last executing test programs:

8m19.107112012s ago: executing program 4 (id=1091):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000001240), 0x1004)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(0x0, 0x7, 0x1, &(0x7f0000001080)={0x77359400}, &(0x7f00000010c0)=0x2, 0x1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)

8m18.119471355s ago: executing program 4 (id=1095):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)

8m18.0541767s ago: executing program 4 (id=1096):
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
pipe(0x0)
close(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000340)='./file0\x00', 0x1)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14)
r3 = open(0x0, 0x10000, 0x0)
fchdir(r3)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000))
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r4, 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

8m16.847700999s ago: executing program 4 (id=1099):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x7000000)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

8m13.769256507s ago: executing program 4 (id=1103):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000a0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
waitid(0x2, r0, 0x0, 0x80000000, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000)
chdir(&(0x7f0000004340)='./file0\x00')
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in=@private=0xa010101, @in6=@local, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@rand_addr=0x6, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e21, @in6=@remote}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x2088000, 0x0)

8m11.302279889s ago: executing program 4 (id=1110):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0xfffffffffffffe55, &(0x7f0000000000), 0x3}}], 0x40002b2, 0x2, 0x0)

7m56.050489687s ago: executing program 32 (id=1110):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0xfffffffffffffe55, &(0x7f0000000000), 0x3}}], 0x40002b2, 0x2, 0x0)

1m56.139336476s ago: executing program 2 (id=2089):
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
socket$inet6(0xa, 0x3, 0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, 0x0)
syz_io_uring_setup(0x30f, 0x0, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$video4linux(0x0, 0x5, 0x0)
add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440))
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)

1m53.473527053s ago: executing program 2 (id=2097):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1m52.991504279s ago: executing program 2 (id=2102):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
clock_nanosleep(0x8, 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
membarrier(0x71, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x5, 0x2})
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3)

1m51.735737371s ago: executing program 2 (id=2104):
timer_create(0x6, &(0x7f0000000140)={0x0, 0x3d, 0x2, @thr={0x0, &(0x7f00000001c0)="c83de0d19f2ded7581ead87a4032"}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
stat(0x0, 0x0)
keyctl$get_persistent(0x16, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8)

1m48.426643126s ago: executing program 2 (id=2108):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*', 0x6e93ebbbcc0884f2, 0x15b, 0x0)
mq_getsetattr(r3, &(0x7f0000000300)={0x800, 0x0, 0x1, 0x20000}, 0x0)

1m46.735530551s ago: executing program 2 (id=2110):
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d08f110000000040000a118000200e011000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20008890)
statx(0xffffffffffffff9c, 0x0, 0x0, 0xffff4a9c0080ffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e23}}]}, 0x34}}, 0x0)

1m31.378474656s ago: executing program 33 (id=2110):
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d08f110000000040000a118000200e011000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20008890)
statx(0xffffffffffffff9c, 0x0, 0x0, 0xffff4a9c0080ffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e23}}]}, 0x34}}, 0x0)

12.744888098s ago: executing program 5 (id=2340):
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
pipe(0x0)
close(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000340)='./file0\x00', 0x1)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14)
sendmmsg$inet(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1, 0x4008084)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x210c00, 0x0)
r6 = open(0x0, 0x10000, 0x0)
fchdir(r6)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000))
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r7, 0x0, 0x0)
r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r8, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

12.588948929s ago: executing program 6 (id=2342):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x84240, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x88840000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c1}, 0x4c880)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000600)={@dev={0xac, 0x14, 0x14, 0x12}, @empty}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xffffffff, 0x17}, &(0x7f0000000340), &(0x7f00000001c0))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x0)
io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0)

9.922616186s ago: executing program 5 (id=2352):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0)

9.73765101s ago: executing program 6 (id=2354):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414ff"], 0x24}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='cgroup\x00', 0x10008, 0x0)

8.843400006s ago: executing program 5 (id=2356):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000be3a000000000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000"], 0x48)

7.582987879s ago: executing program 5 (id=2360):
socket$inet6_dccp(0xa, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r2], 0x1000f)

7.232427365s ago: executing program 5 (id=2362):
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
pipe(0x0)
close(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000340)='./file0\x00', 0x1)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14)
sendmmsg$inet(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1, 0x4008084)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x210c00, 0x0)
r6 = open(0x0, 0x10000, 0x0)
fchdir(r6)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000))
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r7, 0x0, 0x0)
r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r8, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

6.576716293s ago: executing program 3 (id=2365):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320)

5.876861605s ago: executing program 0 (id=2366):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x8)

4.59439663s ago: executing program 1 (id=2368):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = io_uring_setup(0x177f, &(0x7f0000000140))
socket$tipc(0x1e, 0x5, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

4.531363395s ago: executing program 0 (id=2369):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000000c0)={0x0, "3303f3c80f2a04f528ceb8a4a50663b0289a6a0c7c0b3c0aec762dfc270df840", 0x0, 0x2, 0x3, 0x1700, 0x2070132, 0x2})
ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x3, 0x0, 0x8, 0x80000001, 0x0, 0x400, 0x1, 0x9, 0xbf})
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$lock(r6, 0x7, 0x0)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2})
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100), &(0x7f0000000140)=0x8)

4.447014881s ago: executing program 6 (id=2370):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x5, 0x3, 0x2000, {}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "7385b6116602f9fc"}}, 0x48}}, 0x0)

3.562813116s ago: executing program 1 (id=2371):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000440)={0x0, 0x2, 0x0, 0x3})

3.51030512s ago: executing program 0 (id=2372):
socket$inet6_dccp(0xa, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r2], 0x1000f)

3.317493644s ago: executing program 1 (id=2373):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000480)={[{@orlov}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@init_itable}, {@nouid32}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x28000000, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x38}}, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r10, 0x0, r11, 0x0, 0x1, 0x5)
r12 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12)
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x3804004, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5ec, &(0x7f0000001640)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x3)

3.226972191s ago: executing program 0 (id=2374):
socket$inet_smc(0x2b, 0x1, 0x0)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = epoll_create1(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014})
socket$inet6(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x120000}, 0x20)
writev(0xffffffffffffffff, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
kcmp(r3, 0x0, 0x4, r4, 0xffffffffffffffff)
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

3.226760641s ago: executing program 6 (id=2375):
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
pipe(0x0)
close(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000340)='./file0\x00', 0x1)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r3, 0x0, 0x0)
connect$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14)
r4 = open(0x0, 0x10000, 0x0)
fchdir(r4)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000))
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r5, 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

2.871469167s ago: executing program 3 (id=2376):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, 0x0, 0x9c0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x14, r1, 0xb01, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x709ee32257da3bbc}, 0x20000008)

2.495542695s ago: executing program 1 (id=2377):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
socket$packet(0x11, 0x3, 0x300)
connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0)

2.307296479s ago: executing program 6 (id=2378):
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
socket$inet6(0xa, 0x3, 0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440))
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8)

1.906842628s ago: executing program 3 (id=2379):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = getpid()
ptrace$setopts(0x4206, r3, 0x5, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

1.871965241s ago: executing program 5 (id=2380):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414ff"], 0x24}}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='cgroup\x00', 0x10008, 0x0)

1.285648844s ago: executing program 6 (id=2381):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x80)
write$dsp(r0, &(0x7f0000000100)='n', 0x1)
ftruncate(r1, 0x2007ffb)
sendfile(r0, r1, 0x0, 0x1000000201005)
write$cgroup_int(r1, 0x0, 0x0)
r2 = open(&(0x7f0000007f80)='./bus\x00', 0x143142, 0x0)
sendfile(r2, r2, 0x0, 0x1000000201005)

1.104555418s ago: executing program 1 (id=2382):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000000c0)={0x0, "3303f3c80f2a04f528ceb8a4a50663b0289a6a0c7c0b3c0aec762dfc270df840", 0x0, 0x2, 0x3, 0x1700, 0x2070132, 0x2})
ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x3, 0x0, 0x8, 0x80000001, 0x0, 0x400, 0x1, 0x9, 0xbf})
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$lock(r6, 0x7, 0x0)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2})
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100), &(0x7f0000000140)=0x8)

1.042769772s ago: executing program 3 (id=2383):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000200)="f50bbcb9", 0x4}], 0x1)

679.613379ms ago: executing program 3 (id=2384):
socket$inet6_dccp(0xa, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r2], 0x1000f)

538.6926ms ago: executing program 3 (id=2385):
openat$mixer(0xffffffffffffff9c, 0x0, 0x80, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x2004004, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x1, 0x5eb2, &(0x7f000000a280)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000300)='./file1\x00', 0x7f)

174.149166ms ago: executing program 1 (id=2386):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320)

35.587777ms ago: executing program 0 (id=2387):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5)
ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0)

0s ago: executing program 0 (id=2388):
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
pipe(0x0)
close(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000340)='./file0\x00', 0x1)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r3, 0x0, 0x0)
connect$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14)
r4 = open(0x0, 0x10000, 0x0)
fchdir(r4)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000))
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r5, 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

 1024
[  570.212478][   T26] audit: type=1326 audit(1738930314.526:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9365bde9 code=0x7ffc0000
[  570.466471][ T9250] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  570.486407][ T9250] hfsplus: xattr searching failed
[  570.510166][ T9250] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  570.523894][   T26] audit: type=1326 audit(1738930314.526:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9365bde9 code=0x7ffc0000
[  570.556636][ T9250] hfsplus: xattr searching failed
[  570.684414][   T26] audit: type=1326 audit(1738930314.536:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b9365a750 code=0x7ffc0000
[  570.757320][   T26] audit: type=1326 audit(1738930314.536:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9365bde9 code=0x7ffc0000
[  571.522512][   T26] audit: type=1326 audit(1738930314.536:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9365bde9 code=0x7ffc0000
[  571.613398][   T26] audit: type=1326 audit(1738930314.536:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b9365dd07 code=0x7ffc0000
[  571.701644][   T26] audit: type=1326 audit(1738930314.536:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5b9365dc7c code=0x7ffc0000
[  571.839101][ T9259] dccp_close: ABORT with 96 bytes unread
[  572.034480][   T26] audit: type=1326 audit(1738930314.536:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5b9365dbb4 code=0x7ffc0000
[  572.056773][   T26] audit: type=1326 audit(1738930314.536:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5b9365aa4a code=0x7ffc0000
[  572.080264][   T26] audit: type=1326 audit(1738930314.546:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9365bde9 code=0x7ffc0000
[  573.161488][   T26] audit: type=1326 audit(1738930314.546:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9365bde9 code=0x7ffc0000
[  573.237079][   T26] audit: type=1326 audit(1738930314.556:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5b9365bde9 code=0x7ffc0000
[  573.567013][   T26] audit: type=1326 audit(1738930314.556:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9365bde9 code=0x7ffc0000
[  575.562427][ T9330] xt_TCPMSS: Only works on TCP SYN packets
[  578.146519][ T9367] loop2: detected capacity change from 0 to 256
[  578.337644][ T9367] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  578.419756][ T9367] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  578.502914][ T9367] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  579.709586][ T9389] loop2: detected capacity change from 0 to 1024
[  579.960135][ T9389] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  579.995654][ T9389] hfsplus: xattr searching failed
[  580.001543][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  580.001557][   T26] audit: type=1800 audit(1738930324.566:65): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1306" name="file1" dev="loop2" ino=20 res=0 errno=0
[  581.832883][ T9418] xt_TCPMSS: Only works on TCP SYN packets
[  582.794120][ T9427] netlink: 'syz.2.1316': attribute type 11 has an invalid length.
[  582.966047][ T9430] loop2: detected capacity change from 0 to 256
[  583.376724][ T9427] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  583.421637][ T9427] FAT-fs (loop2): Filesystem has been set read-only
[  583.471579][ T9427] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  583.514264][ T9427] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  583.663882][ T9427] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  583.956644][ T9427] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  583.970994][ T9427] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  583.985280][ T9427] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  583.999185][ T9427] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  584.106991][ T9427] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  584.157747][ T9427] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  584.218068][   T26] audit: type=1800 audit(1738930328.786:66): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1316" name="file1" dev="loop2" ino=1048732 res=0 errno=0
[  584.226293][ T9427] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  585.990604][ T9486] xt_TCPMSS: Only works on TCP SYN packets
[  588.002940][ T9513] netlink: 'syz.3.1332': attribute type 11 has an invalid length.
[  588.068066][ T9515] loop3: detected capacity change from 0 to 256
[  588.424437][ T9513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  588.475220][ T9513] FAT-fs (loop3): Filesystem has been set read-only
[  588.511720][ T9513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  588.549979][ T9513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  588.599774][ T9513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  588.652530][ T9513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  588.695045][ T9513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  588.734459][ T9513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  588.791024][ T9513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  588.833790][ T9513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  588.901834][ T9513] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  588.913472][   T26] audit: type=1800 audit(1738930333.486:67): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1332" name="file1" dev="loop3" ino=1048733 res=0 errno=0
[  588.968558][ T9513] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  590.761533][ T9551] xt_TCPMSS: Only works on TCP SYN packets
[  591.231607][ T9553] loop1: detected capacity change from 0 to 1024
[  591.382994][ T9553] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  593.209090][ T9581] netlink: 'syz.2.1345': attribute type 11 has an invalid length.
[  593.254688][ T9583] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1344'.
[  593.278554][ T9584] loop2: detected capacity change from 0 to 256
[  593.490395][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  593.532011][ T9581] FAT-fs (loop2): Filesystem has been set read-only
[  593.652728][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'.
[  593.663016][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  593.700990][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  593.709924][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  593.718857][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  593.728347][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  593.737152][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  593.746078][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  593.754868][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  593.765475][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  593.786492][   T26] audit: type=1800 audit(1738930338.356:68): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1345" name="file1" dev="loop2" ino=1048734 res=0 errno=0
[  593.811107][ T9581] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  595.047680][ T9604] netlink: 'syz.0.1351': attribute type 10 has an invalid length.
[  595.192671][ T9609] loop1: detected capacity change from 0 to 1024
[  595.210997][ T9604] 8021q: adding VLAN 0 to HW filter on device team0
[  595.268955][ T9604] bond0: (slave team0): Enslaving as an active interface with an up link
[  595.415073][ T9612] xt_TCPMSS: Only works on TCP SYN packets
[  595.724453][ T9609] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  599.222163][ T9650] netlink: 'syz.0.1363': attribute type 11 has an invalid length.
[  600.309248][ T9661] loop3: detected capacity change from 0 to 1024
[  600.759623][ T9669] autofs4:pid:9669:autofs_fill_super: called with bogus options
[  600.789637][ T9661] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  602.352144][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  602.611592][    T7] usb 3-1: Using ep0 maxpacket: 8
[  602.962215][    T7] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  602.971103][    T7] usb 3-1: config 1 has no interface number 0
[  602.977687][    T7] usb 3-1: too many endpoints for config 1 interface 7 altsetting 0: 237, using maximum allowed: 30
[  602.989408][    T7] usb 3-1: config 1 interface 7 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 237
[  603.202295][    T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  603.248715][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.400685][    T7] usb 3-1: Product: syz
[  603.551921][    T7] usb 3-1: Manufacturer: syz
[  603.711605][    T7] usb 3-1: SerialNumber: syz
[  603.972138][ T9703] netlink: 'syz.3.1378': attribute type 11 has an invalid length.
[  604.067341][ T9706] loop3: detected capacity change from 0 to 256
[  604.095619][    T7] usblp 3-1:1.7: usblp0: USB Bidirectional printer dev 5 if 7 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  604.437229][ T9703] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  604.455822][ T9703] FAT-fs (loop3): Filesystem has been set read-only
[  604.470310][ T9703] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  604.473180][    T7] usb 3-1: USB disconnect, device number 5
[  604.481110][ T9703] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  604.497130][ T9703] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  604.507337][ T9703] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  604.534730][ T9703] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  604.560947][ T9703] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  604.609405][ T9703] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  604.626011][ T9715] loop5: detected capacity change from 0 to 1024
[  604.636761][ T9703] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  604.647625][ T9703] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  604.664467][   T26] audit: type=1800 audit(1738930349.236:69): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1378" name="file1" dev="loop3" ino=1048735 res=0 errno=0
[  604.696883][ T9703] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  604.700755][    T7] usblp0: removed
[  604.755985][ T9715] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  607.741537][ T4532] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  608.181749][ T4532] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.237728][ T4532] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.311894][ T4532] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  608.321680][ T4532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.212670][ T4532] usb 4-1: config 0 descriptor??
[  609.376502][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'.
[  609.409612][ T9770] loop2: detected capacity change from 0 to 1024
[  610.111238][ T9770] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  612.721690][ T4532] usbhid 4-1:0.0: can't add hid device: -71
[  612.731389][ T4532] usbhid: probe of 4-1:0.0 failed with error -71
[  612.847493][ T4532] usb 4-1: USB disconnect, device number 5
[  614.999910][ T9829] loop3: detected capacity change from 0 to 1024
[  615.079882][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'.
[  615.974474][ T9829] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  622.620622][ T9876] loop5: detected capacity change from 0 to 1024
[  622.785847][ T9876] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  624.301907][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  624.308232][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  627.328748][ T9922] dccp_close: ABORT with 140 bytes unread
[  627.467820][ T9936] loop3: detected capacity change from 0 to 1024
[  627.704062][ T9943] xt_TCPMSS: Only works on TCP SYN packets
[  627.798221][ T9936] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  632.831606][ T4216] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  633.931862][ T4216] usb 3-1: Using ep0 maxpacket: 8
[  634.051760][ T4216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  634.094798][ T4216] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  634.148672][ T4216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.200182][ T4216] usb 3-1: config 0 descriptor??
[  634.308222][T10011] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  634.317087][T10011] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  634.325933][T10011] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  634.334662][T10011] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  634.346197][ T4216] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  634.429737][ T4216] usb 3-1: USB disconnect, device number 6
[  634.734309][T10011] device vxlan0 entered promiscuous mode
[  634.783006][T10011] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  634.792688][T10011] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  634.801785][T10011] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  634.810673][T10011] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  638.429799][T10038] loop5: detected capacity change from 0 to 1024
[  638.579916][T10038] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  642.245514][   T21] Bluetooth: hci5: command 0x0406 tx timeout
[  643.963895][T10094] loop1: detected capacity change from 0 to 128
[  644.061782][T10094] EXT4-fs (loop1): Test dummy encryption mode enabled
[  644.104406][T10094] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  644.149787][T10094] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  645.161180][T10102] loop3: detected capacity change from 0 to 1024
[  645.593106][T10102] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  648.081038][T10137] xt_TCPMSS: Only works on TCP SYN packets
[  656.824541][T10196] netlink: 'syz.3.1503': attribute type 4 has an invalid length.
[  657.289065][T10199] netlink: 'syz.3.1503': attribute type 4 has an invalid length.
[  657.436109][T10212] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  658.313451][T10211] loop3: detected capacity change from 0 to 1024
[  658.367072][T10211] EXT4-fs (loop3): Test dummy encryption mode enabled
[  658.385071][T10211] EXT4-fs (loop3): Test dummy encryption mode enabled
[  658.448791][T10211] EXT4-fs (loop3): Ignoring removed orlov option
[  658.475783][T10211] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  659.150837][T10238] loop3: detected capacity change from 0 to 256
[  659.236473][T10238] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  659.521451][T10238] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  659.543942][T10238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  659.952876][T10251] xt_TCPMSS: Only works on TCP SYN packets
[  661.737308][T10278] loop1: detected capacity change from 0 to 1024
[  661.885866][T10278] EXT4-fs (loop1): Test dummy encryption mode enabled
[  661.901734][T10278] EXT4-fs (loop1): Test dummy encryption mode enabled
[  661.923565][T10278] EXT4-fs (loop1): Ignoring removed orlov option
[  661.940592][T10278] EXT4-fs (loop1): Mount option "data_err=abort" incompatible with ext2
[  662.091737][T10282] loop5: detected capacity change from 0 to 256
[  662.220629][T10282] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  662.253289][T10282] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  662.277156][T10282] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  665.067284][T10323] loop1: detected capacity change from 0 to 1024
[  665.258199][T10323] EXT4-fs (loop1): Test dummy encryption mode enabled
[  665.298780][T10323] EXT4-fs (loop1): Test dummy encryption mode enabled
[  665.318247][T10323] EXT4-fs (loop1): Ignoring removed orlov option
[  665.351718][T10323] EXT4-fs (loop1): Mount option "data_err=abort" incompatible with ext2
[  665.417493][T10331] loop3: detected capacity change from 0 to 256
[  665.514002][T10331] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  665.698659][T10331] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  665.731351][T10331] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  667.720908][T10353] sctp: [Deprecated]: syz.3.1547 (pid 10353) Use of int in max_burst socket option deprecated.
[  667.720908][T10353] Use struct sctp_assoc_value instead
[  669.047929][T10360] loop1: detected capacity change from 0 to 1024
[  671.851667][T10360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  675.065484][T10381] loop5: detected capacity change from 0 to 1024
[  675.158021][T10381] EXT4-fs (loop5): Test dummy encryption mode enabled
[  675.175388][T10381] EXT4-fs (loop5): Test dummy encryption mode enabled
[  675.196219][T10381] EXT4-fs (loop5): Ignoring removed orlov option
[  675.215951][T10381] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2
[  675.582826][T10386] loop2: detected capacity change from 0 to 256
[  675.722957][T10386] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  675.759495][T10386] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  675.821280][T10386] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  677.847182][T10407] loop2: detected capacity change from 0 to 2048
[  677.860951][T10407] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  677.870566][T10407] NILFS (loop2): unrecognized mount option ""
[  678.190253][T10411] loop1: detected capacity change from 0 to 1024
[  678.438296][T10411] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  684.293923][T10479] loop1: detected capacity change from 0 to 1024
[  684.648036][T10479] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  685.655887][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  685.664026][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  686.756547][T10490] loop2: detected capacity change from 0 to 32768
[  686.891613][T10490] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1584 (10490)
[  686.908551][T10502] loop3: detected capacity change from 0 to 128
[  687.245615][T10502] EXT4-fs (loop3): Test dummy encryption mode enabled
[  687.646893][T10502] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  687.686291][T10502] ext4 filesystem being mounted at /329/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  687.940684][T10490] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  687.963919][T10490] BTRFS info (device loop2): setting nodatacow, compression disabled
[  688.004264][T10490] BTRFS info (device loop2): setting datacow
[  688.012708][T10513] bridge0: port 3(syz_tun) entered blocking state
[  688.031525][T10490] BTRFS info (device loop2): doing ref verification
[  688.049380][T10513] bridge0: port 3(syz_tun) entered disabled state
[  688.077119][T10490] BTRFS info (device loop2): force clearing of disk cache
[  688.108698][T10513] device syz_tun entered promiscuous mode
[  688.122251][T10490] BTRFS info (device loop2): turning off barriers
[  688.128071][T10513] bridge0: port 3(syz_tun) entered blocking state
[  688.135838][T10513] bridge0: port 3(syz_tun) entered forwarding state
[  688.146406][T10490] BTRFS info (device loop2): enabling ssd optimizations
[  688.159255][T10502] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  688.164705][T10490] BTRFS info (device loop2): using spread ssd allocation scheme
[  689.305255][T10490] BTRFS info (device loop2): using free space tree
[  689.496619][T10490] BTRFS info (device loop2): has skinny extents
[  691.271832][T10490] BTRFS error (device loop2): open_ctree failed
[  691.337750][T10553] loop3: detected capacity change from 0 to 1024
[  691.439676][T10553] EXT4-fs (loop3): Test dummy encryption mode enabled
[  691.504019][T10553] EXT4-fs (loop3): Test dummy encryption mode enabled
[  691.510887][T10553] EXT4-fs (loop3): Ignoring removed orlov option
[  691.589446][T10563] loop1: detected capacity change from 0 to 1024
[  691.605193][T10553] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  691.742321][T10563] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  696.904998][T10626] loop5: detected capacity change from 0 to 1024
[  697.066171][T10626] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  698.171900][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1622'.
[  699.254665][T10636] loop1: detected capacity change from 0 to 32768
[  699.692429][T10636] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1620 (10636)
[  700.055536][T10636] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  700.120863][T10636] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  700.305878][T10636] BTRFS info (device loop1): use zstd compression, level 3
[  700.349737][T10636] BTRFS info (device loop1): using free space tree
[  700.492050][T10636] BTRFS info (device loop1): has skinny extents
[  701.372285][T10636] BTRFS error (device loop1): open_ctree failed
[  701.922492][T10686] loop2: detected capacity change from 0 to 1024
[  702.013216][T10686] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  702.278657][T10692] loop3: detected capacity change from 0 to 1024
[  702.514316][T10692] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  703.793529][T10706] loop3: detected capacity change from 0 to 2048
[  704.385303][T10706] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  704.403748][T10706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  704.462663][ T4218] Bluetooth: hci2: command 0x0406 tx timeout
[  710.660300][T10758] loop2: detected capacity change from 0 to 1024
[  710.970207][T10764] fuse: Unknown parameter 'H'
[  710.986830][T10758] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  711.961536][ T1106] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  712.241436][ T1106] usb 6-1: Using ep0 maxpacket: 8
[  712.391549][ T1106] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  712.466855][T10792] loop2: detected capacity change from 0 to 1024
[  712.571310][ T1106] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  712.582283][ T1106] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  712.592946][ T1106] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  712.596935][T10792] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  712.603455][ T1106] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  713.112757][ T1106] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  713.113329][ T1106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.611655][ T1106] usb 6-1: GET_CAPABILITIES returned 0
[  713.617463][ T1106] usbtmc 6-1:16.0: can't read capabilities
[  714.879121][ T6315] usb 6-1: USB disconnect, device number 2
[  718.783173][T10860] loop2: detected capacity change from 0 to 1024
[  718.892871][T10860] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  721.999118][T10877] loop2: detected capacity change from 0 to 1024
[  722.080635][T10877] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  722.087473][T10883] loop1: detected capacity change from 0 to 128
[  722.228665][T10883] EXT4-fs (loop1): Test dummy encryption mode enabled
[  722.266108][T10883] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  722.312850][T10883] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  722.569441][T10893] loop5: detected capacity change from 0 to 256
[  722.780686][T10893] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  722.844883][T10893] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  723.326364][T10893] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  724.147394][T10883] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  725.770933][T10918] loop5: detected capacity change from 0 to 128
[  725.975106][T10920] loop1: detected capacity change from 0 to 1024
[  726.088793][T10920] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  729.199508][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'.
[  729.476758][ T6315] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  729.721471][ T6315] usb 4-1: Using ep0 maxpacket: 16
[  729.841794][ T6315] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  730.071632][ T6315] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  730.109825][ T6315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.159456][ T6315] usb 4-1: Product: syz
[  730.176426][ T6315] usb 4-1: Manufacturer: syz
[  730.189592][ T6315] usb 4-1: SerialNumber: syz
[  730.224583][ T6315] usb 4-1: config 0 descriptor??
[  731.189807][T10972] xt_TCPMSS: Only works on TCP SYN packets
[  731.752452][T10678] usb 4-1: USB disconnect, device number 6
[  732.766958][T10983] loop3: detected capacity change from 0 to 1024
[  732.940195][T10983] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  736.200206][T11026] loop5: detected capacity change from 0 to 1024
[  737.880569][T11026] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  738.194325][T11045] loop2: detected capacity change from 0 to 1024
[  738.473363][T11045] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  738.664765][T11056] xt_TCPMSS: Only works on TCP SYN packets
[  740.810789][T11065] kvm [11064]: vcpu0, guest rIP: 0x227 disabled perfctr wrmsr: 0xc1 data 0x0
[  740.861600][T11065] kvm [11064]: vcpu0, guest rIP: 0x227 disabled perfctr wrmsr: 0xc2 data 0x0
[  740.894888][T11065] kvm [11064]: vcpu0, guest rIP: 0x227 ignored wrmsr: 0x11e data 0x0
[  741.129033][T11069] snd_dummy snd_dummy.0: control 0:4:-1:syz0:1 is already present
[  741.300085][T11073] loop3: detected capacity change from 0 to 1024
[  741.551123][T11073] EXT4-fs (loop3): Test dummy encryption mode enabled
[  741.742462][T11073] EXT4-fs (loop3): Test dummy encryption mode enabled
[  741.925162][T11073] EXT4-fs (loop3): Ignoring removed orlov option
[  742.081496][T11073] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  743.718754][T11096] loop5: detected capacity change from 0 to 128
[  743.800422][T11096] EXT4-fs (loop5): Test dummy encryption mode enabled
[  743.858879][T11093] loop2: detected capacity change from 0 to 164
[  744.027644][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'.
[  744.075822][T11096] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  744.218523][T11096] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  744.324629][T11109] loop2: detected capacity change from 0 to 1024
[  744.399557][T11109] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  745.587324][T11122] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  746.445719][T11134] snd_dummy snd_dummy.0: control 0:4:-1:syz0:1 is already present
[  747.111859][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  747.118226][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  747.127228][T11144] xt_TCPMSS: Only works on TCP SYN packets
[  747.402249][T11150] loop5: detected capacity change from 0 to 1024
[  748.341921][T11150] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  748.702189][T11165] loop2: detected capacity change from 0 to 1024
[  748.813347][T11165] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  750.217246][T11182] snd_dummy snd_dummy.0: control 0:4:-1:syz0:1 is already present
[  750.548478][T11184] loop1: detected capacity change from 0 to 128
[  750.857157][T11184] EXT4-fs (loop1): Test dummy encryption mode enabled
[  751.059322][T11184] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  751.104288][T11184] ext4 filesystem being mounted at /368/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  751.192185][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'.
[  752.552756][T11201] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  754.256141][T11226] loop2: detected capacity change from 0 to 1024
[  754.524412][T11235] snd_dummy snd_dummy.0: control 0:4:-1:syz0:1 is already present
[  754.642026][T11226] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  756.653504][T11253] loop1: detected capacity change from 0 to 1024
[  756.721717][T10678] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  756.817360][T11253] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  758.442030][T10678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  758.485888][T10678] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  758.614540][T10678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.625196][T10678] usb 4-1: config 0 descriptor??
[  758.702017][T11250] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  758.953486][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'.
[  759.165497][T10678] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  759.402500][T10678] usb 4-1: USB disconnect, device number 7
[  761.557288][T11293] loop5: detected capacity change from 0 to 1024
[  761.833920][T11293] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  762.104922][T11301] loop2: detected capacity change from 0 to 1024
[  764.020499][T11301] EXT4-fs (loop2): Test dummy encryption mode enabled
[  764.059503][T11301] EXT4-fs (loop2): Test dummy encryption mode enabled
[  764.069511][T11301] EXT4-fs (loop2): Ignoring removed orlov option
[  764.091824][T11301] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2
[  766.140827][  T150] block nbd3: Attempted send on invalid socket
[  766.147938][  T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  766.165182][T11337] XFS (nbd3): SB validate failed with error -5.
[  766.442273][T11345] loop2: detected capacity change from 0 to 128
[  766.509218][T11345] EXT4-fs (loop2): Test dummy encryption mode enabled
[  766.619623][T11345] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  766.691327][T11345] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  767.464724][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'.
[  767.624055][T11356] loop1: detected capacity change from 0 to 1024
[  768.141682][T11356] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  769.545839][T11378] loop2: detected capacity change from 0 to 1024
[  769.638835][T11378] EXT4-fs (loop2): Test dummy encryption mode enabled
[  769.661546][T11378] EXT4-fs (loop2): Test dummy encryption mode enabled
[  769.668403][T11378] EXT4-fs (loop2): Ignoring removed orlov option
[  769.701450][T11378] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2
[  769.722616][T11358] loop5: detected capacity change from 0 to 32768
[  769.924069][T11358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1796 (11358)
[  770.047348][T11358] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  770.058460][T11358] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  770.076665][T11358] BTRFS info (device loop5): use zstd compression, level 3
[  770.084217][T11358] BTRFS info (device loop5): using free space tree
[  770.195024][T11358] BTRFS info (device loop5): has skinny extents
[  771.346517][T11404] loop2: detected capacity change from 0 to 128
[  771.882210][T11358] BTRFS error (device loop5): open_ctree failed
[  772.997632][T11427] loop2: detected capacity change from 0 to 512
[  773.697099][T11427] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  773.774932][T11427] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  774.596853][T11445] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[  774.895342][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'.
[  775.145607][T11427] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2.
[  779.272863][T11480] loop2: detected capacity change from 0 to 40427
[  779.398011][T11480] F2FS-fs (loop2): invalid crc value
[  779.429666][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'.
[  779.460858][T11480] F2FS-fs (loop2): Found nat_bits in checkpoint
[  779.730456][T11480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  780.077077][ T4504] attempt to access beyond end of device
[  780.077077][ T4504] loop2: rw=2049, want=40984, limit=40427
[  783.349894][T11525] loop3: detected capacity change from 0 to 1024
[  783.517813][T11525] EXT4-fs (loop3): Test dummy encryption mode enabled
[  783.551742][T11525] EXT4-fs (loop3): Test dummy encryption mode enabled
[  783.582486][T11525] EXT4-fs (loop3): Ignoring removed orlov option
[  783.588910][T11525] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  783.747072][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1838'.
[  784.012609][T11533] Cannot find del_set index 4 as target
[  784.525434][T11543] netlink: 'syz.2.1843': attribute type 11 has an invalid length.
[  784.596111][T11544] loop2: detected capacity change from 0 to 256
[  784.746946][T11543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  784.766035][T11543] FAT-fs (loop2): Filesystem has been set read-only
[  784.791473][T11543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  784.820771][T11543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  784.851159][T11543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  784.940106][T11543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  784.998171][T11543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  785.013739][T11543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  785.038096][T11543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  785.069611][T11543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  785.093846][T11543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  785.157548][   T26] audit: type=1800 audit(1738930529.720:70): pid=11543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1843" name="file1" dev="loop2" ino=1048743 res=0 errno=0
[  785.319549][T11543] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  787.197111][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'.
[  787.325159][T11571] loop3: detected capacity change from 0 to 128
[  787.447096][T11571] EXT4-fs (loop3): Test dummy encryption mode enabled
[  787.503655][T11571] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  787.524459][T11571] ext4 filesystem being mounted at /389/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  787.653004][T11577] loop2: detected capacity change from 0 to 1024
[  787.900112][T11577] EXT4-fs (loop2): Test dummy encryption mode enabled
[  787.919161][T11577] EXT4-fs (loop2): Test dummy encryption mode enabled
[  787.952560][T11577] EXT4-fs (loop2): Ignoring removed orlov option
[  787.959794][T11577] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2
[  787.987446][T11584] loop3: detected capacity change from 0 to 1024
[  788.039953][T11584] EXT4-fs (loop3): Test dummy encryption mode enabled
[  788.064976][T11584] EXT4-fs (loop3): Test dummy encryption mode enabled
[  788.085949][T11584] EXT4-fs (loop3): Ignoring removed orlov option
[  788.096843][T11584] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  790.049775][T11609] netlink: 'syz.1.1863': attribute type 11 has an invalid length.
[  790.957351][T11612] loop1: detected capacity change from 0 to 256
[  791.119578][T11609] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  791.141479][T11609] FAT-fs (loop1): Filesystem has been set read-only
[  791.160094][T11609] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  791.197506][T11609] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  791.201120][T11618] loop2: detected capacity change from 0 to 1024
[  791.217742][T11609] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  791.236715][T11609] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  791.256768][T11609] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  791.283658][T11609] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  791.307917][T11609] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  791.320597][T11618] EXT4-fs (loop2): Test dummy encryption mode enabled
[  791.332785][T11609] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  791.349891][T11609] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  791.367870][T11618] EXT4-fs (loop2): Test dummy encryption mode enabled
[  791.392823][T11618] EXT4-fs (loop2): Ignoring removed orlov option
[  791.407218][   T26] audit: type=1800 audit(1738930535.978:71): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1863" name="file1" dev="loop1" ino=1048744 res=0 errno=0
[  791.435725][T11609] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  791.480203][T11618] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2
[  792.965746][ T1106] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  793.946418][T11651] loop5: detected capacity change from 0 to 1024
[  794.183274][T11651] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  794.411539][ T1106] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  794.424927][ T1106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.434110][ T1106] usb 3-1: Product: syz
[  794.438644][ T1106] usb 3-1: Manufacturer: syz
[  794.446477][ T1106] usb 3-1: SerialNumber: syz
[  794.741876][ T1106] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  795.112550][T11666] loop3: detected capacity change from 0 to 1024
[  795.180422][T11666] EXT4-fs (loop3): Test dummy encryption mode enabled
[  795.219540][T11666] EXT4-fs (loop3): Test dummy encryption mode enabled
[  795.234922][T11666] EXT4-fs (loop3): Ignoring removed orlov option
[  795.241957][T11666] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  795.439312][ T6315] usb 3-1: USB disconnect, device number 7
[  795.456744][ T1106] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  795.679481][ T6315] usb 3-1: ath9k_htc: USB layer deinitialized
[  795.691905][T11671] loop2: detected capacity change from 0 to 512
[  795.797884][T11671] EXT4-fs (loop2): Ignoring removed oldalloc option
[  795.807858][T11671] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  795.854335][T11671] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,grpquota,resgid=0x0000000000000000,oldalloc,lazytime,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  795.889707][T11671] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  796.735419][T11691] loop3: detected capacity change from 0 to 256
[  796.775697][T11692] netlink: 'syz.1.1888': attribute type 11 has an invalid length.
[  796.849095][T11691] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  796.901471][T11693] loop1: detected capacity change from 0 to 256
[  797.888761][T11701] loop2: detected capacity change from 0 to 1024
[  797.959810][T11692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  797.976741][T11692] FAT-fs (loop1): Filesystem has been set read-only
[  798.000374][T11692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  798.037758][T11701] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  798.044037][T11707] loop5: detected capacity change from 0 to 128
[  798.056036][T11692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  798.065481][T11692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  798.075151][T11692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  798.206388][T11692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  798.218293][T11692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  798.228454][T11692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  798.237419][T11692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  798.247314][T11692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  798.820000][   T26] audit: type=1800 audit(1738930543.388:72): pid=11692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1888" name="file1" dev="loop1" ino=1048747 res=0 errno=0
[  798.851211][T11692] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  798.877374][T11707] EXT4-fs (loop5): Test dummy encryption mode enabled
[  798.930893][T11707] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  798.981713][T11707] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  799.303499][T11714] loop2: detected capacity change from 0 to 1024
[  799.410567][T11714] EXT4-fs (loop2): Test dummy encryption mode enabled
[  799.444161][T11714] EXT4-fs (loop2): Test dummy encryption mode enabled
[  799.458260][T11714] EXT4-fs (loop2): Ignoring removed orlov option
[  799.465654][T11714] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2
[  800.816323][T11727] loop2: detected capacity change from 0 to 1024
[  800.897117][T11727] EXT4-fs (loop2): Test dummy encryption mode enabled
[  800.924051][T11727] EXT4-fs (loop2): Test dummy encryption mode enabled
[  800.974006][T11727] EXT4-fs (loop2): Ignoring removed orlov option
[  801.016690][T11727] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2
[  803.508375][T11750] loop1: detected capacity change from 0 to 1024
[  803.740897][T11750] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  803.876963][T11760] loop3: detected capacity change from 0 to 1024
[  803.997874][T11760] EXT4-fs (loop3): Test dummy encryption mode enabled
[  804.031530][T11760] EXT4-fs (loop3): Test dummy encryption mode enabled
[  804.038706][T11760] EXT4-fs (loop3): Ignoring removed orlov option
[  804.065713][T11760] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  804.827775][   T26] audit: type=1326 audit(1738930549.396:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8435eafde9 code=0x7ffc0000
[  804.852030][   T26] audit: type=1326 audit(1738930549.406:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8435eafde9 code=0x7ffc0000
[  804.886456][   T26] audit: type=1326 audit(1738930549.416:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8435eafde9 code=0x7ffc0000
[  805.216508][T11766] loop2: detected capacity change from 0 to 512
[  805.680673][   T26] audit: type=1326 audit(1738930549.416:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8435eafde9 code=0x7ffc0000
[  805.705454][   T26] audit: type=1326 audit(1738930549.416:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8435eafde9 code=0x7ffc0000
[  805.803532][   T26] audit: type=1326 audit(1738930549.416:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8435eafe23 code=0x7ffc0000
[  805.878526][   T26] audit: type=1326 audit(1738930549.416:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8435eae89f code=0x7ffc0000
[  805.979849][   T26] audit: type=1326 audit(1738930549.536:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8435eafe77 code=0x7ffc0000
[  806.032581][   T26] audit: type=1326 audit(1738930549.576:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8435eae750 code=0x7ffc0000
[  806.055227][   T26] audit: type=1326 audit(1738930549.746:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.2.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8435eaf9eb code=0x7ffc0000
[  806.090822][T11776] bridge0: port 3(gretap0) entered blocking state
[  806.097694][T11776] bridge0: port 3(gretap0) entered disabled state
[  806.106195][T11776] device gretap0 entered promiscuous mode
[  806.112616][T11776] bridge0: port 3(gretap0) entered blocking state
[  806.119082][T11776] bridge0: port 3(gretap0) entered forwarding state
[  806.128733][T11776] device gretap0 left promiscuous mode
[  806.134554][T11776] bridge0: port 3(gretap0) entered disabled state
[  806.856208][T11789] loop5: detected capacity change from 0 to 128
[  808.451373][T11804] loop3: detected capacity change from 0 to 1024
[  808.537352][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  808.544324][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  808.563517][T11804] EXT4-fs (loop3): Test dummy encryption mode enabled
[  808.570422][T11804] EXT4-fs (loop3): Test dummy encryption mode enabled
[  808.578582][T11804] EXT4-fs (loop3): Ignoring removed orlov option
[  808.586309][T11804] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  809.637715][T11811] loop5: detected capacity change from 0 to 1024
[  809.740345][T11811] EXT4-fs (loop5): Test dummy encryption mode enabled
[  809.801083][T11811] EXT4-fs (loop5): Test dummy encryption mode enabled
[  809.819498][T11811] EXT4-fs (loop5): Ignoring removed orlov option
[  809.839858][T11811] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2
[  810.193838][T11817] loop2: detected capacity change from 0 to 128
[  810.281792][T11817] EXT4-fs (loop2): Test dummy encryption mode enabled
[  810.333410][T11817] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  810.367785][T11817] ext4 filesystem being mounted at /377/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  811.124701][T11833] loop2: detected capacity change from 0 to 128
[  811.442125][ T1106] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  811.715074][T11840] loop5: detected capacity change from 0 to 47
[  811.733434][ T1106] usb 2-1: Using ep0 maxpacket: 32
[  812.242589][ T1106] usb 2-1: config 0 has an invalid interface number: 244 but max is 0
[  812.347104][ T1106] usb 2-1: config 0 has no interface number 0
[  812.710459][ T1106] usb 2-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  812.791487][ T1106] usb 2-1: config 0 interface 244 has no altsetting 0
[  813.115049][ T1106] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c
[  813.137381][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.163990][ T1106] usb 2-1: Product: syz
[  813.178895][ T1106] usb 2-1: Manufacturer: syz
[  813.194135][ T1106] usb 2-1: SerialNumber: syz
[  813.214324][ T1106] usb 2-1: config 0 descriptor??
[  813.297250][ T1106] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort found
[  813.543252][ T1106] snd_usb_toneport 2-1:0.244: cannot get proper max packet size
[  813.563106][ T1106] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort now disconnected
[  813.574735][ T1106] snd_usb_toneport: probe of 2-1:0.244 failed with error -22
[  813.852551][ T1106] usb 2-1: USB disconnect, device number 5
[  813.879860][T11861] loop3: detected capacity change from 0 to 1024
[  813.987979][T11861] EXT4-fs (loop3): Test dummy encryption mode enabled
[  814.014489][T11861] EXT4-fs (loop3): Test dummy encryption mode enabled
[  814.034904][T11861] EXT4-fs (loop3): Ignoring removed orlov option
[  814.071663][T11861] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  815.127274][T11870] loop3: detected capacity change from 0 to 1024
[  815.220537][T11870] EXT4-fs (loop3): Test dummy encryption mode enabled
[  815.270850][T11870] EXT4-fs (loop3): Test dummy encryption mode enabled
[  815.294337][T11870] EXT4-fs (loop3): Ignoring removed orlov option
[  815.310980][T11870] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  815.847157][T11871] cgroup: fork rejected by pids controller in /syz2
[  819.743788][T12000] loop1: detected capacity change from 0 to 1024
[  819.832006][T12000] EXT4-fs (loop1): Test dummy encryption mode enabled
[  819.838970][T12000] EXT4-fs (loop1): Test dummy encryption mode enabled
[  819.901580][T12000] EXT4-fs (loop1): Ignoring removed orlov option
[  819.934959][T12000] EXT4-fs (loop1): Mount option "data_err=abort" incompatible with ext2
[  819.952218][ T4505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.043245][T12008] loop5: detected capacity change from 0 to 2048
[  820.180661][T12008] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  820.194040][T12008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  820.196324][ T4505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.455699][ T4505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.614701][ T4505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.720162][T12010] chnl_net:caif_netlink_parms(): no params data found
[  822.768103][T12041] loop1: detected capacity change from 0 to 128
[  822.851527][ T1106] Bluetooth: hci1: command 0x0409 tx timeout
[  823.210203][T12010] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.254016][T12010] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.325475][T12010] device bridge_slave_0 entered promiscuous mode
[  823.455008][T12010] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.510918][T12010] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.563196][T12010] device bridge_slave_1 entered promiscuous mode
[  823.583677][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'.
[  823.696418][    T9] Bluetooth: hci4: Frame reassembly failed (-84)
[  823.710377][T12010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  823.774731][T12010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  823.904174][T12010] team0: Port device team_slave_0 added
[  823.936738][T12010] team0: Port device team_slave_1 added
[  824.045702][T12010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  824.072679][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  824.156992][T12010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  824.202055][T12010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  824.229533][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  824.281787][T12010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  824.423934][T12010] device hsr_slave_0 entered promiscuous mode
[  824.451992][T12010] device hsr_slave_1 entered promiscuous mode
[  824.471765][T12010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  824.479368][T12010] Cannot create hsr debugfs directory
[  824.695307][T12064] loop5: detected capacity change from 0 to 32768
[  824.768572][T12064] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1960 (12064)
[  824.820677][T12064] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  824.858260][T12064] BTRFS info (device loop5): using free space tree
[  824.890292][T12064] BTRFS info (device loop5): has skinny extents
[  824.940898][ T4454] Bluetooth: hci1: command 0x041b tx timeout
[  825.203438][T12064] BTRFS info (device loop5): enabling ssd optimizations
[  825.731862][T12011] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  826.282118][T12116] loop3: detected capacity change from 0 to 1024
[  826.382500][T12116] EXT4-fs (loop3): Test dummy encryption mode enabled
[  826.389434][T12116] EXT4-fs (loop3): Test dummy encryption mode enabled
[  826.437783][T12116] EXT4-fs (loop3): Ignoring removed orlov option
[  826.462083][T12116] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  827.260527][T12141] Bluetooth: hci1: command 0x040f tx timeout
[  827.291363][ T4505] device hsr_slave_0 left promiscuous mode
[  827.331773][ T4505] device hsr_slave_1 left promiscuous mode
[  827.339744][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  827.421240][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0
[  827.492243][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  827.501880][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1
[  827.578088][ T4505] device bridge_slave_1 left promiscuous mode
[  828.734471][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state
[  829.044831][ T4505] device bridge_slave_0 left promiscuous mode
[  829.051076][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state
[  829.181950][ T4505] device veth1_macvtap left promiscuous mode
[  829.201510][ T4505] device veth0_macvtap left promiscuous mode
[  829.219416][ T4505] device veth1_vlan left promiscuous mode
[  829.249890][ T4505] device veth0_vlan left promiscuous mode
[  829.383772][T10682] Bluetooth: hci1: command 0x0419 tx timeout
[  829.438679][T12158] netlink: 'syz.5.1971': attribute type 11 has an invalid length.
[  829.504513][T12159] loop5: detected capacity change from 0 to 256
[  829.637098][T12159] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  829.666858][T12159] FAT-fs (loop5): Filesystem has been set read-only
[  829.691758][T12159] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  829.718732][T12159] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  829.750226][T12159] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  829.778429][T12159] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  829.807688][T12159] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  829.837747][T12159] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  829.867930][T12159] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  829.898394][T12159] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  829.915481][ T4505] team0 (unregistering): Port device team_slave_1 removed
[  829.928176][T12159] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  829.957036][ T4505] team0 (unregistering): Port device team_slave_0 removed
[  829.967406][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  829.967423][   T26] audit: type=1800 audit(1738930574.538:93): pid=12159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1971" name="file1" dev="loop5" ino=1048751 res=0 errno=0
[  829.981492][T12159] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  830.020562][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  830.059126][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  830.184503][ T4505] bond0 (unregistering): Released all slaves
[  830.244800][T12156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1970'.
[  830.258969][T12156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1970'.
[  830.438003][T12010] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  830.595622][T12010] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  830.614895][T12010] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  830.831521][T12010] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  831.621587][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1977'.
[  831.708024][ T4259] Bluetooth: hci4: Frame reassembly failed (-84)
[  832.558261][T12010] 8021q: adding VLAN 0 to HW filter on device bond0
[  833.599351][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  833.628822][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  833.679790][T12010] 8021q: adding VLAN 0 to HW filter on device team0
[  833.757219][T12011] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  833.870618][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  833.883049][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  833.901974][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  833.909186][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  834.056373][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  834.565583][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  834.675298][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  834.748522][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state
[  834.755694][ T4259] bridge0: port 2(bridge_slave_1) entered forwarding state
[  834.790602][T12214] loop1: detected capacity change from 0 to 1024
[  834.802029][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  834.817613][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  834.832975][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  834.849246][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  834.887822][T12214] EXT4-fs (loop1): Test dummy encryption mode enabled
[  834.931689][T12214] EXT4-fs (loop1): Test dummy encryption mode enabled
[  834.971600][T12214] EXT4-fs (loop1): Ignoring removed orlov option
[  834.978078][T12214] EXT4-fs (loop1): Mount option "data_err=abort" incompatible with ext2
[  835.059922][T12010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  835.070628][T12010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  835.084439][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  835.116678][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  835.265403][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  835.613327][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  835.892968][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  835.932413][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  835.992616][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  836.070732][T12222] loop5: detected capacity change from 0 to 128
[  836.072097][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  836.127143][T12222] EXT4-fs (loop5): Test dummy encryption mode enabled
[  836.202377][T12222] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  836.233917][T12222] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  836.776906][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  836.832784][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  836.840485][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  836.894121][T12242] netlink: 'syz.3.1987': attribute type 11 has an invalid length.
[  836.907735][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  836.928886][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  836.955042][T12245] loop3: detected capacity change from 0 to 256
[  837.053561][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  837.076618][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  837.107285][T12010] device veth0_vlan entered promiscuous mode
[  837.118325][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  837.143911][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  837.162535][T12242] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  837.178550][T12010] device veth1_vlan entered promiscuous mode
[  837.196778][T12242] FAT-fs (loop3): Filesystem has been set read-only
[  837.235270][T12242] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  837.282507][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  837.294963][T12242] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  837.298139][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  837.321457][T12242] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  837.349932][T12010] device veth0_macvtap entered promiscuous mode
[  837.369438][T12010] device veth1_macvtap entered promiscuous mode
[  837.370865][T12242] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  837.420386][T12242] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  837.425091][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  837.461372][T12242] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  837.480462][T12242] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  837.513126][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  837.538496][T12242] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  837.558161][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  837.569066][T12242] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  837.588778][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  837.600820][   T26] audit: type=1800 audit(1738930582.168:94): pid=12242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1987" name="file1" dev="loop3" ino=1048752 res=0 errno=0
[  837.602436][T12242] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  837.641673][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  837.687247][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  837.707779][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  837.875091][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  837.945412][T12010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  837.990084][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  838.247654][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  838.549130][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  838.762279][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  838.954425][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  838.969567][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  838.980126][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  838.991673][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  840.141393][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  840.172553][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  840.371510][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  840.702067][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  841.082924][T12010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  841.168835][T12010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  841.178471][T12010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  841.195824][T12010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  841.206422][T12010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  841.219767][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  841.442289][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  843.519917][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  843.550649][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  843.593949][T12310] loop3: detected capacity change from 0 to 1024
[  843.613794][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  843.645359][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  843.677466][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  843.706043][T12310] EXT4-fs (loop3): Test dummy encryption mode enabled
[  843.720656][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  843.751536][T12310] EXT4-fs (loop3): Test dummy encryption mode enabled
[  843.788924][T12310] EXT4-fs (loop3): Ignoring removed orlov option
[  843.818837][T12310] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  844.001169][T12324] loop2: detected capacity change from 0 to 1024
[  844.309487][T12324] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  845.482688][T12345] netlink: 'syz.2.2004': attribute type 11 has an invalid length.
[  845.737858][T12313] loop1: detected capacity change from 0 to 32768
[  845.875887][T12313] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2002 (12313)
[  845.950845][T12345] loop2: detected capacity change from 0 to 256
[  846.173146][T12313] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  846.219156][T12313] BTRFS info (device loop1): turning on flush-on-commit
[  846.259333][T12313] BTRFS info (device loop1): doing ref verification
[  846.277968][T12345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  846.301457][T12313] BTRFS info (device loop1): doing ref verification
[  846.318043][T12345] FAT-fs (loop2): Filesystem has been set read-only
[  846.351152][T12313] BTRFS info (device loop1): force clearing of disk cache
[  846.374332][T12345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  846.393914][T12313] BTRFS info (device loop1): enabling disk space caching
[  846.412755][T12345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  846.429351][T12313] BTRFS info (device loop1): setting nodatacow, compression disabled
[  846.441252][T12345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  846.458624][T12313] BTRFS info (device loop1): enabling ssd optimizations
[  846.466153][T12313] BTRFS info (device loop1): using spread ssd allocation scheme
[  846.481295][T12345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  846.490407][T12313] BTRFS info (device loop1): max_inline at 4096
[  846.503539][T12345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  846.520308][T12313] BTRFS info (device loop1): disk space caching is enabled
[  846.541456][T12345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  846.560291][T12313] BTRFS info (device loop1): has skinny extents
[  846.580164][T12345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  846.683334][T12345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  846.713318][T12345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  846.773486][   T26] audit: type=1800 audit(1738930591.348:95): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2004" name="file1" dev="loop2" ino=1048755 res=0 errno=0
[  846.794037][T12345] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  846.959951][T12313] BTRFS error (device loop1): open_ctree failed
[  847.062854][T12381] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  847.082535][ T4460] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  848.212982][T10680] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  849.593843][T12409] loop1: detected capacity change from 0 to 128
[  850.054828][T12413] netlink: 'syz.0.2016': attribute type 11 has an invalid length.
[  851.576869][T12437] netlink: 'syz.3.2024': attribute type 11 has an invalid length.
[  852.977004][T12440] loop3: detected capacity change from 0 to 256
[  853.280388][T12437] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  853.319888][T12437] FAT-fs (loop3): Filesystem has been set read-only
[  853.391952][T12437] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  853.400953][T12437] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  853.410278][T12437] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  853.419340][T12437] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  853.428086][T12437] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  853.436824][T12437] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  853.445639][T12437] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  853.455693][T12437] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  853.477288][T12437] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  853.790813][   T26] audit: type=1800 audit(1738930598.358:96): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2024" name="file1" dev="loop3" ino=1048756 res=0 errno=0
[  853.871457][T12437] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  854.261902][T12460] loop1: detected capacity change from 0 to 128
[  855.077080][T12460] EXT4-fs (loop1): Test dummy encryption mode enabled
[  855.424667][T12460] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  855.576047][T12460] ext4 filesystem being mounted at /421/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  855.913369][T12470] netlink: 'syz.0.2033': attribute type 11 has an invalid length.
[  859.749899][T12508] overlayfs: failed to clone upperpath
[  859.836650][T12507] netlink: 'syz.5.2045': attribute type 11 has an invalid length.
[  860.035497][T12509] loop5: detected capacity change from 0 to 256
[  860.501245][T12493] loop2: detected capacity change from 0 to 32768
[  860.532092][T12507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  860.541121][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2046'.
[  860.562674][T12493] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2041 (12493)
[  860.575895][T12507] FAT-fs (loop5): Filesystem has been set read-only
[  860.590811][T12507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  860.647267][T12507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  860.658511][T12493] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  860.699588][T12493] BTRFS info (device loop2): setting nodatacow, compression disabled
[  860.728445][T12507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  860.749096][T12493] BTRFS info (device loop2): force clearing of disk cache
[  860.766569][T12507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  860.777965][T12493] BTRFS info (device loop2): enabling ssd optimizations
[  860.841577][T12507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  860.868032][T12516] netlink: 'syz.3.2048': attribute type 11 has an invalid length.
[  860.877247][T12493] BTRFS info (device loop2): using spread ssd allocation scheme
[  860.903637][T12507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  860.913786][T12493] BTRFS info (device loop2): disabling free space tree
[  860.954786][T12517] loop3: detected capacity change from 0 to 256
[  860.963364][T12507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  860.972889][T12507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  860.981791][T12507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  860.985598][T12493] BTRFS error (device loop2): invalid value 0 for thread_pool
[  860.992643][   T26] audit: type=1800 audit(1738930605.558:97): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2045" name="file1" dev="loop5" ino=1048757 res=0 errno=0
[  861.021093][T12507] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  861.210821][T12493] BTRFS error (device loop2): open_ctree failed
[  861.889772][T12516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  862.074986][T12516] FAT-fs (loop3): Filesystem has been set read-only
[  862.115002][T12516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  862.633052][T12516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  862.824537][T12516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  862.881543][T12516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  862.890631][T12516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  862.900001][T12516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  862.909208][T12516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  862.918490][T12516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  862.927294][T12516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  862.942771][   T26] audit: type=1800 audit(1738930607.518:98): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2048" name="file1" dev="loop3" ino=1048758 res=0 errno=0
[  862.949909][T12516] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  865.329493][T12557] loop1: detected capacity change from 0 to 4096
[  865.429039][T12557] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  868.033368][T12585] netlink: 'syz.5.2067': attribute type 11 has an invalid length.
[  870.569106][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  870.575459][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  870.934051][T12612] netlink: 'syz.5.2075': attribute type 11 has an invalid length.
[  870.990229][T12612] loop5: detected capacity change from 0 to 256
[  871.181824][T10680] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  871.349142][T12612] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  871.416592][T12612] FAT-fs (loop5): Filesystem has been set read-only
[  871.460156][T12612] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  871.512253][T12612] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  871.531373][T12612] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  871.540379][T12612] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  871.562783][T10680] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  871.571404][T12612] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  871.585098][T10680] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  871.591354][T12612] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  871.625736][T10680] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  871.632611][T12612] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  871.651348][T12612] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  871.657446][T10680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.660245][T12612] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  871.669377][   T26] audit: type=1800 audit(1738930616.238:99): pid=12612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2075" name="file1" dev="loop5" ino=1048759 res=0 errno=0
[  871.687033][T12612] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  871.710306][T10680] usb 3-1: config 0 descriptor??
[  871.731717][T12613] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  871.755579][T10680] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  871.851053][T12622] xt_TCPMSS: Only works on TCP SYN packets
[  873.974384][T10678] usb 3-1: USB disconnect, device number 8
[  875.110370][T12655] netlink: 372 bytes leftover after parsing attributes in process `syz.0.2086'.
[  875.311478][ T6315] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  877.981526][ T6315] usb 6-1: device descriptor read/all, error -71
[  878.077804][T12694] netlink: 'syz.2.2097': attribute type 1 has an invalid length.
[  878.304235][T12694] netlink: 'syz.2.2097': attribute type 4 has an invalid length.
[  878.343208][T12694] netlink: 15363 bytes leftover after parsing attributes in process `syz.2.2097'.
[  878.496670][T12701] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2099'.
[  885.407399][T12748] netlink: 'syz.2.2110': attribute type 2 has an invalid length.
[  885.732567][T12748] netlink: 'syz.2.2110': attribute type 8 has an invalid length.
[  885.740341][T12748] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2110'.
[  888.877330][T12771] loop3: detected capacity change from 0 to 128
[  889.081568][ T4454] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  889.101664][T12771] EXT4-fs (loop3): Test dummy encryption mode enabled
[  889.293384][T12771] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  889.330482][T12771] ext4 filesystem being mounted at /437/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  889.342033][ T4454] usb 2-1: Using ep0 maxpacket: 8
[  889.472693][ T4454] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  889.908306][ T4454] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  889.948747][ T4454] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  889.989726][ T4454] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  890.038013][ T4454] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  890.053745][ T4454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.441522][ T4454] usb 2-1: GET_CAPABILITIES returned 0
[  890.458654][ T4454] usbtmc 2-1:16.0: can't read capabilities
[  890.836786][T10680] usb 2-1: USB disconnect, device number 6
[  896.355777][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'.
[  900.238040][T12849] loop5: detected capacity change from 0 to 2048
[  900.920655][T12851] loop3: detected capacity change from 0 to 1024
[  901.123375][T12849] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  902.228867][T12849] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  902.648990][T12851] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  902.731230][T12851] EXT4-fs (loop3): first meta block group too large: 50331648 (group descriptor block count 1)
[  904.605015][T12869] loop5: detected capacity change from 0 to 64
[  904.611509][T10680] Bluetooth: hci4: command 0x0409 tx timeout
[  905.176460][T12858] chnl_net:caif_netlink_parms(): no params data found
[  905.243878][T12884] loop5: detected capacity change from 0 to 2048
[  905.370544][T12884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  906.561773][T12858] bridge0: port 1(bridge_slave_0) entered blocking state
[  906.568878][T12858] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.658261][T12858] device bridge_slave_0 entered promiscuous mode
[  906.681170][T12858] bridge0: port 2(bridge_slave_1) entered blocking state
[  906.691564][ T4460] Bluetooth: hci4: command 0x041b tx timeout
[  906.734899][T12858] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.796165][T12858] device bridge_slave_1 entered promiscuous mode
[  907.844351][T12858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  908.584685][T12858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  908.640854][T12858] team0: Port device team_slave_0 added
[  908.800671][ T4460] Bluetooth: hci4: command 0x040f tx timeout
[  909.446391][T12858] team0: Port device team_slave_1 added
[  909.602408][T12858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  909.609384][T12858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  909.721380][T12858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  909.775077][T12858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  909.831431][T12858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  910.704319][T12858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  910.808278][T12921] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2159'.
[  910.851840][ T4460] Bluetooth: hci4: command 0x0419 tx timeout
[  911.018944][T12858] device hsr_slave_0 entered promiscuous mode
[  911.058802][T12858] device hsr_slave_1 entered promiscuous mode
[  911.560748][T12858] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  911.614581][T12858] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  911.660551][T12924] loop3: detected capacity change from 0 to 1024
[  911.661097][T12858] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  911.752332][T12858] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  911.779565][T12924] EXT4-fs (loop3): Test dummy encryption mode enabled
[  911.795066][T12924] EXT4-fs (loop3): Test dummy encryption mode enabled
[  911.817508][T12924] EXT4-fs (loop3): Ignoring removed orlov option
[  911.849384][T12924] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  913.200925][T12858] 8021q: adding VLAN 0 to HW filter on device bond0
[  913.247086][T12937] netlink: 'syz.5.2165': attribute type 10 has an invalid length.
[  913.248982][T12936] loop1: detected capacity change from 0 to 1024
[  913.298362][T12937] 8021q: adding VLAN 0 to HW filter on device team0
[  913.381710][T12936] EXT4-fs (loop1): Test dummy encryption mode enabled
[  913.432982][T12937] bond0: (slave team0): Enslaving as an active interface with an up link
[  913.459945][T12858] 8021q: adding VLAN 0 to HW filter on device team0
[  913.468876][T12936] EXT4-fs (loop1): Test dummy encryption mode enabled
[  913.587110][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  913.612102][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  913.619708][T12936] EXT4-fs (loop1): Ignoring removed orlov option
[  913.700770][T12936] EXT4-fs (loop1): Mount option "data_err=abort" incompatible with ext2
[  915.441386][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  915.450356][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  915.466504][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.473641][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state
[  915.482799][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  915.492112][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  915.500629][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.507757][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state
[  915.560426][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  915.580155][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  915.611725][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  915.655953][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  915.691692][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  916.399937][T12858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  916.422445][T12858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  916.488184][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  916.513221][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  916.561893][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  916.588052][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  916.627122][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  916.663590][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  916.699549][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  916.747924][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  917.011809][ T4216] Bluetooth: hci1: command 0x1003 tx timeout
[  917.017908][ T4178] Bluetooth: hci1: sending frame failed (-49)
[  917.076601][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  917.087300][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  917.132720][T12858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  917.568079][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  917.592007][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  917.685088][T12858] device veth0_vlan entered promiscuous mode
[  917.726785][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  917.752295][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  917.760998][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  917.782663][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  917.810144][T12858] device veth1_vlan entered promiscuous mode
[  917.888262][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  917.912159][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  917.931778][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  917.961706][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  917.975211][T12858] device veth0_macvtap entered promiscuous mode
[  918.001480][T12858] device veth1_macvtap entered promiscuous mode
[  918.063743][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  918.099356][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.121383][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  918.161429][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.176960][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  918.376946][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.395333][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  918.409875][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.567100][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  918.796764][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  919.105067][T12141] Bluetooth: hci1: command 0x1001 tx timeout
[  919.111173][ T4178] Bluetooth: hci1: sending frame failed (-49)
[  919.118430][T12858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  919.201995][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  919.244931][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  919.254916][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  919.266359][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  919.276281][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  919.286839][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  919.296881][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  919.328743][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  919.461655][T12858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  919.495413][T12858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  919.535422][T12858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  919.545793][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  919.555408][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  919.564333][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  919.573702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  919.582916][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  919.592515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  920.427108][T12858] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  920.436251][T12858] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  920.445070][T12858] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  920.454296][T12858] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  920.580182][T12986] loop1: detected capacity change from 0 to 32768
[  920.612412][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  920.633556][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  920.715375][  T150] block nbd5: Attempted send on invalid socket
[  920.722111][  T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  920.736503][T12998] (syz.5.2179,12998,1):ocfs2_get_sector:1774 ERROR: status = -5
[  920.744384][T12998] (syz.5.2179,12998,1):ocfs2_sb_probe:750 ERROR: status = -5
[  920.752193][T12998] (syz.5.2179,12998,1):ocfs2_fill_super:991 ERROR: superblock probe failed!
[  920.761055][T12998] (syz.5.2179,12998,1):ocfs2_fill_super:1177 ERROR: status = -5
[  921.043971][T12986] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2177 (12986)
[  921.359994][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  921.371914][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  921.393724][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  921.407170][ T1106] Bluetooth: hci1: command 0x1009 tx timeout
[  921.431891][T12986] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  921.451954][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  921.483661][T12986] BTRFS info (device loop1): using free space tree
[  921.490208][T12986] BTRFS info (device loop1): has skinny extents
[  922.289603][T12986] BTRFS info (device loop1): enabling ssd optimizations
[  923.200309][T13033] netlink: 'syz.6.2185': attribute type 11 has an invalid length.
[  923.608754][T13036] loop6: detected capacity change from 0 to 256
[  925.210617][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2190'.
[  925.674917][T13058] loop1: detected capacity change from 0 to 1024
[  925.797855][T13058] EXT4-fs (loop1): Test dummy encryption mode enabled
[  925.813304][T13058] EXT4-fs (loop1): Test dummy encryption mode enabled
[  925.847287][T13058] EXT4-fs (loop1): Ignoring removed orlov option
[  925.884409][T13058] EXT4-fs (loop1): Mount option "data_err=abort" incompatible with ext2
[  928.088099][T13086] loop3: detected capacity change from 0 to 1024
[  928.115335][T13091] netlink: 'syz.1.2200': attribute type 11 has an invalid length.
[  928.202670][T13092] loop5: detected capacity change from 0 to 164
[  928.652700][T13086] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  929.172868][T13108] loop1: detected capacity change from 0 to 128
[  929.698160][T13108] VFS: Found a Xenix FS (block size = 512) on device loop1
[  929.982712][T13108] attempt to access beyond end of device
[  929.982712][T13108] loop1: rw=2049, want=2066843071, limit=128
[  930.116785][T13108] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write
[  930.216314][T13108] attempt to access beyond end of device
[  930.216314][T13108] loop1: rw=2049, want=8767745, limit=128
[  930.301513][T13108] Buffer I/O error on dev loop1, logical block 8767744, lost async page write
[  930.357187][T13108] attempt to access beyond end of device
[  930.357187][T13108] loop1: rw=2049, want=13269810, limit=128
[  930.511433][T13108] Buffer I/O error on dev loop1, logical block 13269809, lost async page write
[  930.561435][T13108] attempt to access beyond end of device
[  930.561435][T13108] loop1: rw=2049, want=1158, limit=128
[  930.608606][T13108] Buffer I/O error on dev loop1, logical block 1157, lost async page write
[  930.649333][T13108] attempt to access beyond end of device
[  930.649333][T13108] loop1: rw=2049, want=3211265, limit=128
[  930.689286][T13108] Buffer I/O error on dev loop1, logical block 3211264, lost async page write
[  930.699032][T13108] attempt to access beyond end of device
[  930.699032][T13108] loop1: rw=2049, want=8768636, limit=128
[  930.710542][T13108] Buffer I/O error on dev loop1, logical block 8768635, lost async page write
[  930.728172][T13108] attempt to access beyond end of device
[  930.728172][T13108] loop1: rw=2049, want=13466418, limit=128
[  930.760196][T13108] Buffer I/O error on dev loop1, logical block 13466417, lost async page write
[  930.776237][T13123] loop6: detected capacity change from 0 to 1024
[  930.786681][T13108] attempt to access beyond end of device
[  930.786681][T13108] loop1: rw=2049, want=209286, limit=128
[  930.798104][T13108] Buffer I/O error on dev loop1, logical block 209285, lost async page write
[  930.854412][ T4172] sysv_free_block: trying to free block not in datazone
[  930.876351][T13123] EXT4-fs (loop6): Test dummy encryption mode enabled
[  930.908598][T13123] EXT4-fs (loop6): Test dummy encryption mode enabled
[  930.920637][ T4172] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  930.932763][T13123] EXT4-fs (loop6): Ignoring removed orlov option
[  930.946021][T13123] EXT4-fs (loop6): Mount option "data_err=abort" incompatible with ext2
[  931.443952][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  931.452301][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  931.564736][    C1] hrtimer: interrupt took 54387 ns
[  932.104568][T13143] loop6: detected capacity change from 0 to 164
[  934.856024][T13173] loop3: detected capacity change from 0 to 1024
[  935.021661][T13173] EXT4-fs (loop3): Test dummy encryption mode enabled
[  935.049898][T13173] EXT4-fs (loop3): Test dummy encryption mode enabled
[  935.068775][T13173] EXT4-fs (loop3): Ignoring removed orlov option
[  935.088440][T13173] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  935.522136][T13167] loop6: detected capacity change from 0 to 32768
[  936.036228][T13184] mkiss: ax0: crc mode is auto.
[  936.230939][T13167] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  936.428012][T12858] ocfs2: Unmounting device (7,6) on (node local)
[  938.191094][T13188] loop3: detected capacity change from 0 to 32768
[  939.134123][T13218] loop1: detected capacity change from 0 to 2048
[  939.756073][T13218] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none.
[  939.885332][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'.
[  940.343515][T13229] loop6: detected capacity change from 0 to 1024
[  940.512872][T13233] loop3: detected capacity change from 0 to 8
[  941.146019][T13229] EXT4-fs (loop6): Test dummy encryption mode enabled
[  941.190120][T13232] xt_TCPMSS: Only works on TCP SYN packets
[  941.208815][T13229] EXT4-fs (loop6): Test dummy encryption mode enabled
[  941.259069][T13229] EXT4-fs (loop6): Ignoring removed orlov option
[  941.295823][T13229] EXT4-fs (loop6): Mount option "data_err=abort" incompatible with ext2
[  941.506832][T13235] loop5: detected capacity change from 0 to 128
[  941.923649][T13235] VFS: Found a Xenix FS (block size = 512) on device loop5
[  942.111470][T13248] loop6: detected capacity change from 0 to 1024
[  942.123864][T13235] attempt to access beyond end of device
[  942.123864][T13235] loop5: rw=0, want=8767745, limit=128
[  942.915543][T13248] EXT4-fs (loop6): Test dummy encryption mode enabled
[  942.958909][T13248] EXT4-fs (loop6): Test dummy encryption mode enabled
[  943.206449][T13235] Buffer I/O error on dev loop5, logical block 8767744, async page read
[  943.215086][T13235] attempt to access beyond end of device
[  943.215086][T13235] loop5: rw=0, want=13269810, limit=128
[  943.237830][T13235] Buffer I/O error on dev loop5, logical block 13269809, async page read
[  943.361975][T13235] attempt to access beyond end of device
[  943.361975][T13235] loop5: rw=0, want=1158, limit=128
[  943.409016][T13235] Buffer I/O error on dev loop5, logical block 1157, async page read
[  943.419509][T13248] EXT4-fs (loop6): Ignoring removed orlov option
[  943.624297][T13248] EXT4-fs (loop6): Mount option "data_err=abort" incompatible with ext2
[  943.673235][T13235] attempt to access beyond end of device
[  943.673235][T13235] loop5: rw=0, want=3211265, limit=128
[  944.619867][T13235] Buffer I/O error on dev loop5, logical block 3211264, async page read
[  944.644723][T13235] attempt to access beyond end of device
[  944.644723][T13235] loop5: rw=0, want=8768636, limit=128
[  944.711392][T13235] Buffer I/O error on dev loop5, logical block 8768635, async page read
[  944.913110][T13235] attempt to access beyond end of device
[  944.913110][T13235] loop5: rw=0, want=13466418, limit=128
[  944.988942][T13235] Buffer I/O error on dev loop5, logical block 13466417, async page read
[  945.036688][T13263] loop3: detected capacity change from 0 to 256
[  945.066955][T13235] attempt to access beyond end of device
[  945.066955][T13235] loop5: rw=0, want=209286, limit=128
[  945.160764][T13235] Buffer I/O error on dev loop5, logical block 209285, async page read
[  945.194403][T13263] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  945.217167][T13235] attempt to access beyond end of device
[  945.217167][T13235] loop5: rw=0, want=8767745, limit=128
[  945.228507][T13263] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  945.273469][T13235] Buffer I/O error on dev loop5, logical block 8767744, async page read
[  945.284643][T13263] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  945.311399][T13235] attempt to access beyond end of device
[  945.311399][T13235] loop5: rw=0, want=13269810, limit=128
[  945.351310][T13235] Buffer I/O error on dev loop5, logical block 13269809, async page read
[  945.370443][T13235] attempt to access beyond end of device
[  945.370443][T13235] loop5: rw=0, want=1158, limit=128
[  945.426388][T13235] Buffer I/O error on dev loop5, logical block 1157, async page read
[  945.605818][   T26] audit: type=1800 audit(1738930690.178:100): pid=13235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2238" name="/" dev="loop5" ino=2 res=0 errno=0
[  945.983191][ T8567] sysv_free_block: trying to free block not in datazone
[  945.995761][ T8567] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  946.712913][T13275] loop1: detected capacity change from 0 to 1024
[  946.821948][T13275] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  946.899168][T13275] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  946.979374][T13275] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  947.042012][T13275] EXT4-fs (loop1): This should not happen!! Data will be lost
[  947.042012][T13275] 
[  947.081474][T13275] EXT4-fs (loop1): Total free blocks count 0
[  947.118275][T13275] EXT4-fs (loop1): Free/Dirty block details
[  947.137616][T13275] EXT4-fs (loop1): free_blocks=68451041280
[  947.162518][T13275] EXT4-fs (loop1): dirty_blocks=16
[  947.178710][T13275] EXT4-fs (loop1): Block reservation details
[  947.180786][T13281] loop5: detected capacity change from 0 to 1024
[  947.199619][T13275] EXT4-fs (loop1): i_reserved_data_blocks=1
[  947.296014][T13281] EXT4-fs (loop5): Test dummy encryption mode enabled
[  947.314024][T13281] EXT4-fs (loop5): Test dummy encryption mode enabled
[  947.321084][T13281] EXT4-fs (loop5): Ignoring removed orlov option
[  947.373604][T13281] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2
[  947.490576][T13283] loop1: detected capacity change from 0 to 128
[  947.626472][T13283] EXT4-fs (loop1): Test dummy encryption mode enabled
[  947.873516][T13283] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  947.905603][T13283] ext4 filesystem being mounted at /461/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  948.778488][T13295] sctp: [Deprecated]: syz.0.2256 (pid 13295) Use of struct sctp_assoc_value in delayed_ack socket option.
[  948.778488][T13295] Use struct sctp_sack_info instead
[  949.137056][T13293] loop5: detected capacity change from 0 to 32768
[  950.091048][T13293] XFS (loop5): Mounting V5 Filesystem
[  950.475297][ T4216] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  950.776859][T13293] XFS (loop5): Ending clean mount
[  950.855204][T13333] loop1: detected capacity change from 0 to 1024
[  950.921890][T13333] EXT4-fs (loop1): Test dummy encryption mode enabled
[  950.945610][T13333] EXT4-fs (loop1): Test dummy encryption mode enabled
[  950.979602][T13333] EXT4-fs (loop1): Ignoring removed orlov option
[  951.042146][T13333] EXT4-fs (loop1): Mount option "data_err=abort" incompatible with ext2
[  951.053224][ T8567] XFS (loop5): Unmounting Filesystem
[  951.071606][ T4216] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  951.353012][ T4216] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  951.371723][ T4216] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.391735][ T4216] usb 7-1: Product: syz
[  951.401649][ T4216] usb 7-1: Manufacturer: syz
[  951.409252][ T4216] usb 7-1: SerialNumber: syz
[  951.681591][ T4216] usb 7-1: selecting invalid altsetting 1
[  951.891988][ T4216] LME2510(C): Firmware Status: 00 00 08 00 00 00
[  951.892089][ T4216] dvb_usb_lmedm04: probe of 7-1:2.0 failed with error -22
[  952.108576][ T4216] usb 7-1: USB disconnect, device number 2
[  953.222601][ T7518] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  954.381632][ T7518] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  954.431759][ T7518] usb 7-1: config 0 has no interfaces?
[  954.483692][ T7518] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  954.574157][ T7518] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.632319][T13376] loop5: detected capacity change from 0 to 128
[  954.676478][ T7518] usb 7-1: config 0 descriptor??
[  954.765693][T13376] EXT4-fs (loop5): Test dummy encryption mode enabled
[  954.845974][T13376] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  954.919617][T13376] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  955.156770][ T7518] usb 7-1: USB disconnect, device number 3
[  955.359842][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2281'.
[  955.388632][ T1175] Bluetooth: hci1: Frame reassembly failed (-84)
[  955.396429][ T1175] Bluetooth: hci1: Frame reassembly failed (-84)
[  956.635687][T13394] loop3: detected capacity change from 0 to 1024
[  956.655619][T13394] EXT4-fs (loop3): Test dummy encryption mode enabled
[  956.670028][T13394] EXT4-fs (loop3): Test dummy encryption mode enabled
[  956.677570][T13394] EXT4-fs (loop3): Ignoring removed orlov option
[  956.718137][T13394] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  957.411397][ T1106] Bluetooth: hci1: command 0xfc11 tx timeout
[  957.411800][ T4184] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[  957.709022][T13408] xt_TCPMSS: Only works on TCP SYN packets
[  959.676181][T13427] team0: No ports can be present during mode change
[  959.690332][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2296'.
[  960.556824][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2297'.
[  961.271327][ T7518] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  961.371698][T13442] netlink: 'syz.3.2301': attribute type 11 has an invalid length.
[  961.431324][T11418] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  961.435614][T13442] loop3: detected capacity change from 0 to 256
[  961.534749][T13442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  961.552512][T13442] FAT-fs (loop3): Filesystem has been set read-only
[  961.559453][T13442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  961.576360][T13442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  961.588606][T13442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  961.606514][T13442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  961.618506][T13442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  961.656948][T13442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  961.675125][T13442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  961.688340][ T7518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  961.705060][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2302'.
[  961.705303][T13442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  961.714564][T11418] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  961.728069][ T7518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  961.743353][ T7518] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  961.758079][T13442] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  961.769490][   T26] audit: type=1800 audit(1738930706.338:101): pid=13442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2301" name="file1" dev="loop3" ino=1048762 res=0 errno=0
[  961.791427][ T7518] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  961.801708][T13442] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  961.805704][ T7518] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.820629][ T7518] usb 7-1: config 0 descriptor??
[  961.821567][T11418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  961.834883][T11418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  961.845842][T11418] usb 6-1: config 0 interface 0 has no altsetting 0
[  961.931415][T11418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  961.940351][T11418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  961.971385][T11418] usb 6-1: config 0 interface 0 has no altsetting 0
[  962.051473][T11418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  962.061174][T11418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  962.072293][T11418] usb 6-1: config 0 interface 0 has no altsetting 0
[  962.151803][T11418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  962.163761][T11418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  962.183126][T11418] usb 6-1: config 0 interface 0 has no altsetting 0
[  962.192387][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.261989][T11418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  962.275307][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.285914][T11418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  962.300405][T11418] usb 6-1: config 0 interface 0 has no altsetting 0
[  962.314058][ T7518] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  962.332800][ T7518] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  962.360517][ T7518] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  962.377375][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.379750][ T7518] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  962.388371][T11418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  962.428347][T11418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  962.442569][ T7518] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  962.450084][ T7518] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  962.458557][T11418] usb 6-1: config 0 interface 0 has no altsetting 0
[  962.476190][T13452] loop3: detected capacity change from 0 to 1024
[  962.488866][ T7518] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  962.512474][ T7518] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  962.528838][ T7518] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  962.536564][ T7518] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  962.544565][ T7518] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  962.558932][T13452] EXT4-fs (loop3): Test dummy encryption mode enabled
[  962.566290][T11418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  962.570024][ T7518] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  962.591724][T13452] EXT4-fs (loop3): Test dummy encryption mode enabled
[  962.598583][T11418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  962.611427][T13452] EXT4-fs (loop3): Ignoring removed orlov option
[  962.624953][T13452] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  962.637080][T11418] usb 6-1: config 0 interface 0 has no altsetting 0
[  962.646271][ T7518] usb 7-1: USB disconnect, device number 4
[  962.667488][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.731668][T11418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  962.757659][T11418] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  962.776206][T11418] usb 6-1: config 0 interface 0 has no altsetting 0
[  963.081478][T11418] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  963.102304][T11418] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  963.154009][T11418] usb 6-1: Product: syz
[  963.172325][T11418] usb 6-1: Manufacturer: syz
[  963.193269][T11418] usb 6-1: SerialNumber: syz
[  963.222341][T11418] usb 6-1: config 0 descriptor??
[  963.308227][T11418] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  963.661369][    C1] usb 6-1: yurex_control_callback - control failed: -71
[  963.661771][ T7518] usb 6-1: USB disconnect, device number 5
[  963.787452][ T7518] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  963.811532][ T4184] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[  964.021587][    T9] device hsr_slave_0 left promiscuous mode
[  964.046166][    T9] device hsr_slave_1 left promiscuous mode
[  964.071989][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  964.117615][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  964.154410][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  964.193525][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  964.239457][    T9] device bridge_slave_1 left promiscuous mode
[  964.264606][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.288526][    T9] device bridge_slave_0 left promiscuous mode
[  964.295263][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.365188][    T9] device veth1_macvtap left promiscuous mode
[  964.371231][    T9] device veth0_macvtap left promiscuous mode
[  964.401628][    T9] device veth1_vlan left promiscuous mode
[  964.453859][    T9] device veth0_vlan left promiscuous mode
[  964.495676][T13479] netlink: 'syz.5.2308': attribute type 11 has an invalid length.
[  964.564791][T13480] loop5: detected capacity change from 0 to 256
[  965.304030][T13480] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  965.362144][T13480] FAT-fs (loop5): Filesystem has been set read-only
[  965.386324][T13480] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  965.398911][T13480] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  965.427636][T13480] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  965.443770][T13480] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  965.458285][T13480] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  965.485638][T13480] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  965.521113][T13480] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  965.537989][T13480] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  965.591378][T13480] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  965.623387][   T26] audit: type=1800 audit(1738930710.198:102): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2308" name="file1" dev="loop5" ino=1048763 res=0 errno=0
[  965.656445][T13480] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  965.953784][T13498] xt_TCPMSS: Only works on TCP SYN packets
[  966.654617][    T9] team0 (unregistering): Port device team_slave_1 removed
[  966.700387][    T9] team0 (unregistering): Port device team_slave_0 removed
[  966.850601][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  967.290798][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  967.500000][    T9] bond0 (unregistering): Released all slaves
[  968.644419][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'.
[  968.725171][ T4385] Bluetooth: hci1: Frame reassembly failed (-84)
[  968.939648][T13530] loop5: detected capacity change from 0 to 1024
[  969.087744][T13530] EXT4-fs (loop5): Test dummy encryption mode enabled
[  969.110317][T13530] EXT4-fs (loop5): Test dummy encryption mode enabled
[  969.124944][T13530] EXT4-fs (loop5): Ignoring removed orlov option
[  969.142983][T13530] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2
[  970.771547][ T1106] Bluetooth: hci1: command 0xfc11 tx timeout
[  970.771688][ T4184] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[  971.665047][T13569] overlayfs: failed to clone upperpath
[  974.215477][T13586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2328'.
[  974.326832][T13587] xt_TCPMSS: Only works on TCP SYN packets
[  976.371661][T13617] mkiss: ax0: crc mode is auto.
[  980.828763][T13678] xt_TCPMSS: Only works on TCP SYN packets
[  983.835563][T13723] loop1: detected capacity change from 0 to 256
[  983.877242][T13723] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  983.888119][T13723] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  983.961168][T13723] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  988.270856][T13796] loop1: detected capacity change from 0 to 512
[  988.342496][T13796] EXT4-fs (loop1): Ignoring removed orlov option
[  988.348957][T13796] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  988.412582][T13796] EXT4-fs (loop1): 1 truncate cleaned up
[  988.424674][T13796] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,lazytime,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,init_itable,nouid32,,errors=continue. Quota mode: none.
[  989.613072][T13831] loop3: detected capacity change from 0 to 128
[  989.811125][T13831] EXT4-fs (loop3): Test dummy encryption mode enabled
[  989.900872][T13831] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  989.944986][T13831] ext4 filesystem being mounted at /480/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  991.167324][T13843] loop6: detected capacity change from 0 to 32768
[  991.239841][T13843] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.2381 (13843)
[  991.346967][T13843] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  991.387322][T13843] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  991.441465][T13843] BTRFS info (device loop6): use zstd compression, level 3
[  991.465031][T13843] BTRFS info (device loop6): using free space tree
[  991.486566][T13843] BTRFS info (device loop6): has skinny extents
[  991.612203][T13843] BTRFS info (device loop6): enabling ssd optimizations
[  991.710137][T13859] loop3: detected capacity change from 0 to 32768
[  991.839964][   T26] audit: type=1800 audit(1738930736.408:103): pid=13859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2385" name="file1" dev="loop3" ino=4 res=0 errno=0
[  991.978813][T13859] ================================================================================
[  992.010581][T13859] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_txnmgr.c:1777:5
[  992.029311][T13859] index 18 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
[  992.052991][T13859] CPU: 0 PID: 13859 Comm: syz.3.2385 Not tainted 5.15.178-syzkaller #0
[  992.061290][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  992.071376][T13859] Call Trace:
[  992.074681][T13859]  <TASK>
[  992.077635][T13859]  dump_stack_lvl+0x1e3/0x2d0
[  992.082355][T13859]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  992.088030][T13859]  ? panic+0x860/0x860
[  992.092156][T13859]  __ubsan_handle_out_of_bounds+0x118/0x140
[  992.098094][T13859]  txCommit+0x3f07/0x6ba0
[  992.102504][T13859]  ? txLinelock+0x160/0x160
[  992.107053][T13859]  ? txBegin+0x4fe/0x6e0
[  992.111342][T13859]  jfs_commit_inode+0x362/0x580
[  992.116233][T13859]  ? jfs_iget+0x3b0/0x3b0
[  992.120595][T13859]  ? rcu_is_watching+0x11/0xa0
[  992.125386][T13859]  ? __mark_inode_dirty+0x3dd/0xd60
[  992.130614][T13859]  extAlloc+0xca8/0x1000
[  992.134903][T13859]  ? jfs_ioc_trim+0x6a0/0x6a0
[  992.139629][T13859]  jfs_get_block+0x417/0xe50
[  992.144249][T13859]  ? dio_bio_add_page+0x259/0x3e0
[  992.149317][T13859]  ? jfs_dirty_inode+0x230/0x230
[  992.154292][T13859]  ? submit_page_section+0x66a/0xdd0
[  992.159618][T13859]  ? jfs_dirty_inode+0x230/0x230
[  992.164588][T13859]  __blockdev_direct_IO+0x1b13/0x4f40
[  992.170053][T13859]  ? sb_init_dio_done_wq+0x80/0x80
[  992.175211][T13859]  ? invalidate_inode_pages2_range+0x1088/0x1230
[  992.181696][T13859]  ? jfs_dirty_inode+0x230/0x230
[  992.186705][T13859]  ? invalidate_mapping_pagevec+0x30/0x30
[  992.192490][T13859]  ? filemap_write_and_wait_range+0x1d3/0x280
[  992.198759][T13859]  jfs_direct_IO+0xf6/0x1e0
[  992.203317][T13859]  generic_file_direct_write+0x204/0x460
[  992.209006][T13859]  __generic_file_write_iter+0x2a2/0x4f0
[  992.214696][T13859]  generic_file_write_iter+0xa7/0x1b0
[  992.220111][T13859]  do_iter_readv_writev+0x594/0x7a0
[  992.225356][T13859]  ? generic_file_rw_checks+0x260/0x260
[  992.231056][T13859]  ? common_file_perm+0x17d/0x1d0
[  992.236361][T13859]  ? fsnotify_perm+0x64/0x590
[  992.241056][T13859]  ? security_file_permission+0x75/0xa0
[  992.246751][T13859]  do_iter_write+0x1e6/0x760
[  992.251395][T13859]  do_pwritev+0x219/0x360
[  992.255763][T13859]  ? do_preadv+0x350/0x350
[  992.260225][T13859]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  992.266231][T13859]  ? vtime_user_exit+0x2d1/0x400
[  992.271200][T13859]  ? syscall_enter_from_user_mode+0x2e/0x240
[  992.277228][T13859]  ? lockdep_hardirqs_on+0x94/0x130
[  992.282437][T13859]  ? __x64_sys_pwritev2+0xb9/0x100
[  992.287769][T13859]  do_syscall_64+0x3b/0xb0
[  992.292280][T13859]  ? clear_bhb_loop+0x15/0x70
[  992.296983][T13859]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  992.302903][T13859] RIP: 0033:0x7f331a26fde9
[  992.307324][T13859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  992.326929][T13859] RSP: 002b:00007f33180d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  992.335347][T13859] RAX: ffffffffffffffda RBX: 00007f331a488fa0 RCX: 00007f331a26fde9
[  992.343321][T13859] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[  992.351311][T13859] RBP: 00007f331a2f12a0 R08: 0000000000000000 R09: 0000000000000003
[  992.359277][T13859] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000000
[  992.367249][T13859] R13: 0000000000000000 R14: 00007f331a488fa0 R15: 00007fff2e6c12e8
[  992.375233][T13859]  </TASK>
[  992.401033][T13859] ================================================================================
[  992.406114][T13894] xt_TCPMSS: Only works on TCP SYN packets
[  992.410502][T13859] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  992.423367][T13859] CPU: 1 PID: 13859 Comm: syz.3.2385 Not tainted 5.15.178-syzkaller #0
[  992.431622][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  992.441697][T13859] Call Trace:
[  992.444992][T13859]  <TASK>
[  992.447938][T13859]  dump_stack_lvl+0x1e3/0x2d0
[  992.452642][T13859]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  992.458297][T13859]  ? panic+0x860/0x860
[  992.462408][T13859]  panic+0x318/0x860
[  992.466336][T13859]  ? check_panic_on_warn+0x1d/0xa0
[  992.471473][T13859]  ? fb_is_primary_device+0xd0/0xd0
[  992.476719][T13859]  ? dump_stack_lvl+0x24f/0x2d0
[  992.481600][T13859]  check_panic_on_warn+0x7e/0xa0
[  992.486568][T13859]  __ubsan_handle_out_of_bounds+0x138/0x140
[  992.492498][T13859]  txCommit+0x3f07/0x6ba0
[  992.496904][T13859]  ? txLinelock+0x160/0x160
[  992.501443][T13859]  ? txBegin+0x4fe/0x6e0
[  992.505718][T13859]  jfs_commit_inode+0x362/0x580
[  992.510680][T13859]  ? jfs_iget+0x3b0/0x3b0
[  992.515027][T13859]  ? rcu_is_watching+0x11/0xa0
[  992.519808][T13859]  ? __mark_inode_dirty+0x3dd/0xd60
[  992.525025][T13859]  extAlloc+0xca8/0x1000
[  992.529302][T13859]  ? jfs_ioc_trim+0x6a0/0x6a0
[  992.534049][T13859]  jfs_get_block+0x417/0xe50
[  992.538672][T13859]  ? dio_bio_add_page+0x259/0x3e0
[  992.543738][T13859]  ? jfs_dirty_inode+0x230/0x230
[  992.548738][T13859]  ? submit_page_section+0x66a/0xdd0
[  992.554060][T13859]  ? jfs_dirty_inode+0x230/0x230
[  992.559019][T13859]  __blockdev_direct_IO+0x1b13/0x4f40
[  992.564477][T13859]  ? sb_init_dio_done_wq+0x80/0x80
[  992.569623][T13859]  ? invalidate_inode_pages2_range+0x1088/0x1230
[  992.575976][T13859]  ? jfs_dirty_inode+0x230/0x230
[  992.580947][T13859]  ? invalidate_mapping_pagevec+0x30/0x30
[  992.586796][T13859]  ? filemap_write_and_wait_range+0x1d3/0x280
[  992.592897][T13859]  jfs_direct_IO+0xf6/0x1e0
[  992.597426][T13859]  generic_file_direct_write+0x204/0x460
[  992.603092][T13859]  __generic_file_write_iter+0x2a2/0x4f0
[  992.608754][T13859]  generic_file_write_iter+0xa7/0x1b0
[  992.614150][T13859]  do_iter_readv_writev+0x594/0x7a0
[  992.619379][T13859]  ? generic_file_rw_checks+0x260/0x260
[  992.624964][T13859]  ? common_file_perm+0x17d/0x1d0
[  992.630011][T13859]  ? fsnotify_perm+0x64/0x590
[  992.634709][T13859]  ? security_file_permission+0x75/0xa0
[  992.640278][T13859]  do_iter_write+0x1e6/0x760
[  992.644916][T13859]  do_pwritev+0x219/0x360
[  992.649266][T13859]  ? do_preadv+0x350/0x350
[  992.653714][T13859]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  992.659716][T13859]  ? vtime_user_exit+0x2d1/0x400
[  992.664764][T13859]  ? syscall_enter_from_user_mode+0x2e/0x240
[  992.670764][T13859]  ? lockdep_hardirqs_on+0x94/0x130
[  992.675986][T13859]  ? __x64_sys_pwritev2+0xb9/0x100
[  992.681126][T13859]  do_syscall_64+0x3b/0xb0
[  992.685566][T13859]  ? clear_bhb_loop+0x15/0x70
[  992.690259][T13859]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  992.696178][T13859] RIP: 0033:0x7f331a26fde9
[  992.700620][T13859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  992.720505][T13859] RSP: 002b:00007f33180d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  992.728987][T13859] RAX: ffffffffffffffda RBX: 00007f331a488fa0 RCX: 00007f331a26fde9
[  992.736995][T13859] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[  992.744995][T13859] RBP: 00007f331a2f12a0 R08: 0000000000000000 R09: 0000000000000003
[  992.752992][T13859] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000000
[  992.760983][T13859] R13: 0000000000000000 R14: 00007f331a488fa0 R15: 00007fff2e6c12e8
[  992.769120][T13859]  </TASK>
[  992.773503][T13859] Kernel Offset: disabled
[  992.786116][T13859] Rebooting in 86400 seconds..