last executing test programs:

7m14.095461592s ago: executing program 0 (id=23):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x48, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, 0x0, 0x20000011)
sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x20000080)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)

7m12.149803833s ago: executing program 0 (id=29):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2, 0x0, 0xe0000001}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

7m11.922258008s ago: executing program 0 (id=30):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x24)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

7m11.484161494s ago: executing program 0 (id=34):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6], 0x5c}}, 0x40)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x3f)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884)

7m9.464139494s ago: executing program 0 (id=45):
socket$netlink(0x10, 0x3, 0xf)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r1, 0x25, 0x0, @void}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000400), &(0x7f0000000440)=r5}, 0x20)
syz_emit_ethernet(0x9a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x487cccde532db045, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0)

7m8.307146376s ago: executing program 0 (id=52):
socket$nl_route(0x10, 0x3, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x101600, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x300, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

6m53.261274946s ago: executing program 32 (id=52):
socket$nl_route(0x10, 0x3, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x101600, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x300, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

6m16.201570205s ago: executing program 1 (id=237):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x5, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000290000000b0000000500007f1600000014"], 0x30}, 0x0)

6m14.958247087s ago: executing program 1 (id=238):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x885, 0x0, 0x1}]})

6m13.630756288s ago: executing program 1 (id=244):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x6, 0x8002, 0x80}, {0x2, 0x1, 0x1, 0x1, 0x624, 0x7, 0x8001}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x400, 0x3, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0x9, 0x0, 0x4, 0xffffffffffffffff, 0x7ff, 0xb3, 0x8d], 0x80a0000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m10.910015814s ago: executing program 1 (id=250):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6m10.567178583s ago: executing program 1 (id=253):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000440)="93685241eca94a37b20fd30a5f297eb2e94ee956246002b82be960bbe029", 0x1e}, {&(0x7f0000000540)}], 0x2)
close(0x3)

6m7.19873122s ago: executing program 1 (id=259):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r2)
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

5m52.035189018s ago: executing program 33 (id=259):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r2)
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

3m4.846303208s ago: executing program 4 (id=679):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0/file0\x00', 0x40, 0x8)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[<r6=>0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000700)={0x0, 0x0, 0x0, r6})
write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r8, 0x40480923, 0x200000000005)
ioctl$TIOCGPTPEER(r7, 0x40140921, 0x200000000005)

2m50.950287377s ago: executing program 4 (id=690):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)
r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080)=r2, 0x12)

2m49.181051555s ago: executing program 4 (id=692):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x20000044)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
readv(r0, &(0x7f0000001440)=[{0x0}], 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805)
r2 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
r4 = epoll_create1(0x80000)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f00000001c0))
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x4, <r7=>r5, 0x80000})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)={0xe000001b})

2m47.683594919s ago: executing program 4 (id=694):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

2m47.337692327s ago: executing program 4 (id=695):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xce, 0x0, 0x95}]})

2m46.262230216s ago: executing program 4 (id=699):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0/file0\x00', 0x40, 0x8)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[<r5=>0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000700)={0x0, 0x0, 0x0, r5})
write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r7, 0x40480923, 0x200000000005)
ioctl$TIOCGPTPEER(r6, 0x40140921, 0x200000000005)

2m30.872258765s ago: executing program 34 (id=699):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0/file0\x00', 0x40, 0x8)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[<r5=>0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000700)={0x0, 0x0, 0x0, r5})
write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r7, 0x40480923, 0x200000000005)
ioctl$TIOCGPTPEER(r6, 0x40140921, 0x200000000005)

11.154394964s ago: executing program 2 (id=999):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195)
fallocate(r1, 0x0, 0x0, 0x8800000)
io_submit(0x0, 0x0, 0x0)
io_setup(0x3ff, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x100, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x2}])
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x9000, 0x0, 0x3)

10.646634815s ago: executing program 2 (id=1001):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="d8df7e23b3b9ce0f0d73aa00b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0020c8220000b801000000b9a6080000b9800000c035000800000f30ba000000000f300f3085c79d5351bf16d09bd09be16dc301012202", 0x6b}], 0x1, 0x5c, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x8000000000000001, 0x3, 0x6d7, 0xa, 0x80000002, 0xd, 0x3, 0xa, 0x48, 0xffffffff, 0x3, 0xfffffffffffffa78, 0x20000000000bab7, 0x1ff, 0x80000002, 0xeedd], 0x8000000, 0x80001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.287075848s ago: executing program 3 (id=1003):
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80000)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1840849, &(0x7f0000000000)=ANY=[], 0x0, 0x1ec, &(0x7f0000000380)="$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")
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setresgid(0xee00, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20, 0x24040805}}], 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
r2 = socket(0x2, 0x2, 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x20)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)

7.251436112s ago: executing program 2 (id=1004):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1f, 0x2}, [], {0x4, 0x2}}, 0x24, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r6 = dup3(r5, r4, 0x0)
recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4088, 0xff8}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0)
write$binfmt_aout(r6, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x181000, 0x144)
getdents64(r7, &(0x7f0000000240)=""/157, 0x9d)

6.030879829s ago: executing program 3 (id=1005):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6)
close(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socket$xdp(0x2c, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r5, 0x0, 0x15)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000075c0)={@local, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x9, 0x400, 0x6, 0x20001})
r7 = dup(r5)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}})
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@random={'user.', 'rfdno'}, 0x0, 0x0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.265772813s ago: executing program 2 (id=1006):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@discard}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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")
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x146)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
read$FUSE(r1, &(0x7f0000000f80)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000780)={0x50, 0xffffffffffffffda, r2, {0x7, 0x2d, 0x7, 0x10122024, 0x2, 0x8ec2, 0x80, 0x4, 0x0, 0x0, 0x4, 0x9}}, 0x50)

2.69856247s ago: executing program 2 (id=1007):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3da71, 0x51a33}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x99}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c8d5}, 0x20040040)

2.353755168s ago: executing program 3 (id=1008):
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
pread64(r0, 0x0, 0x0, 0x7)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000)
socket(0x1e, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@private2, @empty, 0x13, 0x1}})

2.157973274s ago: executing program 3 (id=1009):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x20044000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x0, 0x96, 0x0, 0x3}, 0x28)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

491.045481ms ago: executing program 3 (id=1010):
setresgid(0xee01, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), 0x0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@tcx}, 0x1c)
dup(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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")
lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)

238.413111ms ago: executing program 2 (id=1011):
r0 = socket(0x1e, 0x802, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000600)={[{@atgc}, {@six_active_logs, 0x0}, {@nogc_merge}, {@noinline_xattr}, {@jqfmt_vfsv0}, {@six_active_logs}, {@nobarrier}, {@four_active_logs}, {@fsync_mode_posix}, {@nouser_xattr}, {@resgid}, {@resuid}, {@heap}]}, 0x1, 0x555e, &(0x7f000000afc0)="$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")
r1 = epoll_create1(0x80000)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x60002005})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x1c0002009})

0s ago: executing program 3 (id=1012):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000000300)=@ethtool_coalesce={0xf, 0x7, 0x92, 0x4, 0x5, 0x9, 0x3, 0x400, 0x9, 0x80000001, 0x0, 0xea, 0x7f, 0x5, 0xd46a, 0x9, 0x8828, 0xd, 0xffffc62b, 0x9, 0x9, 0x5, 0x4}})
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e6161"], 0x0, 0x60}, 0x28)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9)
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key(0x0, 0x0, 0x0, 0x0, r2)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1)

kernel console output (not intermixed with test programs):

f6da-4727-8c75-0525a5b65a09.
[  210.735401][ T4924] Bluetooth: hci6: command tx timeout
[  211.101929][   T32] usb 3-1: USB disconnect, device number 2
[  212.044229][ T5616] Bluetooth: hci3: command 0x0406 tx timeout
[  212.044285][ T4924] Bluetooth: hci2: command 0x0406 tx timeout
[  212.356673][ T6833] loop4: detected capacity change from 0 to 512
[  212.415813][ T6833] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.311: inode has both inline data and extents flags
[  212.416022][ T6833] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  212.423117][ T6833] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.311: couldn't read orphan inode 15 (err -117)
[  212.423308][ T6833] loop4: lost filesystem error report for type 5 error -117
[  212.423833][    C1] EXT4-fs (loop4): error count since last fsck: 2
[  212.423854][    C1] EXT4-fs (loop4): initial error at time 1778146289: ext4_orphan_get:1397: inode 15
[  212.423988][    C1] EXT4-fs (loop4): last error at time 1778146289: ext4_orphan_get:1402
[  212.530530][ T6833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.652273][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.144192][ T5725] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  213.307221][ T5725] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  213.307242][ T5725] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.307256][ T5725] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  213.307291][ T5725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.308766][ T5725] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  213.308785][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  213.308798][ T5725] usb 3-1: Product: syz
[  213.308807][ T5725] usb 3-1: Manufacturer: syz
[  213.434848][ T5725] cdc_wdm 3-1:1.0: skipping garbage
[  213.434863][ T5725] cdc_wdm 3-1:1.0: skipping garbage
[  213.457186][ T5725] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  213.457206][ T5725] cdc_wdm 3-1:1.0: Unknown control protocol
[  213.590195][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.590459][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.590753][ T6686] bridge_slave_0: entered allmulticast mode
[  213.593256][ T6686] bridge_slave_0: entered promiscuous mode
[  213.694546][    C0] wdm_int_callback: 317 callbacks suppressed
[  213.694571][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  213.694588][    C0] wdm_int_callback: 317 callbacks suppressed
[  213.694603][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  213.697620][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  213.697639][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  213.700163][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  213.700187][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  213.700420][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  213.700447][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  213.700676][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  213.700695][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  213.700924][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  213.700943][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  213.701161][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  213.701178][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  213.701392][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  213.701409][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  213.701662][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  213.701680][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  213.701908][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  213.701925][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  213.774716][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  213.869116][  T821] usb 3-1: USB disconnect, device number 3
[  214.024702][ T6680] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.024939][ T6680] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.025219][ T6680] bridge_slave_0: entered allmulticast mode
[  214.030653][ T6680] bridge_slave_0: entered promiscuous mode
[  214.070053][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.070322][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.070593][ T6686] bridge_slave_1: entered allmulticast mode
[  214.073508][ T6686] bridge_slave_1: entered promiscuous mode
[  214.107045][ T6680] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.107361][ T6680] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.107579][ T6680] bridge_slave_1: entered allmulticast mode
[  214.118656][ T6680] bridge_slave_1: entered promiscuous mode
[  216.910364][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.544844][ T6680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.659454][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.697708][ T6680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.179255][ T6686] team0: Port device team_slave_0 added
[  218.196748][ T6680] team0: Port device team_slave_0 added
[  218.218467][ T6686] team0: Port device team_slave_1 added
[  218.249218][ T6680] team0: Port device team_slave_1 added
[  218.700868][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.700886][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.700913][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.773517][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.773534][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.773560][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.858018][ T6680] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.858036][ T6680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.858064][ T6680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.366002][ T6680] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.366018][ T6680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.366047][ T6680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.496898][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5
[  220.322705][ T6686] hsr_slave_0: entered promiscuous mode
[  220.338725][ T6686] hsr_slave_1: entered promiscuous mode
[  220.340697][ T6686] debugfs: 'hsr0' already exists in 'hsr'
[  220.340740][ T6686] Cannot create hsr debugfs directory
[  220.420277][ T6680] hsr_slave_0: entered promiscuous mode
[  220.422772][ T6680] hsr_slave_1: entered promiscuous mode
[  220.441366][ T6680] debugfs: 'hsr0' already exists in 'hsr'
[  220.441393][ T6680] Cannot create hsr debugfs directory
[  220.954329][ T1190] bridge_slave_1: left allmulticast mode
[  220.954366][ T1190] bridge_slave_1: left promiscuous mode
[  220.960793][ T1190] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.039084][ T1190] bridge_slave_0: left allmulticast mode
[  221.039111][ T1190] bridge_slave_0: left promiscuous mode
[  221.039341][ T1190] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.274106][ T1190] bridge_slave_1: left allmulticast mode
[  221.274133][ T1190] bridge_slave_1: left promiscuous mode
[  221.274324][ T1190] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.336809][ T1190] bridge_slave_0: left allmulticast mode
[  221.336833][ T1190] bridge_slave_0: left promiscuous mode
[  221.337046][ T1190] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.426202][ T6933] comedi comedi0: reset error (fatal)
[  222.684392][ T1190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.764533][ T1190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.808418][ T1190] bond0 (unregistering): Released all slaves
[  223.194751][ T1190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.314919][ T1190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.397144][ T1190] bond0 (unregistering): Released all slaves
[  223.879839][ T6948] loop2: detected capacity change from 0 to 40427
[  223.944306][ T6948] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  223.944334][ T6948] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  226.645994][ T6967] loop4: detected capacity change from 0 to 256
[  226.919728][ T6948] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  227.112445][ T6948] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  227.118695][ T6948] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  227.225011][ T6976] netlink: 'syz.3.348': attribute type 1 has an invalid length.
[  227.299936][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'.
[  228.100259][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6
[  228.280971][ T7000] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  229.696053][ T1190] hsr_slave_0: left promiscuous mode
[  229.724628][ T1190] hsr_slave_1: left promiscuous mode
[  229.733448][ T1190] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.733476][ T1190] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.777042][ T1190] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.777068][ T1190] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.974753][ T1190] hsr_slave_0: left promiscuous mode
[  230.015171][ T1190] hsr_slave_1: left promiscuous mode
[  230.022881][ T1190] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.055602][ T1190] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.379432][ T1190] veth1_macvtap: left promiscuous mode
[  230.379541][ T1190] veth0_macvtap: left promiscuous mode
[  230.379848][ T1190] veth1_vlan: left promiscuous mode
[  230.445867][ T1190] veth0_vlan: left promiscuous mode
[  232.308037][ T7033] loop4: detected capacity change from 0 to 512
[  232.362865][ T7033] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  232.385440][ T7033] EXT4-fs (loop4): orphan cleanup on readonly fs
[  232.402008][ T7033] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.361: Block bitmap for bg 0 marked uninitialized
[  232.402036][ T7033] loop4: lost filesystem error report for type 5 error -117
[  232.405445][    C0] EXT4-fs (loop4): initial error at time 1778146309: ext4_read_block_bitmap_nowait:517
[  232.405479][    C0] EXT4-fs (loop4): last error at time 1778146309: ext4_read_block_bitmap_nowait:517
[  232.476626][ T7033] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  232.476654][ T7033] loop4: lost filesystem error report for type 5 error -117
[  232.482148][ T7033] EXT4-fs (loop4): 1 orphan inode deleted
[  232.514279][ T7033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  232.606203][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.483257][ T7043] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  233.552976][ T7043] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  233.553099][ T7043] overlayfs: failed to look up (tracing) for ino (-66)
[  233.734635][ T1190] team0 (unregistering): Port device team_slave_1 removed
[  233.787650][ T1190] team0 (unregistering): Port device team_slave_0 removed
[  234.256699][ T1190] team0 (unregistering): Port device team_slave_1 removed
[  234.304734][ T1190] team0 (unregistering): Port device team_slave_0 removed
[  236.661930][ T6686] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  238.669913][ T6686] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  238.745673][ T6686] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  239.188297][ T6686] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  239.204153][ T6686] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  239.285791][ T6686] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  239.986435][ T6686] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  240.962570][ T6686] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  240.994943][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7
[  246.498093][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.887581][ T6686] 8021q: adding VLAN 0 to HW filter on device team0
[  246.988165][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.988397][ T6285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.151067][ T5621] Bluetooth: hci1: command 0x0406 tx timeout
[  248.589332][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8
[  248.598198][ T2370] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.611769][ T2370] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.139753][ T7174] loop2: detected capacity change from 0 to 128
[  249.235704][ T7178] fuse: fd is not a fuse device
[  249.851644][ T6680] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  250.162699][ T6680] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  252.572758][ T6680] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  253.607883][ T6680] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  253.676729][ T6680] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  254.784739][ T6680] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  254.789660][ T6680] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  254.830922][ T6680] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  255.749328][ T7243] loop4: detected capacity change from 0 to 4096
[  255.767033][ T7243] EXT4-fs: inline encryption not supported
[  255.767056][ T7243] EXT4-fs: Ignoring removed mblk_io_submit option
[  255.767096][ T7243] EXT4-fs: Ignoring removed bh option
[  255.772875][ T7243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  255.836417][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  255.836523][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  256.109294][ T7253] netlink: 168 bytes leftover after parsing attributes in process `syz.3.416'.
[  256.953544][ T7243] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  256.953777][ T7243] System zones: 0-5
[  257.219521][ T7243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.492971][ T6680] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.392535][ T6680] 8021q: adding VLAN 0 to HW filter on device team0
[  260.436572][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.436787][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.507546][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.507718][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.936554][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  261.970458][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  261.971916][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  261.981087][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  261.982933][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  262.521614][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.134638][ T7310] loop2: detected capacity change from 0 to 256
[  263.140623][ T7310] vfat: Bad value for 'dmask'
[  263.262777][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  263.421695][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  263.443189][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  263.456353][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  263.462234][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  264.097084][ T5621] Bluetooth: hci0: command tx timeout
[  264.101091][ T7319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  267.145233][ T5621] Bluetooth: hci5: command tx timeout
[  267.150765][ T5623] Bluetooth: hci0: command tx timeout
[  267.807495][ T7362] loop2: detected capacity change from 0 to 256
[  267.911134][ T7362] FAT-fs (loop2): Directory bread(block 64) failed
[  267.911185][ T7362] FAT-fs (loop2): Directory bread(block 65) failed
[  267.911284][ T7362] FAT-fs (loop2): Directory bread(block 66) failed
[  267.911305][ T7362] FAT-fs (loop2): Directory bread(block 67) failed
[  267.911391][ T7362] FAT-fs (loop2): Directory bread(block 68) failed
[  267.911412][ T7362] FAT-fs (loop2): Directory bread(block 69) failed
[  267.911525][ T7362] FAT-fs (loop2): Directory bread(block 70) failed
[  267.911546][ T7362] FAT-fs (loop2): Directory bread(block 71) failed
[  267.911643][ T7362] FAT-fs (loop2): Directory bread(block 72) failed
[  267.911663][ T7362] FAT-fs (loop2): Directory bread(block 73) failed
[  268.345887][ T7376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  269.217330][ T5621] Bluetooth: hci5: command tx timeout
[  269.217417][ T5623] Bluetooth: hci0: command tx timeout
[  270.700849][ T7406] loop2: detected capacity change from 0 to 128
[  271.522553][ T5623] Bluetooth: hci0: command tx timeout
[  271.522587][ T5623] Bluetooth: hci5: command tx timeout
[  273.873586][ T7439] loop4: detected capacity change from 0 to 4096
[  273.874814][ T7439] EXT4-fs: Ignoring removed bh option
[  274.427271][ T5621] Bluetooth: hci5: command tx timeout
[  275.785923][ T7439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.550517][ T7439] netlink: 79 bytes leftover after parsing attributes in process `syz.4.452'.
[  276.621471][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'.
[  276.621495][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'.
[  277.861337][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.673487][ T7476] loop4: detected capacity change from 0 to 1024
[  281.701118][ T7476] EXT4-fs: Ignoring removed bh option
[  281.714599][ T7476] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  281.714719][ T7476] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  281.771459][ T7476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  282.561510][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.764130][ T7486] netlink: 'syz.4.467': attribute type 1 has an invalid length.
[  282.846418][ T7487] loop2: detected capacity change from 0 to 256
[  283.006637][ T7487] FAT-fs (loop2): Directory bread(block 64) failed
[  283.007257][ T7487] FAT-fs (loop2): Directory bread(block 65) failed
[  283.007428][ T7487] FAT-fs (loop2): Directory bread(block 66) failed
[  283.007454][ T7487] FAT-fs (loop2): Directory bread(block 67) failed
[  283.007556][ T7487] FAT-fs (loop2): Directory bread(block 68) failed
[  283.007580][ T7487] FAT-fs (loop2): Directory bread(block 69) failed
[  283.007680][ T7487] FAT-fs (loop2): Directory bread(block 70) failed
[  283.007704][ T7487] FAT-fs (loop2): Directory bread(block 71) failed
[  283.007809][ T7487] FAT-fs (loop2): Directory bread(block 72) failed
[  283.007833][ T7487] FAT-fs (loop2): Directory bread(block 73) failed
[  283.462768][ T7492] loop4: detected capacity change from 0 to 4096
[  283.502109][ T7492] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  283.556620][ T7492] EXT4-fs (loop4): mount failed
[  284.002223][ T7292] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.002589][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.002898][ T7292] bridge_slave_0: entered allmulticast mode
[  284.037858][ T7292] bridge_slave_0: entered promiscuous mode
[  284.146929][ T7292] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.147255][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.147572][ T7292] bridge_slave_1: entered allmulticast mode
[  284.167599][ T7292] bridge_slave_1: entered promiscuous mode
[  284.510145][ T7512] netlink: 'syz.2.474': attribute type 9 has an invalid length.
[  287.835557][ T7292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.120084][ T7527] netlink: 'syz.3.478': attribute type 1 has an invalid length.
[  288.221488][ T7292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.428917][ T7535] loop2: detected capacity change from 0 to 512
[  288.571336][ T7535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.571453][ T7535] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.872571][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.891828][ T7292] team0: Port device team_slave_0 added
[  288.901107][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.901536][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.901824][ T7307] bridge_slave_0: entered allmulticast mode
[  288.930367][ T7307] bridge_slave_0: entered promiscuous mode
[  288.949997][ T7292] team0: Port device team_slave_1 added
[  288.950614][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.950919][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.951165][ T7307] bridge_slave_1: entered allmulticast mode
[  288.982990][ T7307] bridge_slave_1: entered promiscuous mode
[  289.540826][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.540843][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.540871][ T7292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.647620][ T7547] netlink: 'syz.3.484': attribute type 9 has an invalid length.
[  289.668538][ T7307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.690628][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.690645][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.699496][ T7292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.759056][ T7307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.310888][ T7307] team0: Port device team_slave_0 added
[  290.476890][ T7307] team0: Port device team_slave_1 added
[  290.683996][ T7572] netlink: 'syz.4.489': attribute type 1 has an invalid length.
[  290.823223][ T7292] hsr_slave_0: entered promiscuous mode
[  290.835132][ T7292] hsr_slave_1: entered promiscuous mode
[  290.838549][ T7292] debugfs: 'hsr0' already exists in 'hsr'
[  290.838574][ T7292] Cannot create hsr debugfs directory
[  291.069892][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.069909][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.069937][ T7307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.291326][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12
[  291.377437][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.377454][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.377480][ T7307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.408386][ T7307] hsr_slave_0: entered promiscuous mode
[  293.413591][ T7307] hsr_slave_1: entered promiscuous mode
[  293.431472][ T7307] debugfs: 'hsr0' already exists in 'hsr'
[  293.431499][ T7307] Cannot create hsr debugfs directory
[  294.071390][ T7614] netlink: 'syz.4.500': attribute type 1 has an invalid length.
[  294.134448][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'.
[  294.323666][ T7617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  294.326563][ T7617] IPv6: NLM_F_CREATE should be set when creating new route
[  294.331942][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'.
[  294.403935][ T5842] bridge_slave_1: left allmulticast mode
[  294.403977][ T5842] bridge_slave_1: left promiscuous mode
[  294.406485][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.488167][ T5842] bridge_slave_0: left allmulticast mode
[  294.488193][ T5842] bridge_slave_0: left promiscuous mode
[  294.488379][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.694078][ T5842] bridge_slave_1: left allmulticast mode
[  294.694115][ T5842] bridge_slave_1: left promiscuous mode
[  294.694387][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.781401][ T5842] bridge_slave_0: left allmulticast mode
[  294.781438][ T5842] bridge_slave_0: left promiscuous mode
[  294.781739][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.804771][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.866200][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.908110][ T5842] bond0 (unregistering): Released all slaves
[  296.494753][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  296.554445][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  296.596103][ T5842] bond0 (unregistering): Released all slaves
[  296.635624][ T7614] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  296.790572][ T7629] loop4: detected capacity change from 0 to 512
[  296.794146][ T7629] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  296.806469][ T7629] EXT4-fs (loop4): orphan cleanup on readonly fs
[  296.808131][ T7629] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.503: Block bitmap for bg 0 marked uninitialized
[  296.808200][ T7629] loop4: lost filesystem error report for type 5 error -117
[  296.809188][ T7629] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  296.809250][ T7629] loop4: lost filesystem error report for type 5 error -117
[  296.818415][    C1] EXT4-fs (loop4): error count since last fsck: 2
[  296.818463][    C1] EXT4-fs (loop4): initial error at time 1778146374: ext4_read_block_bitmap_nowait:517
[  296.818539][    C1] EXT4-fs (loop4): last error at time 1778146374: ext4_mb_clear_bb:6679
[  296.837748][ T7629] EXT4-fs (loop4): 1 orphan inode deleted
[  296.859774][ T7629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  297.098775][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.895380][ T7651] netlink: 'syz.3.511': attribute type 1 has an invalid length.
[  297.994633][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'.
[  299.059712][ T7663] loop4: detected capacity change from 0 to 1024
[  299.078321][ T7663] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[  299.078321][ T7663] 
[  299.494104][ T5842] hsr_slave_0: left promiscuous mode
[  299.537310][ T5842] hsr_slave_1: left promiscuous mode
[  299.538680][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.559705][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.758035][ T5842] hsr_slave_0: left promiscuous mode
[  299.798439][ T5842] hsr_slave_1: left promiscuous mode
[  299.806312][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.848146][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.731231][ T7683] netlink: 'syz.2.520': attribute type 1 has an invalid length.
[  301.807598][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'.
[  304.207213][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  304.280528][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'.
[  304.280548][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'.
[  304.373634][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  306.923633][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'.
[  306.923653][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'.
[  307.014592][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  307.074606][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  307.677933][ T7683] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  309.219073][ T7755] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  311.328819][ T7772] netlink: 'syz.3.551': attribute type 1 has an invalid length.
[  312.177149][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9
[  312.277441][ T7799] overlayfs: failed to clone lowerpath
[  312.339231][ T7800] overlayfs: failed to clone lowerpath
[  313.124827][ T7816] kvm: apic: phys broadcast and lowest prio
[  314.463267][ T7837] netlink: 'syz.2.567': attribute type 11 has an invalid length.
[  317.218866][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  317.218975][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  318.306601][ T7292] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  318.519487][ T7292] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  318.635176][ T7883] netlink: 'syz.2.577': attribute type 11 has an invalid length.
[  318.653956][ T7292] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  319.236908][ T7292] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  319.257386][ T7292] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  319.304748][ T7292] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  321.105211][ T7292] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  321.140103][ T7292] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  321.325180][   T32] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  321.589438][   T32] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  321.589469][   T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.589506][   T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  321.589556][   T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.600201][   T32] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  321.600286][   T32] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  321.600342][   T32] usb 3-1: Product: syz
[  321.600393][   T32] usb 3-1: Manufacturer: syz
[  321.723189][   T32] cdc_wdm 3-1:1.0: skipping garbage
[  321.723210][   T32] cdc_wdm 3-1:1.0: skipping garbage
[  321.785595][   T32] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  321.785617][   T32] cdc_wdm 3-1:1.0: Unknown control protocol
[  321.996129][    C1] wdm_int_callback: 291 callbacks suppressed
[  321.996155][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  321.996240][    C1] wdm_int_callback: 291 callbacks suppressed
[  321.996270][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  321.996500][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  321.996517][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  321.996733][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  321.996749][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  321.996967][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  321.996984][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  321.997207][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  321.997223][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  321.997439][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  321.997454][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  321.997664][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  321.997679][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  321.997893][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  321.997908][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  321.998129][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  321.998146][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  321.998356][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  321.998370][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  322.200468][ T5596] usb 3-1: USB disconnect, device number 4
[  322.200573][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  322.533966][ T7307] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  322.597775][ T7307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  322.608470][ T7307] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  322.724971][ T7307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  322.879593][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  322.933791][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  322.937878][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  322.942251][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  322.967453][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  323.270783][ T7930] netlink: 'syz.2.586': attribute type 11 has an invalid length.
[  323.517542][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  323.548887][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  323.550977][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  323.556655][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  323.562590][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  324.098649][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'.
[  324.098670][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'.
[  324.978905][ T7959] fuse: fd is not a fuse device
[  325.943216][ T5621] Bluetooth: hci4: command tx timeout
[  325.945480][ T5623] Bluetooth: hci6: command tx timeout
[  326.642934][ T7970] binder: 7968:7970 unknown command 1074291475
[  326.642964][ T7970] binder: 7968:7970 ioctl c0306201 200000000100 returned -22
[  327.209608][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'.
[  328.016668][ T5621] Bluetooth: hci4: command tx timeout
[  328.016701][ T5621] Bluetooth: hci6: command tx timeout
[  328.062549][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'.
[  328.062572][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'.
[  328.920275][ T8007] fuse: Bad value for 'group_id'
[  328.920296][ T8007] fuse: Bad value for 'group_id'
[  329.236626][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'.
[  329.478649][ T8014] loop2: detected capacity change from 0 to 256
[  330.093750][ T5623] Bluetooth: hci4: command tx timeout
[  330.104834][ T5623] Bluetooth: hci6: command tx timeout
[  330.165469][   T38] kauditd_printk_skb: 4 callbacks suppressed
[  330.165486][   T38] audit: type=1326 audit(1778146663.625:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.608" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76b9e8cdd9 code=0x0
[  331.282515][ T8049] netlink: 'syz.2.615': attribute type 9 has an invalid length.
[  332.184372][ T5623] Bluetooth: hci6: command tx timeout
[  332.184421][ T5621] Bluetooth: hci4: command tx timeout
[  336.764709][ T8080] fuse: fd is not a fuse device
[  336.921845][ T8083] loop2: detected capacity change from 0 to 512
[  336.957646][ T8083] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  337.089955][ T8083] EXT4-fs (loop2): orphan cleanup on readonly fs
[  337.090305][ T8083] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.620: Block bitmap for bg 0 marked uninitialized
[  337.090343][ T8083] loop2: lost filesystem error report for type 5 error -117
[  337.096215][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  337.096300][    C0] EXT4-fs (loop2): initial error at time 1778146670: ext4_read_block_bitmap_nowait:517
[  337.096349][    C0] EXT4-fs (loop2): last error at time 1778146670: ext4_read_block_bitmap_nowait:517
[  337.200558][ T8083] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  337.200585][ T8083] loop2: lost filesystem error report for type 5 error -117
[  337.201299][ T8083] EXT4-fs (loop2): 1 orphan inode deleted
[  337.304505][ T8083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  337.591976][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.138382][ T8108] netlink: 'syz.3.624': attribute type 9 has an invalid length.
[  341.216083][ T8106] loop2: detected capacity change from 0 to 256
[  341.382255][ T8106] FAT-fs (loop2): Directory bread(block 64) failed
[  341.382290][ T8106] FAT-fs (loop2): Directory bread(block 65) failed
[  341.382390][ T8106] FAT-fs (loop2): Directory bread(block 66) failed
[  341.382413][ T8106] FAT-fs (loop2): Directory bread(block 67) failed
[  341.382581][ T8106] FAT-fs (loop2): Directory bread(block 68) failed
[  341.382623][ T8106] FAT-fs (loop2): Directory bread(block 69) failed
[  341.382724][ T8106] FAT-fs (loop2): Directory bread(block 70) failed
[  341.382748][ T8106] FAT-fs (loop2): Directory bread(block 71) failed
[  341.382850][ T8106] FAT-fs (loop2): Directory bread(block 72) failed
[  341.382874][ T8106] FAT-fs (loop2): Directory bread(block 73) failed
[  346.926868][ T8154] loop2: detected capacity change from 0 to 512
[  346.943118][ T8154] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  346.979935][ T8154] EXT4-fs (loop2): orphan cleanup on readonly fs
[  346.981419][ T8154] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.630: Block bitmap for bg 0 marked uninitialized
[  346.981448][ T8154] loop2: lost filesystem error report for type 5 error -117
[  346.984848][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  346.984911][    C0] EXT4-fs (loop2): initial error at time 1778146680: ext4_read_block_bitmap_nowait:517
[  346.984975][    C0] EXT4-fs (loop2): last error at time 1778146680: ext4_read_block_bitmap_nowait:517
[  346.993331][ T8154] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  346.993355][ T8154] loop2: lost filesystem error report for type 5 error -117
[  346.994920][ T8154] EXT4-fs (loop2): 1 orphan inode deleted
[  347.071135][ T8154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  347.171021][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.387348][ T7924] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.388149][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.388458][ T7924] bridge_slave_0: entered allmulticast mode
[  347.418150][ T7924] bridge_slave_0: entered promiscuous mode
[  347.851508][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.851887][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.852218][ T7924] bridge_slave_1: entered allmulticast mode
[  347.885571][ T7924] bridge_slave_1: entered promiscuous mode
[  348.128937][ T8156] loop4: detected capacity change from 0 to 4096
[  348.600435][ T8170] netlink: 'syz.2.633': attribute type 9 has an invalid length.
[  349.176771][   T38] audit: type=1326 audit(1778146682.595:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.4.631" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f61936b57 code=0x7ffc0000
[  349.176918][   T38] audit: type=1326 audit(1778146682.625:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.4.631" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f618de159 code=0x7ffc0000
[  349.177052][   T38] audit: type=1326 audit(1778146682.625:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.4.631" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f61936b57 code=0x7ffc0000
[  349.243271][   T38] audit: type=1326 audit(1778146682.695:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.4.631" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f618de159 code=0x7ffc0000
[  349.305051][   T38] audit: type=1326 audit(1778146682.695:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.4.631" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f61936b57 code=0x7ffc0000
[  349.305201][   T38] audit: type=1326 audit(1778146682.755:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.4.631" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f618de159 code=0x7ffc0000
[  349.330181][   T38] audit: type=1326 audit(1778146682.765:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.4.631" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f61936b57 code=0x7ffc0000
[  349.417103][   T38] audit: type=1326 audit(1778146682.875:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.4.631" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f618de159 code=0x7ffc0000
[  349.418199][   T38] audit: type=1326 audit(1778146682.875:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.4.631" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f61936b57 code=0x7ffc0000
[  349.418968][   T38] audit: type=1326 audit(1778146682.875:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.4.631" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f618de159 code=0x7ffc0000
[  349.767953][ T7924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.004282][ T7924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.453179][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.457405][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.460499][ T7934] bridge_slave_0: entered allmulticast mode
[  350.480091][ T7934] bridge_slave_0: entered promiscuous mode
[  351.704567][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.704936][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.705256][ T7934] bridge_slave_1: entered allmulticast mode
[  351.750369][ T7934] bridge_slave_1: entered promiscuous mode
[  351.811332][ T7924] team0: Port device team_slave_0 added
[  351.840422][ T8183] loop4: detected capacity change from 0 to 512
[  351.869106][ T8183] EXT4-fs (loop4): Test dummy encryption mode enabled
[  351.956573][ T8188] fuse: fd is not a fuse device
[  351.960541][ T7924] team0: Port device team_slave_1 added
[  352.036272][ T8183] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.637: bg 0: block 5: invalid block bitmap
[  352.036305][ T8183] loop4: lost filesystem error report for type 5 error -117
[  352.043789][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  352.043812][    C1] EXT4-fs (loop4): initial error at time 1778146685: ext4_validate_block_bitmap:432
[  352.043837][    C1] EXT4-fs (loop4): last error at time 1778146685: ext4_validate_block_bitmap:432
[  352.130608][ T8183] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  352.130634][ T8183] loop4: lost filesystem error report for type 5 error -117
[  352.155735][ T8183] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.637: invalid indirect mapped block 3 (level 2)
[  352.155777][ T8183] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  352.179563][ T8183] EXT4-fs (loop4): 2 truncates cleaned up
[  352.200291][ T8183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.309706][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.487919][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.490690][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.490705][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.490734][ T7924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.669148][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.669166][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.669196][ T7924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.728646][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.217566][ T7934] team0: Port device team_slave_0 added
[  353.254828][ T7934] team0: Port device team_slave_1 added
[  353.338048][ T8203] loop4: detected capacity change from 0 to 512
[  353.357891][ T8203] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  353.394149][ T8203] EXT4-fs (loop4): orphan cleanup on readonly fs
[  353.395275][ T8203] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.640: Block bitmap for bg 0 marked uninitialized
[  353.395305][ T8203] loop4: lost filesystem error report for type 5 error -117
[  353.402600][ T8203] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  353.402624][ T8203] loop4: lost filesystem error report for type 5 error -117
[  353.403760][    C1] EXT4-fs (loop4): error count since last fsck: 2
[  353.403781][    C1] EXT4-fs (loop4): initial error at time 1778146686: ext4_read_block_bitmap_nowait:517
[  353.403805][    C1] EXT4-fs (loop4): last error at time 1778146686: ext4_mb_clear_bb:6679
[  353.455290][ T8203] EXT4-fs (loop4): 1 orphan inode deleted
[  353.536940][ T8203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  353.729455][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.400400][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.400415][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.400437][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.487800][ T7924] hsr_slave_0: entered promiscuous mode
[  354.490243][ T7924] hsr_slave_1: entered promiscuous mode
[  354.493307][ T7924] debugfs: 'hsr0' already exists in 'hsr'
[  354.493371][ T7924] Cannot create hsr debugfs directory
[  354.526547][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.526561][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.526583][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.597165][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9
[  355.001704][ T7934] hsr_slave_0: entered promiscuous mode
[  355.006557][ T7934] hsr_slave_1: entered promiscuous mode
[  355.011150][ T7934] debugfs: 'hsr0' already exists in 'hsr'
[  355.011217][ T7934] Cannot create hsr debugfs directory
[  355.113925][   T13] bridge_slave_1: left allmulticast mode
[  355.113961][   T13] bridge_slave_1: left promiscuous mode
[  355.114236][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.169351][   T13] bridge_slave_0: left allmulticast mode
[  355.169379][   T13] bridge_slave_0: left promiscuous mode
[  355.169601][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.327493][ T8225] fuse: fd is not a fuse device
[  355.574023][   T13] bridge_slave_1: left allmulticast mode
[  355.574060][   T13] bridge_slave_1: left promiscuous mode
[  355.574345][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.830842][   T13] bridge_slave_0: left allmulticast mode
[  355.830878][   T13] bridge_slave_0: left promiscuous mode
[  355.831669][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.930050][ T8235] loop4: detected capacity change from 0 to 512
[  355.944113][ T8235] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  356.020778][ T8235] EXT4-fs (loop4): orphan cleanup on readonly fs
[  356.023050][ T8235] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.650: Block bitmap for bg 0 marked uninitialized
[  356.023080][ T8235] loop4: lost filesystem error report for type 5 error -117
[  356.023752][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  356.023773][    C1] EXT4-fs (loop4): initial error at time 1778146689: ext4_read_block_bitmap_nowait:517
[  356.023799][    C1] EXT4-fs (loop4): last error at time 1778146689: ext4_read_block_bitmap_nowait:517
[  356.026611][ T8235] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  356.026682][ T8235] loop4: lost filesystem error report for type 5 error -117
[  356.043036][ T8235] EXT4-fs (loop4): 1 orphan inode deleted
[  356.119088][ T8235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  356.121473][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'.
[  356.243139][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.545342][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  356.668908][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  356.745969][   T13] bond0 (unregistering): Released all slaves
[  356.858757][ T8246] loop2: detected capacity change from 0 to 512
[  356.883539][ T8246] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  357.052453][ T8251] loop2: detected capacity change from 0 to 256
[  357.060245][ T8251] exfat: Deprecated parameter 'namecase'
[  357.113440][ T8251] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  357.216576][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.524924][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.629232][   T13] bond0 (unregistering): Released all slaves
[  360.025623][ T8239] bridge1: port 1(veth3) entered blocking state
[  360.025936][ T8239] bridge1: port 1(veth3) entered disabled state
[  360.026191][ T8239] veth3: entered allmulticast mode
[  360.029077][ T8239] veth3: entered promiscuous mode
[  360.119623][ T8240] vlan2: entered allmulticast mode
[  360.119638][ T8240] veth1: entered allmulticast mode
[  360.120019][ T8240] bridge1: port 2(vlan2) entered blocking state
[  360.120308][ T8240] bridge1: port 2(vlan2) entered disabled state
[  360.123313][ T8240] vlan2: entered promiscuous mode
[  360.123336][ T8240] veth1: entered promiscuous mode
[  361.745917][ T8274] loop2: detected capacity change from 0 to 512
[  361.815937][ T8274] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  366.519062][   T13] hsr_slave_0: left promiscuous mode
[  366.555297][   T13] hsr_slave_1: left promiscuous mode
[  366.556753][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.616001][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.770975][   T13] hsr_slave_0: left promiscuous mode
[  367.803893][   T13] hsr_slave_1: left promiscuous mode
[  367.804644][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  367.844959][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.185804][   T13] team0 (unregistering): Port device team_slave_1 removed
[  368.224401][   T13] team0 (unregistering): Port device team_slave_0 removed
[  368.684374][   T13] team0 (unregistering): Port device team_slave_1 removed
[  368.715528][   T13] team0 (unregistering): Port device team_slave_0 removed
[  370.718488][ T8326] loop2: detected capacity change from 0 to 4096
[  370.732647][ T8326] EXT4-fs: Ignoring removed bh option
[  378.443883][ T8326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.973102][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  379.973213][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  380.440905][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.525085][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'.
[  380.525111][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'.
[  380.922575][ T8343] loop2: detected capacity change from 0 to 256
[  380.980722][ T8343] FAT-fs (loop2): Directory bread(block 64) failed
[  380.980755][ T8343] FAT-fs (loop2): Directory bread(block 65) failed
[  380.980872][ T8343] FAT-fs (loop2): Directory bread(block 66) failed
[  380.980902][ T8343] FAT-fs (loop2): Directory bread(block 67) failed
[  380.981017][ T8343] FAT-fs (loop2): Directory bread(block 68) failed
[  380.981042][ T8343] FAT-fs (loop2): Directory bread(block 69) failed
[  380.981153][ T8343] FAT-fs (loop2): Directory bread(block 70) failed
[  380.981174][ T8343] FAT-fs (loop2): Directory bread(block 71) failed
[  380.981273][ T8343] FAT-fs (loop2): Directory bread(block 72) failed
[  380.981294][ T8343] FAT-fs (loop2): Directory bread(block 73) failed
[  383.217680][ T8368] loop2: detected capacity change from 0 to 256
[  383.832821][ T8373] tipc: Started in network mode
[  383.832982][ T8373] tipc: Node identity 8, cluster identity 4711
[  383.833023][ T8373] tipc: Node number set to 8
[  385.090854][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  385.163349][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  385.199828][ T4924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  385.264281][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  385.265205][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  385.450014][ T4924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  385.494826][ T4924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  385.500036][ T4924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  385.518621][ T4924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  385.523054][ T4924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  386.541163][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10
[  386.592516][ T8400] netlink: 27 bytes leftover after parsing attributes in process `syz.4.694'.
[  386.879068][ T8404] loop2: detected capacity change from 0 to 512
[  386.906342][ T8404] EXT4-fs: Ignoring removed nobh option
[  386.906422][ T8404] EXT4-fs: Ignoring removed orlov option
[  387.098893][ T8404] EXT4-fs error (device loop2): __ext4_iget:5481: inode #11: block 1: comm syz.2.693: invalid block
[  387.098926][ T8404] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  387.103792][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  387.103814][    C0] EXT4-fs (loop2): initial error at time 1778146720: __ext4_iget:5481: inode 11: block 1
[  387.103848][    C0] EXT4-fs (loop2): last error at time 1778146720: __ext4_iget:5481: inode 11: block 1
[  387.125650][ T8404] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.693: couldn't read orphan inode 11 (err -117)
[  387.125988][ T8404] loop2: lost filesystem error report for type 5 error -117
[  387.262308][ T8404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.384348][ T8412] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  387.468907][ T5621] Bluetooth: hci0: command tx timeout
[  387.590950][ T8419] fuse: fd is not a fuse device
[  387.600840][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.697120][ T5621] Bluetooth: hci5: command tx timeout
[  388.015316][ T8430] loop2: detected capacity change from 0 to 256
[  388.113885][ T8430] FAT-fs (loop2): Directory bread(block 64) failed
[  388.113921][ T8430] FAT-fs (loop2): Directory bread(block 65) failed
[  388.114023][ T8430] FAT-fs (loop2): Directory bread(block 66) failed
[  388.114047][ T8430] FAT-fs (loop2): Directory bread(block 67) failed
[  388.114146][ T8430] FAT-fs (loop2): Directory bread(block 68) failed
[  388.114171][ T8430] FAT-fs (loop2): Directory bread(block 69) failed
[  388.114307][ T8430] FAT-fs (loop2): Directory bread(block 70) failed
[  388.114332][ T8430] FAT-fs (loop2): Directory bread(block 71) failed
[  388.114433][ T8430] FAT-fs (loop2): Directory bread(block 72) failed
[  388.114457][ T8430] FAT-fs (loop2): Directory bread(block 73) failed
[  389.534804][ T5621] Bluetooth: hci0: command tx timeout
[  389.797733][ T4924] Bluetooth: hci5: command tx timeout
[  391.614140][ T4924] Bluetooth: hci0: command tx timeout
[  392.069144][ T4924] Bluetooth: hci5: command tx timeout
[  392.746680][ T8476] loop2: detected capacity change from 0 to 256
[  393.050609][ T8476] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  393.050634][ T8476] FAT-fs (loop2): Filesystem has been set read-only
[  393.050912][ T8476] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  393.050940][ T8476] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  393.115114][ T8476] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  393.139863][ T8476] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  393.139903][ T8476] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  393.194493][ T8476] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  393.194532][ T8476] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  393.198548][   T38] kauditd_printk_skb: 1110 callbacks suppressed
[  393.198564][   T38] audit: type=1800 audit(1778146726.655:1157): pid=8476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.708" name="file1" dev="loop2" ino=1048621 res=0 errno=0
[  393.796509][ T4924] Bluetooth: hci0: command tx timeout
[  394.262685][ T4924] Bluetooth: hci5: command tx timeout
[  395.127288][   T13] bridge_slave_1: left allmulticast mode
[  395.127323][   T13] bridge_slave_1: left promiscuous mode
[  395.127567][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.331329][   T13] bridge_slave_0: left allmulticast mode
[  396.331365][   T13] bridge_slave_0: left promiscuous mode
[  396.339647][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.006530][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  398.128969][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  398.211488][   T13] bond0 (unregistering): Released all slaves
[  398.781114][ T8513] loop2: detected capacity change from 0 to 256
[  398.950583][ T8513] FAT-fs (loop2): Directory bread(block 64) failed
[  398.950647][ T8513] FAT-fs (loop2): Directory bread(block 65) failed
[  398.950753][ T8513] FAT-fs (loop2): Directory bread(block 66) failed
[  398.950779][ T8513] FAT-fs (loop2): Directory bread(block 67) failed
[  398.950882][ T8513] FAT-fs (loop2): Directory bread(block 68) failed
[  398.950906][ T8513] FAT-fs (loop2): Directory bread(block 69) failed
[  398.951009][ T8513] FAT-fs (loop2): Directory bread(block 70) failed
[  398.951033][ T8513] FAT-fs (loop2): Directory bread(block 71) failed
[  398.951137][ T8513] FAT-fs (loop2): Directory bread(block 72) failed
[  398.951161][ T8513] FAT-fs (loop2): Directory bread(block 73) failed
[  401.332816][ T8520] loop2: detected capacity change from 0 to 512
[  401.500031][ T8520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.500182][ T8520] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  401.708650][   T13] hsr_slave_0: left promiscuous mode
[  401.709733][ T8520] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.722: corrupted inode contents
[  401.748291][   T13] hsr_slave_1: left promiscuous mode
[  401.749376][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  401.767852][ T8520] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #2: comm syz.2.722: mark_inode_dirty error
[  401.805404][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  401.892770][ T8520] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.722: corrupted inode contents
[  401.943387][ T8520] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.722: mark_inode_dirty error
[  402.124914][ T8525] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.722: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  402.124914][ T8525] 
[  402.126809][ T8525] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.722: corrupted inode contents
[  402.142247][ T8525] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.722: mark_inode_dirty error
[  402.153259][ T8525] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem
[  402.304855][ T8526] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.722: corrupted inode contents
[  402.306476][ T8526] EXT4-fs error (device loop2): add_dirent_to_buf:2151: inode #2: comm syz.2.722: mark_inode_dirty error
[  402.476435][ T8533] fuse: fd is not a fuse device
[  403.328401][ T8520] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.722: corrupted inode contents
[  403.664132][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.231074][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'.
[  404.231140][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'.
[  404.641944][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  404.702413][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  404.712419][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  404.731948][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  404.746706][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  405.062726][ T8555] loop2: detected capacity change from 0 to 256
[  405.176143][ T8555] FAT-fs (loop2): Directory bread(block 64) failed
[  405.176179][ T8555] FAT-fs (loop2): Directory bread(block 65) failed
[  405.176283][ T8555] FAT-fs (loop2): Directory bread(block 66) failed
[  405.176309][ T8555] FAT-fs (loop2): Directory bread(block 67) failed
[  405.176412][ T8555] FAT-fs (loop2): Directory bread(block 68) failed
[  405.176436][ T8555] FAT-fs (loop2): Directory bread(block 69) failed
[  405.176546][ T8555] FAT-fs (loop2): Directory bread(block 70) failed
[  405.176571][ T8555] FAT-fs (loop2): Directory bread(block 71) failed
[  405.176673][ T8555] FAT-fs (loop2): Directory bread(block 72) failed
[  405.176698][ T8555] FAT-fs (loop2): Directory bread(block 73) failed
[  405.197951][   T13] team0 (unregistering): Port device team_slave_1 removed
[  405.359663][   T13] team0 (unregistering): Port device team_slave_0 removed
[  406.664458][ T8559] loop2: detected capacity change from 0 to 512
[  406.670159][ T8559] EXT4-fs: Ignoring removed nomblk_io_submit option
[  406.768947][ T8559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.769088][ T8559] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  407.079191][ T4924] Bluetooth: hci1: command tx timeout
[  407.101340][ T8559] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.731: corrupted xattr block 33: invalid ea_ino
[  407.112496][ T8559] EXT4-fs (loop2): Remounting filesystem read-only
[  407.287695][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.394117][ T5842] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  407.394153][ T5842] Quota error (device loop2): write_blk: dquota write failed
[  407.394167][ T5842] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  407.394185][ T5842] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  407.394203][ T5842] Quota error (device loop2): write_blk: dquota write failed
[  407.394216][ T5842] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[  407.394315][ T5842] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  407.394335][ T5842] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  409.133927][ T4924] Bluetooth: hci1: command tx timeout
[  410.216854][ T8379] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.217288][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.217667][ T8379] bridge_slave_0: entered allmulticast mode
[  410.227935][ T8379] bridge_slave_0: entered promiscuous mode
[  410.299218][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.299574][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.299869][ T8379] bridge_slave_1: entered allmulticast mode
[  410.303582][ T8379] bridge_slave_1: entered promiscuous mode
[  410.612236][ T8379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.674113][ T8379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.674785][ T8380] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.675685][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.675986][ T8380] bridge_slave_0: entered allmulticast mode
[  410.679982][ T8380] bridge_slave_0: entered promiscuous mode
[  410.816646][ T8380] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.817270][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.817531][ T8380] bridge_slave_1: entered allmulticast mode
[  410.821471][ T8380] bridge_slave_1: entered promiscuous mode
[  410.956993][ T8379] team0: Port device team_slave_0 added
[  411.026862][ T8379] team0: Port device team_slave_1 added
[  411.042944][ T8380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.213784][ T4924] Bluetooth: hci1: command tx timeout
[  411.516989][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'.
[  411.517012][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'.
[  411.631427][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.658318][ T8617] netlink: 388 bytes leftover after parsing attributes in process `syz.3.737'.
[  411.869330][ T8380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.277757][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.277775][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.277801][ T8379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.294490][ T4924] Bluetooth: hci1: command tx timeout
[  414.850738][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.973150][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.973167][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  414.973195][ T8379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.061025][ T8380] team0: Port device team_slave_0 added
[  415.120388][ T8380] team0: Port device team_slave_1 added
[  415.398959][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.608345][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.608362][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.608389][ T8380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.832172][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.913947][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.913964][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.913993][ T8380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.929496][ T8379] hsr_slave_0: entered promiscuous mode
[  415.936474][ T8379] hsr_slave_1: entered promiscuous mode
[  415.941180][ T8379] debugfs: 'hsr0' already exists in 'hsr'
[  415.941245][ T8379] Cannot create hsr debugfs directory
[  416.269645][ T8380] hsr_slave_0: entered promiscuous mode
[  416.272243][ T8380] hsr_slave_1: entered promiscuous mode
[  416.278727][ T8380] debugfs: 'hsr0' already exists in 'hsr'
[  416.278791][ T8380] Cannot create hsr debugfs directory
[  416.967750][ T8676] overlayfs: failed to clone upperpath
[  416.971285][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.971572][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.971784][ T8549] bridge_slave_0: entered allmulticast mode
[  417.001165][ T8549] bridge_slave_0: entered promiscuous mode
[  417.066717][ T5877] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  417.078760][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.080576][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.080897][ T8549] bridge_slave_1: entered allmulticast mode
[  417.109678][ T8549] bridge_slave_1: entered promiscuous mode
[  417.243950][ T5877] usb 3-1: Using ep0 maxpacket: 16
[  417.255567][ T5877] usb 3-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  417.255597][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  417.255649][ T5877] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024
[  417.255696][ T5877] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  417.255724][ T5877] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  417.321242][ T5877] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  417.321271][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.321295][ T5877] usb 3-1: Product: syz
[  417.321309][ T5877] usb 3-1: Manufacturer: syz
[  417.321323][ T5877] usb 3-1: SerialNumber: syz
[  417.416222][ T8671] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  417.732413][ T5877] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  417.732480][ T5877] usb 3-1: MIDIStreaming interface descriptor not found
[  417.848572][ T8549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.961381][ T8549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.263182][   T13] bridge_slave_1: left allmulticast mode
[  418.267637][   T13] bridge_slave_1: left promiscuous mode
[  418.268763][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.461447][ T5877] usb 3-1: USB disconnect, device number 5
[  418.594229][   T13] bridge_slave_0: left allmulticast mode
[  418.594265][   T13] bridge_slave_0: left promiscuous mode
[  418.594586][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.754038][   T13] bridge_slave_1: left allmulticast mode
[  419.754076][   T13] bridge_slave_1: left promiscuous mode
[  419.754403][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.828928][ T8698] loop2: detected capacity change from 0 to 512
[  419.838842][ T8698] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  419.877689][   T13] bridge_slave_0: left allmulticast mode
[  419.877829][   T13] bridge_slave_0: left promiscuous mode
[  419.878083][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.458160][ T8704] loop2: detected capacity change from 0 to 512
[  420.494770][ T8704] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  420.622416][ T8707] loop2: detected capacity change from 0 to 512
[  420.631264][ T8707] EXT4-fs: Ignoring removed nomblk_io_submit option
[  420.714901][ T8707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.717581][ T8707] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  421.006471][ T8707] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.756: corrupted xattr block 33: invalid ea_ino
[  421.011347][ T8707] EXT4-fs (loop2): Remounting filesystem read-only
[  421.157645][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.334910][ T1190] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  421.334942][ T1190] Quota error (device loop2): write_blk: dquota write failed
[  421.334958][ T1190] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  421.334977][ T1190] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  421.334996][ T1190] Quota error (device loop2): write_blk: dquota write failed
[  421.335030][ T1190] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[  421.335146][ T1190] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  421.335168][ T1190] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  423.813222][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.864482][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.907277][   T13] bond0 (unregistering): Released all slaves
[  423.918722][   T13] bond1 (unregistering): Released all slaves
[  423.938886][   T13] bond2 (unregistering): Released all slaves
[  425.124648][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.404502][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  426.385932][   T13] bond0 (unregistering): Released all slaves
[  428.118263][ T8549] team0: Port device team_slave_0 added
[  428.215706][ T8549] team0: Port device team_slave_1 added
[  428.572084][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.572102][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.572138][ T8549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.012017][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.012033][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.012058][ T8549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.343521][ T8379] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  430.420920][ T8379] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  430.477096][ T8549] hsr_slave_0: entered promiscuous mode
[  430.479542][ T8549] hsr_slave_1: entered promiscuous mode
[  430.481389][ T8549] debugfs: 'hsr0' already exists in 'hsr'
[  430.481413][ T8549] Cannot create hsr debugfs directory
[  430.520903][ T8379] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  430.625196][ T8379] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  430.637530][ T8379] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  430.736368][ T8379] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  430.996122][ T8755] loop2: detected capacity change from 0 to 131072
[  431.430087][ T8755] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  431.619608][   T13] hsr_slave_0: left promiscuous mode
[  431.685128][   T13] hsr_slave_1: left promiscuous mode
[  431.724045][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  431.724075][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  431.772038][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  431.772066][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.973869][   T13] hsr_slave_0: left promiscuous mode
[  432.013819][   T13] hsr_slave_1: left promiscuous mode
[  432.015018][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  432.054960][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  432.169276][   T13] veth1_macvtap: left promiscuous mode
[  432.169372][   T13] veth0_macvtap: left promiscuous mode
[  432.169744][   T13] veth1_vlan: left promiscuous mode
[  432.169910][   T13] veth0_vlan: left promiscuous mode
[  432.790974][ T8795] netlink: 'syz.2.779': attribute type 9 has an invalid length.
[  433.037854][   T13] team0 (unregistering): Port device team_slave_1 removed
[  433.085092][   T13] team0 (unregistering): Port device team_slave_0 removed
[  433.514477][   T13] team0 (unregistering): Port device team_slave_1 removed
[  433.544706][   T13] team0 (unregistering): Port device team_slave_0 removed
[  433.736949][ T8379] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  433.807443][ T8379] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  433.852068][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9
[  434.080904][ T8804] tipc: Started in network mode
[  434.080922][ T8804] tipc: Node identity , cluster identity 4711
[  434.080940][ T8804] tipc: Failed to set node id, please configure manually
[  434.080985][ T8804] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  434.298762][ T8380] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  434.371167][ T8380] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  434.421100][ T8380] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  434.507912][ T8380] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  434.588191][ T8380] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  434.638362][ T8380] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  434.651842][ T8817] netlink: 'syz.2.787': attribute type 9 has an invalid length.
[  434.679938][ T8380] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  434.782399][ T8380] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  435.535769][ T5596] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  435.694626][ T5596] usb 3-1: Using ep0 maxpacket: 16
[  435.697702][ T5596] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  435.697748][ T5596] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  435.697771][ T5596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.809492][ T5596] usb 3-1: config 0 descriptor??
[  436.151074][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10
[  436.317294][ T5596] kone 0003:1E7D:2CED.0001: bogus close delimiter
[  436.317316][ T5596] kone 0003:1E7D:2CED.0001: item 0 0 2 10 parsing failed
[  436.322192][ T5596] kone 0003:1E7D:2CED.0001: parse failed
[  436.322268][ T5596] kone 0003:1E7D:2CED.0001: probe with driver kone failed with error -22
[  436.531227][ T8549] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  436.533358][ T5801] usb 3-1: USB disconnect, device number 6
[  436.568720][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  436.597818][ T8549] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  436.659971][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  436.722431][ T8549] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  436.775321][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  436.790845][ T8549] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  436.825999][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  436.901725][ T8379] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.201200][ T8380] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.339535][ T8379] 8021q: adding VLAN 0 to HW filter on device team0
[  437.470177][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.470331][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.509248][ T8380] 8021q: adding VLAN 0 to HW filter on device team0
[  437.611726][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.627721][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  438.721587][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.721798][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state
[  438.842714][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.842912][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state
[  438.938990][ T8878] netlink: 'syz.2.796': attribute type 9 has an invalid length.
[  439.412230][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11
[  439.646191][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.074584][ T8549] 8021q: adding VLAN 0 to HW filter on device team0
[  440.096868][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  440.096979][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  440.166263][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.179219][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.345049][  T176] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.345181][  T176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.497068][ T8886] loop2: detected capacity change from 0 to 40427
[  441.231140][ T8886] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  441.283131][ T8886] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  441.322055][ T8925] fuse: fd is not a fuse device
[  441.516728][ T8928] netlink: 'syz.3.804': attribute type 9 has an invalid length.
[  441.971139][ T5611] syz-executor: attempt to access beyond end of device
[  441.971139][ T5611] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  442.047657][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  442.047688][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  442.047709][ T5611] Call Trace:
[  442.047717][ T5611]  <TASK>
[  442.047724][ T5611]  dump_stack_lvl+0xe8/0x150
[  442.047753][ T5611]  f2fs_stop_checkpoint+0x383/0x540
[  442.047782][ T5611]  f2fs_write_end_io+0x1274/0x1740
[  442.047825][ T5611]  __submit_merged_bio+0x256/0x6a0
[  442.047854][ T5611]  __submit_merged_write_cond+0x3c9/0x4e0
[  442.047884][ T5611]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  442.047925][ T5611]  f2fs_write_data_pages+0x287e/0x34f0
[  442.047979][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  442.048013][ T5611]  ? ktime_get+0x45/0x220
[  442.048073][ T5611]  ? do_raw_spin_lock+0x12b/0x2f0
[  442.048128][ T5611]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  442.048172][ T5611]  ? lockdep_hardirqs_on+0x7a/0x110
[  442.048196][ T5611]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  442.048220][ T5611]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  442.048251][ T5611]  ? reacquire_held_locks+0x104/0x190
[  442.048278][ T5611]  ? rt_spin_lock+0x1e0/0x400
[  442.048333][ T5611]  ? rt_spin_unlock+0x14f/0x200
[  442.048366][ T5611]  ? rt_spin_unlock+0x160/0x200
[  442.048394][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  442.048425][ T5611]  do_writepages+0x32e/0x550
[  442.048452][ T5611]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  442.048484][ T5611]  ? rt_spin_unlock+0x14f/0x200
[  442.048524][ T5611]  filemap_fdatawrite+0x1ec/0x2f0
[  442.048551][ T5611]  ? irqentry_exit+0x218/0x780
[  442.048574][ T5611]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  442.048636][ T5611]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  442.048669][ T5611]  ? __rcu_read_unlock+0x83/0xe0
[  442.048703][ T5611]  ? rt_spin_unlock+0x160/0x200
[  442.048735][ T5611]  f2fs_sync_dirty_inodes+0x30e/0x830
[  442.048780][ T5611]  f2fs_write_checkpoint+0x9df/0x26a0
[  442.048812][ T5611]  ? __lock_acquire+0x6b5/0x2d10
[  442.048864][ T5611]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  442.048948][ T5611]  kill_f2fs_super+0x314/0x730
[  442.048986][ T5611]  ? __pfx_kill_f2fs_super+0x10/0x10
[  442.049029][ T5611]  ? lockdep_hardirqs_on+0x7a/0x110
[  442.049064][ T5611]  deactivate_locked_super+0xbc/0x130
[  442.049096][ T5611]  cleanup_mnt+0x437/0x4d0
[  442.049130][ T5611]  ? _raw_spin_unlock_irq+0x23/0x50
[  442.049175][ T5611]  task_work_run+0x1d9/0x270
[  442.049204][ T5611]  ? __pfx_task_work_run+0x10/0x10
[  442.049240][ T5611]  exit_to_user_mode_loop+0xed/0x4d0
[  442.049261][ T5611]  ? rcu_is_watching+0x15/0xb0
[  442.049289][ T5611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.049313][ T5611]  ? do_syscall_64+0x33e/0xf80
[  442.049344][ T5611]  ? trace_irq_disable+0x3b/0x140
[  442.049376][ T5611]  ? clear_bhb_loop+0x40/0x90
[  442.049404][ T5611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.049445][ T5611]  </TASK>
[  442.084652][ T5611] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  442.522811][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12
[  442.619124][ T8379] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.663512][ T8380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.638956][ T8549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.824422][ T8977] netlink: 388 bytes leftover after parsing attributes in process `syz.2.806'.
[  443.884269][ T8379] veth0_vlan: entered promiscuous mode
[  443.922644][ T8379] veth1_vlan: entered promiscuous mode
[  444.325183][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  444.361379][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  444.376893][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  444.392001][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  444.393124][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  444.852195][ T4924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  444.918992][ T4924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  444.920477][ T4924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  444.941097][ T4924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  444.946681][ T4924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  445.254708][ T9006] fuse: fd is not a fuse device
[  445.498194][ T9010] loop2: detected capacity change from 0 to 16
[  445.581614][ T9010] erofs (device loop2): algorithm 1 isn't enabled on this kernel
[  445.767163][ T9017] binder: 9015:9017 ioctl 4018620d 0 returned -22
[  447.319862][ T5621] Bluetooth: hci4: command tx timeout
[  447.319884][ T4924] Bluetooth: hci5: command tx timeout
[  448.090848][ T8549] veth0_vlan: entered promiscuous mode
[  448.711059][ T9048] loop2: detected capacity change from 0 to 512
[  448.809667][ T9048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.809811][ T9048] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  450.114794][ T5621] Bluetooth: hci4: command tx timeout
[  451.128369][ T5621] Bluetooth: hci5: command tx timeout
[  451.393580][ T8549] veth1_vlan: entered promiscuous mode
[  451.586321][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.796654][ T9060] binder: 9059:9060 ioctl 4018620d 0 returned -22
[  452.175148][ T5621] Bluetooth: hci4: command tx timeout
[  452.390000][ T8549] veth0_macvtap: entered promiscuous mode
[  452.460010][ T9070] overlayfs: failed to clone lowerpath
[  452.594126][   T13] bridge_slave_1: left allmulticast mode
[  452.594164][   T13] bridge_slave_1: left promiscuous mode
[  452.594461][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.657296][   T13] bridge_slave_0: left allmulticast mode
[  452.657330][   T13] bridge_slave_0: left promiscuous mode
[  452.657622][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.133800][ T5621] Bluetooth: hci5: command tx timeout
[  454.114645][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  454.174557][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  454.196941][   T13] bond0 (unregistering): Released all slaves
[  454.314536][ T5621] Bluetooth: hci4: command tx timeout
[  454.483277][ T8549] veth1_macvtap: entered promiscuous mode
[  454.883785][   T13] hsr_slave_0: left promiscuous mode
[  454.923824][   T13] hsr_slave_1: left promiscuous mode
[  454.925104][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.945480][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.213807][ T5621] Bluetooth: hci5: command tx timeout
[  455.475655][   T13] team0 (unregistering): Port device team_slave_1 removed
[  455.525425][   T13] team0 (unregistering): Port device team_slave_0 removed
[  456.201008][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.300689][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.301057][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.301389][ T8983] bridge_slave_0: entered allmulticast mode
[  456.327015][ T8983] bridge_slave_0: entered promiscuous mode
[  456.483826][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.484161][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.484537][ T8983] bridge_slave_1: entered allmulticast mode
[  456.488227][ T8983] bridge_slave_1: entered promiscuous mode
[  456.576887][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.789421][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'.
[  456.789449][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'.
[  456.821571][ T9101] binder: 9100:9101 ioctl 4018620d 0 returned -22
[  456.859024][ T8983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.962567][ T8983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.965098][ T5842] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.076270][ T5842] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.173270][ T5842] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.280825][ T5842] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.282037][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.282576][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.282867][ T8998] bridge_slave_0: entered allmulticast mode
[  457.297442][ T8998] bridge_slave_0: entered promiscuous mode
[  457.327364][ T8983] team0: Port device team_slave_0 added
[  457.345114][ T8983] team0: Port device team_slave_1 added
[  457.350261][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.350679][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.350952][ T8998] bridge_slave_1: entered allmulticast mode
[  457.373046][ T8998] bridge_slave_1: entered promiscuous mode
[  457.696872][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.696891][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.696922][ T8983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  457.776200][ T8998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.780366][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_1
[  457.780376][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.780394][ T8983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  457.863174][ T8998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.173539][ T9128] loop2: detected capacity change from 0 to 512
[  459.802292][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13
[  459.816436][ T8998] team0: Port device team_slave_0 added
[  460.028621][ T8998] team0: Port device team_slave_1 added
[  460.462803][ T8983] hsr_slave_0: entered promiscuous mode
[  460.472878][ T8983] hsr_slave_1: entered promiscuous mode
[  460.596813][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.596832][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.596864][ T8998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.720587][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.720606][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.720636][ T8998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.840006][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'.
[  460.840041][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'.
[  461.209121][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.209143][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.110914][ T8998] hsr_slave_0: entered promiscuous mode
[  462.113546][ T8998] hsr_slave_1: entered promiscuous mode
[  462.121594][ T8998] debugfs: 'hsr0' already exists in 'hsr'
[  462.121670][ T8998] Cannot create hsr debugfs directory
[  462.221822][ T1404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.221843][ T1404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.516567][ T9182] loop2: detected capacity change from 0 to 512
[  462.531320][ T9182] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[  462.617603][ T9182] netlink: 184 bytes leftover after parsing attributes in process `syz.2.847'.
[  464.402079][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'.
[  464.402106][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'.
[  467.746891][ T4924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  467.780336][ T4924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  467.789242][ T4924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  467.803219][ T4924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  467.805027][ T4924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  468.060331][ T9229] binder: 9222:9229 ioctl c0306201 200000000540 returned -22
[  470.013945][ T5621] Bluetooth: hci0: command tx timeout
[  470.365359][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'.
[  470.365385][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'.
[  470.566872][ T9258] loop2: detected capacity change from 0 to 512
[  470.567899][ T9258] EXT4-fs: Ignoring removed nobh option
[  470.567949][ T9258] EXT4-fs: Ignoring removed nomblk_io_submit option
[  470.569130][ T9258] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  471.080753][   T13] bridge_slave_1: left allmulticast mode
[  471.080891][   T13] bridge_slave_1: left promiscuous mode
[  471.081732][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.277752][   T13] bridge_slave_0: left allmulticast mode
[  471.277788][   T13] bridge_slave_0: left promiscuous mode
[  471.312399][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.106300][ T5621] Bluetooth: hci0: command tx timeout
[  474.184101][ T9274] loop2: detected capacity change from 0 to 8192
[  474.187960][ T5621] Bluetooth: hci0: command tx timeout
[  474.286946][ T9274]  loop2: p1 p3
[  474.286982][ T9274] loop2: partition table partially beyond EOD, truncated
[  474.287241][ T9274] loop2: p1 start 317952 is beyond EOD, truncated
[  474.287264][ T9274] loop2: p3 start 196608 is beyond EOD, truncated
[  474.495145][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.538962][ T9276] netlink: 'syz.2.866': attribute type 11 has an invalid length.
[  474.587415][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.626792][   T13] bond0 (unregistering): Released all slaves
[  474.740946][ T9280] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  474.986860][ T9287] overlayfs: failed to clone lowerpath
[  475.049511][ T9287] overlayfs: failed to clone lowerpath
[  475.255478][ T9291] loop2: detected capacity change from 0 to 1024
[  475.387809][   T13] hsr_slave_0: left promiscuous mode
[  475.416656][ T9291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.429725][   T13] hsr_slave_1: left promiscuous mode
[  475.474986][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.520559][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.568415][ T9291] EXT4-fs (loop2): shut down requested (0)
[  475.596522][   T13] veth1_vlan: left promiscuous mode
[  475.631601][   T13] veth0_vlan: left promiscuous mode
[  476.253837][ T5621] Bluetooth: hci0: command tx timeout
[  477.095983][   T13] team0 (unregistering): Port device team_slave_1 removed
[  477.157468][   T13] team0 (unregistering): Port device team_slave_0 removed
[  478.203183][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.557988][ T9322] overlayfs: failed to clone lowerpath
[  479.626502][ T9317] overlayfs: failed to clone lowerpath
[  481.104085][ T9368] overlayfs: failed to clone upperpath
[  481.245573][ T9369] loop2: detected capacity change from 0 to 128
[  481.249742][ T9369] ext4: Unknown parameter 'uid>00000000000000060928'
[  481.316545][ T9369] loop2: detected capacity change from 0 to 256
[  481.336533][ T9369] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  484.550476][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'.
[  484.592688][ T9409] loop2: detected capacity change from 0 to 512
[  484.758747][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.810380][ T9409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.810484][ T9409] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  485.226003][ T9409] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 98 vs 96 free clusters
[  485.466763][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.630010][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.971304][ T9220] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.976569][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.977390][ T9220] bridge_slave_0: entered allmulticast mode
[  486.008931][ T9220] bridge_slave_0: entered promiscuous mode
[  486.396396][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.454473][ T9220] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.454904][ T9220] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.455250][ T9220] bridge_slave_1: entered allmulticast mode
[  486.458861][ T9220] bridge_slave_1: entered promiscuous mode
[  486.877279][ T9220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.083133][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.203139][ T9220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.484449][ T9220] team0: Port device team_slave_0 added
[  490.527761][ T9220] team0: Port device team_slave_1 added
[  490.826522][ T9483] loop2: detected capacity change from 0 to 256
[  491.138340][ T8983] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  491.344452][ T8983] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  491.369942][ T9220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.369959][ T9220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  491.369983][ T9220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.548232][ T8983] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  491.809230][ T8983] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  491.812510][ T9220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.812527][ T9220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  491.812555][ T9220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  493.193165][ T8983] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  493.376928][ T8983] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  493.748119][ T8983] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  493.996830][ T8983] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  494.873852][ T9220] hsr_slave_0: entered promiscuous mode
[  494.885340][ T9220] hsr_slave_1: entered promiscuous mode
[  494.910467][ T9220] debugfs: 'hsr0' already exists in 'hsr'
[  494.910494][ T9220] Cannot create hsr debugfs directory
[  495.060567][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'.
[  495.133412][ T9552] batadv_slave_0: entered promiscuous mode
[  495.206928][ T9553] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.321304][ T9553] bridge_slave_1 (unregistering): left allmulticast mode
[  495.321354][ T9553] bridge_slave_1 (unregistering): left promiscuous mode
[  495.321480][ T9553] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.665109][   T13] bridge_slave_1: left allmulticast mode
[  495.665148][   T13] bridge_slave_1: left promiscuous mode
[  495.665429][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.748020][   T13] bridge_slave_0: left allmulticast mode
[  495.748056][   T13] bridge_slave_0: left promiscuous mode
[  495.748300][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.778193][ T9520] loop2: detected capacity change from 0 to 40427
[  496.552429][ T9560] netlink: 'syz.2.929': attribute type 16 has an invalid length.
[  496.552498][ T9560] netlink: 'syz.2.929': attribute type 17 has an invalid length.
[  497.614486][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  497.674614][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  497.716590][   T13] bond0 (unregistering): Released all slaves
[  497.882913][ T9551] batadv_slave_0: left promiscuous mode
[  498.057386][ T8998] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  498.109904][ T8998] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  498.133156][ T8998] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  498.220300][ T8998] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  498.281124][ T8998] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  498.324399][ T8998] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  498.354645][ T8998] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  498.407987][ T8998] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  500.888711][ T9600] loop2: detected capacity change from 0 to 1024
[  501.013559][ T9600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  501.018131][ T9600] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.048901][   T13] hsr_slave_0: left promiscuous mode
[  501.084589][   T13] hsr_slave_1: left promiscuous mode
[  501.085772][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.085799][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.177513][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.177544][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.340360][   T13] veth1_macvtap: left promiscuous mode
[  501.340463][   T13] veth0_macvtap: left promiscuous mode
[  501.371076][   T13] veth1_vlan: left promiscuous mode
[  501.404158][   T13] veth0_vlan: left promiscuous mode
[  501.542636][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  501.542760][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  501.737165][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'.
[  501.751032][   T38] audit: type=1800 audit(1778148883.621:1158): pid=9610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.940" name="file1" dev="loop2" ino=15 res=0 errno=0
[  501.756143][   T38] audit: type=1800 audit(1778148883.631:1159): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.940" name="file1" dev="loop2" ino=15 res=0 errno=0
[  501.756290][   T38] audit: type=1800 audit(1778148883.631:1160): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.940" name="file1" dev="loop2" ino=15 res=0 errno=0
[  501.984365][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  502.166779][ T9623] loop2: detected capacity change from 0 to 512
[  502.170909][ T9623] EXT4-fs: Ignoring removed nomblk_io_submit option
[  502.221204][ T9623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.221301][ T9623] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  502.313354][ T9623] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.943: corrupted xattr block 33: invalid ea_ino
[  502.383437][ T9623] EXT4-fs (loop2): Remounting filesystem read-only
[  502.466099][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.527326][   T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  502.527350][   T12] Quota error (device loop2): write_blk: dquota write failed
[  502.527418][   T12] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  502.527536][   T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  502.527557][   T12] Quota error (device loop2): write_blk: dquota write failed
[  502.527572][   T12] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[  502.527650][   T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  502.527664][   T12] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  503.054521][   T13] team0 (unregistering): Port device team_slave_1 removed
[  503.968677][   T13] team0 (unregistering): Port device team_slave_0 removed
[  504.321041][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13
[  504.337747][ T9621] vlan0: entered promiscuous mode
[  505.191051][ T4924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  505.232767][ T4924] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  505.241928][ T4924] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  505.277204][ T4924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  505.278705][ T4924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  505.821568][ T4924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  505.830716][ T4924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  505.834301][ T4924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  506.838278][ T4924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  506.876777][ T4924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  507.458048][ T4924] Bluetooth: hci1: command tx timeout
[  507.724652][ T9682] loop2: detected capacity change from 0 to 512
[  509.829821][ T5621] Bluetooth: hci1: command tx timeout
[  509.829939][ T4924] Bluetooth: hci4: command tx timeout
[  509.947248][ T9682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  510.088972][   T38] audit: type=1800 audit(1778148891.971:1161): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.953" name="file1" dev="loop2" ino=15 res=0 errno=0
[  511.021995][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.545220][ T4924] Bluetooth: hci4: command tx timeout
[  512.545255][ T4924] Bluetooth: hci1: command tx timeout
[  513.485849][ T9711] loop2: detected capacity change from 0 to 512
[  513.516259][ T9711] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  513.906170][ T9714] loop2: detected capacity change from 0 to 256
[  514.081320][ T9714] FAT-fs (loop2): Directory bread(block 64) failed
[  514.081357][ T9714] FAT-fs (loop2): Directory bread(block 65) failed
[  514.081462][ T9714] FAT-fs (loop2): Directory bread(block 66) failed
[  514.081487][ T9714] FAT-fs (loop2): Directory bread(block 67) failed
[  514.081592][ T9714] FAT-fs (loop2): Directory bread(block 68) failed
[  514.081617][ T9714] FAT-fs (loop2): Directory bread(block 69) failed
[  514.081725][ T9714] FAT-fs (loop2): Directory bread(block 70) failed
[  514.081750][ T9714] FAT-fs (loop2): Directory bread(block 71) failed
[  514.081851][ T9714] FAT-fs (loop2): Directory bread(block 72) failed
[  514.081876][ T9714] FAT-fs (loop2): Directory bread(block 73) failed
[  514.766835][ T5621] Bluetooth: hci1: command tx timeout
[  514.766871][ T5621] Bluetooth: hci4: command tx timeout
[  515.674495][ T9728] 9p: Bad value for 'rfdno'
[  517.123694][ T4924] Bluetooth: hci4: command tx timeout
[  517.842019][ T9747] loop2: detected capacity change from 0 to 512
[  517.876495][ T9747] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  518.253557][ T9754] loop2: detected capacity change from 0 to 256
[  521.498751][ T9220] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  521.568850][ T9220] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  521.714532][ T9220] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  521.805815][ T9220] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  521.810679][ T9765] fuse: fd is not a fuse device
[  521.880750][ T9220] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  522.914066][ T9220] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  523.345294][ T9220] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  523.398836][ T9220] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  524.385311][ T5877] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  524.548997][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  524.549026][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  524.551752][ T5877] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  524.551779][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  524.551798][ T5877] usb 3-1: SerialNumber: syz
[  524.950276][ T5877] usb 3-1: 0:2 : does not exist
[  525.053103][ T5877] usb 3-1: USB disconnect, device number 7
[  525.364245][ T9493] udevd[9493]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  525.613274][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  525.680427][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  525.720126][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  525.721273][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  525.722583][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  526.271729][ T9647] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.272054][ T9647] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.272313][ T9647] bridge_slave_0: entered allmulticast mode
[  526.297719][ T9647] bridge_slave_0: entered promiscuous mode
[  527.392904][ T9831] loop2: detected capacity change from 0 to 4096
[  527.395763][ T9831] overlayfs: failed lookup in lower (newroot/294, name='file0', err=-40): overlapping layers
[  527.401097][ T9831] overlayfs: failed lookup in lower (newroot/294, name='file0', err=-40): overlapping layers
[  527.962547][ T5621] Bluetooth: hci5: command tx timeout
[  527.986194][ T9647] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.987028][ T9647] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.987390][ T9647] bridge_slave_1: entered allmulticast mode
[  528.045745][ T9647] bridge_slave_1: entered promiscuous mode
[  528.061607][ T9657] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.061878][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.178174][ T9657] bridge_slave_0: entered allmulticast mode
[  528.192351][ T9657] bridge_slave_0: entered promiscuous mode
[  528.791044][ T9657] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.791354][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.791615][ T9657] bridge_slave_1: entered allmulticast mode
[  528.837196][ T9657] bridge_slave_1: entered promiscuous mode
[  528.869038][ T9837] loop2: detected capacity change from 0 to 40427
[  528.872563][ T9837] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  528.872588][ T9837] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  528.904988][ T9837] F2FS-fs (loop2): invalid crc value
[  529.382392][ T9837] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  529.494669][ T9837] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  529.494698][ T9837] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  529.731168][ T9647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.014150][ T5621] Bluetooth: hci5: command tx timeout
[  530.057334][ T9647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.084754][ T9657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.179991][ T9657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.412411][ T9647] team0: Port device team_slave_0 added
[  530.613822][ T9647] team0: Port device team_slave_1 added
[  530.675266][ T9657] team0: Port device team_slave_0 added
[  530.866610][ T9657] team0: Port device team_slave_1 added
[  531.238370][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.238387][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.238413][ T9647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.387097][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.387121][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.387150][ T9647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.635982][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.636001][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.636031][ T9657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.786493][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.786511][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.786539][ T9657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.100987][ T5621] Bluetooth: hci5: command tx timeout
[  533.201936][ T9647] hsr_slave_0: entered promiscuous mode
[  533.206136][ T9647] hsr_slave_1: entered promiscuous mode
[  533.207997][ T9647] debugfs: 'hsr0' already exists in 'hsr'
[  533.208020][ T9647] Cannot create hsr debugfs directory
[  533.362959][ T9657] hsr_slave_0: entered promiscuous mode
[  533.371801][ T9657] hsr_slave_1: entered promiscuous mode
[  533.380117][ T9657] debugfs: 'hsr0' already exists in 'hsr'
[  533.380147][ T9657] Cannot create hsr debugfs directory
[  534.175361][ T5621] Bluetooth: hci5: command tx timeout
[  535.233865][ T5842] bridge_slave_1: left allmulticast mode
[  535.233911][ T5842] bridge_slave_1: left promiscuous mode
[  535.234360][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.168339][ T5842] bridge_slave_0: left allmulticast mode
[  536.168378][ T5842] bridge_slave_0: left promiscuous mode
[  536.168669][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.528441][ T9889] overlayfs: failed to clone upperpath
[  537.443971][ T5842] bridge_slave_1: left allmulticast mode
[  537.444005][ T5842] bridge_slave_1: left promiscuous mode
[  537.444272][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.528272][ T5842] bridge_slave_0: left allmulticast mode
[  537.528301][ T5842] bridge_slave_0: left promiscuous mode
[  537.528536][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.228200][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.343316][ T9923] loop2: detected capacity change from 0 to 256
[  541.348509][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.560077][ T9927] overlayfs: failed to clone upperpath
[  542.480598][ T5842] bond0 (unregistering): Released all slaves
[  543.028667][ T9937] loop2: detected capacity change from 0 to 2048
[  543.101999][ T9937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  543.114648][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  543.159641][   T38] audit: type=1800 audit(1778148925.041:1162): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.999" name="file1" dev="loop2" ino=15 res=0 errno=0
[  543.246986][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  543.326041][ T5842] bond0 (unregistering): Released all slaves
[  543.362782][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.413284][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13
[  545.694641][ T5842] hsr_slave_0: left promiscuous mode
[  546.453781][ T5842] hsr_slave_1: left promiscuous mode
[  546.454885][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.696381][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  549.463834][ T5842] hsr_slave_0: left promiscuous mode
[  549.503764][ T5842] hsr_slave_1: left promiscuous mode
[  549.504589][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  549.544953][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  549.884551][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  549.934216][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  550.374315][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  550.404210][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  550.823932][ T9977] loop2: detected capacity change from 0 to 4096
[  550.825984][ T9977] EXT4-fs: inline encryption not supported
[  550.866556][ T9977] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003]
[  550.866692][ T9977] System zones: 0-5
[  550.918551][ T9977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  551.364155][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.693484][ T9985] overlay: Unknown parameter '/ilter'
[  551.754196][ T9985] overlayfs: failed to clone lowerpath
[  553.626819][ T9989] bridge1: entered allmulticast mode
[  554.351132][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.351439][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.351791][ T9815] bridge_slave_0: entered allmulticast mode
[  554.355741][ T9815] bridge_slave_0: entered promiscuous mode
[  554.360256][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.360612][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.361050][ T9815] bridge_slave_1: entered allmulticast mode
[  554.425553][ T9815] bridge_slave_1: entered promiscuous mode
[  554.552966][T10011] loop2: detected capacity change from 0 to 40427
[  554.627316][T10011] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288)
[  554.760468][ T9815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.781081][T10011] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288)
[  554.781656][T10011] F2FS-fs (loop2): invalid crc value
[  554.781926][T10011] F2FS-fs (loop2): invalid crc value
[  554.781956][T10011] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[  554.782063][T10011] INFO: trying to register non-static key.
[  554.782136][T10011] The code is fine but needs lockdep annotation, or maybe
[  554.782172][T10011] you didn't initialize this object before use?
[  554.782202][T10011] turning off the locking correctness validator.
[  554.782221][T10011] CPU: 1 UID: 0 PID: 10011 Comm: syz.2.1011 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  554.782243][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  554.782255][T10011] Call Trace:
[  554.782289][T10011]  <TASK>
[  554.782300][T10011]  dump_stack_lvl+0xe8/0x150
[  554.782373][T10011]  assign_lock_key+0x133/0x150
[  554.782445][T10011]  register_lock_class+0xcc/0x2e0
[  554.782465][T10011]  __lock_acquire+0xad/0x2d10
[  554.782483][T10011]  ? rtlock_slowlock_locked+0xfb/0x3c80
[  554.782569][T10011]  ? __pfx___schedule+0x10/0x10
[  554.782588][T10011]  ? __lock_acquire+0x6b5/0x2d10
[  554.782609][T10011]  ? f2fs_exist_written_data+0x53/0x90
[  554.782700][T10011]  lock_acquire+0x106/0x350
[  554.782717][T10011]  ? f2fs_exist_written_data+0x53/0x90
[  554.782771][T10011]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[  554.782799][T10011]  rt_spin_lock+0x83/0x400
[  554.782821][T10011]  ? f2fs_exist_written_data+0x53/0x90
[  554.782845][T10011]  ? __pfx_rt_spin_lock+0x10/0x10
[  554.782867][T10011]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  554.782902][T10011]  ? preempt_count_add+0x91/0x190
[  554.782967][T10011]  f2fs_exist_written_data+0x53/0x90
[  554.782991][T10011]  f2fs_drop_inode+0xda/0xbf0
[  554.783011][T10011]  iput+0x651/0xe80
[  554.783085][T10011]  f2fs_fill_super+0x6047/0x7850
[  554.783152][T10011]  get_tree_bdev_flags+0x431/0x4f0
[  554.783200][T10011]  ? __pfx_f2fs_fill_super+0x10/0x10
[  554.783226][T10011]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  554.783255][T10011]  vfs_get_tree+0x92/0x2a0
[  554.783282][T10011]  do_new_mount+0x341/0xd30
[  554.783319][T10011]  ? apparmor_capable+0x126/0x170
[  554.783386][T10011]  ? __pfx_do_new_mount+0x10/0x10
[  554.783407][T10011]  ? ns_capable+0x89/0xe0
[  554.783433][T10011]  ? user_path_at+0xd4/0x160
[  554.783457][T10011]  ? user_path_at+0xd4/0x160
[  554.783482][T10011]  __se_sys_mount+0x31d/0x420
[  554.783505][T10011]  ? __pfx___se_sys_mount+0x10/0x10
[  554.783528][T10011]  ? __x64_sys_mount+0x20/0xc0
[  554.783547][T10011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.783566][T10011]  do_syscall_64+0x15f/0xf80
[  554.783588][T10011]  ? trace_irq_disable+0x3b/0x140
[  554.783668][T10011]  ? clear_bhb_loop+0x40/0x90
[  554.783688][T10011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.783705][T10011] RIP: 0033:0x7f76b9e8e04a
[  554.783751][T10011] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.783788][T10011] RSP: 002b:00007f76b80dde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  554.783813][T10011] RAX: ffffffffffffffda RBX: 00007f76b80ddee0 RCX: 00007f76b9e8e04a
[  554.783826][T10011] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 00007f76b80ddea0
[  554.783839][T10011] RBP: 0000200000000140 R08: 00007f76b80ddee0 R09: 0000000000000000
[  554.783851][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  554.783862][T10011] R13: 00007f76b80ddea0 R14: 000000000000555e R15: 0000200000000600
[  554.783882][T10011]  </TASK>
[  555.210661][ T9815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.242647][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14
[  555.392214][ T9815] team0: Port device team_slave_0 added
[  555.402294][ T9815] team0: Port device team_slave_1 added
[  555.497600][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.497612][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.497631][ T9815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.500301][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.500311][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  555.500330][ T9815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  555.625100][ T9815] hsr_slave_0: entered promiscuous mode
[  555.627111][ T9815] hsr_slave_1: entered promiscuous mode
[  557.100485][ T9647] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  557.138197][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  557.141685][ T9647] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  557.179354][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  557.375003][ T9647] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  557.417906][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  557.419043][ T9647] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  557.459658][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  557.813752][ T5842] bridge_slave_1: left allmulticast mode
[  557.813778][ T5842] bridge_slave_1: left promiscuous mode
[  557.813992][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.914687][ T5842] bridge_slave_0: left allmulticast mode
[  557.914711][ T5842] bridge_slave_0: left promiscuous mode
[  557.914865][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.194162][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  558.274057][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  558.355368][ T5842] bond0 (unregistering): Released all slaves
[  558.484980][ T9647] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.509581][ T9647] 8021q: adding VLAN 0 to HW filter on device team0
[  558.528464][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.528552][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.764337][ T5842] hsr_slave_0: left promiscuous mode
[  558.803713][ T5842] hsr_slave_1: left promiscuous mode
[  558.804391][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  558.844175][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  559.154304][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  559.194547][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  559.305801][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.305889][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.322229][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13
[  559.708514][ T9657] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  559.749498][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  559.752484][ T9657] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  559.793006][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  559.816078][ T9657] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  559.850844][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  559.854926][ T9657] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  559.888516][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  559.980405][ T9815] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  560.011926][ T9815] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  560.031642][ T9815] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  560.067680][ T9815] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  560.069028][ T9815] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  560.108668][ T9815] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  560.111400][ T9815] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  560.146739][ T9815] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  560.170533][ T9647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  560.351532][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.403525][ T9657] 8021q: adding VLAN 0 to HW filter on device team0
[  560.417111][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.441869][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.441930][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[  560.472369][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.472492][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[  560.500816][ T9815] 8021q: adding VLAN 0 to HW filter on device team0
[  560.524777][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.524921][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[  560.547530][ T9647] veth0_vlan: entered promiscuous mode
[  560.560331][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.560433][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[  560.600979][ T9647] veth1_vlan: entered promiscuous mode
[  560.726511][ T9647] veth0_macvtap: entered promiscuous mode
[  560.745447][ T9647] veth1_macvtap: entered promiscuous mode
[  560.809179][ T9647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  560.843268][ T9647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  560.874479][   T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.874561][   T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  560.874685][   T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.874719][   T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.073104][ T9647] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht'
[  561.121635][ T1404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.121672][ T1404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.149293][ T9647] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht'
[  561.222108][ T1404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.222140][ T1404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.336850][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.430793][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.698758][ T9657] veth0_vlan: entered promiscuous mode
[  561.717292][ T9815] veth0_vlan: entered promiscuous mode
[  561.729150][ T9657] veth1_vlan: entered promiscuous mode
[  561.747492][ T9815] veth1_vlan: entered promiscuous mode
[  561.797667][ T9657] veth0_macvtap: entered promiscuous mode
[  561.814555][ T9657] veth1_macvtap: entered promiscuous mode
[  561.829546][ T9815] veth0_macvtap: entered promiscuous mode
[  561.842726][ T9815] veth1_macvtap: entered promiscuous mode
[  561.869560][ T9657] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.891363][ T9657] batman_adv: batadv0: Interface activated: batadv_slave_1
[  561.907067][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.923366][ T5842] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  561.933837][ T5842] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  561.939415][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  561.939479][ T5842] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.971356][ T5842] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.019155][   T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.020907][   T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.028917][   T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.050464][   T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.168917][ T9657] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht'
[  562.273438][ T1404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.273462][ T1404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.297128][ T9657] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht'
[  562.326183][ T9815] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht'
[  562.337858][ T1404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.337907][ T1404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.377889][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.377909][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.383331][ T9815] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  562.431383][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.431401][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.976137][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  562.976236][ T1337] ieee802154 phy1 wpan1: encryption failed: -22