last executing test programs:

8.249904866s ago: executing program 3 (id=446):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='yeah', 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, '\\M'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000000c0)}, 0x20)
shutdown(r0, 0x1)

6.507869392s ago: executing program 3 (id=451):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8014)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r3, 0x0, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="750a00000000add0f7b63d88b45e4314d7f9000061119c00000000001800000000000000000000000000000095000000000000008660cc5f8bdb110cfbda627378411c2d79db48bde7ac882d2355fc208af51e926807eef382cef4269437d010f20d13694b7359"], &(0x7f0000000000)='GPL\x00'}, 0x80)

4.878144719s ago: executing program 2 (id=452):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

4.786378086s ago: executing program 3 (id=453):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0)
syz_open_dev$vcsu(&(0x7f00000003c0), 0x6, 0x622080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

4.61108559s ago: executing program 3 (id=456):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept4$inet(r1, 0x0, 0x0, 0x80000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cec1000000000000000000008500000030000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97}, {&(0x7f0000000240)=""/121}, {&(0x7f0000000340)=""/107}, {&(0x7f00000001c0)=""/12}, {&(0x7f00000003c0)=""/124}, {&(0x7f0000001cc0)=""/213}, {&(0x7f0000000580)=""/181}], 0x0, &(0x7f00000009c0)=""/4096}, 0xbac00000}, {{&(0x7f00000006c0), 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214}, {&(0x7f0000000840)=""/201}]}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207}], 0x0, &(0x7f0000001b40)=""/173}, 0x7a}], 0x400000000000273, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
r3 = socket$kcm(0x29, 0xd, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

4.268017317s ago: executing program 0 (id=459):
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000ff8000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)

3.803870573s ago: executing program 0 (id=461):
r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
mkdirat(r0, &(0x7f0000000340)='./file3\x00', 0x21)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r1, 0x10, 0x0)
getdents64(r1, 0x0, 0x30)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r4, 0xfffffffffffffffc, {0x1, 0xf0}}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="0c7069647320b3b8f701c10bbb507a640cc09ae57382ba5ba2aac0314b1feaa5eb70aca4f05f561efcfd7db2b616636cc7e96943a053acb20938e2d0391691c0d499204e821954abc03ff7b0c64dea3bf1f9f55404f0c2f96d9a0856e7b4"], 0x6)
setxattr$security_evm(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000600), &(0x7f0000000640)=@v1={0x2, "bf99af05e2a79c99"}, 0x9, 0x0)
write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xe, 0xf}}}, 0x24}}, 0xc84dddeeaf4abca3)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="54000000100001042abd70000008000000000000", @ANYRES32=0x0, @ANYBLOB="9980030004000000200012800b00010065727370616e0000100002800400120005001600000e0000140003"], 0x54}, 0x1, 0x0, 0x0, 0x24008400}, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x20, 0x0, 0x0, @empty, @dev, {[@hopopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xfc, 0xd600, [0x4]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00'})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000fa)

3.613472968s ago: executing program 3 (id=462):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
futex(&(0x7f0000000080)=0x2, 0x2, 0x2, &(0x7f00000001c0)={r1, r2+10000000}, &(0x7f0000000200)=0x1, 0x1)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

3.416149114s ago: executing program 3 (id=464):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000002c0)="0f1fb801d7d8fe91cff11cbc26d3b185", 0x10)
setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10)
connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="00000108000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="07da17"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.269256125s ago: executing program 2 (id=465):
r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x101002)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x8, 0x1, "00017555d000", "02000400", "03000006", '\x00', ['\x00', "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]})

3.048128232s ago: executing program 2 (id=467):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000033000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff000000000000000033"], 0x254}}, 0x0)

3.047907932s ago: executing program 1 (id=468):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, 0x0}, 0x94)

2.95133521s ago: executing program 1 (id=469):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xfffffffffffffff7, 0x8)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10)
listen(r0, 0x0)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
ioctl$sock_netdev_private(r1, 0x89f9, &(0x7f0000000100)="20ce85a104e7f40daf5bfaf54d6c00f6d0c837a03b1912a96b37d31cf327cc3241de574f211e0a6b852cfb22e0fcca4f683e89ba45ba3969c357b740b78800c50fa7ffd36f43281e7a3ca03e404bd5907dd05c34f4dee570055389d4ddb9ec282de02e7f7012065eac062b45659bbbe6e20efe6cc618c8fa19e85fbba6d90fd87c851264fc2bfbe1bf36df2729434e746d4124cff3ee06c91168dae278b2f179f3")
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
close(r5)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2004410, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xfff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10001, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000001)
ioctl$TCXONC(r6, 0x540a, 0x0)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1)
recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b40)=""/90, 0x5a}], 0x1}, 0x14}], 0x1, 0x10100, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x45c0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00')
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2ac0, 0x0)

2.828962049s ago: executing program 2 (id=470):
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000080ff00000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)

2.708120849s ago: executing program 0 (id=471):
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b5300281742b2a8b6abf0e91022b0f45f8665c2cef73284e467098675214d37545ac9abd61f7c4e9786ab4a0a799eb36524cc78ad56e0b342c9fd116fd04e2d6ccb7e9624867679d50fb2dd5847b9eaec97d9575071aedb8bdb99916ec8c8932dad9df2cce5a3b425a6552c6ba1524ce764911200", @ANYRES16=0x0, @ANYBLOB="01002cbd7000ffdbdf250c00000020000180140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00')
getdents(r2, &(0x7f0000000640)=""/4109, 0x100d)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x20048805}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc401)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f00000002c0)={0xffffffff, 0x1, 0x0, 'queue0\x00', 0x3})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b5300281742b2a8b6abf0e91022b0f45f8665c2cef73284e467098675214d37545ac9abd61f7c4e9786ab4a0a799eb36524cc78ad56e0b342c9fd116fd04e2d6ccb7e9624867679d50fb2dd5847b9eaec97d9575071aedb8bdb99916ec8c8932dad9df2cce5a3b425a6552c6ba1524ce764911200", @ANYRES16=0x0, @ANYBLOB="01002cbd7000ffdbdf250c00000020000180140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') (async)
getdents(r2, &(0x7f0000000640)=""/4109, 0x100d) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc401) (async)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f00000002c0)={0xffffffff, 0x1, 0x0, 'queue0\x00', 0x3}) (async)

2.350622957s ago: executing program 2 (id=472):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$sock(r0, &(0x7f0000000900)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x8001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x2, 0x1, 0x1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="28f9edcbac9f8c802cdd49f7f9aeda7f26b0c4de06ef7197851c98f1375d825bf5d66aa2468fa9f70fedbfecf850f85188", 0x31}, {&(0x7f0000000600)="a3644ce0e6d641368b62002c321d68dda4c06b130c65db298094d2cd6f22a290853a55cf015137efdfb8d077817be189e9c8f1c7f3aebe5402190c566743176f2beb3c6fb3cdcc02d5c1de46082aee4446bb47070d224a53d3c6b522f3c0ea4d512e8aa3a6e0f5c4bb", 0x69}, {&(0x7f00000007c0)="3349ede04a0fae2c80db85b35781c2d78687d65d34f3f1409a4c4038b1b687ac26de7d2f26b943f7504b8d19f92b990f0703f9db49345db19b92fcb5bd8b42337a982682920cfd1f0e0baaa3428d19d2846f74f327bf74d6b92fe7aac3fe524e72c5bd1386ebeb2d3810025716ffb48ae6f93a5ba4a12b25271b89f08a968e636b4ad8", 0x83}], 0x3, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x60}, 0x4000054)
close(0x3)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052000102"], 0x14}}, 0x40044c4)
recvmmsg$unix(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
r3 = bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

810.320897ms ago: executing program 2 (id=473):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x92}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r1)
sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00')
pread64(r4, &(0x7f000004b680)=""/102400, 0x19000, 0x7)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x120c408, &(0x7f00000000c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@compress}, {@barrier}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000004000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)
mkdir(0x0, 0x0)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)

720.034634ms ago: executing program 1 (id=474):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

632.994941ms ago: executing program 1 (id=475):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

588.093124ms ago: executing program 0 (id=476):
r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x101002)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x8, 0x1, "00017555d000", "02000400", "03000006", '\x00', ['\x00', "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]})

428.104517ms ago: executing program 0 (id=477):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, 0x0}, 0x94)

238.107682ms ago: executing program 0 (id=478):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x1)
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22)
fcntl$setlease(r0, 0x400, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
r2 = shmget$private(0x0, 0xf000, 0x100, &(0x7f000023b000/0xf000)=nil)
shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0xf000)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x3, 0x4, 0x1)
r3 = userfaultfd(0x80000)
ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f00003ad000/0x4000)=nil, &(0x7f00003ff000/0x4000)=nil, 0x4000, 0x3})
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080))

130.77105ms ago: executing program 1 (id=479):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f000000000200004"], 0x232)

0s ago: executing program 1 (id=480):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000003c000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff000000000000000033"], 0x254}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts.
[   80.709891][ T5759] cgroup: Unknown subsys name 'net'
[   80.848029][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.709484][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.355239][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.364918][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.372945][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.381277][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.389184][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.396552][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.426663][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.435299][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.443056][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.451456][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.459424][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.468348][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.554249][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.563237][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.571611][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.580452][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.588509][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.605032][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.711495][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.720122][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.727842][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.736395][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.744587][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.752085][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.904443][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   85.060545][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   85.172162][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.179453][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.186858][ T5769] bridge_slave_0: entered allmulticast mode
[   85.194625][ T5769] bridge_slave_0: entered promiscuous mode
[   85.241767][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.249461][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.256981][ T5769] bridge_slave_1: entered allmulticast mode
[   85.265686][ T5769] bridge_slave_1: entered promiscuous mode
[   85.322666][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.329996][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.337163][ T5774] bridge_slave_0: entered allmulticast mode
[   85.344444][ T5774] bridge_slave_0: entered promiscuous mode
[   85.392857][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.400304][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.407585][ T5774] bridge_slave_1: entered allmulticast mode
[   85.415025][ T5774] bridge_slave_1: entered promiscuous mode
[   85.425231][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.437657][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.543113][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.559340][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.574744][ T5769] team0: Port device team_slave_0 added
[   85.608920][ T5769] team0: Port device team_slave_1 added
[   85.660434][ T5774] team0: Port device team_slave_0 added
[   85.666586][ T5781] chnl_net:caif_netlink_parms(): no params data found
[   85.679768][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.686729][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.714254][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.728072][ T5774] team0: Port device team_slave_1 added
[   85.746254][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   85.763208][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.770565][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.797987][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.828796][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.835807][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.861937][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.914695][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.921908][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.948049][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.046594][ T5769] hsr_slave_0: entered promiscuous mode
[   86.053725][ T5769] hsr_slave_1: entered promiscuous mode
[   86.127197][ T5774] hsr_slave_0: entered promiscuous mode
[   86.134659][ T5774] hsr_slave_1: entered promiscuous mode
[   86.141205][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.149175][ T5774] Cannot create hsr debugfs directory
[   86.180223][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.187443][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.194913][ T5785] bridge_slave_0: entered allmulticast mode
[   86.202118][ T5785] bridge_slave_0: entered promiscuous mode
[   86.211817][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.219055][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.226434][ T5781] bridge_slave_0: entered allmulticast mode
[   86.234465][ T5781] bridge_slave_0: entered promiscuous mode
[   86.274206][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.281729][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.289110][ T5785] bridge_slave_1: entered allmulticast mode
[   86.296177][ T5785] bridge_slave_1: entered promiscuous mode
[   86.303727][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.311136][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.319073][ T5781] bridge_slave_1: entered allmulticast mode
[   86.326284][ T5781] bridge_slave_1: entered promiscuous mode
[   86.396387][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.409094][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.444832][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.484540][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.499617][ T5772] Bluetooth: hci0: command tx timeout
[   86.547881][ T5781] team0: Port device team_slave_0 added
[   86.557293][ T5781] team0: Port device team_slave_1 added
[   86.568633][ T5772] Bluetooth: hci1: command tx timeout
[   86.606914][ T5785] team0: Port device team_slave_0 added
[   86.641653][ T5785] team0: Port device team_slave_1 added
[   86.653514][ T5772] Bluetooth: hci2: command tx timeout
[   86.666102][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.673491][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.699592][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.765643][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.772962][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.799242][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.810157][ T5772] Bluetooth: hci3: command tx timeout
[   86.819201][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.826275][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.852654][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.866252][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.873606][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.899804][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.965065][ T5781] hsr_slave_0: entered promiscuous mode
[   86.971684][ T5781] hsr_slave_1: entered promiscuous mode
[   86.979613][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.987204][ T5781] Cannot create hsr debugfs directory
[   87.072416][ T5785] hsr_slave_0: entered promiscuous mode
[   87.079498][ T5785] hsr_slave_1: entered promiscuous mode
[   87.086111][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.093790][ T5785] Cannot create hsr debugfs directory
[   87.178957][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.191638][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.232823][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.242959][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.381741][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.396550][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.406852][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.446375][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.552062][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.563822][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.574955][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.588243][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.694143][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.704133][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.716614][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.728104][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.831227][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.861415][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.896413][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   87.915385][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   87.961906][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.969319][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.981386][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.988688][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.005704][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.012901][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.024702][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.031914][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.045748][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.129808][ T5781] 8021q: adding VLAN 0 to HW filter on device team0
[   88.165726][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.172903][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.185085][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.192352][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.239489][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.283908][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   88.349744][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.357245][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.393222][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.400459][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.572935][ T5772] Bluetooth: hci0: command tx timeout
[   88.649669][ T5772] Bluetooth: hci1: command tx timeout
[   88.728943][ T5772] Bluetooth: hci2: command tx timeout
[   88.795308][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.817327][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.888762][ T5772] Bluetooth: hci3: command tx timeout
[   88.930812][ T5769] veth0_vlan: entered promiscuous mode
[   88.956999][ T5769] veth1_vlan: entered promiscuous mode
[   88.996148][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.020222][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.066475][ T5774] veth0_vlan: entered promiscuous mode
[   89.082701][ T5769] veth0_macvtap: entered promiscuous mode
[   89.111444][ T5769] veth1_macvtap: entered promiscuous mode
[   89.146776][ T5774] veth1_vlan: entered promiscuous mode
[   89.189038][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.232677][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.245147][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.255846][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.264840][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.274890][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.287734][ T5774] veth0_macvtap: entered promiscuous mode
[   89.301160][ T5774] veth1_macvtap: entered promiscuous mode
[   89.315418][ T5781] veth0_vlan: entered promiscuous mode
[   89.326352][ T5785] veth0_vlan: entered promiscuous mode
[   89.361415][ T5785] veth1_vlan: entered promiscuous mode
[   89.391564][ T5781] veth1_vlan: entered promiscuous mode
[   89.414314][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.425909][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.438059][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.454725][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.465429][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.478911][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.512842][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.522674][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.532653][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.541471][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.561276][ T5785] veth0_macvtap: entered promiscuous mode
[   89.581425][ T5785] veth1_macvtap: entered promiscuous mode
[   89.653248][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.655455][ T5781] veth0_macvtap: entered promiscuous mode
[   89.664660][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.696129][ T5781] veth1_macvtap: entered promiscuous mode
[   89.710970][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.721643][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.732584][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.743236][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.755360][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.795055][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.806561][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.816563][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.827202][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.839378][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.857008][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.870100][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.903715][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.912664][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.923052][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.933852][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.953181][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.966472][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.977516][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.989883][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.999897][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.011589][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.021985][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.033650][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.045027][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.081148][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.094355][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.105651][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.116178][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.126330][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.136822][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.153859][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.186451][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.193965][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.194737][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.211864][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.221292][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.230556][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.355881][ T5860] syz.1.2[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   90.380682][ T5860] loop1: detected capacity change from 0 to 16
[   90.426986][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.432399][ T5860] erofs: (device loop1): mounted with root inode @ nid 36.
[   90.452670][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.497292][ T5860] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86
[   90.531729][ T5860] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86
[   90.545463][   T28] audit: type=1800 audit(1765713163.774:2): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file1" dev="loop1" ino=86 res=0 errno=0
[   90.573813][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.616524][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.649458][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.649687][ T5772] Bluetooth: hci0: command tx timeout
[   90.657295][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.730339][ T5772] Bluetooth: hci1: command tx timeout
[   90.809106][ T5772] Bluetooth: hci2: command tx timeout
[   90.832512][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.872495][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.982178][ T5772] Bluetooth: hci3: command tx timeout
[   91.030006][ T5868] netlink: 'syz.3.6': attribute type 41 has an invalid length.
[   91.075088][ T5866] loop0: detected capacity change from 0 to 64
[   91.100751][ T5866] hfs: unable to parse mount options
[   91.564209][ T5879] loop2: detected capacity change from 0 to 512
[   91.825797][ T5879] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6).
[   91.853328][ T5877] loop3: detected capacity change from 0 to 32768
[   91.866765][ T5877] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.9 (5877)
[   91.883221][ T5879] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   91.916128][ T5879] EXT4-fs (loop2): mount failed
[   91.928166][ T5877] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   91.941970][ T5877] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[   91.951342][ T5877] BTRFS info (device loop3): force zlib compression, level 3
[   91.958798][ T5877] BTRFS info (device loop3): force clearing of disk cache
[   91.965948][ T5877] BTRFS info (device loop3): setting nodatasum
[   91.972469][ T5877] BTRFS info (device loop3): use zlib compression, level 3
[   91.980050][ T5877] BTRFS info (device loop3): enabling disk space caching
[   91.987114][ T5877] BTRFS info (device loop3): disk space caching is enabled
[   92.096378][ T5877] BTRFS info (device loop3): enabling ssd optimizations
[   92.097834][  T966] cfg80211: failed to load regulatory.db
[   92.104488][ T5877] BTRFS info (device loop3): auto enabling async discard
[   92.121575][ T5877] BTRFS info (device loop3): rebuilding free space tree
[   92.164783][ T5877] BTRFS info (device loop3): disabling free space tree
[   92.172548][ T5877] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   92.184091][ T5877] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   92.657373][ T5909] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9'.
[   92.928407][ T5775] Bluetooth: hci1: command tx timeout
[   92.934191][ T5775] Bluetooth: hci2: command tx timeout
[   92.939909][ T5772] Bluetooth: hci0: command tx timeout
[   93.049964][   T51] Bluetooth: hci3: command tx timeout
[   93.268730][ T5774] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   93.469461][ T5890] loop1: detected capacity change from 0 to 32768
[   93.490017][ T5890] =======================================================
[   93.490017][ T5890] WARNING: The mand mount option has been deprecated and
[   93.490017][ T5890]          and is ignored by this kernel. Remove the mand
[   93.490017][ T5890]          option from the mount to silence this warning.
[   93.490017][ T5890] =======================================================
[   93.672558][ T5913] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[   93.740724][ T5890] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   93.842647][ T5890] (syz.1.11,5890,1):ocfs2_clear_journal_error:1147 ERROR: File system error -318767104 recorded in journal 0.
[   93.879818][ T5890] (syz.1.11,5890,0):ocfs2_clear_journal_error:1149 ERROR: File system on device loop1 needs checking.
[   93.894038][ T5890] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   94.219722][ T5920] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[   94.296648][ T5922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.428660][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   94.437942][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.767574][ T5890] (syz.1.11,5890,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[   94.777946][ T5890] (syz.1.11,5890,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[   94.958925][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   95.451762][ T5769] ocfs2: Unmounting device (7,1) on (node local)
[   95.459596][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!!
[   95.469146][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.479090][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.803238][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'.
[   96.784543][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   96.793430][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   96.809089][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   96.817334][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   96.858015][ T5954] loop1: detected capacity change from 0 to 64
[   96.888563][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   98.986020][ T5957] loop1: detected capacity change from 0 to 128
[   99.352496][ T5960] loop0: detected capacity change from 0 to 32768
[   99.369124][ T5960] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.26 (5960)
[   99.389178][ T5960] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   99.399767][ T5960] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   99.409137][ T5960] BTRFS info (device loop0): force zlib compression, level 3
[   99.416566][ T5960] BTRFS info (device loop0): force clearing of disk cache
[   99.423791][ T5960] BTRFS info (device loop0): setting nodatasum
[   99.430060][ T5960] BTRFS info (device loop0): use zlib compression, level 3
[   99.437310][ T5960] BTRFS info (device loop0): enabling disk space caching
[   99.444456][ T5960] BTRFS info (device loop0): disk space caching is enabled
[   99.542416][ T5960] BTRFS info (device loop0): enabling ssd optimizations
[   99.551099][ T5960] BTRFS info (device loop0): auto enabling async discard
[   99.580634][ T5960] BTRFS info (device loop0): rebuilding free space tree
[   99.605145][ T5960] BTRFS info (device loop0): disabling free space tree
[   99.612458][ T5960] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   99.622281][ T5960] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   99.658000][ T5981] loop2: detected capacity change from 0 to 64
[  100.038181][ T5990] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.26'.
[  100.278511][ T5983] loop1: detected capacity change from 0 to 1024
[  100.369302][ T5983] hfsplus: type requires a 4 character value
[  100.375565][ T5983] hfsplus: unable to parse mount options
[  100.643954][ T5785] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  101.115947][ T6003] fuse: Bad value for 'rootmode'
[  101.346148][ T6010] loop1: detected capacity change from 0 to 1024
[  101.413065][ T6010] EXT4-fs (loop1): bad block size 16384
[  101.498217][ T6010] loop1: detected capacity change from 0 to 1024
[  101.541661][ T6010] EXT4-fs (loop1): bad block size 16384
[  101.617827][ T6010] loop1: detected capacity change from 0 to 1024
[  101.635691][ T6010] EXT4-fs (loop1): bad block size 16384
[  101.897894][ T6010] loop1: detected capacity change from 0 to 1024
[  101.935392][ T6010] EXT4-fs (loop1): bad block size 16384
[  101.993874][ T6010] loop1: detected capacity change from 0 to 1024
[  102.015243][ T6010] EXT4-fs (loop1): bad block size 16384
[  102.093625][ T6010] loop1: detected capacity change from 0 to 1024
[  102.114875][ T6010] EXT4-fs (loop1): bad block size 16384
[  102.202130][ T5999] loop2: detected capacity change from 0 to 32768
[  102.309902][ T5999] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  102.309902][ T5999] 
[  102.428789][ T5999] ERROR: (device loop2): remounting filesystem as read-only
[  103.058835][   T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  103.070427][   T51] Bluetooth: hci0: Injecting HCI hardware error event
[  103.079756][   T51] Bluetooth: hci0: hardware error 0x00
[  103.350528][ T6013] loop3: detected capacity change from 0 to 32768
[  104.055636][ T6029] loop1: detected capacity change from 0 to 32768
[  104.108561][ T6029] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.39 (6029)
[  104.166453][ T6029] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.181223][ T6029] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  104.193306][ T6029] BTRFS info (device loop1): enabling auto defrag
[  104.203986][ T6029] BTRFS info (device loop1): use no compression
[  104.216375][ T6029] BTRFS info (device loop1): turning on flush-on-commit
[  104.224039][ T6029] BTRFS info (device loop1): disabling free space tree
[  104.232224][ T6029] BTRFS error (device loop1): cannot disable free space tree
[  104.244606][ T6029] BTRFS error (device loop1): open_ctree failed: -22
[  104.342224][ T6000] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (6000)
[  104.559355][ T6037] tty tty2: ldisc open failed (-12), clearing slot 1
[  104.658726][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  104.662156][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.44'.
[  104.868994][    T9] usb 3-1: Using ep0 maxpacket: 32
[  104.894174][    T9] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  104.945425][    T9] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  104.979692][ T6050] loop3: detected capacity change from 0 to 1024
[  104.988454][    T9] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  105.091892][    T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  105.113475][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.151323][    T9] usb 3-1: Product: syz
[  105.156000][    T9] usb 3-1: Manufacturer: syz
[  105.198644][    T9] usb 3-1: SerialNumber: syz
[  105.204814][ T6052] loop1: detected capacity change from 0 to 1024
[  105.218249][ T6052] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.230962][ T6052] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  105.235542][   T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  105.267256][    T9] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  105.276345][    T9] imon 3-1:155.0: unable to initialize intf0, err -19
[  105.284553][    T9] imon:imon_probe: failed to initialize context!
[  105.291323][    T9] imon 3-1:155.0: unable to register, err -19
[  105.302826][ T6052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  105.393736][ T6052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.473664][ T6057] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  105.503891][    T9] usb 3-1: USB disconnect, device number 2
[  105.563836][   T48] hfsplus: b-tree write err: -5, ino 4
[  106.129675][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.331492][ T6073] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET)
[  106.842864][ T6080] loop3: detected capacity change from 0 to 16
[  106.911556][ T6080] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock
[  107.248530][   T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  107.952978][   T27] usb 4-1: Using ep0 maxpacket: 32
[  107.974178][   T27] usb 4-1: config 0 has an invalid interface number: 219 but max is 0
[  107.995186][   T27] usb 4-1: config 0 has no interface number 0
[  107.997273][ T6072] loop1: detected capacity change from 0 to 32768
[  108.031073][   T27] usb 4-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  108.038495][ T6072] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.49 (6072)
[  108.065033][ T6072] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  108.102121][ T6072] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  108.139913][   T27] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  108.155905][ T6072] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  108.177961][   T27] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  108.197817][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.205998][ T6072] BTRFS info (device loop1): use lzo compression, level 0
[  108.222770][ T6072] BTRFS info (device loop1): force clearing of disk cache
[  108.233648][ T6072] BTRFS info (device loop1): using free space tree
[  108.234213][ T6089] loop2: detected capacity change from 0 to 16
[  108.267073][   T27] usb 4-1: Product: syz
[  108.272154][   T27] usb 4-1: Manufacturer: syz
[  108.276798][   T27] usb 4-1: SerialNumber: syz
[  108.300678][   T27] usb 4-1: config 0 descriptor??
[  108.319146][ T6081] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  108.328463][ T6089] erofs: (device loop2): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel
[  108.458663][ T6072] BTRFS info (device loop1): enabling ssd optimizations
[  108.496527][ T6072] BTRFS info (device loop1): auto enabling async discard
[  108.547350][ T6072] BTRFS info (device loop1): rebuilding free space tree
[  108.569269][   T27] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz)
[  108.671268][   T27] usb 4-1: USB disconnect, device number 2
[  108.875587][ T5769] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  109.319911][ T6119] loop2: detected capacity change from 0 to 64
[  109.327416][ T6119] hfs: unable to parse mount options
[  109.548502][   T27] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  109.608528][  T966] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  109.627711][ T6111] loop0: detected capacity change from 0 to 32768
[  109.640584][ T6111] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.58 (6111)
[  109.683963][ T6111] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  109.684057][ T6111] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  109.684119][ T6111] BTRFS info (device loop0): setting nodatacow, compression disabled
[  109.684149][ T6111] BTRFS info (device loop0): force clearing of disk cache
[  109.684168][ T6111] BTRFS info (device loop0): enabling ssd optimizations
[  109.684183][ T6111] BTRFS info (device loop0): using spread ssd allocation scheme
[  109.684202][ T6111] BTRFS info (device loop0): turning off barriers
[  109.684226][ T6111] BTRFS info (device loop0): disabling free space tree
[  109.684244][ T6111] BTRFS info (device loop0): turning on sync discard
[  109.684265][ T6111] BTRFS info (device loop0): not using ssd optimizations
[  109.684280][ T6111] BTRFS info (device loop0): not using spread ssd allocation scheme
[  109.766535][ T6111] BTRFS info (device loop0): rebuilding free space tree
[  109.809615][   T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[  109.809681][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.812282][   T27] usb 4-1: config 0 descriptor??
[  109.841397][  T966] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.862560][ T6111] BTRFS info (device loop0): disabling free space tree
[  109.894870][  T966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.894931][  T966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.894963][  T966] usb 2-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  109.894988][  T966] usb 2-1: config 1 interface 1 has no altsetting 0
[  109.898069][  T966] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  109.898127][  T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.898149][  T966] usb 2-1: Product: syz
[  109.898167][  T966] usb 2-1: Manufacturer: syz
[  109.898182][  T966] usb 2-1: SerialNumber: syz
[  109.906688][  T966] usb 2-1: selecting invalid altsetting 0
[  109.907468][  T966] cdc_ether: probe of 2-1:1.0 failed with error -22
[  109.914149][  T966] usb 2-1: selecting invalid altsetting 0
[  109.914175][  T966] usbtest: probe of 2-1:1.1 failed with error -22
[  109.935829][ T6111] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  109.935885][ T6111] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  110.064733][ T6111] BTRFS info (device loop0): balance: start -f
[  110.065315][ T6111] BTRFS info (device loop0): balance: ended with status: 0
[  110.127124][  T966] usb 2-1: USB disconnect, device number 2
[  110.205631][ T5785] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  110.246778][   T27] apple 0003:05AC:029F.0001: unbalanced delimiter at end of report description
[  110.262154][   T27] apple 0003:05AC:029F.0001: parse failed
[  110.284901][   T27] apple: probe of 0003:05AC:029F.0001 failed with error -22
[  110.494644][ T6120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.526100][ T6120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.559375][   T27] usb 4-1: USB disconnect, device number 3
[  111.832395][ T6163] loop1: detected capacity change from 0 to 4096
[  111.916653][ T6163] NILFS (loop1): invalid segment: Inconsistency found
[  111.959158][ T6163] NILFS (loop1): trying rollback from an earlier position
[  111.961731][ T6160] loop0: detected capacity change from 0 to 32768
[  111.975590][ T6160] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.69 (6160)
[  112.008583][ T6160] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  112.019050][ T6160] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  112.028404][ T6160] BTRFS info (device loop0): force zlib compression, level 3
[  112.035866][ T6160] BTRFS info (device loop0): force clearing of disk cache
[  112.043317][ T6160] BTRFS info (device loop0): setting nodatasum
[  112.049635][ T6160] BTRFS info (device loop0): use zlib compression, level 3
[  112.056885][ T6160] BTRFS info (device loop0): enabling disk space caching
[  112.064019][ T6160] BTRFS info (device loop0): disk space caching is enabled
[  112.171595][ T6163] NILFS (loop1): recovery complete
[  112.207624][ T6160] BTRFS info (device loop0): enabling ssd optimizations
[  112.214907][ T6160] BTRFS info (device loop0): auto enabling async discard
[  112.249291][ T6160] BTRFS info (device loop0): rebuilding free space tree
[  112.256511][ T6184] overlayfs: failed to get inode (-116)
[  112.263076][ T6184] overlayfs: failed to get inode (-116)
[  112.272470][ T6184] overlayfs: failed to get inode (-116)
[  112.272746][ T6160] BTRFS info (device loop0): disabling free space tree
[  112.279835][ T6184] overlayfs: failed to get inode (-116)
[  112.285314][ T6160] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  112.301326][ T6160] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  112.316922][ T6185] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.590051][ T6193] loop3: detected capacity change from 0 to 64
[  112.598197][ T6193] hfs: unable to parse mount options
[  112.698582][ T6195] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.69'.
[  113.240598][ T5785] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  113.483487][ T6200] process 'syz.2.77' launched '/dev/fd/3' with NULL argv: empty string added
[  113.575065][ T6201] x_tables: duplicate underflow at hook 2
[  113.587175][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.79'.
[  114.333304][ T6227] loop1: detected capacity change from 0 to 2048
[  114.369595][ T6227] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  114.414477][ T6227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.112439][ T6236] loop2: detected capacity change from 0 to 32768
[  115.152755][ T6236] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.88 (6236)
[  115.172272][ T6236] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  115.183739][ T6236] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  115.183778][ T6236] BTRFS info (device loop2): force zlib compression, level 3
[  115.183799][ T6236] BTRFS info (device loop2): force clearing of disk cache
[  115.183817][ T6236] BTRFS info (device loop2): setting nodatasum
[  115.183831][ T6236] BTRFS info (device loop2): use zlib compression, level 3
[  115.183857][ T6236] BTRFS info (device loop2): enabling disk space caching
[  115.183873][ T6236] BTRFS info (device loop2): disk space caching is enabled
[  115.297588][ T6236] BTRFS info (device loop2): enabling ssd optimizations
[  115.297614][ T6236] BTRFS info (device loop2): auto enabling async discard
[  115.300276][ T6236] BTRFS info (device loop2): rebuilding free space tree
[  115.338003][ T6236] BTRFS info (device loop2): disabling free space tree
[  115.345171][ T6236] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  115.354963][ T6236] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  115.903169][ T6259] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.88'.
[  116.376789][ T5781] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  116.860001][ T6269] loop0: detected capacity change from 0 to 4096
[  116.929167][ T5780] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  116.952460][ T6277] loop2: detected capacity change from 0 to 64
[  117.009446][ T6277] hfs: unable to parse mount options
[  117.093690][ T6277] loop2: detected capacity change from 0 to 256
[  117.967173][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'.
[  119.248555][  T966] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  119.285466][ T6316] loop2: detected capacity change from 0 to 32768
[  119.307218][ T6316] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.106 (6316)
[  119.327959][ T6316] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  119.338386][ T6316] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  119.347750][ T6316] BTRFS info (device loop2): force zlib compression, level 3
[  119.355460][ T6316] BTRFS info (device loop2): force clearing of disk cache
[  119.362697][ T6316] BTRFS info (device loop2): setting nodatasum
[  119.369244][ T6316] BTRFS info (device loop2): use zlib compression, level 3
[  119.376486][ T6316] BTRFS info (device loop2): enabling disk space caching
[  119.383704][ T6316] BTRFS info (device loop2): disk space caching is enabled
[  119.435429][ T6316] BTRFS info (device loop2): enabling ssd optimizations
[  119.442661][ T6316] BTRFS info (device loop2): auto enabling async discard
[  119.454841][ T6316] BTRFS info (device loop2): rebuilding free space tree
[  119.465250][  T966] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.468193][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  119.487489][ T6316] BTRFS info (device loop2): disabling free space tree
[  119.494556][ T6316] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  119.494586][  T966] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  119.505162][ T6316] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  119.560631][  T966] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  119.577227][  T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.597609][  T966] usb 4-1: Product: syz
[  119.610319][  T966] usb 4-1: Manufacturer: syz
[  119.617979][  T966] usb 4-1: SerialNumber: syz
[  119.928350][ T6336] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.106'.
[  120.282575][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.333247][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.483230][ T5781] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  120.511572][  T966] usb 4-1: USB disconnect, device number 4
[  120.511621][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.529513][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.539509][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  120.552736][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  120.561931][    T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  120.578520][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.623699][    T9] usb 1-1: config 0 descriptor??
[  120.803324][    T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  120.829562][    T8] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.858161][    T8] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  120.883016][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  120.892748][    T8] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  120.913117][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.936116][    T8] usb 2-1: config 0 descriptor??
[  121.318785][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  121.328538][    T9] usbhid: probe of 1-1:0.0 failed with error -71
[  121.370054][    T9] usb 1-1: USB disconnect, device number 2
[  121.994613][    T8] hid-alps 0003:044E:120C.0002: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.1-1/input0
[  122.105442][    T8] usb 2-1: USB disconnect, device number 3
[  122.138847][ T5821] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  122.309996][ T6355] 
@0Ù: renamed from bond_slave_1 (while UP)
[  122.325586][ T6349] fido_id[6349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  122.378543][ T5821] usb 3-1: Using ep0 maxpacket: 16
[  122.462439][ T6359] loop3: detected capacity change from 0 to 1024
[  122.475415][ T6359] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.482373][ T6359] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.530322][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  122.565652][ T6359] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  122.577181][ T6359] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  122.650588][ T6355] syzkaller0: entered allmulticast mode
[  122.730773][ T6359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.816973][ T5821] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  122.843184][ T6359] Zero length message leads to an empty skb
[  122.873623][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.022040][ T5821] usb 3-1: Product: syz
[  123.124841][ T5821] usb 3-1: Manufacturer: syz
[  123.185120][ T5821] usb 3-1: SerialNumber: syz
[  123.215054][ T5821] usb 3-1: config 0 descriptor??
[  123.268596][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.285060][ T5821] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  123.343242][ T5821] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  123.559565][ T6365] loop1: detected capacity change from 0 to 32768
[  123.574270][ T6365] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.115 (6365)
[  123.587493][ T5821] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  123.604623][ T6365] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  123.616417][ T6365] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  123.625818][ T6365] BTRFS info (device loop1): force zlib compression, level 3
[  123.633297][ T6365] BTRFS info (device loop1): force clearing of disk cache
[  123.640541][ T6365] BTRFS info (device loop1): setting nodatasum
[  123.646782][ T6365] BTRFS info (device loop1): use zlib compression, level 3
[  123.654132][ T6365] BTRFS info (device loop1): enabling disk space caching
[  123.661263][ T6365] BTRFS info (device loop1): disk space caching is enabled
[  123.838687][ T6388] tmpfs: Bad value for 'huge'
[  123.860923][ T6365] BTRFS info (device loop1): enabling ssd optimizations
[  123.868003][ T6365] BTRFS info (device loop1): auto enabling async discard
[  123.872403][ T5821] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  123.905902][ T6365] BTRFS info (device loop1): rebuilding free space tree
[  123.922314][ T6365] BTRFS info (device loop1): disabling free space tree
[  123.929393][ T6365] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  123.939255][ T6365] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  123.958842][ T5821] em28xx 3-1:0.0: board has no eeprom
[  124.098468][ T5821] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  124.127950][ T5821] em28xx 3-1:0.0: dvb set to bulk mode.
[  124.157570][    T9] em28xx 3-1:0.0: Binding DVB extension
[  124.167905][ T6394] Cannot find set identified by id 0 to match
[  124.215972][ T5821] usb 3-1: USB disconnect, device number 3
[  124.239923][   T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  124.300629][ T5821] em28xx 3-1:0.0: Disconnecting em28xx
[  124.413324][ T6398] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.115'.
[  124.890232][    T9] em28xx 3-1:0.0: Registering input extension
[  124.928902][ T5821] em28xx 3-1:0.0: Closing input extension
[  125.021830][ T5769] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  125.064570][ T5821] em28xx 3-1:0.0: Freeing device
[  125.086632][   T27] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  125.145963][   T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  125.177258][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.206930][   T27] usb 4-1: Product: syz
[  125.213191][   T27] usb 4-1: Manufacturer: syz
[  125.217941][ T6000] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop1 scanned by udevd (6000)
[  125.239232][   T27] usb 4-1: SerialNumber: syz
[  126.834384][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.908862][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.974634][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'.
[  127.312873][   T27] cdc_ncm 4-1:1.0: bind() failure
[  127.342346][   T27] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  127.376700][   T27] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  127.387932][   T27] usbtest: probe of 4-1:1.1 failed with error -71
[  127.409929][   T27] usb 4-1: USB disconnect, device number 5
[  127.662857][ T6431] loop2: detected capacity change from 0 to 256
[  127.871061][ T6429] loop0: detected capacity change from 0 to 32768
[  127.879705][ T6429] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11
[  127.891602][ T6000] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  128.124188][ T5780] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11
[  128.286047][ T6433] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.128'.
[  128.668572][ T6435] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[  129.047285][ T6437] loop3: detected capacity change from 0 to 32768
[  129.055833][ T6437] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11
[  129.619134][ T6447] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.129'.
[  130.137408][ T5780] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11
[  130.208884][ T6454] capability: warning: `syz.3.133' uses deprecated v2 capabilities in a way that may be insecure
[  130.227276][ T6457] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  130.569226][ T6459] loop2: detected capacity change from 0 to 4096
[  130.576878][ T6459] ntfs3: Unknown parameter 'cpuset.memory_spread_slab'
[  130.650681][ T5778] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  131.532758][ T6475] loop1: detected capacity change from 0 to 32768
[  131.561340][ T6475] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  131.571604][ T6475] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  131.580940][ T6475] BTRFS info (device loop1): force zlib compression, level 3
[  131.588362][ T6475] BTRFS info (device loop1): force clearing of disk cache
[  131.595500][ T6475] BTRFS info (device loop1): setting nodatasum
[  131.602953][ T6475] BTRFS info (device loop1): use zlib compression, level 3
[  131.610251][ T6475] BTRFS info (device loop1): enabling disk space caching
[  131.617283][ T6475] BTRFS info (device loop1): disk space caching is enabled
[  131.732656][ T6475] BTRFS info (device loop1): enabling ssd optimizations
[  131.739855][ T6475] BTRFS info (device loop1): auto enabling async discard
[  131.749625][ T6475] BTRFS info (device loop1): rebuilding free space tree
[  131.818463][ T6475] BTRFS info (device loop1): disabling free space tree
[  131.825957][ T6475] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  131.835781][ T6475] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  132.284810][ T6500] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.140'.
[  132.840080][ T5769] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  133.143771][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  133.151081][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  134.020462][ T5780] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop1 scanned by udevd (5780)
[  135.674881][ T6520] loop1: detected capacity change from 0 to 128
[  135.723114][ T6522] 
@0Ù: renamed from bond_slave_1 (while UP)
[  135.741456][ T6520] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.764802][ T6520] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.827486][ T6524] input: syz1 as /devices/virtual/input/input7
[  138.049279][ T6522] syzkaller0: entered allmulticast mode
[  139.764121][ T6541] loop0: detected capacity change from 0 to 32768
[  139.824484][ T6541] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11
[  140.322815][ T6549] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.156'.
[  141.000558][ T5780] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11
[  141.244037][ T6554] loop3: detected capacity change from 0 to 1024
[  141.271698][ T6557] loop2: detected capacity change from 0 to 164
[  141.304400][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.326960][ T6557] rock: corrupted directory entry. extent=32, offset=131072, size=237
[  141.339604][ T6554] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  141.449089][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  141.501402][ T6554] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.161: lblock 2 mapped to illegal pblock 2 (length 1)
[  141.517586][ T6562] loop1: detected capacity change from 0 to 2048
[  141.580313][ T6562] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.620610][ T6554] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  141.645686][ T6554] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.161: lblock 0 mapped to illegal pblock 48 (length 1)
[  141.663377][ T6566] 
@0Ù: renamed from bond_slave_1 (while UP)
[  141.668486][ T6554] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  141.682974][ T6554] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.161: Failed to acquire dquot type 0
[  141.697968][    T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.713613][ T6554] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem
[  141.726627][    T9] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  141.749467][ T6554] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.161: mark_inode_dirty error
[  141.766140][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  141.779419][    T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  141.780423][ T6566] syzkaller0: entered allmulticast mode
[  141.794620][ T6554] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[  141.805824][ T6554] EXT4-fs (loop3): 1 orphan inode deleted
[  141.815221][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.823732][ T2976] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  141.845259][ T6554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.869990][    T9] usb 1-1: config 0 descriptor??
[  141.875776][ T2976] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  141.896628][ T2976] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:9: Failed to release dquot type 0
[  141.965245][ T6568] netlink: 'syz.1.164': attribute type 1 has an invalid length.
[  141.987845][ T6570] netlink: 44 bytes leftover after parsing attributes in process `syz.3.161'.
[  142.126080][ T6568] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.334254][    T9] sony 0003:054C:0268.0003: hiddev0,hidraw0: USB HID v80.05 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0
[  142.363548][    T9] sony 0003:054C:0268.0003: failed to claim input
[  142.503390][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.527857][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.844681][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.861582][   T34] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  142.878808][   T34] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  142.887390][   T34] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:2: Failed to release dquot type 0
[  142.901992][ T5774] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0
[  142.999813][ T5774] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem
[  143.047603][ T5774] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  144.329951][ T6601] loop3: detected capacity change from 0 to 1024
[  144.423142][ T6604] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.170'.
[  144.960591][ T5821] usb 1-1: USB disconnect, device number 3
[  145.109198][   T11] hfsplus: b-tree write err: -5, ino 4
[  145.279833][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.175'.
[  145.389229][ T6619] loop3: detected capacity change from 0 to 64
[  145.506225][ T6619] hfs: unable to parse mount options
[  147.415787][ T6634] netlink: 'syz.1.182': attribute type 3 has an invalid length.
[  147.748379][ T6634] syz.1.182 (6634) used greatest stack depth: 18632 bytes left
[  148.375496][ T6646] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.184'.
[  152.572291][ T6666] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  153.078653][ T6675] loop0: detected capacity change from 0 to 4096
[  153.112038][ T6675] NILFS (loop0): mounting unchecked fs
[  153.130484][ T6675] NILFS (loop0): invalid segment: Sequence number mismatch
[  153.137777][ T6675] NILFS (loop0): trying rollback from an earlier position
[  153.185169][ T6662] loop3: detected capacity change from 0 to 32768
[  153.191954][ T6675] NILFS (loop0): recovery complete
[  153.215686][ T6662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.188 (6662)
[  153.241988][ T6676] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.262535][ T6662] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.286770][ T6662] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  153.296411][ T6662] BTRFS info (device loop3): using free space tree
[  153.375887][ T1083] BTRFS warning (device loop3): checksum verify failed on logical 5341184 mirror 1 wanted 0x823bfd7f7e9be03398f3b4608dbcdb455eebd9c4b9dd73a747777bf050b6b650 found 0x531f781bb2fd5f26f61cb9140f3cff820a988965e05f481094c090805e881955 level 0
[  153.404424][ T6662] BTRFS error (device loop3): failed to load root free space
[  153.483477][ T6674] loop1: detected capacity change from 0 to 32768
[  153.521197][ T6674] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.194 (6674)
[  153.603723][ T6674] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  153.622462][ T6662] BTRFS error (device loop3): open_ctree failed: -5
[  153.628707][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'.
[  153.642764][ T6674] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  153.704386][ T6674] BTRFS info (device loop1): using free space tree
[  153.878488][ T6674] BTRFS info (device loop1): enabling ssd optimizations
[  153.889712][ T6674] BTRFS info (device loop1): auto enabling async discard
[  155.008209][ T5769] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  155.813753][ T6755] loop0: detected capacity change from 0 to 128
[  155.959660][ T6754] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  156.012192][ T6754] FAT-fs (loop0): Filesystem has been set read-only
[  156.043137][ T6752] loop3: detected capacity change from 0 to 32768
[  156.052908][ T6752] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.205 (6752)
[  156.079949][ T6752] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  156.091854][ T6752] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  156.101199][ T6752] BTRFS info (device loop3): force zlib compression, level 3
[  156.108653][ T6752] BTRFS info (device loop3): force clearing of disk cache
[  156.115805][ T6752] BTRFS info (device loop3): setting nodatasum
[  156.122127][ T6752] BTRFS info (device loop3): use zlib compression, level 3
[  156.129471][ T6752] BTRFS info (device loop3): enabling disk space caching
[  156.136543][ T6752] BTRFS info (device loop3): disk space caching is enabled
[  156.322016][ T6752] BTRFS info (device loop3): enabling ssd optimizations
[  156.329333][ T6752] BTRFS info (device loop3): auto enabling async discard
[  156.348430][ T6752] BTRFS info (device loop3): rebuilding free space tree
[  156.377415][ T6752] BTRFS info (device loop3): disabling free space tree
[  156.384462][ T6752] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  156.394723][ T6752] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  156.430775][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'.
[  156.565538][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'.
[  156.946333][ T6790] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.205'.
[  157.640550][ T5774] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  157.732330][ T6799] loop1: detected capacity change from 0 to 512
[  157.769429][ T6000] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop3 scanned by udevd (6000)
[  157.841811][ T6799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.953224][ T6799] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.056394][ T6799] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 18: comm syz.1.210: lblock 23 mapped to illegal pblock 18 (length 1)
[  158.235874][ T6110] IPVS: starting estimator thread 0...
[  158.309461][ T6816] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  158.348492][ T6815] IPVS: using max 17 ests per chain, 40800 per kthread
[  160.015539][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.255040][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'.
[  160.433088][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'.
[  160.788434][ T6837] loop1: detected capacity change from 0 to 32768
[  160.830459][ T6837] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  161.310195][ T6846] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.216'.
[  161.751359][ T6000] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  161.976781][ T6852] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  162.216867][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  162.518479][    T9] usb 4-1: Using ep0 maxpacket: 8
[  162.544159][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  162.553993][    T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  162.578470][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.613500][    T9] usb 4-1: Product: syz
[  162.638400][    T9] usb 4-1: Manufacturer: syz
[  162.643066][    T9] usb 4-1: SerialNumber: syz
[  162.684532][    T9] usb 4-1: config 0 descriptor??
[  162.706630][    T9] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[  162.909707][    T9] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[  162.939564][    T9] snd_usb_toneport: probe of 4-1:0.0 failed with error -22
[  163.135563][   T23] usb 4-1: USB disconnect, device number 6
[  163.299349][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'.
[  163.355556][ T6870] loop0: detected capacity change from 0 to 32768
[  163.363559][ T6870] (syz.0.229,6870,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "barrie" or missing value
[  163.379306][ T6870] (syz.0.229,6870,1):ocfs2_fill_super:1178 ERROR: status = -22
[  165.043003][ T6900] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.237'.
[  165.627765][   T51] Bluetooth: hci2: command tx timeout
[  165.974243][ T6899] loop3: detected capacity change from 0 to 8192
[  166.013784][ T6912] loop0: detected capacity change from 0 to 128
[  166.036345][ T6899] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  166.073356][ T6899] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  166.139254][ T6899] REISERFS (device loop3): using ordered data mode
[  166.186991][ T6899] reiserfs: using flush barriers
[  166.288672][ T6899] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  166.355364][ T6899] REISERFS (device loop3): checking transaction log (loop3)
[  166.374463][ T6899] REISERFS (device loop3): Using r5 hash to sort names
[  166.391399][ T6899] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  166.412726][ T6899] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  166.452650][ T6899] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  166.482686][ T6899] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  166.514335][ T6899] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  166.969032][    T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  167.160452][ T6920] loop1: detected capacity change from 0 to 32768
[  167.170039][ T6920] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.248 (6920)
[  167.206096][    T8] usb 4-1: config 10 has an invalid interface number: 38 but max is 0
[  167.234737][    T8] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  167.253916][    T8] usb 4-1: config 10 has no interface number 0
[  167.264240][ T6920] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.276672][    T8] usb 4-1: config 10 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  167.291943][ T6920] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  167.306656][ T6920] BTRFS info (device loop1): using free space tree
[  167.345659][    T8] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=a4.a6
[  167.384492][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.398784][    T8] usb 4-1: Product: syz
[  167.403019][    T8] usb 4-1: Manufacturer: syz
[  167.419685][    T8] usb 4-1: SerialNumber: syz
[  167.527051][ T6920] BTRFS info (device loop1): enabling ssd optimizations
[  167.585405][ T6920] BTRFS info (device loop1): auto enabling async discard
[  167.610362][ T6943] loop0: detected capacity change from 0 to 256
[  167.725111][ T6945] netlink: 'syz.2.252': attribute type 1 has an invalid length.
[  167.761203][ T6945] 8021q: adding VLAN 0 to HW filter on device bond1
[  167.779117][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.033784][ T6000] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (6000)
[  169.450707][ T6960] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.256'.
[  170.146705][    T8] legousbtower 4-1:10.38: interrupt endpoints not found
[  170.164587][    T8] usb 4-1: USB disconnect, device number 7
[  170.717804][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'.
[  171.094173][ T6986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'.
[  171.168009][ T6985] loop0: detected capacity change from 0 to 8192
[  171.231071][ T6985] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  171.255463][ T6986] loop3: detected capacity change from 0 to 1024
[  171.294159][ T6985] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  171.348086][ T6988] loop1: detected capacity change from 0 to 32768
[  171.364824][ T6988] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  171.377514][ T6985] REISERFS (device loop0): using ordered data mode
[  171.389787][ T6985] reiserfs: using flush barriers
[  171.399039][ T6985] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  171.518944][ T6985] REISERFS (device loop0): checking transaction log (loop0)
[  171.610158][ T6383] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  171.633012][ T6985] REISERFS (device loop0): Using rupasov hash to sort names
[  171.678930][ T6985] REISERFS (device loop0): using 3.5.x disk format
[  171.723091][ T6985] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  171.759474][ T6985] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  171.771597][ T6985] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  171.782724][ T6985] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  171.800677][ T6985] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  171.900031][ T6997] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.269'.
[  172.361019][ T6998] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  172.478132][ T6998] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  173.727966][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'.
[  174.178806][ T5761] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  174.281555][ T1083] hfsplus: bad catalog file entry
[  174.387536][ T5761] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  174.413834][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.435617][ T5761] usb 2-1: Product: syz
[  174.452142][ T5761] usb 2-1: Manufacturer: syz
[  174.461362][ T5761] usb 2-1: SerialNumber: syz
[  174.481258][ T7024] loop0: detected capacity change from 0 to 32768
[  174.481726][ T5761] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  174.505614][ T7024] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11
[  174.537701][   T23] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  174.592938][ T5780] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  175.034992][ T7029] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.279'.
[  175.611965][ T5761] usb 2-1: USB disconnect, device number 4
[  175.628879][   T23] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  175.639698][   T23] ath9k_htc: Failed to initialize the device
[  175.675722][ T7033] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  175.684341][ T5761] usb 2-1: ath9k_htc: USB layer deinitialized
[  176.419055][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'.
[  177.659769][ T7073] loop1: detected capacity change from 0 to 1024
[  177.735407][ T7073] loop1: detected capacity change from 0 to 128
[  177.787770][ T7073] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  177.838567][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'.
[  177.846961][ T7081] dccp_v6_rcv: dropped packet with invalid checksum
[  177.862790][ T7073] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  178.075632][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'.
[  178.482003][ T7096] loop0: detected capacity change from 0 to 1024
[  178.494228][ T7096] EXT4-fs: Ignoring removed orlov option
[  178.502491][ T7096] EXT4-fs: Ignoring removed nomblk_io_submit option
[  178.545880][ T7096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.083251][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  179.386507][ T7110] loop1: detected capacity change from 0 to 2048
[  179.413600][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.711315][ T7110] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.288887][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'.
[  180.315391][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'.
[  181.915331][ T7136] loop3: detected capacity change from 0 to 32768
[  181.930323][ T7136] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  181.940604][ T7136] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  181.949961][ T7136] BTRFS info (device loop3): force zlib compression, level 3
[  181.957385][ T7136] BTRFS info (device loop3): force clearing of disk cache
[  181.964640][ T7136] BTRFS info (device loop3): setting nodatasum
[  181.970900][ T7136] BTRFS info (device loop3): use zlib compression, level 3
[  181.978188][ T7136] BTRFS info (device loop3): enabling disk space caching
[  181.985318][ T7136] BTRFS info (device loop3): disk space caching is enabled
[  182.136013][ T7136] BTRFS info (device loop3): enabling ssd optimizations
[  182.143282][ T7136] BTRFS info (device loop3): auto enabling async discard
[  182.154246][ T7136] BTRFS info (device loop3): rebuilding free space tree
[  182.188586][ T7136] BTRFS info (device loop3): disabling free space tree
[  182.195631][ T7136] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  182.205715][ T7136] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  182.607351][ T7161] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.314'.
[  182.934812][ T7160] loop0: detected capacity change from 0 to 512
[  183.094277][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'.
[  183.154741][ T5774] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  183.196180][ T6000] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  183.509042][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'.
[  184.884251][ T7191] tipc: Started in network mode
[  184.904306][ T7191] tipc: Node identity eed3dcb1488, cluster identity 4711
[  184.912619][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'.
[  184.938029][ T7191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.978575][ T7196] syzkaller0: entered promiscuous mode
[  184.984120][ T7196] syzkaller0: entered allmulticast mode
[  185.087595][ T7189] loop1: detected capacity change from 0 to 32768
[  185.099640][ T7189] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.329 (7189)
[  185.139649][ T7189] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  185.150027][ T7189] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  185.159261][ T7191] tipc: Resetting bearer <eth:syzkaller0>
[  185.166270][ T7189] BTRFS info (device loop1): force zlib compression, level 3
[  185.173785][ T7189] BTRFS info (device loop1): force clearing of disk cache
[  185.181035][ T7189] BTRFS info (device loop1): setting nodatasum
[  185.187239][ T7189] BTRFS info (device loop1): use zlib compression, level 3
[  185.194620][ T7189] BTRFS info (device loop1): enabling disk space caching
[  185.201871][ T7189] BTRFS info (device loop1): disk space caching is enabled
[  185.214311][ T7190] tipc: Resetting bearer <eth:syzkaller0>
[  185.318490][ T7189] BTRFS info (device loop1): enabling ssd optimizations
[  185.325531][ T7189] BTRFS info (device loop1): auto enabling async discard
[  185.336531][ T7189] BTRFS info (device loop1): rebuilding free space tree
[  185.337496][ T7190] tipc: Disabling bearer <eth:syzkaller0>
[  185.383683][ T7189] BTRFS info (device loop1): disabling free space tree
[  185.390780][ T7189] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  185.402273][ T7189] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  185.815246][ T7219] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.329'.
[  186.452628][ T5769] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  189.561068][ T6000] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop1 scanned by udevd (6000)
[  190.847806][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.342'.
[  190.871535][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'.
[  191.052044][ T7256] FAULT_INJECTION: forcing a failure.
[  191.052044][ T7256] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  191.094521][ T7256] CPU: 0 PID: 7256 Comm: syz.0.344 Not tainted syzkaller #0
[  191.101881][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  191.111991][ T7256] Call Trace:
[  191.115309][ T7256]  <TASK>
[  191.118282][ T7256]  dump_stack_lvl+0x16c/0x230
[  191.123021][ T7256]  ? show_regs_print_info+0x20/0x20
[  191.128275][ T7256]  ? load_image+0x3b0/0x3b0
[  191.132828][ T7256]  ? __might_fault+0xaa/0x120
[  191.137542][ T7256]  ? __lock_acquire+0x7c80/0x7c80
[  191.142606][ T7256]  should_fail_ex+0x39d/0x4d0
[  191.147325][ T7256]  _copy_from_user+0x2f/0xe0
[  191.151952][ T7256]  __sys_bpf+0x1e9/0x800
[  191.156229][ T7256]  ? bpf_link_show_fdinfo+0x350/0x350
[  191.161652][ T7256]  ? lock_chain_count+0x20/0x20
[  191.166550][ T7256]  __x64_sys_bpf+0x7c/0x90
[  191.171101][ T7256]  do_syscall_64+0x55/0xb0
[  191.175561][ T7256]  ? clear_bhb_loop+0x40/0x90
[  191.180273][ T7256]  ? clear_bhb_loop+0x40/0x90
[  191.185016][ T7256]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  191.190952][ T7256] RIP: 0033:0x7f17fd78f749
[  191.195407][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.215056][ T7256] RSP: 002b:00007f17fe6c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  191.223522][ T7256] RAX: ffffffffffffffda RBX: 00007f17fd9e5fa0 RCX: 00007f17fd78f749
[  191.231533][ T7256] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005
[  191.239538][ T7256] RBP: 00007f17fe6c9090 R08: 0000000000000000 R09: 0000000000000000
[  191.247540][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.255538][ T7256] R13: 00007f17fd9e6038 R14: 00007f17fd9e5fa0 R15: 00007ffee9af9818
[  191.263551][ T7256]  </TASK>
[  191.266705][    C0] vkms_vblank_simulate: vblank timer overrun
[  191.448999][   T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  191.846918][ T7271] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.388424][   T23] usb 2-1: Using ep0 maxpacket: 32
[  192.410682][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[  192.430207][   T23] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  192.439731][   T23] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  192.458325][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  192.467382][   T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  192.512628][   T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  192.525471][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.588476][   T23] usb 2-1: Product: syz
[  192.592799][   T23] usb 2-1: Manufacturer: syz
[  192.597430][   T23] usb 2-1: SerialNumber: syz
[  192.705983][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'.
[  192.954355][   T23] usb 2-1: 0:2 : does not exist
[  193.008949][   T23] usb 2-1: USB disconnect, device number 5
[  193.060524][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.477860][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'.
[  193.668668][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'.
[  194.091117][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'.
[  194.188620][   T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  194.388593][   T27] usb 2-1: Using ep0 maxpacket: 32
[  194.405775][   T27] usb 2-1: config 0 has an invalid interface number: 247 but max is 0
[  194.422287][   T27] usb 2-1: config 0 has no interface number 0
[  194.436480][   T27] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b
[  194.460318][   T27] usb 2-1: New USB device strings: Mfr=128, Product=8, SerialNumber=0
[  194.480462][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'.
[  194.500898][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.507289][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  194.512113][   T27] usb 2-1: Product: syz
[  194.519823][   T27] usb 2-1: Manufacturer: syz
[  194.537216][   T27] usb 2-1: config 0 descriptor??
[  194.636255][ T7359] loop0: detected capacity change from 0 to 256
[  194.778735][ T7333] netlink: 72 bytes leftover after parsing attributes in process `syz.1.372'.
[  194.798448][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'.
[  194.823100][ T7333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.372'.
[  194.838761][ T7359] FAT-fs (loop0): Directory bread(block 64) failed
[  194.845820][ T7359] FAT-fs (loop0): Directory bread(block 65) failed
[  194.865547][ T7359] FAT-fs (loop0): Directory bread(block 66) failed
[  194.885848][ T7359] FAT-fs (loop0): Directory bread(block 67) failed
[  194.922116][ T7359] FAT-fs (loop0): Directory bread(block 68) failed
[  194.929115][   T27] usb 2-1: USB disconnect, device number 6
[  194.949416][ T7359] FAT-fs (loop0): Directory bread(block 69) failed
[  194.956120][ T7359] FAT-fs (loop0): Directory bread(block 70) failed
[  194.973845][ T7359] FAT-fs (loop0): Directory bread(block 71) failed
[  194.982018][ T7359] FAT-fs (loop0): Directory bread(block 72) failed
[  194.991237][ T7359] FAT-fs (loop0): Directory bread(block 73) failed
[  195.069089][ T7355] syz.0.381: attempt to access beyond end of device
[  195.069089][ T7355] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256
[  195.098887][ T7355] syz.0.381: attempt to access beyond end of device
[  195.098887][ T7355] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256
[  195.141230][ T7374] fuse: Bad value for 'fd'
[  195.171482][   T28] audit: type=1800 audit(1765713268.404:3): pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.381" name="file0" dev="loop0" ino=1048597 res=0 errno=0
[  195.225431][ T7376] warning: `syz.3.388' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  196.066782][ T7385] __nla_validate_parse: 1 callbacks suppressed
[  196.066799][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'.
[  197.138155][   T23] libceph: connect (1)[c::]:6789 error -101
[  197.161414][ T7387] ceph: No mds server is up or the cluster is laggy
[  197.189383][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  198.873936][ T7407] netlink: 19 bytes leftover after parsing attributes in process `syz.2.401'.
[  199.261207][ T7417] xt_bpf: check failed: parse error
[  199.709427][ T7424] loop0: detected capacity change from 0 to 32768
[  199.744154][ T7424] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11
[  200.044401][ T7426] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.405'.
[  200.877967][ T5780] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11
[  201.607186][ T7436] netlink: 'syz.3.409': attribute type 2 has an invalid length.
[  201.798949][    T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  202.018410][    T8] usb 2-1: Using ep0 maxpacket: 32
[  202.045685][    T8] usb 2-1: config 0 has an invalid interface number: 209 but max is 0
[  202.066757][    T8] usb 2-1: config 0 has no interface number 0
[  202.082414][    T8] usb 2-1: config 0 interface 209 has no altsetting 0
[  202.097261][    T8] usb 2-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23
[  202.135233][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.157701][ T7448] loop0: detected capacity change from 0 to 4096
[  202.164216][    T8] usb 2-1: Product: syz
[  202.180326][    T8] usb 2-1: Manufacturer: syz
[  202.181388][ T7448] ntfs3: Unknown parameter 'sparse2sys_immutable'
[  202.184948][    T8] usb 2-1: SerialNumber: syz
[  202.226183][    T8] usb 2-1: config 0 descriptor??
[  202.245149][ T6000] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.558774][    T9] Process accounting resumed
[  203.229849][ T7455] loop0: detected capacity change from 0 to 4096
[  204.157918][    T8] usb 2-1: USB disconnect, device number 7
[  204.899661][   T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  205.009955][ T7482] loop1: detected capacity change from 0 to 128
[  205.036111][ T7482] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  205.121377][   T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.348381][   T28] audit: type=1804 audit(1765713278.414:4): pid=7488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.425" name="/newroot/86/file2/bus" dev="loop1" ino=1048599 res=1 errno=0
[  205.373659][   T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  205.428662][   T23] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  205.524022][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.896236][   T23] usb 1-1: config 0 descriptor??
[  205.971439][   T23] usb 1-1: can't set config #0, error -71
[  206.034872][   T23] usb 1-1: USB disconnect, device number 4
[  206.812678][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  206.819958][ T5775] Bluetooth: hci2: command 0x0406 tx timeout
[  207.692793][ T7529] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.438'.
[  208.513784][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'.
[  208.568930][   T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  208.761313][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.777138][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.789939][ T7550] loop1: detected capacity change from 0 to 2048
[  208.800444][   T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  208.828756][   T27] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  208.828937][ T7550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.848913][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.870364][   T27] usb 1-1: config 0 descriptor??
[  210.359440][   T27] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x2
[  210.387940][   T27] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  210.486941][   T27] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  212.193622][   T27] usb 1-1: reset high-speed USB device number 5 using dummy_hcd
[  212.408437][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  212.508627][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'.
[  213.144137][  T966] usb 1-1: USB disconnect, device number 5
[  213.895737][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'.
[  213.947664][ T7594] loop0: detected capacity change from 0 to 32768
[  214.008127][ T7594] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  214.008712][ T5821] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  214.287511][ T5821] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  214.298103][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.356189][ T5821] usb 4-1: config 0 descriptor??
[  214.368653][ T5785] ocfs2: Unmounting device (7,0) on (node local)
[  214.418139][ T5821] cp210x 4-1:0.0: cp210x converter detected
[  216.473416][ T5821] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  216.490794][ T5821] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  216.509559][ T5821] usb 4-1: cp210x converter now attached to ttyUSB0
[  216.537385][ T5821] usb 4-1: USB disconnect, device number 8
[  216.561671][ T5821] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  216.579098][ T5821] cp210x 4-1:0.0: device disconnected
[  216.903983][ T1066] ------------[ cut here ]------------
[  216.910197][ T1066] WARNING: CPU: 0 PID: 1066 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  216.921483][ T1066] Modules linked in:
[  216.925423][ T1066] CPU: 0 PID: 1066 Comm: kworker/u4:6 Not tainted syzkaller #0
[  216.933102][ T1066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  216.943250][ T1066] Workqueue: phy9 ieee80211_csa_finalize_work
[  216.949421][ T1066] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  216.956759][ T1066] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c
[  216.976761][ T1066] RSP: 0018:ffffc900046bf9c0 EFLAGS: 00010293
[  216.983116][ T1066] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: ffff888023bd5a00
[  216.991256][ T1066] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  216.999364][ T1066] RBP: dffffc0000000000 R08: ffff88805e3315af R09: 1ffff1100bc662b5
[  217.002791][    C1] ------------[ cut here ]------------
[  217.007711][ T1066] R10: dffffc0000000000 R11: ffffed100bc662b6 R12: 0000000000000001
[  217.013400][    C1] WARNING: CPU: 1 PID: 7646 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600
[  217.013441][    C1] Modules linked in:
[  217.013455][    C1] CPU: 1 PID: 7646 Comm: syz.0.478 Not tainted syzkaller #0
[  217.013475][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  217.013489][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  217.021623][ T1066] R13: ffff88805e3325d9 R14: ffff88805dcfac70 R15: ffff88805dcface8
[  217.031503][    C1] Code: 24 4c 89 e7 e8 0e 25 db f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 f6 9d f7 0f 0b e9 f6 f7 ff ff e8 4d f6 9d f7 <0f> 0b e9 48 fb ff ff e8 41 f6 9d f7 48 c7 c7 e0 96 23 8e 4c 89 e6
[  217.031525][    C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246
[  217.031547][    C1] RAX: ffffffff89e79a73 RBX: ffffffff89e78876 RCX: ffff888026091e00
[  217.031565][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  217.031577][    C1] RBP: 0000000000000000 R08: ffff888026091e00 R09: 0000000000000003
[  217.031591][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805e3323c0
[  217.031604][    C1] R13: dffffc0000000000 R14: ffff88805e3328b0 R15: ffff88805eafac24
[  217.031619][    C1] FS:  00007f17fe6c96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  217.031637][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  217.031653][    C1] CR2: 00007f17fd82eb84 CR3: 000000007bc7e000 CR4: 00000000003506e0
[  217.031672][    C1] Call Trace:
[  217.031681][    C1]  <IRQ>
[  217.031695][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  217.031746][    C1]  ieee80211_beacon_get_tim+0xb8/0x560
[  217.031777][    C1]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  217.031817][    C1]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  217.035692][ T1066] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  217.043030][    C1]  __iterate_interfaces+0x243/0x500
[  217.053233][ T1066] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  217.059508][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  217.067477][ T1066] CR2: 00007f240b051761 CR3: 000000005d9f3000 CR4: 00000000003506f0
[  217.087211][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  217.087267][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  217.087294][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  217.093482][ T1066] Call Trace:
[  217.101491][    C1]  mac80211_hwsim_beacon+0xbb/0x1b0
[  217.101525][    C1]  __hrtimer_run_queues+0x51e/0xc40
[  217.109727][ T1066]  <TASK>
[  217.117492][    C1]  ? hw_scan_work+0xf40/0xf40
[  217.125551][ T1066]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  217.133499][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  217.133526][    C1]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  217.133563][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  217.133592][    C1]  handle_softirqs+0x280/0x820
[  217.133619][    C1]  ? __irq_exit_rcu+0xc7/0x190
[  217.133648][    C1]  ? do_softirq+0x180/0x180
[  217.133674][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  217.133707][    C1]  __irq_exit_rcu+0xc7/0x190
[  217.133729][    C1]  ? irq_exit_rcu+0x20/0x20
[  217.133759][    C1]  irq_exit_rcu+0x9/0x20
[  217.133779][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  217.133807][    C1]  </IRQ>
[  217.133815][    C1]  <TASK>
[  217.133826][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  217.133854][    C1] RIP: 0010:lock_acquire+0x1f2/0x410
[  217.133878][    C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00
[  217.133896][    C1] RSP: 0018:ffffc900198af860 EFLAGS: 00000206
[  217.133919][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 314e5e784342c400
[  217.133935][    C1] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff8afc6f80
[  217.133951][    C1] RBP: ffffc900198af980 R08: dffffc0000000000 R09: 1ffffffff21b28a0
[  217.133969][    C1] R10: dffffc0000000000 R11: fffffbfff21b28a1 R12: 1ffff92003315f18
[  217.133984][    C1] R13: ffff88801af03eb8 R14: 0000000000000246 R15: dffffc0000000000
[  217.134025][    C1]  ? read_lock_is_recursive+0x20/0x20
[  217.142988][ T1066]  ieee80211_csa_finalize+0x59a/0xf00
[  217.149668][    C1]  ? read_lock_is_recursive+0x20/0x20
[  217.157662][ T1066]  ? mutex_lock_nested+0x20/0x20
[  217.160982][    C1]  ? rcu_is_watching+0x15/0xb0
[  217.163816][ T1066]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  217.169393][    C1]  _raw_spin_lock+0x2e/0x40
[  217.174831][ T1066]  ? ieee80211_csa_finalize_work+0x140/0x140
[  217.181610][    C1]  ? __pte_offset_map_lock+0x107/0x1e0
[  217.181634][    C1]  __pte_offset_map_lock+0x107/0x1e0
[  217.181666][    C1]  follow_page_pte+0xe9/0x1a70
[  217.181698][    C1]  ? __might_sleep+0xe0/0xe0
[  217.181729][    C1]  ? pmd_lock+0x60/0x60
[  217.187267][ T1066]  ? read_lock_is_recursive+0x20/0x20
[  217.196247][    C1]  __get_user_pages+0x570/0x1470
[  217.201497][ T1066]  ieee80211_csa_finalize_work+0xf6/0x140
[  217.208077][    C1]  ? mtree_destroy+0x30/0x30
[  217.208107][    C1]  ? populate_vma_page_range+0x370/0x370
[  217.208140][    C1]  populate_vma_page_range+0x2b6/0x370
[  217.208169][    C1]  ? fixup_user_fault+0x710/0x710
[  217.208196][    C1]  ? userfaultfd_unmap_complete+0x279/0x2d0
[  217.208258][    C1]  ? down_read+0x1ac/0x2e0
[  217.214499][ T1066]  ? process_scheduled_works+0x957/0x15b0
[  217.222504][    C1]  __mm_populate+0x24c/0x380
[  217.222549][    C1]  ? faultin_page_range+0x8f0/0x8f0
[  217.222580][    C1]  ? up_write+0x1c3/0x410
[  217.222608][    C1]  vm_mmap_pgoff+0x2e7/0x400
[  217.222661][    C1]  ? account_locked_vm+0x210/0x210
[  217.229892][ T1066]  process_scheduled_works+0xa45/0x15b0
[  217.236140][    C1]  ? lock_chain_count+0x20/0x20
[  217.243277][ T1066]  ? assign_work+0x400/0x400
[  217.246523][    C1]  ? ksys_mmap_pgoff+0xea/0x700
[  217.251761][ T1066]  ? assign_work+0x39e/0x400
[  217.256953][    C1]  ? __x64_sys_mmap+0x7a/0x130
[  217.259935][ T1066]  worker_thread+0xa55/0xfc0
[  217.264583][    C1]  do_syscall_64+0x55/0xb0
[  217.271221][ T1066]  kthread+0x2fa/0x390
[  217.276391][    C1]  ? clear_bhb_loop+0x40/0x90
[  217.282614][ T1066]  ? pr_cont_work+0x560/0x560
[  217.287677][    C1]  ? clear_bhb_loop+0x40/0x90
[  217.292485][ T1066]  ? kthread_blkcg+0xd0/0xd0
[  217.297232][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  217.301747][ T1066]  ret_from_fork+0x48/0x80
[  217.306940][    C1] RIP: 0033:0x7f17fd78f749
[  217.311785][ T1066]  ? kthread_blkcg+0xd0/0xd0
[  217.316139][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.320480][ T1066]  ret_from_fork_asm+0x11/0x20
[  217.326154][    C1] RSP: 002b:00007f17fe6c9038 EFLAGS: 00000246
[  217.329140][ T1066]  </TASK>
[  217.332067][    C1]  ORIG_RAX: 0000000000000009
[  217.338038][ T1066] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  217.338049][ T1066] CPU: 0 PID: 1066 Comm: kworker/u4:6 Not tainted syzkaller #0
[  217.338070][ T1066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  217.338084][ T1066] Workqueue: phy9 ieee80211_csa_finalize_work
[  217.338119][ T1066] Call Trace:
[  217.338131][ T1066]  <TASK>
[  217.338139][ T1066]  dump_stack_lvl+0x16c/0x230
[  217.338179][ T1066]  ? show_regs_print_info+0x20/0x20
[  217.338220][ T1066]  ? load_image+0x3b0/0x3b0
[  217.338266][ T1066]  panic+0x2c0/0x710
[  217.338300][ T1066]  ? bpf_jit_dump+0xd0/0xd0
[  217.338340][ T1066]  ? ret_from_fork_asm+0x11/0x20
[  217.338376][ T1066]  __warn+0x2e0/0x470
[  217.338401][ T1066]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  217.338440][ T1066]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  217.338467][ T1066]  report_bug+0x2be/0x4f0
[  217.338490][ T1066]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  217.338518][ T1066]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  217.338545][ T1066]  ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0
[  217.338572][ T1066]  handle_bug+0xcf/0x120
[  217.338593][ T1066]  exc_invalid_op+0x1a/0x50
[  217.338615][ T1066]  asm_exc_invalid_op+0x1a/0x20
[  217.338639][ T1066] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  217.338668][ T1066] Code: 48 89 df e8 0a bf f0 f7 e9 dc fc ff ff e8 30 51 99 f7 eb 24 e8 29 51 99 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 18 51 99 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 0a 51 99 f7 48 8b 7c 24 08 4c 8b 7c
[  217.338684][ T1066] RSP: 0018:ffffc900046bf9c0 EFLAGS: 00010293
[  217.338703][ T1066] RAX: ffffffff89ec3bae RBX: 0000000000000001 RCX: ffff888023bd5a00
[  217.338718][ T1066] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  217.338731][ T1066] RBP: dffffc0000000000 R08: ffff88805e3315af R09: 1ffff1100bc662b5
[  217.338746][ T1066] R10: dffffc0000000000 R11: ffffed100bc662b6 R12: 0000000000000001
[  217.338761][ T1066] R13: ffff88805e3325d9 R14: ffff88805dcfac70 R15: ffff88805dcface8
[  217.338787][ T1066]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  217.338840][ T1066]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  217.338875][ T1066]  ieee80211_csa_finalize+0x59a/0xf00
[  217.338904][ T1066]  ? mutex_lock_nested+0x20/0x20
[  217.338927][ T1066]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  217.338953][ T1066]  ? ieee80211_csa_finalize_work+0x140/0x140
[  217.338985][ T1066]  ? read_lock_is_recursive+0x20/0x20
[  217.339019][ T1066]  ieee80211_csa_finalize_work+0xf6/0x140
[  217.339050][ T1066]  ? process_scheduled_works+0x957/0x15b0
[  217.339077][ T1066]  process_scheduled_works+0xa45/0x15b0
[  217.339138][ T1066]  ? assign_work+0x400/0x400
[  217.339172][ T1066]  ? assign_work+0x39e/0x400
[  217.339213][ T1066]  worker_thread+0xa55/0xfc0
[  217.339271][ T1066]  kthread+0x2fa/0x390
[  217.339289][ T1066]  ? pr_cont_work+0x560/0x560
[  217.339316][ T1066]  ? kthread_blkcg+0xd0/0xd0
[  217.339336][ T1066]  ret_from_fork+0x48/0x80
[  217.339360][ T1066]  ? kthread_blkcg+0xd0/0xd0
[  217.339382][ T1066]  ret_from_fork_asm+0x11/0x20
[  217.339437][ T1066]  </TASK>
[  217.343584][ T1066] Kernel Offset: disabled