth0_macvtap: left promiscuous mode
[   99.003705][   T12] veth1_vlan: left promiscuous mode
[   99.018814][   T12] veth0_vlan: left promiscuous mode
[   99.494229][ T6021] overlayfs: upper fs does not support file handles, falling back to index=off.
[   99.590445][ T5990] loop3: detected capacity change from 0 to 65536
[   99.659822][ T5990] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   99.810159][ T5990] XFS (loop3): Ending clean mount
[   99.896837][ T5990] XFS (loop3): Quotacheck needed: Please wait.
[   99.997111][ T5990] XFS (loop3): Quotacheck: Done.
[  100.283795][ T5790] Bluetooth: hci1: command tx timeout
[  100.591715][  T787] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  100.687754][   T12] team0 (unregistering): Port device team_slave_1 removed
[  100.758692][   T12] team0 (unregistering): Port device team_slave_0 removed
[  100.831698][  T787] usb 4-1: config 0 has no interfaces?
[  100.839794][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.846822][  T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  100.865945][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.876524][  T787] usb 4-1: Product: syz
[  100.881392][  T787] usb 4-1: Manufacturer: syz
[  100.887630][  T787] usb 4-1: SerialNumber: syz
[  100.911115][  T787] usb 4-1: config 0 descriptor??
[  100.988930][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.624170][  T787] usb 4-1: USB disconnect, device number 3
[  101.705518][   T12] bond0 (unregistering): Released all slaves
[  101.840929][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'.
[  102.268217][ T5791] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  102.353514][ T5790] Bluetooth: hci1: command tx timeout
[  102.515837][ T5907] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.639602][ T5907] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.690375][ T5907] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.724704][ T5907] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  103.346495][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.450564][ T5907] 8021q: adding VLAN 0 to HW filter on device team0
[  103.465745][ T6079] loop3: detected capacity change from 0 to 128
[  103.493777][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.501614][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.507706][ T6079] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  103.579057][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.587172][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.626643][ T6079] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  103.966860][ T6079] loop3: detected capacity change from 128 to 0
[  104.002252][ T6087] syz.3.50: attempt to access beyond end of device
[  104.002252][ T6087] loop3: rw=2049, sector=34, nr_sectors = 1 limit=0
[  104.081895][ T6087] buffer_io_error: 40 callbacks suppressed
[  104.081914][ T6087] Buffer I/O error on dev loop3, logical block 34, lost sync page write
[  104.124693][ T6087] syz.3.50: attempt to access beyond end of device
[  104.124693][ T6087] loop3: rw=0, sector=34, nr_sectors = 1 limit=0
[  104.183865][ T6087] FAT-fs (loop3): unable to read inode block for updating (i_pos 546)
[  104.233614][ T6087] syz.3.50: attempt to access beyond end of device
[  104.233614][ T6087] loop3: rw=0, sector=34, nr_sectors = 1 limit=0
[  104.263470][ T6087] FAT-fs (loop3): unable to read inode block for updating (i_pos 554)
[  104.330349][ T6087] FAT-fs (loop3): error, vfat_rename_exchange: Filesystem corrupted (i_pos 554, 546)
[  104.373923][ T6087] FAT-fs (loop3): Filesystem has been set read-only
[  104.503094][ T5791] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  104.592636][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.667632][ T5907] veth0_vlan: entered promiscuous mode
[  105.724125][ T5907] veth1_vlan: entered promiscuous mode
[  105.792865][ T6129] loop1: detected capacity change from 0 to 4096
[  105.889397][ T5907] veth0_macvtap: entered promiscuous mode
[  105.968774][ T5907] veth1_macvtap: entered promiscuous mode
[  106.086874][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.140096][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.176890][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.195431][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.207118][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.218241][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.231729][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.245053][ T6129] EXT4-fs (loop1): Test dummy encryption mode enabled
[  106.262611][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.280401][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.329451][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.330004][ T6129] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0003]
[  106.347606][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.359705][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.371628][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.386866][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.398872][ T6129] System zones: 0-5
[  106.408367][ T5907] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.421588][ T5907] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.431350][ T5907] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.443042][ T5907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.465789][ T6129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.877205][ T1298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.917719][ T1298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.030618][ T6129] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  107.057794][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.080825][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.454258][ T6129] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  107.483088][ T6168] could not allocate digest TFM handle cryptd(blake2b-160)
[  107.584341][    T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  107.675897][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.802187][    T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  107.812716][    T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  107.852162][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  107.874091][    T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  107.922303][    T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  107.983902][    T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  108.013207][    T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  108.015639][ T6191] loop1: detected capacity change from 0 to 8
[  108.027608][    T8] usb 4-1: Product: syz
[  108.042733][    T8] usb 4-1: Manufacturer: syz
[  108.091704][    T8] cdc_wdm 4-1:1.0: skipping garbage
[  108.121914][    T8] cdc_wdm 4-1:1.0: skipping garbage
[  108.195364][    T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  108.232970][    T8] cdc_wdm 4-1:1.0: Unknown control protocol
[  108.477364][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  108.484627][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  108.492512][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  108.499988][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  108.506995][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  108.514198][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  108.521504][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  108.529100][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  108.537177][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  108.545914][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  108.555595][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  108.563611][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  108.571108][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  108.578941][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  108.586210][ T5776] usb 4-1: USB disconnect, device number 4
[  108.593526][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  108.600676][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  108.607798][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  109.703613][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'.
[  109.724310][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'.
[  109.877032][ T6225] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.78'.
[  109.929119][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.79'.
[  110.335691][ T6233] Illegal XDP return value 1499803689 on prog  (id 22) dev N/A, expect packet loss!
[  110.643588][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.856829][ T6250] loop2: detected capacity change from 0 to 128

syzkaller
syzkaller login: [  110.914652][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'.
[  111.080729][ T6250] syz.2.86: attempt to access beyond end of device
[  111.080729][ T6250] loop2: rw=2049, sector=145, nr_sectors = 352 limit=128
[  111.182855][ T6250] syz.2.86: attempt to access beyond end of device
[  111.182855][ T6250] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128
[  111.276408][ T6250] syz.2.86: attempt to access beyond end of device
[  111.276408][ T6250] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[  111.323161][ T6250] syz.2.86: attempt to access beyond end of device
[  111.323161][ T6250] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[  111.345160][ T6250] syz.2.86: attempt to access beyond end of device
[  111.345160][ T6250] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[  111.374777][ T6250] syz.2.86: attempt to access beyond end of device
[  111.374777][ T6250] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[  111.393103][ T6250] syz.2.86: attempt to access beyond end of device
[  111.393103][ T6250] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[  111.411689][ T6250] syz.2.86: attempt to access beyond end of device
[  111.411689][ T6250] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[  111.479668][ T6250] syz.2.86: attempt to access beyond end of device
[  111.479668][ T6250] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[  111.499283][ T6250] syz.2.86: attempt to access beyond end of device
[  111.499283][ T6250] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[  111.940470][ T6274] VFS: Lookup of 'file0' in fuse fuse would have caused loop
[  112.275746][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'.
[  112.307656][ T6286] binder: 6285:6286 ioctl 4018620d 0 returned -22
[  112.365475][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'.
[  112.388553][ T6290] binder: 6285:6290 ioctl c018620c 0 returned -14
[  112.410437][   T28] audit: type=1326 audit(1759379309.325:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.94" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe08898eec9 code=0x0
[  112.467352][ T6293] binder: 6285:6293 ioctl c0306201 0 returned -14
[  113.254175][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  114.024472][   T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  114.135607][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.256688][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.270811][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.282241][   T27] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  114.292309][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.324629][   T27] usb 4-1: config 0 descriptor??
[  115.592176][   T27] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input5
[  115.630337][ T6334] loop2: detected capacity change from 0 to 512
[  115.758052][ T6336] netlink: 136 bytes leftover after parsing attributes in process `syz.1.104'.
[  115.789757][ T6334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.830602][   T27] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[  115.846410][ T6334] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.923949][   T27] usb 4-1: USB disconnect, device number 5
[  116.137554][ T6334] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.103: Invalid inode table block 3684560622 in block_group 0
[  116.234067][ T6334] EXT4-fs (loop2): Remounting filesystem read-only
[  116.257733][ T6343] fido_id[6343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  116.319440][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.514131][ T6352] warning: `syz.4.109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  116.931061][ T6364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.115'.
[  118.181508][ T6393] loop3: detected capacity change from 0 to 2048
[  118.291175][ T6393] GPT:first_usable_lbas don't match.
[  118.313419][ T6393] GPT:34 != 290
[  118.326826][ T6393] GPT: Use GNU Parted to correct GPT errors.
[  118.364141][ T6393]  loop3: p1 p2 p3
[  118.582516][ T6400] loop2: detected capacity change from 0 to 4096
[  118.680324][ T6400] ntfs3: loop2: ino=3, Correct links count -> 2.
[  118.969091][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  118.987443][ T5876] udevd[5876]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  119.009286][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  119.037525][ T6412] loop4: detected capacity change from 0 to 1024
[  119.078857][ T6412] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.105625][ T6412] EXT4-fs: Ignoring removed bh option
[  119.196208][ T6412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.407809][ T6412] EXT4-fs: Ignoring removed orlov option
[  119.420403][ T6400] ntfs3: loop2: failed to convert "0080" to cp874
[  119.432970][ T6412] EXT4-fs (loop4): can't enable nombcache during remount
[  119.440931][  T787] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  119.452408][ T6400] ntfs3: loop2: failed to convert name for inode 1e.
[  119.454171][ T6424] tipc: Started in network mode
[  119.469334][ T6424] tipc: Node identity 56b869b933c3, cluster identity 4711
[  119.482324][ T6424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.502499][ T6420] tipc: Resetting bearer <eth:syzkaller0>
[  119.599730][ T6420] tipc: Disabling bearer <eth:syzkaller0>
[  119.659289][  T787] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  119.685156][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.698095][ T5907] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.718534][  T787] usb 4-1: Product: syz
[  119.723003][  T787] usb 4-1: Manufacturer: syz
[  119.731969][  T787] usb 4-1: SerialNumber: syz
[  119.774275][  T787] usb 4-1: config 0 descriptor??
[  120.024452][  T787] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  120.118795][ T6436] loop2: detected capacity change from 0 to 7
[  120.143791][ T6436]  loop2:
[  120.147151][ T6436] loop2: partition table partially beyond EOD, truncated
[  120.583147][ T6451] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  120.910914][ T6460] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  120.955079][ T6461] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.140'.
[  120.967244][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'.
[  121.440797][  T787] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  121.464889][  T787] usb 4-1: USB disconnect, device number 6
[  122.463689][  T787] IPVS: starting estimator thread 0...
[  122.524175][ T5906] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  122.581766][ T6495] IPVS: using max 19 ests per chain, 45600 per kthread
[  122.723519][ T5906] usb 5-1: Using ep0 maxpacket: 8
[  122.751578][ T5906] usb 5-1: config 0 has an invalid interface number: 246 but max is 0
[  122.777820][ T5906] usb 5-1: config 0 has no interface number 0
[  122.793388][ T5906] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  122.829264][ T5906] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  122.840041][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.853776][ T5906] usb 5-1: Product: syz
[  122.858294][ T5906] usb 5-1: Manufacturer: syz
[  122.873716][ T5906] usb 5-1: SerialNumber: syz
[  122.882845][ T5906] usb 5-1: config 0 descriptor??
[  123.085159][ T5906] msi2500 5-1:0.246: Registered as swradio24
[  123.116161][ T5906] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  123.160066][ T5906] usb 5-1: USB disconnect, device number 2
[  123.785501][ T6504] loop3: detected capacity change from 0 to 40427
[  123.830409][ T6504] F2FS-fs (loop3): invalid crc value
[  123.850170][ T6504] F2FS-fs (loop3): Found nat_bits in checkpoint
[  124.011420][ T6504] F2FS-fs (loop3): Start checkpoint disabled!
[  124.064669][ T6504] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  124.474275][   T12] bio_check_eod: 1019 callbacks suppressed
[  124.474294][   T12] kworker/u4:1: attempt to access beyond end of device
[  124.474294][   T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  124.534444][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  124.563345][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  124.863586][ T5906] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  125.074715][ T5906] usb 3-1: Using ep0 maxpacket: 32
[  125.110098][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.131581][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.147310][ T5906] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  125.173410][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.204525][ T5906] usb 3-1: config 0 descriptor??
[  125.223672][ T5906] hub 3-1:0.0: USB hub found
[  125.428508][ T5906] hub 3-1:0.0: 1 port detected
[  125.478158][ T6552] sd 0:0:1:0: PR command failed: 1026
[  125.493563][ T6552] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  125.500511][ T6552] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  126.556350][ T5906] hub 3-1:0.0: activate --> -90
[  126.766015][  T787] usb 3-1: USB disconnect, device number 2
[  126.773087][ T5906] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  126.874196][ T6570] overlayfs: failed to get inode (-116)
[  126.898771][ T6570] overlayfs: failed to get inode (-116)
[  127.192615][ T6574] loop4: detected capacity change from 0 to 4096
[  128.303014][   T28] audit: type=1800 audit(1759379325.215:4): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.178" name="file0" dev="fuse" ino=2 res=0 errno=0
[  129.066010][ T6633] input: syz0 as /devices/virtual/input/input6
[  129.361773][ T6640] loop3: detected capacity change from 0 to 1024
[  130.089914][ T6655] loop2: detected capacity change from 0 to 2048
[  130.231967][ T6655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.569022][   T42] hfsplus: bad catalog file entry
[  130.584579][   T42] hfsplus: b-tree write err: -5, ino 3
[  130.646285][ T6655] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.198: Invalid inode table block 0 in block_group 0
[  130.911446][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.263009][ T6681] loop2: detected capacity change from 0 to 128
[  131.353735][ T6681] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.463956][ T6681] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  131.755992][  T787] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  131.760956][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.242300][  T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.442994][  T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  132.513605][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.521907][  T787] usb 4-1: Product: syz
[  132.545880][  T787] usb 4-1: Manufacturer: syz
[  132.558309][  T787] usb 4-1: SerialNumber: syz
[  132.811455][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  133.073152][ T6713] loop4: detected capacity change from 0 to 128
[  133.125146][ T6713] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  133.158122][ T6713] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  133.315913][ T6713] syz.4.213 (pid 6713) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  133.398486][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  133.406984][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  133.552145][ T6713] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  133.616026][ T5907] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  133.724126][   T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  133.736533][ T6736] loop6: detected capacity change from 0 to 7
[  133.750508][ T6341]  loop6: [POWERTEC] p1 p2 p3 p4 p5
[  133.764687][ T6341] loop6: p1 start 3644185255 is beyond EOD, truncated
[  133.778017][ T6341] loop6: p2 size 1310720 extends beyond EOD, truncated
[  133.787833][ T6341] loop6: p3 start 352518144 is beyond EOD, truncated
[  133.803104][ T6341] loop6: p4 start 1635021614 is beyond EOD, truncated
[  133.812740][ T6341] loop6: p5 start 50331648 is beyond EOD, truncated
[  133.845721][  T787] cdc_ncm 4-1:1.0: failed to get mac address
[  133.865840][ T6736]  loop6: [POWERTEC] p1 p2 p3 p4 p5
[  133.871476][ T6736] loop6: p1 start 3644185255 is beyond EOD, truncated
[  133.879577][  T787] cdc_ncm 4-1:1.0: bind() failure
[  133.892735][  T787] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  133.899844][ T6736] loop6: p2 size 1310720 extends beyond EOD, truncated
[  133.908471][  T787] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  133.919684][  T787] usbtest: probe of 4-1:1.1 failed with error -71
[  133.927583][ T6736] loop6: p3 start 352518144 is beyond EOD, truncated
[  133.935939][ T6736] loop6: p4 start 1635021614 is beyond EOD, truncated
[  133.952256][   T27] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  133.963616][  T787] usb 4-1: USB disconnect, device number 7
[  133.971083][ T6736] loop6: p5 start 50331648 is beyond EOD, truncated
[  133.983563][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.992311][   T27] usb 3-1: Product: syz
[  134.004994][   T27] usb 3-1: Manufacturer: syz
[  134.024003][   T27] usb 3-1: SerialNumber: syz
[  134.078592][   T27] usb 3-1: config 0 descriptor??
[  134.098391][   T27] gspca_main: sunplus-2.14.0 probing 055f:c230
[  134.127050][ T6341] udevd[6341]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  134.195811][ T6341] udevd[6341]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  135.003439][ T5906] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  135.213375][ T5906] usb 5-1: Using ep0 maxpacket: 16
[  135.224335][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short
[  135.245295][ T5906] usb 5-1: config 96 has an invalid interface number: 210 but max is 0
[  135.261212][ T5906] usb 5-1: config 96 has no interface number 0
[  135.278545][ T5906] usb 5-1: config 96 interface 210 has no altsetting 0
[  135.299611][ T5906] usb 5-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00
[  135.316390][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.333901][ T5906] usb 5-1: Product: syz
[  135.338788][ T5906] usb 5-1: Manufacturer: syz
[  135.347679][ T5906] usb 5-1: SerialNumber: syz
[  135.580723][ T6782] loop3: detected capacity change from 0 to 512
[  135.604702][ T5906] usb-storage 5-1:96.210: USB Mass Storage device detected
[  135.665631][ T6782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  135.702795][ T5906] usb 5-1: USB disconnect, device number 3
[  135.715568][ T6782] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.747474][   T27] gspca_sunplus: reg_r err -71
[  135.761882][   T27] sunplus: probe of 3-1:0.0 failed with error -71
[  135.778393][   T27] usb 3-1: USB disconnect, device number 3
[  135.824528][ T6788] overlayfs: invalid redirect ((null))
[  136.011789][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  136.040928][ T6791] overlayfs: statfs failed on './file0'
[  136.425436][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'.
[  136.540462][ T6806] netlink: 'syz.4.230': attribute type 5 has an invalid length.
[  136.800197][ T6813] tipc: Started in network mode
[  136.808363][ T6813] tipc: Node identity ac1414aa, cluster identity 4711
[  136.826156][ T6813] tipc: Enabled bearer <udp:s>, priority 10
[  136.838675][ T6816] netlink: 'syz.3.235': attribute type 10 has an invalid length.
[  136.932028][ T6816] 8021q: adding VLAN 0 to HW filter on device team0
[  136.964198][ T6816] bond0: (slave team0): Enslaving as an active interface with an up link
[  137.861995][ T6846] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  137.935956][ T5851] tipc: Node number set to 2886997162
[  138.026185][ T6849] loop4: detected capacity change from 0 to 512
[  138.075271][ T6849] EXT4-fs error (device loop4): __ext4_fill_super:5504: inode #2: comm syz.4.248: casefold flag without casefold feature
[  138.105927][ T6849] EXT4-fs (loop4): get root inode failed
[  138.130218][ T6849] EXT4-fs (loop4): mount failed
[  138.388357][ T6863] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.252'.
[  138.452212][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'.
[  138.597044][ T6869] loop3: detected capacity change from 0 to 512
[  138.678547][ T6869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.703093][ T6869] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.797934][   T28] audit: type=1800 audit(1759379335.715:5): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.255" name="file2" dev="loop3" ino=16 res=0 errno=0
[  139.026748][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.379786][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.261'.
[  141.789754][ T6930] input: syz1 as /devices/virtual/input/input7
[  142.543404][  T967] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  142.612562][ T6945] loop4: detected capacity change from 0 to 40427
[  142.627521][ T6945] F2FS-fs (loop4): heap/no_heap options were deprecated
[  142.635963][ T6945] F2FS-fs (loop4): Image doesn't support compression
[  142.650292][ T6945] F2FS-fs (loop4): heap/no_heap options were deprecated
[  142.681542][ T6945] F2FS-fs (loop4): invalid crc value
[  142.708524][ T6945] F2FS-fs (loop4): Found nat_bits in checkpoint
[  142.743418][  T967] usb 3-1: Using ep0 maxpacket: 16
[  142.768020][  T967] usb 3-1: config 0 has no interfaces?
[  142.787542][  T967] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  142.813585][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.822108][  T967] usb 3-1: Product: syz
[  142.833448][  T967] usb 3-1: Manufacturer: syz
[  142.838474][  T967] usb 3-1: SerialNumber: syz
[  142.866486][  T967] usb 3-1: config 0 descriptor??
[  142.872807][ T6945] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  143.007866][ T6949] f2fs_ckpt-7:4: attempt to access beyond end of device
[  143.007866][ T6949] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  143.027096][ T6949] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  143.039447][ T6949] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  143.167522][ T6958] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  143.387087][ T6963] process 'syz.1.293' launched '/dev/fd/6' with NULL argv: empty string added
[  143.601055][ T6967] overlayfs: metacopy with no lower data found - abort lookup (/file2)
[  143.918045][ T6974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.298'.
[  144.253422][  T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  144.456339][  T787] usb 2-1: Using ep0 maxpacket: 16
[  144.479569][  T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.502228][  T787] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  144.525981][  T787] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  144.547345][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.574369][  T787] usb 2-1: config 0 descriptor??
[  144.597738][  T787] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  145.011912][  T787] usb 2-1: USB disconnect, device number 2
[  145.329720][  T967] usb 3-1: USB disconnect, device number 4
[  145.655973][ T6997] netlink: 'syz.1.307': attribute type 4 has an invalid length.
[  145.789792][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.308'.
[  145.800330][ T7000] netem: change failed
[  146.049013][ T7006] loop1: detected capacity change from 0 to 128
[  146.097253][ T7006] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  146.140714][ T7006] hpfs: filesystem error: improperly stopped
[  146.162270][ T7006] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  146.201263][ T7006] hpfs: You really don't want any checks? You are crazy...
[  146.240333][ T7006] hpfs: hpfs_map_sector(): read error
[  146.256054][ T7006] hpfs: code page support is disabled
[  146.284646][ T7006] hpfs: hpfs_map_4sectors(): unaligned read
[  146.299454][ T7006] hpfs: hpfs_map_4sectors(): unaligned read
[  146.308373][ T7006] hpfs: filesystem error: unable to find root dir
[  146.379013][ T7006] hpfs: hpfs_map_4sectors(): unaligned read
[  146.404461][ T7006] hpfs: hpfs_map_sector(): read error
[  146.429507][ T7006] hpfs: hpfs_map_4sectors(): unaligned read
[  146.485347][ T7006] hpfs: hpfs_map_sector(): read error
[  146.533969][ T7006] hpfs: hpfs_map_4sectors(): unaligned read
[  146.541325][ T7006] hpfs: hpfs_map_sector(): read error
[  147.011461][ T7031] loop3: detected capacity change from 0 to 512
[  147.036447][ T7031] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  147.056297][ T7031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  147.119358][ T7031] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.320: invalid indirect mapped block 83886080 (level 1)
[  147.154998][ T7031] EXT4-fs (loop3): Remounting filesystem read-only
[  147.174594][ T7031] EXT4-fs (loop3): 1 orphan inode deleted
[  147.181392][ T7031] EXT4-fs (loop3): 1 truncate cleaned up
[  147.197601][ T7031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.370174][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.517142][   T28] audit: type=1326 audit(1759379344.425:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.4.323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa06058eec9 code=0x0
[  147.981989][   T27] IPVS: starting estimator thread 0...
[  148.093400][ T7053] IPVS: using max 22 ests per chain, 52800 per kthread
[  148.202221][ T7037] loop2: detected capacity change from 0 to 32768
[  148.254658][ T7037] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.324 (7037)
[  148.362933][ T7037] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  148.404075][ T7037] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  148.433821][ T7037] BTRFS info (device loop2): using free space tree
[  148.448400][ T7059] block device autoloading is deprecated and will be removed.
[  148.754336][ T7037] BTRFS info (device loop2): enabling ssd optimizations
[  148.761399][ T7037] BTRFS info (device loop2): auto enabling async discard
[  149.211840][ T7088] loop1: detected capacity change from 0 to 256
[  149.264077][ T7088] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.313486][ T7088] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  149.365784][ T7088] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  149.524883][ T5784] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  149.554517][   T28] audit: type=1800 audit(1759379346.465:7): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.334" name="bus" dev="loop1" ino=1048600 res=0 errno=0
[  149.575631][    C1] vkms_vblank_simulate: vblank timer overrun
[  149.667075][ T7088] loop1: detected capacity change from 256 to 64
[  149.699729][ T7090] syz.1.334: attempt to access beyond end of device
[  149.699729][ T7090] loop1: rw=2049, sector=168, nr_sectors = 1 limit=64
[  149.758141][ T7090] Buffer I/O error on dev loop1, logical block 168, lost sync page write
[  149.804529][ T7090] syz.1.334: attempt to access beyond end of device
[  149.804529][ T7090] loop1: rw=0, sector=168, nr_sectors = 1 limit=64
[  149.871787][ T7091] syz.1.334: attempt to access beyond end of device
[  149.871787][ T7091] loop1: rw=524288, sector=168, nr_sectors = 1 limit=64
[  149.943433][ T7091] syz.1.334: attempt to access beyond end of device
[  149.943433][ T7091] loop1: rw=524288, sector=169, nr_sectors = 1 limit=64
[  150.050041][ T7091] syz.1.334: attempt to access beyond end of device
[  150.050041][ T7091] loop1: rw=524288, sector=170, nr_sectors = 1 limit=64
[  150.093407][ T7091] syz.1.334: attempt to access beyond end of device
[  150.093407][ T7091] loop1: rw=524288, sector=171, nr_sectors = 1 limit=64
[  150.133398][ T7091] syz.1.334: attempt to access beyond end of device
[  150.133398][ T7091] loop1: rw=524288, sector=172, nr_sectors = 1 limit=64
[  150.166683][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'.
[  150.187606][ T7091] syz.1.334: attempt to access beyond end of device
[  150.187606][ T7091] loop1: rw=524288, sector=173, nr_sectors = 1 limit=64
[  150.221325][ T7091] syz.1.334: attempt to access beyond end of device
[  150.221325][ T7091] loop1: rw=524288, sector=174, nr_sectors = 1 limit=64
[  150.287932][ T7091] syz.1.334: attempt to access beyond end of device
[  150.287932][ T7091] loop1: rw=524288, sector=175, nr_sectors = 1 limit=64
[  150.705755][ T7104] input: syz0 as /devices/virtual/input/input8
[  151.219481][ T1319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.550414][ T1319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.746499][ T1319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.852382][ T1319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.034321][  T787] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  152.224114][  T787] usb 4-1: Using ep0 maxpacket: 32
[  152.249824][  T787] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  152.272505][ T1319] tipc: Left network mode
[  152.284113][  T787] usb 4-1: config 0 has no interface number 0
[  152.290403][  T787] usb 4-1: config 0 interface 12 has no altsetting 0
[  152.326310][  T787] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  152.338277][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.363328][  T787] usb 4-1: Product: syz
[  152.374807][  T787] usb 4-1: Manufacturer: syz
[  152.379726][  T787] usb 4-1: SerialNumber: syz
[  152.446258][  T787] usb 4-1: config 0 descriptor??
[  152.597333][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.611178][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.624474][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.633870][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.644362][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  152.652330][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  154.189043][  T787] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  154.218605][  T787] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  154.226765][  T787] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  154.243460][  T787] f81534: probe of 4-1:0.12 failed with error -71
[  154.303552][  T787] usb 4-1: USB disconnect, device number 8
[  154.492162][ T7142] chnl_net:caif_netlink_parms(): no params data found
[  154.754339][ T5795] Bluetooth: hci3: command tx timeout
[  154.763469][ T1319] hsr_slave_0: left promiscuous mode
[  154.788632][ T1319] hsr_slave_1: left promiscuous mode
[  154.813796][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.821491][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.914410][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.922685][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.012378][ T1319] bridge_slave_1: left allmulticast mode
[  155.029261][ T1319] bridge_slave_1: left promiscuous mode
[  155.060297][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.120115][ T1319] bridge_slave_0: left allmulticast mode
[  155.126829][ T1319] bridge_slave_0: left promiscuous mode
[  155.133015][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.429569][ T1319] veth1_macvtap: left promiscuous mode
[  155.457244][ T1319] veth0_macvtap: left promiscuous mode
[  155.483533][ T1319] veth1_vlan: left promiscuous mode
[  155.489386][ T1319] veth0_vlan: left promiscuous mode
[  156.836077][ T5795] Bluetooth: hci3: command tx timeout
[  157.299289][ T7207] loop4: detected capacity change from 0 to 128
[  157.443216][ T7207] loop4: detected capacity change from 128 to 0
[  157.454403][ T7208] bio_check_eod: 1 callbacks suppressed
[  157.454419][ T7208] syz.4.364: attempt to access beyond end of device
[  157.454419][ T7208] loop4: rw=2049, sector=28, nr_sectors = 4 limit=0
[  157.477629][ T7208] Buffer I/O error on dev loop4, logical block 7, lost sync page write
[  157.479975][ T1319] team0 (unregistering): Port device team_slave_1 removed
[  157.493850][ T7208] syz.4.364: attempt to access beyond end of device
[  157.493850][ T7208] loop4: rw=0, sector=28, nr_sectors = 4 limit=0
[  157.568203][ T7208] FAT-fs (loop4): Directory bread(block 7) failed
[  157.628696][ T1319] team0 (unregistering): Port device team_slave_0 removed
[  157.678247][ T5907] syz-executor: attempt to access beyond end of device
[  157.678247][ T5907] loop4: rw=2049, sector=0, nr_sectors = 4 limit=0
[  157.710806][ T7210] loop3: detected capacity change from 0 to 512
[  157.717499][ T5907] Buffer I/O error on dev loop4, logical block 0, lost sync page write
[  157.755118][ T7210] EXT4-fs (loop3): Test dummy encryption mode enabled
[  157.762289][ T7210] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  157.798848][ T1319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.819146][ T7210] EXT4-fs (loop3): 1 truncate cleaned up
[  157.878958][ T7210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.038315][ T1319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.324328][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.913404][ T5795] Bluetooth: hci3: command tx timeout
[  159.355167][ T1319] bond0 (unregistering): Released all slaves
[  159.498429][ T7204] bridge0: port 3(erspan0) entered blocking state
[  159.510878][ T7204] bridge0: port 3(erspan0) entered disabled state
[  159.519837][ T7204] erspan0: entered allmulticast mode
[  159.529900][ T7204] erspan0: entered promiscuous mode
[  159.537072][ T7204] bridge0: port 3(erspan0) entered blocking state
[  159.545970][ T7204] bridge0: port 3(erspan0) entered forwarding state
[  159.580747][ T7223] syz.3.368: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  159.600476][ T7223] CPU: 1 PID: 7223 Comm: syz.3.368 Not tainted syzkaller #0
[  159.608358][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  159.618899][ T7223] Call Trace:
[  159.622240][ T7223]  <TASK>
[  159.625250][ T7223]  dump_stack_lvl+0x16c/0x230
[  159.630198][ T7223]  ? show_regs_print_info+0x20/0x20
[  159.635653][ T7223]  ? load_image+0x3b0/0x3b0
[  159.640896][ T7223]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  159.647844][ T7223]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  159.654602][ T7223]  warn_alloc+0x210/0x300
[  159.659628][ T7223]  ? zone_watermark_ok_safe+0x230/0x230
[  159.666036][ T7223]  ? _raw_spin_unlock+0x28/0x40
[  159.671158][ T7223]  __vmalloc_node_range+0x662/0x1320
[  159.676607][ T7223]  ? __asan_memset+0x22/0x40
[  159.681611][ T7223]  ? free_vm_area+0x50/0x50
[  159.687334][ T7223]  ? kvmalloc_node+0x70/0x180
[  159.692167][ T7223]  ? kvmalloc_node+0x70/0x180
[  159.697160][ T7223]  ? trace_kmalloc+0x1f/0xa0
[  159.701842][ T7223]  kvmalloc_node+0x13f/0x180
[  159.706591][ T7223]  ? xp_create_and_assign_umem+0x17c/0xc00
[  159.712549][ T7223]  xp_create_and_assign_umem+0x17c/0xc00
[  159.718593][ T7223]  ? mutex_lock_nested+0x20/0x20
[  159.723856][ T7223]  ? dev_get_by_index+0x22/0x2d0
[  159.729191][ T7223]  ? dev_get_by_index+0x22/0x2d0
[  159.734361][ T7223]  xsk_bind+0x31d/0xc70
[  159.739192][ T7223]  __sys_bind+0x31a/0x410
[  159.744450][ T7223]  ? __ia32_sys_socketpair+0xb0/0xb0
[  159.751208][ T7223]  __x64_sys_bind+0x7a/0x90
[  159.757059][ T7223]  do_syscall_64+0x55/0xb0
[  159.761672][ T7223]  ? clear_bhb_loop+0x40/0x90
[  159.767260][ T7223]  ? clear_bhb_loop+0x40/0x90
[  159.773139][ T7223]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.780443][ T7223] RIP: 0033:0x7f30dd98eec9
[  159.785286][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.806262][ T7223] RSP: 002b:00007f30de806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  159.815070][ T7223] RAX: ffffffffffffffda RBX: 00007f30ddbe6090 RCX: 00007f30dd98eec9
[  159.823437][ T7223] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003
[  159.831557][ T7223] RBP: 00007f30dda11f91 R08: 0000000000000000 R09: 0000000000000000
[  159.840339][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.848779][ T7223] R13: 00007f30ddbe6128 R14: 00007f30ddbe6090 R15: 00007ffe8e763e28
[  159.857351][ T7223]  </TASK>
[  159.875500][ T7223] Mem-Info:
[  159.882452][ T7223] active_anon:7844 inactive_anon:0 isolated_anon:0
[  159.882452][ T7223]  active_file:10825 inactive_file:40312 isolated_file:0
[  159.882452][ T7223]  unevictable:0 dirty:90 writeback:25
[  159.882452][ T7223]  slab_reclaimable:10433 slab_unreclaimable:92021
[  159.882452][ T7223]  mapped:24709 shmem:1411 pagetables:644
[  159.882452][ T7223]  sec_pagetables:0 bounce:0
[  159.882452][ T7223]  kernel_misc_reclaimable:0
[  159.882452][ T7223]  free:1343107 free_pcp:14588 free_cma:0
[  159.935551][ T7223] Node 0 active_anon:29840kB inactive_anon:0kB active_file:43300kB inactive_file:161044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98836kB dirty:160kB writeback:0kB shmem:4108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11580kB pagetables:2576kB sec_pagetables:0kB all_unreclaimable? no
[  159.972908][ T7223] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  160.016113][ T7223] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  160.045012][ T7223] lowmem_reserve[]: 0 2525 2526 2526 2526
[  160.051952][ T7223] Node 0 DMA32 free:1460500kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:29792kB inactive_anon:0kB active_file:43300kB inactive_file:159732kB unevictable:0kB writepending:156kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:38192kB local_pcp:17556kB free_cma:0kB
[  160.087574][ T7223] lowmem_reserve[]: 0 0 1 1 1
[  160.092474][ T7223] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  160.122166][ T7223] lowmem_reserve[]: 0 0 0 0 0
[  160.127148][ T7223] Node 1 Normal free:3896556kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20608kB local_pcp:9920kB free_cma:0kB
[  160.162353][ T7223] lowmem_reserve[]: 0 0 0 0 0
[  160.167544][ T7223] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  160.181447][ T7223] Node 0 DMA32: 1311*4kB (ME) 825*8kB (UME) 591*16kB (UME) 387*32kB (UME) 176*64kB (ME) 13*128kB (UME) 5*256kB (UM) 3*512kB (M) 4*1024kB (M) 3*2048kB (UME) 342*4096kB (UM) = 1460500kB
[  160.201236][ T7223] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  160.214973][ T7223] Node 1 Normal: 231*4kB (UE) 56*8kB (UME) 33*16kB (UME) 68*32kB (UME) 20*64kB (UE) 2*128kB (UM) 1*256kB (E) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3896556kB
[  160.233501][ T7223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  160.243691][ T7223] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.253589][ T7223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  160.265405][ T7223] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.275595][ T7223] 52544 total pagecache pages
[  160.280522][ T7223] 0 pages in swap cache
[  160.285205][ T7223] Free swap  = 124472kB
[  160.289566][ T7223] Total swap = 124996kB
[  160.293868][ T7223] 2097051 pages RAM
[  160.297841][ T7223] 0 pages HighMem/MovableOnly
[  160.302727][ T7223] 416137 pages reserved
[  160.307196][ T7223] 0 pages cma reserved
[  160.425770][ T7205] erspan0: left allmulticast mode
[  160.431272][ T7205] erspan0: left promiscuous mode
[  160.438796][ T7205] bridge0: port 3(erspan0) entered disabled state
[  160.536318][ T7142] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.567144][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.582859][ T7230] netlink: 'syz.4.370': attribute type 10 has an invalid length.
[  160.592135][ T7142] bridge_slave_0: entered allmulticast mode
[  160.596603][ T7142] bridge_slave_0: entered promiscuous mode
[  160.605078][ T7230] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.370'.
[  160.657013][ T7142] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.683014][ T7230] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  160.701033][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.733659][ T7142] bridge_slave_1: entered allmulticast mode
[  160.754762][ T7142] bridge_slave_1: entered promiscuous mode
[  160.993912][ T5795] Bluetooth: hci3: command tx timeout
[  161.101994][ T7142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.118172][ T7241] loop4: detected capacity change from 0 to 1024
[  161.131917][ T7142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.319020][ T7142] team0: Port device team_slave_0 added
[  161.358238][ T7142] team0: Port device team_slave_1 added
[  161.591212][   T48] hfsplus: b-tree write err: -5, ino 3
[  161.669197][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.743367][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.847050][ T7142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.932554][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.965151][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.093854][ T7142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.281618][ T7142] hsr_slave_0: entered promiscuous mode
[  162.309272][ T7142] hsr_slave_1: entered promiscuous mode
[  162.335943][ T7142] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.352585][ T7142] Cannot create hsr debugfs directory
[  163.127400][ T7142] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  163.211754][ T7142] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  163.293444][ T7142] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  163.333764][ T7142] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  163.739220][ T7142] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.812976][ T7142] 8021q: adding VLAN 0 to HW filter on device team0
[  163.881794][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.889438][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.916980][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.924884][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.091536][ T7285] loop4: detected capacity change from 0 to 32768
[  164.161535][ T7285] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.317104][ T7285] XFS (loop4): Ending clean mount
[  164.598874][ T5907] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.816143][ T7142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.652293][ T7328] loop2: detected capacity change from 0 to 32768
[  165.678746][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'.
[  165.683438][ T7328] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.391 (7328)
[  165.784434][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'.
[  165.817311][ T7328] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.884869][ T7328] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  165.904007][ T7328] BTRFS info (device loop2): setting nodatacow, compression disabled
[  165.923065][ T7328] BTRFS info (device loop2): max_inline at 0
[  165.955360][ T7328] BTRFS info (device loop2): enabling disk space caching
[  165.973146][ T7328] BTRFS info (device loop2): turning off barriers
[  165.993460][ T7328] BTRFS info (device loop2): turning on flush-on-commit
[  166.003644][ T7328] BTRFS info (device loop2): doing ref verification
[  166.013596][ T7328] BTRFS info (device loop2): force clearing of disk cache
[  166.020986][ T7328] BTRFS info (device loop2): enabling ssd optimizations
[  166.058064][ T7142] veth0_vlan: entered promiscuous mode
[  166.092384][ T7328] BTRFS info (device loop2): max_inline at 4096
[  166.122399][ T7328] BTRFS info (device loop2): disk space caching is enabled
[  166.140926][ T7142] veth1_vlan: entered promiscuous mode
[  166.255614][ T7328] BTRFS info (device loop2): auto enabling async discard
[  166.267851][ T7142] veth0_macvtap: entered promiscuous mode
[  166.278498][ T7328] BTRFS info (device loop2): rebuilding free space tree
[  166.298009][ T7142] veth1_macvtap: entered promiscuous mode
[  166.356917][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.393299][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.423286][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.447783][ T7328] BTRFS info (device loop2): disabling free space tree
[  166.460149][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.475152][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.476236][ T7328] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  166.488740][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.500341][ T7328] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  166.546450][ T7142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.587752][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.613362][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.633563][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.667108][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.689929][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.733404][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.764221][ T7142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.831109][ T7142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.864284][ T7142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.894767][ T7142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.933337][ T7142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.915285][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.966664][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.005654][ T5784] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.147001][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  168.214117][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.250690][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.345120][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  168.406920][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'.
[  169.184267][ T7404] netem: change failed
[  169.379821][ T7409] loop5: detected capacity change from 0 to 1024
[  169.504760][ T7415] loop2: detected capacity change from 0 to 128
[  169.534471][ T7409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  169.553715][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  169.553938][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  169.613810][ T7409] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.793561][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  169.883628][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  170.497382][ T7430] syz.2.407[7430] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.497647][ T7430] syz.2.407[7430] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.523703][ T7431] EXT4-fs (loop5): Online defrag not supported with bigalloc
[  170.865322][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'.
[  171.073075][ T7142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  171.315775][ T7441] kvm: pic: single mode not supported
[  171.315947][ T7441] kvm: pic: level sensitive irq not supported
[  171.332097][ T7441] kvm: pic: non byte read
[  172.437153][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.446346][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.772145][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.800065][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.066741][ T7462] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.083414][ T7462] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.100683][ T7462] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.111226][ T7462] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.434736][ T7462] syz.2.414 (7462) used greatest stack depth: 19528 bytes left
[  173.547093][ T7469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.768489][ T7469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.972596][ T7469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.148125][ T7469] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.163576][ T7518] loop3: detected capacity change from 0 to 8192
[  174.490819][ T7469] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.571413][ T7469] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.620305][ T7469] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.665981][ T7469] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.041165][ T7559] syzkaller0: entered promiscuous mode
[  176.057733][ T7559] syzkaller0: entered allmulticast mode
[  178.355343][ T7605] Bluetooth: MGMT ver 1.22
[  178.841983][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'.
[  178.928025][ T7620] netlink: 'syz.4.452': attribute type 1 has an invalid length.
[  179.361080][ T7624] loop4: detected capacity change from 0 to 8192
[  179.411693][ T7624] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  179.469530][ T7618] loop3: detected capacity change from 0 to 32768
[  179.477775][ T7624] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  179.493590][ T7618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.451 (7618)
[  179.523856][ T7624] REISERFS (device loop4): using ordered data mode
[  179.531009][ T7624] reiserfs: using flush barriers
[  179.549781][ T7618] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.563564][ T7624] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  179.596383][ T7624] REISERFS (device loop4): checking transaction log (loop4)
[  179.604200][ T7618] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  179.623026][ T7624] REISERFS (device loop4): Using r5 hash to sort names
[  179.639343][ T7618] BTRFS info (device loop3): setting nodatacow, compression disabled
[  179.661291][ T7624] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  179.678927][ T7618] BTRFS info (device loop3): max_inline at 0
[  179.703823][ T7618] BTRFS info (device loop3): enabling disk space caching
[  179.711833][ T7618] BTRFS info (device loop3): turning off barriers
[  179.743473][ T7618] BTRFS info (device loop3): turning on flush-on-commit
[  179.751099][ T7618] BTRFS info (device loop3): doing ref verification
[  179.778147][ T7618] BTRFS info (device loop3): force clearing of disk cache
[  179.801166][ T7618] BTRFS info (device loop3): enabling ssd optimizations
[  179.812680][ T7618] BTRFS info (device loop3): max_inline at 4096
[  179.831219][ T7618] BTRFS info (device loop3): disk space caching is enabled
[  180.026275][ T7618] BTRFS info (device loop3): auto enabling async discard
[  180.074571][ T7618] BTRFS info (device loop3): rebuilding free space tree
[  180.132121][ T7618] BTRFS info (device loop3): disabling free space tree
[  180.153671][ T7618] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  180.181020][ T7618] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  180.506540][   T58] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.687711][   T58] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.712605][ T5791] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.879493][   T58] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.009452][   T58] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.277057][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.317313][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.328950][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.337566][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.365161][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  182.376753][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.675566][ T7693] loop2: detected capacity change from 0 to 32768
[  183.772364][ T7693] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  183.783930][ T7679] chnl_net:caif_netlink_parms(): no params data found
[  183.918295][   T58] hsr_slave_0: left promiscuous mode
[  183.974533][   T58] hsr_slave_1: left promiscuous mode
[  184.045251][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.072020][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.073072][ T5784] (syz-executor,5784,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  184.099313][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.109696][ T5784] ocfs2: Unmounting device (7,2) on (node local)
[  184.125307][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.175135][   T58] bridge_slave_1: left allmulticast mode
[  184.184304][   T58] bridge_slave_1: left promiscuous mode
[  184.202181][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.225656][   T58] bridge_slave_0: left allmulticast mode
[  184.231840][   T58] bridge_slave_0: left promiscuous mode
[  184.244378][   T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  184.258840][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.358203][   T58] veth1_macvtap: left promiscuous mode
[  184.372631][   T58] veth0_macvtap: left promiscuous mode
[  184.389122][   T58] veth1_vlan: left promiscuous mode
[  184.403188][   T58] veth0_vlan: left promiscuous mode
[  184.443385][ T5790] Bluetooth: hci3: command tx timeout
[  184.457825][   T27] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  184.482367][   T27] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  184.493054][   T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  184.503152][   T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  184.517346][   T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  184.551444][   T27] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  184.562600][   T27] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  184.571035][   T27] usb 4-1: Product: syz
[  184.575674][   T27] usb 4-1: Manufacturer: syz
[  184.590135][   T27] cdc_wdm 4-1:1.0: skipping garbage
[  184.597389][   T27] cdc_wdm 4-1:1.0: skipping garbage
[  184.605382][   T27] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  184.611591][   T27] cdc_wdm 4-1:1.0: Unknown control protocol
[  185.778418][   T58] team0 (unregistering): Port device team_slave_1 removed
[  185.867417][   T58] team0 (unregistering): Port device team_slave_0 removed
[  185.948433][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.036573][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.530293][ T5790] Bluetooth: hci3: command tx timeout
[  187.011554][   T27] usb 4-1: USB disconnect, device number 9
[  187.450617][   T58] bond0 (unregistering): Released all slaves
[  187.870864][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.888864][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.917714][ T7679] bridge_slave_0: entered allmulticast mode
[  187.934777][ T7679] bridge_slave_0: entered promiscuous mode
[  187.958215][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.966224][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.974566][ T7679] bridge_slave_1: entered allmulticast mode
[  187.982446][ T7679] bridge_slave_1: entered promiscuous mode
[  188.063442][   T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  188.138910][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.214933][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.273431][   T27] usb 4-1: Using ep0 maxpacket: 8
[  188.296711][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.328182][   T27] usb 4-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00
[  188.382996][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.411129][   T28] audit: type=1800 audit(1759379385.325:8): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.488" name="bus" dev="overlay" ino=727 res=0 errno=0
[  188.421519][ T7679] team0: Port device team_slave_0 added
[  188.441055][   T27] usb 4-1: config 0 descriptor??
[  188.485897][ T7679] team0: Port device team_slave_1 added
[  188.487427][   T28] audit: type=1800 audit(1759379385.365:9): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.489" name="bus" dev="overlay" ino=648 res=0 errno=0
[  188.605573][ T5790] Bluetooth: hci3: command tx timeout
[  188.684224][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.691610][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.743517][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.760716][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.769576][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.799481][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.879984][   T27] wacom 0003:056A:00B8.0002: unknown main item tag 0x6
[  188.910394][   T27] wacom 0003:056A:00B8.0002: Unknown device_type for 'HID 056a:00b8'. Assuming pen.
[  188.972388][   T27] wacom 0003:056A:00B8.0002: hidraw0: USB HID v5.59 Device [HID 056a:00b8] on usb-dummy_hcd.3-1/input0
[  189.073208][ T7764] loop3: detected capacity change from 0 to 128
[  189.086138][ T7679] hsr_slave_0: entered promiscuous mode
[  189.128051][   T27] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B8.0002/input/input9
[  189.160052][ T7679] hsr_slave_1: entered promiscuous mode
[  189.234777][ T7679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.242774][ T7679] Cannot create hsr debugfs directory
[  189.334048][   T27] usb 4-1: USB disconnect, device number 10
[  190.332095][ T7679] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  190.377429][ T7679] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  190.454991][ T7679] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  190.499473][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'.
[  190.666814][ T7679] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  190.677241][ T5790] Bluetooth: hci3: command tx timeout
[  191.107055][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.185911][ T7679] 8021q: adding VLAN 0 to HW filter on device team0
[  191.256045][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.264002][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.328154][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.335927][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.479953][ T7844] loop3: detected capacity change from 0 to 512
[  191.496563][ T7679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.559936][ T7844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.566487][ T7802] loop2: detected capacity change from 0 to 65536
[  191.615717][ T7844] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.729728][ T7802] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  191.960877][ T7802] XFS (loop2): Ending clean mount
[  191.989986][ T7802] XFS (loop2): Quotacheck needed: Please wait.
[  192.108718][ T7802] XFS (loop2): Quotacheck: Done.
[  192.470634][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.502843][ T7679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.623973][   T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  192.845965][   T27] usb 3-1: config 0 has no interfaces?
[  192.869140][   T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  192.909750][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.963536][   T27] usb 3-1: Product: syz
[  192.971564][   T27] usb 3-1: Manufacturer: syz
[  192.996968][   T27] usb 3-1: SerialNumber: syz
[  193.034712][   T27] usb 3-1: config 0 descriptor??
[  193.747733][ T7679] veth0_vlan: entered promiscuous mode
[  193.799801][ T7679] veth1_vlan: entered promiscuous mode
[  193.927302][ T7679] veth0_macvtap: entered promiscuous mode
[  193.941225][ T7679] veth1_macvtap: entered promiscuous mode
[  193.980850][    T9] usb 3-1: USB disconnect, device number 5
[  194.070883][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.142951][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.179833][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.223373][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.270518][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.293555][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.305367][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.321369][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.335907][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.349256][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.373660][ T7679] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.409717][ T7679] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.442184][ T7679] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.486393][ T7679] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.585967][ T7477] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  194.616682][ T5784] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  194.722962][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.771423][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.810944][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.835487][ T7477] usb 4-1: Using ep0 maxpacket: 32
[  194.842747][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  194.846711][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.851072][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  194.866732][ T7477] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  194.894413][ T7477] usb 4-1: config 0 has no interface number 0
[  194.942951][ T7477] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  194.986542][ T7477] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  194.997354][ T7477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.010873][ T7477] usb 4-1: Product: syz
[  195.016123][ T7477] usb 4-1: Manufacturer: syz
[  195.021666][ T7477] usb 4-1: SerialNumber: syz
[  195.036015][ T7477] usb 4-1: config 0 descriptor??
[  195.050121][ T7477] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  195.073624][ T7477] em28xx 4-1:0.132: Video interface 132 found:
[  195.215741][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.6.460'.
[  195.245248][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.508'.
[  195.384646][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'.
[  195.470567][ T7477] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  196.123404][ T7477] em28xx 4-1:0.132: failed to read eeprom (err=-110)
[  196.131836][ T7477] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  196.383495][ T7477] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  196.426272][ T7477] em28xx 4-1:0.132: analog set to bulk mode.
[  196.454489][   T27] em28xx 4-1:0.132: Registering V4L2 extension
[  196.507700][ T7477] usb 4-1: USB disconnect, device number 11
[  196.530344][ T7477] em28xx 4-1:0.132: Disconnecting em28xx
[  196.690804][ T7939] loop4: detected capacity change from 0 to 1024
[  197.029239][   T27] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  197.088685][   T27] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  197.115014][   T27] em28xx 4-1:0.132: No AC97 audio processor
[  197.164466][   T27] usb 4-1: Decoder not found
[  197.169415][   T27] em28xx 4-1:0.132: failed to create media graph
[  197.282801][   T27] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  197.370669][   T27] em28xx 4-1:0.132: Remote control support is not available for this card.
[  197.411708][ T7477] em28xx 4-1:0.132: Closing input extension
[  197.469249][ T7955] syz.6.516 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  197.564088][ T7477] em28xx 4-1:0.132: Freeing device
[  199.570312][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.520'.
[  200.087257][ T7953] loop2: detected capacity change from 0 to 32768
[  200.249937][ T7953] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.335344][ T7953] XFS (loop2): AIL initialisation failed: error -12
[  200.424390][ T7953] XFS (loop2): log mount failed
[  202.098337][ T8036] sch_tbf: burst 32854 is lower than device lo mtu (65550) !
[  202.774405][ T8055] trusted_key: syz.4.539 sent an empty control message without MSG_MORE.
[  203.447592][ T8071] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  204.231127][ T8093] input: syz1 as /devices/virtual/input/input12
[  205.909767][ T8099] loop3: detected capacity change from 0 to 32768
[  205.971743][ T8099] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.289605][ T8099] XFS (loop3): Ending clean mount
[  206.417173][ T8099] XFS (loop3): Quotacheck needed: Please wait.
[  206.733402][ T8099] XFS (loop3): Quotacheck: Done.
[  206.894967][ T8146] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  207.086723][   T28] audit: type=1804 audit(1759379403.995:10): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.552" name="/newroot/139/file0/bus" dev="loop3" ino=9291 res=1 errno=0
[  207.365848][ T5791] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.557811][ T8218] kvm: pic: non byte read
[  210.607476][ T8218] kvm: pic: non byte read
[  210.612551][ T8218] kvm: pic: level sensitive irq not supported
[  210.612629][ T8218] kvm: pic: non byte read
[  210.699682][ T8218] kvm: pic: non byte read
[  210.705933][ T8218] kvm: pic: non byte read
[  210.711733][ T8218] kvm: pic: non byte read
[  210.784609][ T8218] kvm: pic: non byte read
[  210.790493][ T8218] kvm: pic: single mode not supported
[  210.790515][ T8218] kvm: pic: level sensitive irq not supported
[  210.828316][ T8218] kvm: pic: non byte read
[  210.897722][ T8218] kvm: pic: single mode not supported
[  210.897747][ T8218] kvm: pic: level sensitive irq not supported
[  210.933637][ T8218] kvm: pic: non byte read
[  212.273698][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  212.280468][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  215.502120][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'.
[  217.412451][ T5795] Bluetooth: hci1: command 0x0406 tx timeout
[  219.063640][ T7478] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  219.129568][ T8354] loop3: detected capacity change from 0 to 1024
[  219.150059][ T8354] EXT4-fs: Ignoring removed orlov option
[  219.211186][ T8354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.283849][ T7478] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  219.332974][ T7478] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  219.391970][ T7478] usb 3-1: Product: syz
[  219.417499][ T7478] usb 3-1: Manufacturer: syz
[  219.427780][ T7478] usb 3-1: SerialNumber: syz
[  219.449628][ T7478] usb 3-1: config 0 descriptor??
[  219.478520][ T7478] ch341 3-1:0.0: ch341-uart converter detected
[  219.541146][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.850159][ T8370] Invalid ELF header magic: != ELF
[  219.875038][ T8371] overlayfs: upper fs does not support tmpfile.
[  220.177129][ T8377] loop3: detected capacity change from 0 to 1024
[  220.744086][ T7478] ch341-uart ttyUSB0: failed to read break control: -71
[  220.751996][ T7478] ch341-uart: probe of ttyUSB0 failed with error -71
[  220.809301][ T8389] loop6: detected capacity change from 0 to 256
[  220.819951][ T7478] usb 3-1: USB disconnect, device number 6
[  220.840426][ T7478] ch341 3-1:0.0: device disconnected
[  222.215193][   T48] hfsplus: b-tree write err: -5, ino 4
[  222.284131][ T8406] 
[  222.286564][ T8406] =====================================================
[  222.293791][ T8406] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  222.301343][ T8406] syzkaller #0 Not tainted
[  222.306240][ T8406] -----------------------------------------------------
[  222.313299][ T8406] syz.4.617/8406 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  222.321263][ T8406] ffff88805df4f2b8 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x192/0x4b0
[  222.330117][ T8406] 
[  222.330117][ T8406] and this task is already holding:
[  222.337556][ T8406] ffff88805a8bf028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0
[  222.347399][ T8406] which would create a new lock dependency:
[  222.353514][ T8406]  (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2}
[  222.362639][ T8406] 
[  222.362639][ T8406] but this new dependency connects a HARDIRQ-irq-safe lock:
[  222.372404][ T8406]  (&dev->event_lock#2){-...}-{2:2}
[  222.372450][ T8406] 
[  222.372450][ T8406] ... which became HARDIRQ-irq-safe at:
[  222.386164][ T8406]   lock_acquire+0x197/0x410
[  222.391008][ T8406]   _raw_spin_lock_irqsave+0xa8/0xf0
[  222.396826][ T8406]   input_event+0x7a/0xc0
[  222.401623][ T8406]   psmouse_report_standard_packet+0x53/0x200
[  222.408554][ T8406]   psmouse_process_byte+0x478/0x670
[  222.414871][ T8406]   psmouse_handle_byte+0x43/0x490
[  222.420421][ T8406]   ps2_interrupt+0x164/0x980
[  222.425683][ T8406]   serio_interrupt+0x8b/0x130
[  222.431117][ T8406]   i8042_interrupt+0x394/0x730
[  222.436296][ T8406]   __handle_irq_event_percpu+0x276/0x930
[  222.443773][ T8406]   handle_irq_event+0x8b/0x1e0
[  222.450110][ T8406]   handle_edge_irq+0x247/0xb30
[  222.455482][ T8406]   __common_interrupt+0x13b/0x230
[  222.460925][ T8406]   common_interrupt+0xb4/0xd0
[  222.465921][ T8406]   asm_common_interrupt+0x26/0x40
[  222.471349][ T8406]   debug_lockdep_rcu_enabled+0x0/0x30
[  222.477016][ T8406]   count_memcg_event_mm+0x2cf/0x3b0
[  222.482616][ T8406]   handle_mm_fault+0x2857/0x4920
[  222.487975][ T8406]   __get_user_pages+0x5ea/0x1470
[  222.493423][ T8406]   get_user_pages_remote+0x3de/0xc10
[  222.499035][ T8406]   get_arg_page+0x29e/0x5a0
[  222.503705][ T8406]   copy_string_kernel+0x165/0x220
[  222.509142][ T8406]   kernel_execve+0x56d/0x9c0
[  222.513880][ T8406]   call_usermodehelper_exec_async+0x20b/0x350
[  222.520189][ T8406]   ret_from_fork+0x48/0x80
[  222.525181][ T8406]   ret_from_fork_asm+0x11/0x20
[  222.531382][ T8406] 
[  222.531382][ T8406] to a HARDIRQ-irq-unsafe lock:
[  222.538788][ T8406]  (tasklist_lock){.+.+}-{2:2}
[  222.538824][ T8406] 
[  222.538824][ T8406] ... which became HARDIRQ-irq-unsafe at:
[  222.551717][ T8406] ...
[  222.551729][ T8406]   lock_acquire+0x197/0x410
[  222.559331][ T8406]   _raw_read_lock+0x36/0x50
[  222.564146][ T8406]   do_wait+0x294/0xaf0
[  222.568451][ T8406]   kernel_wait+0xac/0x170
[  222.573135][ T8406]   call_usermodehelper_exec_work+0xb9/0x220
[  222.579445][ T8406]   process_scheduled_works+0xa45/0x15b0
[  222.585227][ T8406]   worker_thread+0xa55/0xfc0
[  222.589985][ T8406]   kthread+0x2fa/0x390
[  222.594190][ T8406]   ret_from_fork+0x48/0x80
[  222.598982][ T8406]   ret_from_fork_asm+0x11/0x20
[  222.603978][ T8406] 
[  222.603978][ T8406] other info that might help us debug this:
[  222.603978][ T8406] 
[  222.614428][ T8406] Chain exists of:
[  222.614428][ T8406]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  222.614428][ T8406] 
[  222.628242][ T8406]  Possible interrupt unsafe locking scenario:
[  222.628242][ T8406] 
[  222.636875][ T8406]        CPU0                    CPU1
[  222.642567][ T8406]        ----                    ----
[  222.648041][ T8406]   lock(tasklist_lock);
[  222.652400][ T8406]                                local_irq_disable();
[  222.659554][ T8406]                                lock(&dev->event_lock#2);
[  222.667163][ T8406]                                lock(&client->buffer_lock);
[  222.674876][ T8406]   <Interrupt>
[  222.678441][ T8406]     lock(&dev->event_lock#2);
[  222.683513][ T8406] 
[  222.683513][ T8406]  *** DEADLOCK ***
[  222.683513][ T8406] 
[  222.692133][ T8406] 7 locks held by syz.4.617/8406:
[  222.697806][ T8406]  #0: ffff888026550110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x17b/0x470
[  222.707970][ T8406]  #1: ffff888141a87230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xab/0x320
[  222.718999][ T8406]  #2: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xbc/0x320
[  222.729824][ T8406]  #3: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0xa3/0x1300
[  222.739541][ T8406]  #4: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x79/0x330
[  222.748988][ T8406]  #5: ffff88805a8bf028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0
[  222.759676][ T8406]  #6: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x53/0x4b0
[  222.769031][ T8406] 
[  222.769031][ T8406] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  222.780172][ T8406]  -> (&dev->event_lock#2){-...}-{2:2} {
[  222.786138][ T8406]     IN-HARDIRQ-W at:
[  222.790307][ T8406]                       lock_acquire+0x197/0x410
[  222.797036][ T8406]                       _raw_spin_lock_irqsave+0xa8/0xf0
[  222.804276][ T8406]                       input_event+0x7a/0xc0
[  222.810373][ T8406]                       psmouse_report_standard_packet+0x53/0x200
[  222.818600][ T8406]                       psmouse_process_byte+0x478/0x670
[  222.825885][ T8406]                       psmouse_handle_byte+0x43/0x490
[  222.833576][ T8406]                       ps2_interrupt+0x164/0x980
[  222.840715][ T8406]                       serio_interrupt+0x8b/0x130
[  222.847439][ T8406]                       i8042_interrupt+0x394/0x730
[  222.854079][ T8406]                       __handle_irq_event_percpu+0x276/0x930
[  222.861589][ T8406]                       handle_irq_event+0x8b/0x1e0
[  222.868398][ T8406]                       handle_edge_irq+0x247/0xb30
[  222.875381][ T8406]                       __common_interrupt+0x13b/0x230
[  222.882453][ T8406]                       common_interrupt+0xb4/0xd0
[  222.889553][ T8406]                       asm_common_interrupt+0x26/0x40
[  222.896814][ T8406]                       debug_lockdep_rcu_enabled+0x0/0x30
[  222.904393][ T8406]                       count_memcg_event_mm+0x2cf/0x3b0
[  222.912075][ T8406]                       handle_mm_fault+0x2857/0x4920
[  222.920252][ T8406]                       __get_user_pages+0x5ea/0x1470
[  222.927779][ T8406]                       get_user_pages_remote+0x3de/0xc10
[  222.936677][ T8406]                       get_arg_page+0x29e/0x5a0
[  222.943659][ T8406]                       copy_string_kernel+0x165/0x220
[  222.951147][ T8406]                       kernel_execve+0x56d/0x9c0
[  222.958072][ T8406]                       call_usermodehelper_exec_async+0x20b/0x350
[  222.966372][ T8406]                       ret_from_fork+0x48/0x80
[  222.972816][ T8406]                       ret_from_fork_asm+0x11/0x20
[  222.980691][ T8406]     INITIAL USE at:
[  222.984979][ T8406]                      lock_acquire+0x197/0x410
[  222.992580][ T8406]                      _raw_spin_lock_irqsave+0xa8/0xf0
[  223.000415][ T8406]                      input_inject_event+0xab/0x320
[  223.007148][ T8406]                      led_trigger_event+0x133/0x210
[  223.014119][ T8406]                      kbd_led_trigger_activate+0xbd/0x100
[  223.021794][ T8406]                      led_trigger_set+0x524/0x940
[  223.028529][ T8406]                      led_trigger_set_default+0x1a0/0x1e0
[  223.036649][ T8406]                      led_classdev_register_ext+0x6e9/0x940
[  223.044142][ T8406]                      input_leds_connect+0x4eb/0x6b0
[  223.051336][ T8406]                      input_register_device+0xcdc/0x1070
[  223.058924][ T8406]                      atkbd_connect+0x6fb/0x9a0
[  223.065887][ T8406]                      serio_driver_probe+0x7a/0xa0
[  223.072842][ T8406]                      really_probe+0x25b/0xb40
[  223.080428][ T8406]                      __driver_probe_device+0x18c/0x330
[  223.088021][ T8406]                      driver_probe_device+0x4f/0x420
[  223.095180][ T8406]                      __driver_attach+0x44e/0x6f0
[  223.102423][ T8406]                      bus_for_each_dev+0x22d/0x2a0
[  223.109096][ T8406]                      serio_handle_event+0x1a2/0x860
[  223.116503][ T8406]                      process_scheduled_works+0xa45/0x15b0
[  223.125430][ T8406]                      worker_thread+0xa55/0xfc0
[  223.132703][ T8406]                      kthread+0x2fa/0x390
[  223.139338][ T8406]                      ret_from_fork+0x48/0x80
[  223.145898][ T8406]                      ret_from_fork_asm+0x11/0x20
[  223.152529][ T8406]   }
[  223.155240][ T8406]   ... key      at: [<ffffffff97211660>] input_allocate_device.__key.5+0x0/0x20
[  223.165353][ T8406] -> (&client->buffer_lock){....}-{2:2} {
[  223.171563][ T8406]    INITIAL USE at:
[  223.175773][ T8406]                    lock_acquire+0x197/0x410
[  223.182330][ T8406]                    _raw_spin_lock+0x2e/0x40
[  223.188874][ T8406]                    evdev_pass_values+0xcb/0xab0
[  223.196309][ T8406]                    evdev_events+0x1d8/0x330
[  223.203331][ T8406]                    input_pass_values+0x907/0x1300
[  223.210268][ T8406]                    input_event_dispose+0x346/0x6c0
[  223.217320][ T8406]                    input_inject_event+0x1f9/0x320
[  223.224351][ T8406]                    evdev_write+0x32a/0x470
[  223.230624][ T8406]                    vfs_write+0x288/0x940
[  223.236638][ T8406]                    ksys_write+0x147/0x250
[  223.243599][ T8406]                    do_syscall_64+0x55/0xb0
[  223.249870][ T8406]                    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.258057][ T8406]  }
[  223.260731][ T8406]  ... key      at: [<ffffffff97211900>] evdev_open.__key.28+0x0/0x20
[  223.269525][ T8406]  ... acquired at:
[  223.273542][ T8406]    _raw_spin_lock+0x2e/0x40
[  223.278365][ T8406]    evdev_pass_values+0xcb/0xab0
[  223.284682][ T8406]    evdev_events+0x1d8/0x330
[  223.289654][ T8406]    input_pass_values+0x907/0x1300
[  223.295073][ T8406]    input_event_dispose+0x346/0x6c0
[  223.300555][ T8406]    input_inject_event+0x1f9/0x320
[  223.306037][ T8406]    evdev_write+0x32a/0x470
[  223.310914][ T8406]    vfs_write+0x288/0x940
[  223.315938][ T8406]    ksys_write+0x147/0x250
[  223.320583][ T8406]    do_syscall_64+0x55/0xb0
[  223.325400][ T8406]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.332225][ T8406] 
[  223.334682][ T8406] 
[  223.334682][ T8406] the dependencies between the lock to be acquired
[  223.334692][ T8406]  and HARDIRQ-irq-unsafe lock:
[  223.349288][ T8406]   -> (tasklist_lock){.+.+}-{2:2} {
[  223.355211][ T8406]      HARDIRQ-ON-R at:
[  223.359654][ T8406]                         lock_acquire+0x197/0x410
[  223.366526][ T8406]                         _raw_read_lock+0x36/0x50
[  223.374005][ T8406]                         do_wait+0x294/0xaf0
[  223.380720][ T8406]                         kernel_wait+0xac/0x170
[  223.387741][ T8406]                         call_usermodehelper_exec_work+0xb9/0x220
[  223.396320][ T8406]                         process_scheduled_works+0xa45/0x15b0
[  223.404382][ T8406]                         worker_thread+0xa55/0xfc0
[  223.411571][ T8406]                         kthread+0x2fa/0x390
[  223.418225][ T8406]                         ret_from_fork+0x48/0x80
[  223.425146][ T8406]                         ret_from_fork_asm+0x11/0x20
[  223.432207][ T8406]      SOFTIRQ-ON-R at:
[  223.436497][ T8406]                         lock_acquire+0x197/0x410
[  223.443994][ T8406]                         _raw_read_lock+0x36/0x50
[  223.450986][ T8406]                         do_wait+0x294/0xaf0
[  223.457383][ T8406]                         kernel_wait+0xac/0x170
[  223.464661][ T8406]                         call_usermodehelper_exec_work+0xb9/0x220
[  223.472958][ T8406]                         process_scheduled_works+0xa45/0x15b0
[  223.481303][ T8406]                         worker_thread+0xa55/0xfc0
[  223.489330][ T8406]                         kthread+0x2fa/0x390
[  223.495970][ T8406]                         ret_from_fork+0x48/0x80
[  223.502754][ T8406]                         ret_from_fork_asm+0x11/0x20
[  223.509837][ T8406]      INITIAL USE at:
[  223.514180][ T8406]                        lock_acquire+0x197/0x410
[  223.520912][ T8406]                        _raw_write_lock_irq+0xa3/0xe0
[  223.528264][ T8406]                        copy_process+0x225d/0x3d70
[  223.535431][ T8406]                        kernel_clone+0x21b/0x840
[  223.543943][ T8406]                        user_mode_thread+0xde/0x130
[  223.552093][ T8406]                        rest_init+0x27/0x300
[  223.559055][ T8406]                        arch_call_rest_init+0xe/0x10
[  223.567935][ T8406]                        start_kernel+0x459/0x4e0
[  223.574945][ T8406]                        x86_64_start_reservations+0x2a/0x30
[  223.582707][ T8406]                        copy_bootdata+0x0/0xe0
[  223.589598][ T8406]                        secondary_startup_64_no_verify+0x179/0x17b
[  223.598272][ T8406]      INITIAL READ USE at:
[  223.603614][ T8406]                             lock_acquire+0x197/0x410
[  223.611028][ T8406]                             _raw_read_lock+0x36/0x50
[  223.618717][ T8406]                             do_wait+0x294/0xaf0
[  223.625817][ T8406]                             kernel_wait+0xac/0x170
[  223.633074][ T8406]                             call_usermodehelper_exec_work+0xb9/0x220
[  223.641743][ T8406]                             process_scheduled_works+0xa45/0x15b0
[  223.650305][ T8406]                             worker_thread+0xa55/0xfc0
[  223.657665][ T8406]                             kthread+0x2fa/0x390
[  223.664476][ T8406]                             ret_from_fork+0x48/0x80
[  223.671913][ T8406]                             ret_from_fork_asm+0x11/0x20
[  223.679593][ T8406]    }
[  223.682726][ T8406]    ... key      at: [<ffffffff8ca0a058>] tasklist_lock+0x18/0x40
[  223.691037][ T8406]    ... acquired at:
[  223.695306][ T8406]    _raw_read_lock+0x36/0x50
[  223.700270][ T8406]    send_sigurg+0xf0/0x3c0
[  223.705249][ T8406]    sk_send_sigurg+0x6f/0xc0
[  223.710312][ T8406]    queue_oob+0x3d7/0x4e0
[  223.714869][ T8406]    unix_stream_sendmsg+0xaa2/0xba0
[  223.720471][ T8406]    ____sys_sendmsg+0x5bf/0x950
[  223.725718][ T8406]    ___sys_sendmsg+0x220/0x290
[  223.731219][ T8406]    __sys_sendmmsg+0x275/0x4a0
[  223.736640][ T8406]    __x64_sys_sendmmsg+0xa0/0xb0
[  223.742786][ T8406]    do_syscall_64+0x55/0xb0
[  223.747704][ T8406]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.754244][ T8406] 
[  223.756915][ T8406]  -> (&f->f_owner.lock){....}-{2:2} {
[  223.763012][ T8406]     INITIAL USE at:
[  223.767836][ T8406]                      lock_acquire+0x197/0x410
[  223.774727][ T8406]                      _raw_write_lock_irq+0xa3/0xe0
[  223.781529][ T8406]                      __f_setown+0x3b/0x330
[  223.788340][ T8406]                      do_fcntl+0x10df/0x1380
[  223.795749][ T8406]                      __se_sys_fcntl+0xc9/0x1a0
[  223.803427][ T8406]                      do_syscall_64+0x55/0xb0
[  223.809835][ T8406]                      entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.818065][ T8406]     INITIAL READ USE at:
[  223.822584][ T8406]                           lock_acquire+0x197/0x410
[  223.830078][ T8406]                           _raw_read_lock_irqsave+0xb0/0x100
[  223.838429][ T8406]                           send_sigio+0x33/0x360
[  223.845907][ T8406]                           kill_fasync+0x228/0x4b0
[  223.853080][ T8406]                           sock_wake_async+0x137/0x160
[  223.860339][ T8406]                           sk_wake_async+0x184/0x280
[  223.867381][ T8406]                           sock_def_write_space+0x214/0x320
[  223.875222][ T8406]                           kcm_sendmsg+0x25fe/0x2880
[  223.882873][ T8406]                           sock_write_iter+0x2bb/0x3f0
[  223.890051][ T8406]                           io_write+0x9ed/0x18e0
[  223.897271][ T8406]                           io_issue_sqe+0x289/0xc90
[  223.904264][ T8406]                           io_submit_sqes+0xa8a/0x1d00
[  223.911690][ T8406]                           __se_sys_io_uring_enter+0x2de/0x22e0
[  223.920010][ T8406]                           do_syscall_64+0x55/0xb0
[  223.928999][ T8406]                           entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.938608][ T8406]   }
[  223.941910][ T8406]   ... key      at: [<ffffffff96f17e80>] init_file.__key+0x0/0x20
[  223.950014][ T8406]   ... acquired at:
[  223.954178][ T8406]    _raw_read_lock_irqsave+0xb0/0x100
[  223.960556][ T8406]    send_sigio+0x33/0x360
[  223.965262][ T8406]    kill_fasync+0x228/0x4b0
[  223.970324][ T8406]    sock_wake_async+0x137/0x160
[  223.975901][ T8406]    sk_wake_async+0x184/0x280
[  223.980946][ T8406]    sock_def_write_space+0x214/0x320
[  223.986441][ T8406]    kcm_sendmsg+0x25fe/0x2880
[  223.991316][ T8406]    sock_write_iter+0x2bb/0x3f0
[  223.996553][ T8406]    io_write+0x9ed/0x18e0
[  224.001090][ T8406]    io_issue_sqe+0x289/0xc90
[  224.007558][ T8406]    io_submit_sqes+0xa8a/0x1d00
[  224.012874][ T8406]    __se_sys_io_uring_enter+0x2de/0x22e0
[  224.019072][ T8406]    do_syscall_64+0x55/0xb0
[  224.024102][ T8406]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.030381][ T8406] 
[  224.033024][ T8406] -> (&new->fa_lock){....}-{2:2} {
[  224.038457][ T8406]    INITIAL USE at:
[  224.042477][ T8406]                    lock_acquire+0x197/0x410
[  224.048806][ T8406]                    _raw_write_lock_irq+0xa3/0xe0
[  224.055619][ T8406]                    fasync_remove_entry+0xf4/0x1c0
[  224.062604][ T8406]                    sock_fasync+0x88/0xf0
[  224.068722][ T8406]                    __fput+0x7f3/0x970
[  224.074692][ T8406]                    task_work_run+0x1ce/0x250
[  224.081215][ T8406]                    get_signal+0x1235/0x1400
[  224.087697][ T8406]                    arch_do_signal_or_restart+0x96/0x780
[  224.095040][ T8406]                    exit_to_user_mode_loop+0x70/0x110
[  224.102536][ T8406]                    exit_to_user_mode_prepare+0xf6/0x180
[  224.109955][ T8406]                    syscall_exit_to_user_mode+0x1a/0x50
[  224.117626][ T8406]                    do_syscall_64+0x61/0xb0
[  224.124683][ T8406]                    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.132978][ T8406]    INITIAL READ USE at:
[  224.137531][ T8406]                         lock_acquire+0x197/0x410
[  224.144526][ T8406]                         _raw_read_lock_irqsave+0xb0/0x100
[  224.152492][ T8406]                         kill_fasync+0x192/0x4b0
[  224.160006][ T8406]                         sock_wake_async+0x137/0x160
[  224.168321][ T8406]                         sk_wake_async+0x184/0x280
[  224.175526][ T8406]                         sock_def_write_space+0x214/0x320
[  224.183561][ T8406]                         kcm_sendmsg+0x25fe/0x2880
[  224.190600][ T8406]                         sock_write_iter+0x2bb/0x3f0
[  224.197680][ T8406]                         io_write+0x9ed/0x18e0
[  224.204319][ T8406]                         io_issue_sqe+0x289/0xc90
[  224.211481][ T8406]                         io_submit_sqes+0xa8a/0x1d00
[  224.220124][ T8406]                         __se_sys_io_uring_enter+0x2de/0x22e0
[  224.228767][ T8406]                         do_syscall_64+0x55/0xb0
[  224.236031][ T8406]                         entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.247282][ T8406]  }
[  224.250368][ T8406]  ... key      at: [<ffffffff96f18b00>] fasync_insert_entry.__key+0x0/0x20
[  224.261216][ T8406]  ... acquired at:
[  224.265342][ T8406]    _raw_read_lock_irqsave+0xb0/0x100
[  224.271740][ T8406]    kill_fasync+0x192/0x4b0
[  224.277453][ T8406]    evdev_pass_values+0x54b/0xab0
[  224.283798][ T8406]    evdev_events+0x1d8/0x330
[  224.288919][ T8406]    input_pass_values+0x907/0x1300
[  224.294621][ T8406]    input_event_dispose+0x346/0x6c0
[  224.300414][ T8406]    input_inject_event+0x1f9/0x320
[  224.305851][ T8406]    evdev_write+0x32a/0x470
[  224.311157][ T8406]    vfs_write+0x288/0x940
[  224.315946][ T8406]    ksys_write+0x147/0x250
[  224.320846][ T8406]    do_syscall_64+0x55/0xb0
[  224.325570][ T8406]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.331959][ T8406] 
[  224.334575][ T8406] 
[  224.334575][ T8406] stack backtrace:
[  224.340935][ T8406] CPU: 0 PID: 8406 Comm: syz.4.617 Not tainted syzkaller #0
[  224.349115][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  224.360008][ T8406] Call Trace:
[  224.363550][ T8406]  <TASK>
[  224.366760][ T8406]  dump_stack_lvl+0x16c/0x230
[  224.372620][ T8406]  ? load_image+0x3b0/0x3b0
[  224.377432][ T8406]  ? show_regs_print_info+0x20/0x20
[  224.382867][ T8406]  ? load_image+0x3b0/0x3b0
[  224.387771][ T8406]  ? print_shortest_lock_dependencies+0xf4/0x160
[  224.395001][ T8406]  __lock_acquire+0x678f/0x7c80
[  224.400664][ T8406]  ? verify_lock_unused+0x140/0x140
[  224.406365][ T8406]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  224.412747][ T8406]  ? verify_lock_unused+0x140/0x140
[  224.418362][ T8406]  lock_acquire+0x197/0x410
[  224.423439][ T8406]  ? kill_fasync+0x192/0x4b0
[  224.428104][ T8406]  ? read_lock_is_recursive+0x20/0x20
[  224.434071][ T8406]  _raw_read_lock_irqsave+0xb0/0x100
[  224.439763][ T8406]  ? kill_fasync+0x192/0x4b0
[  224.445860][ T8406]  ? _raw_read_lock+0x50/0x50
[  224.451184][ T8406]  kill_fasync+0x192/0x4b0
[  224.456319][ T8406]  ? kill_fasync+0x53/0x4b0
[  224.461877][ T8406]  evdev_pass_values+0x54b/0xab0
[  224.467271][ T8406]  ? evdev_pass_values+0x4f1/0xab0
[  224.472798][ T8406]  evdev_events+0x1d8/0x330
[  224.478193][ T8406]  ? evdev_events+0x79/0x330
[  224.483406][ T8406]  ? evdev_event+0xe0/0xe0
[  224.488357][ T8406]  input_pass_values+0x907/0x1300
[  224.493963][ T8406]  ? input_pass_values+0xa3/0x1300
[  224.500584][ T8406]  input_event_dispose+0x346/0x6c0
[  224.505840][ T8406]  input_inject_event+0x1f9/0x320
[  224.511510][ T8406]  ? input_inject_event+0xbc/0x320
[  224.516850][ T8406]  evdev_write+0x32a/0x470
[  224.521596][ T8406]  ? evdev_read+0xb50/0xb50
[  224.526351][ T8406]  ? common_file_perm+0x198/0x1f0
[  224.532032][ T8406]  ? fsnotify_perm+0x5d/0x5e0
[  224.537248][ T8406]  ? security_file_permission+0x79/0xa0
[  224.544389][ T8406]  ? evdev_read+0xb50/0xb50
[  224.548926][ T8406]  vfs_write+0x288/0x940
[  224.553728][ T8406]  ? file_end_write+0x250/0x250
[  224.559589][ T8406]  ? __fget_files+0x28/0x4d0
[  224.564420][ T8406]  ? __fget_files+0x44a/0x4d0
[  224.569626][ T8406]  ? __fdget_pos+0x1d8/0x330
[  224.574799][ T8406]  ? ksys_write+0x75/0x250
[  224.579682][ T8406]  ksys_write+0x147/0x250
[  224.584038][ T8406]  ? __ia32_sys_read+0x90/0x90
[  224.589087][ T8406]  ? lockdep_hardirqs_on+0x98/0x150
[  224.595018][ T8406]  do_syscall_64+0x55/0xb0
[  224.599664][ T8406]  ? clear_bhb_loop+0x40/0x90
[  224.604513][ T8406]  ? clear_bhb_loop+0x40/0x90
[  224.609361][ T8406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.615487][ T8406] RIP: 0033:0x7fa06058eec9
[  224.619950][ T8406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.640332][ T8406] RSP: 002b:00007fa05e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  224.648791][ T8406] RAX: ffffffffffffffda RBX: 00007fa0607e5fa0 RCX: 00007fa06058eec9
[  224.657763][ T8406] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004
[  224.666476][ T8406] RBP: 00007fa060611f91 R08: 0000000000000000 R09: 0000000000000000
[  224.674615][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.683140][ T8406] R13: 00007fa0607e6038 R14: 00007fa0607e5fa0 R15: 00007ffd4a1d37f8
[  224.692211][ T8406]  </TASK>
[  225.072575][ T8409] loop6: detected capacity change from 0 to 40427
[  225.125960][ T8409] F2FS-fs (loop6): invalid crc value
[  225.154755][ T8409] F2FS-fs (loop6): Found nat_bits in checkpoint