last executing test programs:

6m54.345182256s ago: executing program 3 (id=392):
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140))
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x64d3000)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)

6m51.925543272s ago: executing program 3 (id=398):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xf}, 0x1c)

6m50.835728906s ago: executing program 3 (id=403):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90)
write$P9_RCLUNK(r0, &(0x7f0000000300)={0x7, 0x79, 0x2}, 0x7)
pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="85", 0x1}], 0x1, 0x7000, 0x0, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)

6m47.335965857s ago: executing program 3 (id=412):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x1, 0xe, 0x0, &(0x7f0000000080))
syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x5d, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000)
mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000200))
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240))
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000))
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)
setpgid(r0, r3)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x59, 0x9, 0x6, 0x1, 0x3})

6m45.800939625s ago: executing program 3 (id=417):
r0 = socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, <r6=>r4, 0x2})
r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6})
close_range(r7, 0xffffffffffffffff, 0x0)

6m44.800219427s ago: executing program 3 (id=421):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x10040)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1000}}}}}}, 0x0)

6m43.778065789s ago: executing program 2 (id=428):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00')

6m42.142877171s ago: executing program 2 (id=432):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f00000003c0)=ANY=[], 0x5, 0x301, &(0x7f0000000080)="$eJzs3c9rE00YwPEnSdMk7du3Pby8iCgMFUSRLm3AmweLtCAGlLYRrCBs7VZDtklJQiEitoLg1bOHHjyKIII3LyJee/EvUOutl97soTiy2R/NjzWmlbRVv59D8jQzz850Z9LSaXZ288KTxfxCUkQiElDOQ1Ri3percvb92qeT0+/+8YrV5PjMWFqpqIjcvP9i+G2l//rrf98kZH3o1uZW+sv6iRmRbzN3JapyZVXQWplqrlisOE2o+Vw5byh1zbbMsqVyhbJVqnjl5pxtqQW7uLRUVWZhfqBvqWSVy8osVFXeqqpKUVVKVWXeMXMFZRiGGugTiMhQEEVbyiLtErPPt7WWLa21TqyK1jqk9qofxL3nxK91FkdJ0/i3rdsyOWLd7BkOwrbu6Xj88edx3/+fn3Y2/nrlgLqFAzJ9Y/bKeCYzMaVUUmTx8XJ2Oes+u+Uf+yUntliyNnVudkecOeKRiPM4eTkzMapqhuT04oqXv7KcdX85jC/U8jf8pLp88fPH3HzVmB+Xvt18S9IyKP9JaH7az5doXX6vnDlVl2/IoHy4LUWxZd6ZyXX5D8aUunQ109R+qlavzsNDGB4AAAAAAAAAAPbFUIHd9ftI8K/elGEkap/4CMpTzstOPbdCsL4+KoOyE74+Pxq6vt8jx3sO8RsHAAAAAOAvUq7ey5u2bZW6E8Sepdo0ETdEnEDk0bDTmbYH/N/rcWet94pIa1GsfRMNQeq8297LKa9j0s0T5QfJPfQwJPAv1sibO6/8opSEVY7uaQKM9Iae+WQpIl2dPw2BdFJZkvub2ImOp1ZzEAvaOhZaR0d+fhxt2nH3FQlGsH3WxT29HX4YJJtP1MiGe1y7zQ+Nr8ESHwAAAIDfSN0fTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JAE1/9HvDv9d7J5mL9vf2OReLeIb92Srfk+8ez7DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAI+h4AAP//0fmz5A==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
clock_settime(0xfffffffb, &(0x7f0000000140))

6m41.294845777s ago: executing program 2 (id=434):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write$input_event(r0, &(0x7f00000002c0)={{0x77359400}, 0x12, 0x4, 0x9}, 0x59)

6m40.996063437s ago: executing program 2 (id=436):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0x1, 0x571, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pjZ4rLfygu+Q/FJf+huOQ/FJf8h+KS/1Bc8h+KqzX/pT8U0+DIq5tJRKy/5676I9Wbncv5tT3AHWR7O/Gf/KGgfPaH4urpdgeArvEdH9j7N2dHHGt3YvHg+wIcjlK3OwB0zehx+39QVNb/obis/0Nx+YwPWP+H4rH+D8XV3+b+X29ruXfXRETcExE/Kh852rzXF/D/qz/i9RevfuuZiNLvk+zz/+jAqf7pN177Xmu73uSv9S2C3oj45ItPfeG56ZWVpUfT+j/fqF/5Ylb/WLdGA3SimafNPAaKa3l1bW66VqsuKSgoFK7QnAcuVzZmm4/DmnteeDjizfc3LkJI417JHo2zPdna5LH6HmXfVnLLtQrJAexdfuZ0xPrzEXF/3viT7H7njZ2Pvq3yrvhvz57Tx/Fs/SRtM9xh/PI9+4v/QEv8kZb47+gw/uZHOmx4mwx+vbvxX/5l9vpP9PTkvf77vTZm6N+cf+Kr+wywT7/5dXfjnxrpbvzPL0S8ms4/E3n5V0rT8sbO5875p7/lOun/1qdGb85/V3bNf6Ub81+5zfx3osM4P3y6+rG8+vKPI958PuKB3PjNeMfqsfq2Srvin2yZfx7cI/4fPvzTubz6s69FbF+OGI38+K2xxlfmF8eXV9dOX5yfnqnOVC9VKo9PTU5OnZmcGK+vUY83V6p3e/L68Afy6k9+uTH+vjbxm+Nv9/pv7zHmVmtf+nj/O3Pqf3K8Ef/Bk/nv/1AWv/H69+yK/67sOf138o/sWt60zbWIOJrVPxQR33ll8OG8fn3oeiP++TbjL90Sf/f4H+lw/J/91T+fzat/7oMd/gUAwIFqvzTQ7Z4BAAAH7TB2Grs9RiBf31ZvtG4DJ+st+wrrN/cV0vpr2f5CeT3ib9keQ1r/ULZLlpZzNxqA/znDa+/+ebf7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFB0y6trc9O1WnVpuds9AQ7bvwIAAP//zFYBIA==")
r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18)
r1 = openat(0xffffffffffffff9c, 0x0, 0xa0c42, 0x100)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
fallocate(r0, 0x0, 0x200bf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
getresgid(0x0, 0x0, 0x0)

6m37.633045713s ago: executing program 2 (id=445):
r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, <r6=>r4, 0x2})
r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6})
close_range(r7, 0xffffffffffffffff, 0x0)

6m35.138305571s ago: executing program 2 (id=450):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9e807000904000a000000fe", 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)

6m29.598436596s ago: executing program 32 (id=421):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x10040)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1000}}}}}}, 0x0)

6m19.756633166s ago: executing program 33 (id=450):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9e807000904000a000000fe", 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)

5m43.49212096s ago: executing program 5 (id=618):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x1, 0xe, 0x0, &(0x7f0000000080))
syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x5d, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000)
mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000200))
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240))
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)
setpgid(r0, r3)

5m42.22016019s ago: executing program 5 (id=621):
io_uring_setup(0x3c4e, &(0x7f0000000bc0)={0x0, 0xcb44, 0x100, 0x0, 0x26c})
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48)

5m40.647749649s ago: executing program 5 (id=627):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0)
close(r0)
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_opts(r0, 0x0, 0xb0212bda87860e19, 0x0, 0x0)

5m40.420202617s ago: executing program 5 (id=630):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008005090581030002000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)

5m38.842016567s ago: executing program 5 (id=636):
r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000280)={0x2, 0x100, 0x7fffffff, 0xe491, 0x3, 0x7})

5m38.168735668s ago: executing program 5 (id=641):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x0, 0x305, &(0x7f0000000200)="$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")
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, 0x0)
getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000005c0))

5m22.075636385s ago: executing program 34 (id=641):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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")
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, 0x0)
getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000005c0))

2m52.321028937s ago: executing program 0 (id=1264):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x400)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/199)

2m51.738465215s ago: executing program 0 (id=1265):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000003180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,fmask=00000000000000000000000,utf8,iocharset=cp864,discard,uid=', @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x1548, &(0x7f0000000640)="$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")
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r1, &(0x7f0000001f80)={0x2020}, 0x203d)

2m51.508299592s ago: executing program 0 (id=1267):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = inotify_init()
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
readv(r0, &(0x7f0000001380)=[{0x0}], 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

2m50.469948575s ago: executing program 0 (id=1271):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000002280)=@acquire={0x128, 0x17, 0x1, 0x70bd2d, 0x10001, {{@in=@multicast2, 0x4d5, 0xff}, @in6=@rand_addr=' \x01\x00', {@in6=@private2, @in=@local, 0x4e23, 0x7, 0x4e21, 0x9, 0xa, 0x80, 0x20, 0xf4}, {{@in=@multicast2, @in=@local, 0x4e21, 0x1, 0x4e23, 0x7, 0xa, 0x0, 0x20, 0x84}, {0x75, 0xffffffff, 0x4, 0x7, 0x9, 0x3803, 0x34}, {0x6, 0x91f, 0x1, 0x964}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x3, 0x2}, 0xf93, 0x1000000, 0x7fffffff, 0x70bd2d}}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)

2m50.30805353s ago: executing program 0 (id=1273):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000003180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,fmask=00000000000000000000000,utf8,iocharset=cp864,discard,uid=', @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x1548, &(0x7f0000000640)="$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")
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
ftruncate(r1, 0x81fd)
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}])

2m50.157941145s ago: executing program 0 (id=1275):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x7fffffe, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0xc8, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x3, 0x0, 0x3}, {}, {0x0, 0x2, 0x0, 0x1}, {0x0, 0x0, 0x8}, {0xfffd}, {0x16, 0x1}, {0x0, 0xff}, {}, {0x7}, {0x100, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x2}, {0x72f, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0x2, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0x10}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x10, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {0x2, 0x55}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x6, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

2m33.731315943s ago: executing program 35 (id=1275):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x7fffffe, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0xc8, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x3, 0x0, 0x3}, {}, {0x0, 0x2, 0x0, 0x1}, {0x0, 0x0, 0x8}, {0xfffd}, {0x16, 0x1}, {0x0, 0xff}, {}, {0x7}, {0x100, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x2}, {0x72f, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0x2, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0x10}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x10, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {0x2, 0x55}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x6, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

12.417202618s ago: executing program 1 (id=1865):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r3)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@getlink={0x58, 0x12, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x58004, 0x24000}, [@IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "70df57a43025adcfde"}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4000}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1ff}, @IFLA_WEIGHT={0x8, 0xf, 0x4b}]}, 0x58}}, 0x40010)
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)

9.963943276s ago: executing program 7 (id=1874):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006)

9.846923099s ago: executing program 7 (id=1876):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
close(r7)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

9.51314997s ago: executing program 1 (id=1878):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r7], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00'})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

9.411997843s ago: executing program 6 (id=1879):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000", @ANYRES32, @ANYBLOB="444fb68d6fa6fa77dd004043ac7a5f68c4328a4ba29b22a36b46f4367ce26e", @ANYRES64=0x0], 0x20)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
socket$kcm(0x29, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'macsec0\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'})
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r6 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000400)=0x2, 0x4)

8.781119733s ago: executing program 7 (id=1880):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

6.047720419s ago: executing program 8 (id=1884):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000000000", @ANYRES32, @ANYBLOB="444fb68d6fa6fa77dd004043ac7a5f68c4328a4ba29b22a36b46f4367ce26e", @ANYRES64=0x0], 0x20)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
socket$kcm(0x29, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'macsec0\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'})
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)

5.912889713s ago: executing program 7 (id=1885):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000"], 0xf8}}, 0x0)

5.887398234s ago: executing program 1 (id=1886):
syz_open_dev$tty1(0xc, 0x4, 0x2)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006)

5.883844074s ago: executing program 4 (id=1887):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xf9, 0x1227, &(0x7f0000000600)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r0, 0x0, 0x0)

5.882328554s ago: executing program 8 (id=1888):
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x200008, &(0x7f00000024c0)={[{@verity_on}]})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
capset(0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

5.857869185s ago: executing program 6 (id=1889):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r3)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@getlink={0x58, 0x12, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x58004, 0x24000}, [@IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "70df57a43025adcfde"}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4000}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1ff}, @IFLA_WEIGHT={0x8, 0xf, 0x4b}]}, 0x58}}, 0x40010)
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)

5.572089144s ago: executing program 1 (id=1890):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
close(r7)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

4.279823525s ago: executing program 7 (id=1891):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000", @ANYRES32, @ANYBLOB="444fb68d6fa6fa77dd004043ac7a5f68c4328a4ba29b22a36b46f4367ce26e", @ANYRES64=0x0], 0x20)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
socket$kcm(0x29, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'macsec0\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01800000000000000000030202000900"], 0x20}, 0x1, 0x40030000000000}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'})
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r7 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000400)=0x2, 0x4)

4.171396358s ago: executing program 8 (id=1892):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x3a)
r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20)
bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2'])
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0)

4.171119338s ago: executing program 6 (id=1893):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x800, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)

3.970706345s ago: executing program 6 (id=1894):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'xfrm0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0)

3.950140995s ago: executing program 4 (id=1895):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$unix(0x1, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.225965618s ago: executing program 1 (id=1896):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
r3 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0)
fsmount(r3, 0x0, 0x0)

3.16809355s ago: executing program 6 (id=1897):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000", @ANYRES32, @ANYBLOB="444fb68d6fa6fa77dd004043ac7a5f68c4328a4ba29b22a36b46f4367ce26e", @ANYRES64=0x0], 0x20)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
socket$kcm(0x29, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'macsec0\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'})
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r7 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000400)=0x2, 0x4)

3.005288215s ago: executing program 8 (id=1898):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000000000", @ANYRES32, @ANYBLOB="444fb68d6fa6fa77dd004043ac7a5f68c4328a4ba29b22a36b46f4367ce26e", @ANYRES64=0x0], 0x20)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
socket$kcm(0x29, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'macsec0\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'})
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)

2.061932714s ago: executing program 4 (id=1899):
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xa, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000280), &(0x7f0000000400)=@tcp, 0x2}, 0x20)
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc02", @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000ffff000000000000dd"], 0x23c}}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={@local, 0x80002})
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000080)=0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.043047585s ago: executing program 8 (id=1900):
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$vhost_msg_v2(r0, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x90864, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x200008, &(0x7f00000024c0)={[{@verity_on}]})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capset(0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

1.800092693s ago: executing program 4 (id=1901):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb00000000"], 0xf8}}, 0x0)

1.542993691s ago: executing program 4 (id=1902):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
epoll_create1(0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4)
sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000007f000000000001000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f00008e8000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x552c7000)
socket(0x14, 0x2, 0x4)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r4, 0x40109441, &(0x7f00000000c0)={0x5, 0x2, 0x1})
vmsplice(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0xa)

321.535169ms ago: executing program 1 (id=1903):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000", @ANYRES32, @ANYBLOB="444fb68d6fa6fa77dd004043ac7a5f68c4328a4ba29b22a36b46f4367ce26e", @ANYRES64=0x0], 0x20)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
socket$kcm(0x29, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'})
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r7 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000400)=0x2, 0x4)

318.8142ms ago: executing program 8 (id=1904):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000", @ANYRES32, @ANYBLOB="444fb68d6fa6fa77dd004043ac7a5f68c4328a4ba29b22a36b46f4367ce26e", @ANYRES64=0x0], 0x20)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
socket$kcm(0x29, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'macsec0\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'})
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r7 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000400)=0x2, 0x4)

174.527164ms ago: executing program 6 (id=1905):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xf9, 0x1227, &(0x7f0000000600)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r0, 0x0, 0x0)

163.887554ms ago: executing program 7 (id=1906):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x7, 0x2b2b, 0x482e, 0xff, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"})

0s ago: executing program 4 (id=1907):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'xfrm0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0)

kernel console output (not intermixed with test programs):

ave_1) entered blocking state
[  285.242930][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.251738][ T6816] device bridge_slave_1 entered promiscuous mode
[  285.361574][ T6872] loop4: detected capacity change from 0 to 128
[  285.431871][ T6872] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  285.443656][ T6872] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.904203][ T6816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.926839][ T1108] Bluetooth: hci2: command 0x041b tx timeout
[  286.047525][ T6816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.246914][ T6886] loop4: detected capacity change from 0 to 512
[  286.282500][ T6816] team0: Port device team_slave_0 added
[  286.325789][ T6816] team0: Port device team_slave_1 added
[  286.429606][ T6886] EXT4-fs (loop4): Unrecognized mount option "fscontext=system_u" or missing value
[  286.501609][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.589003][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.674108][ T6816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.700688][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.736323][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.314257][ T6816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.149397][ T2289] Bluetooth: hci2: command 0x040f tx timeout
[  289.142316][ T6816] device hsr_slave_0 entered promiscuous mode
[  289.621782][ T6816] device hsr_slave_1 entered promiscuous mode
[  290.364251][ T6816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  290.372034][ T6816] Cannot create hsr debugfs directory
[  290.429341][ T5713] Bluetooth: hci2: command 0x0419 tx timeout
[  290.617869][   T26] audit: type=1804 audit(1779080941.941:15): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.695" name="bus" dev="ramfs" ino=42365 res=1 errno=0
[  290.784845][ T6926] loop1: detected capacity change from 0 to 512
[  290.878577][ T6926] EXT4-fs (loop1): Ignoring removed bh option
[  290.946159][ T6816] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  290.969892][ T6926] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.698: inode has both inline data and extents flags
[  290.994846][ T6926] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.698: couldn't read orphan inode 15 (err -117)
[  291.023999][ T6926] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,quota,,errors=continue. Quota mode: writeback.
[  291.042418][ T6816] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  291.120556][ T6816] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  291.212943][ T6816] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  292.423939][    T9] device hsr_slave_0 left promiscuous mode
[  292.435026][    T9] device hsr_slave_1 left promiscuous mode
[  292.465986][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.478644][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.487414][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.495966][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.504421][    T9] device bridge_slave_1 left promiscuous mode
[  292.514149][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.524853][    T9] device bridge_slave_0 left promiscuous mode
[  292.532047][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.569216][    T9] device veth1_vlan left promiscuous mode
[  292.602433][    T9] device veth0_vlan left promiscuous mode
[  292.807026][ T4235] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  293.343485][ T4235] usb 5-1: unable to get BOS descriptor or descriptor too short
[  293.446567][ T6958] loop6: detected capacity change from 0 to 1024
[  293.650773][ T4235] usb 5-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  293.663598][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.672087][ T4235] usb 5-1: Product: syz
[  293.683825][ T4235] usb 5-1: Manufacturer: syz
[  293.721356][ T6958] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  293.737971][ T4235] usb 5-1: SerialNumber: syz
[  293.896565][    T9] team0 (unregistering): Port device team_slave_1 removed
[  293.923398][ T6949] loop1: detected capacity change from 0 to 40427
[  293.960275][ T6949] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  293.960854][    T9] team0 (unregistering): Port device team_slave_0 removed
[  293.982185][ T6949] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  293.997546][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.051581][ T4235] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  294.074649][ T6949] F2FS-fs (loop1): invalid crc value
[  294.077905][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.080717][ T4235] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  294.126359][ T6949] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  294.254467][ T6949] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  294.267456][ T6949] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  294.295054][ T4235] usb 5-1: USB disconnect, device number 9
[  294.345408][    T9] bond0 (unregistering): Released all slaves
[  294.669959][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  294.796032][ T2289] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  294.971062][ T6816] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.234571][ T2289] usb 7-1: unable to get BOS descriptor or descriptor too short
[  295.284343][ T6816] 8021q: adding VLAN 0 to HW filter on device team0
[  295.352398][ T2289] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  295.418674][ T2289] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  295.615380][ T6989] xt_TCPMSS: Only works on TCP SYN packets
[  295.626624][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  295.686638][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  295.728220][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  295.755628][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  295.833168][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.840319][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.975797][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  296.196730][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  296.260471][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.267592][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.384747][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  296.439083][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  296.445829][ T2289] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  296.456724][ T2289] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.465371][ T2289] usb 7-1: Product: syz
[  296.469581][ T2289] usb 7-1: Manufacturer: syz
[  296.481120][ T2289] usb 7-1: SerialNumber: syz
[  296.545152][ T6816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  296.602430][ T6816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  296.661199][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  296.692962][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  296.746815][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  296.782629][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  296.806485][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  296.850659][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  296.860324][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  296.869923][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  296.878831][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  296.897453][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  296.930824][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  297.075217][ T2289] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  297.108388][ T2289] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  297.325586][ T2289] usb 7-1: 2:1 : unknown format tag 0x400 is detected.  processed as MPEG.
[  298.010769][ T2289] usb 7-1: found format II with max.bitrate = 4, frame size=7372
[  298.029951][ T2289] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  298.166406][ T2289] usb 7-1: USB disconnect, device number 2
[  298.540312][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  298.571143][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  298.676807][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.913002][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.430697][ T7051] loop6: detected capacity change from 0 to 256
[  300.079011][ T7051] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  300.118886][ T7051] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  300.196431][ T7051] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  301.868253][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  301.887997][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  301.980699][ T6816] device veth0_vlan entered promiscuous mode
[  302.035992][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  302.057108][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  302.120327][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  302.164653][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  302.419367][ T6816] device veth1_vlan entered promiscuous mode
[  302.939298][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  303.332597][ T6816] device veth0_macvtap entered promiscuous mode
[  304.507747][ T6816] device veth1_macvtap entered promiscuous mode
[  304.598936][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.656906][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.689195][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.754662][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.814623][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.900002][ T7149] loop6: detected capacity change from 0 to 512
[  304.926002][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.965217][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.998935][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.033554][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.041789][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  305.055391][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  305.091973][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  305.119254][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  305.173907][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  305.278084][ T7149] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  305.300905][ T7149] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  305.332495][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  305.380523][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.408249][    T7] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  305.424713][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.456700][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.488156][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.524686][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.584607][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.619001][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.653674][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.699769][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.728133][ T1356] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  305.754198][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  305.845714][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  306.745930][ T6816] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.839070][ T6816] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.913925][ T6816] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.924833][ T6816] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.143225][ T4263] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  307.977289][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.002523][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.124113][ T7190] loop1: detected capacity change from 0 to 128
[  308.135190][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  308.245979][ T1356] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  308.273467][ T7190] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  308.294695][ T1356] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  308.367522][ T7190] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.384105][  T672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.398726][  T672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.444216][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  308.741291][ T4234] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  309.104940][ T1356] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  309.126195][ T4234] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  309.156549][ T4234] usb 7-1: config 0 has no interface number 0
[  309.521946][ T4234] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  309.542762][ T4234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.554380][ T4234] usb 7-1: Product: syz
[  309.558788][ T4234] usb 7-1: Manufacturer: syz
[  309.563436][ T4234] usb 7-1: SerialNumber: syz
[  309.637422][ T4234] usb 7-1: config 0 descriptor??
[  310.408889][ T4234] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  310.569210][ T4234] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  310.895428][ T4234] asix: probe of 7-1:0.251 failed with error -71
[  311.039728][ T4234] usb 7-1: USB disconnect, device number 3
[  311.281421][ T7209] loop7: detected capacity change from 0 to 40427
[  311.405318][ T7209] F2FS-fs (loop7): invalid crc value
[  311.449992][ T7209] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  311.641958][ T7209] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  312.599722][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  314.045133][ T7293] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  314.966215][ T7291] binder: 7284:7291 ioctl 541b 0 returned -22
[  317.387607][ T7319] loop6: detected capacity change from 0 to 128
[  317.553391][ T7315] loop1: detected capacity change from 0 to 2048
[  317.608404][ T7319] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  317.639139][ T7319] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  317.814874][ T7315] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  317.856684][ T7315] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.073741][ T7340] loop4: detected capacity change from 0 to 256
[  318.157012][ T7315] loop_set_status: loop1 () has still dirty pages (nrpages=6)
[  318.178182][ T7340] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  318.398864][ T4191] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /139/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  318.420262][    C1] vkms_vblank_simulate: vblank timer overrun
[  319.652890][ T7360] loop1: detected capacity change from 0 to 256
[  319.942401][ T7360] FAT-fs (loop1): Directory bread(block 64) failed
[  319.990592][ T7360] FAT-fs (loop1): Directory bread(block 65) failed
[  320.096715][ T7360] FAT-fs (loop1): Directory bread(block 66) failed
[  320.303655][ T7360] FAT-fs (loop1): Directory bread(block 67) failed
[  320.523796][ T7360] FAT-fs (loop1): Directory bread(block 68) failed
[  320.720436][ T7360] FAT-fs (loop1): Directory bread(block 69) failed
[  320.741800][ T7360] FAT-fs (loop1): Directory bread(block 70) failed
[  320.748516][ T7360] FAT-fs (loop1): Directory bread(block 71) failed
[  320.817251][ T7360] FAT-fs (loop1): Directory bread(block 72) failed
[  320.831347][ T7360] FAT-fs (loop1): Directory bread(block 73) failed
[  321.319085][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  322.007374][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  322.014090][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  322.843555][ T7402] loop6: detected capacity change from 0 to 128
[  322.970418][ T7402] EXT4-fs (loop6): Test dummy encryption mode enabled
[  323.149679][ T7402] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,sysvgroups,,errors=continue. Quota mode: none.
[  323.203139][ T7402] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  323.730468][ T7402] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  328.190814][ T7482] netlink: 48 bytes leftover after parsing attributes in process `syz.1.823'.
[  328.469609][ T7486] loop4: detected capacity change from 0 to 1024
[  328.528374][ T7486] EXT4-fs (loop4): Ignoring removed nobh option
[  328.552761][ T7486] EXT4-fs (loop4): inline encryption not supported
[  328.586760][ T7486] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  328.646831][ T7486] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[  328.646831][ T7486] 
[  329.828469][ T7513] loop6: detected capacity change from 0 to 1024
[  329.945254][ T7513] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  329.980204][ T7513] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.117364][ T7513] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: block 3: comm syz.6.831: lblock 3 mapped to illegal pblock 3 (length 3)
[  330.302011][ T7532] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.831: bg 0: block 112: padding at end of block bitmap is not set
[  330.302050][ T7513] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  330.510500][ T7513] EXT4-fs (loop6): This should not happen!! Data will be lost
[  330.510500][ T7513] 
[  330.574884][ T7532] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 8 with error 28
[  331.127788][ T7532] EXT4-fs (loop6): This should not happen!! Data will be lost
[  331.127788][ T7532] 
[  331.367082][ T7532] EXT4-fs (loop6): Total free blocks count 0
[  331.373430][ T7532] EXT4-fs (loop6): Free/Dirty block details
[  331.383813][ T7532] EXT4-fs (loop6): free_blocks=0
[  331.389293][ T7532] EXT4-fs (loop6): dirty_blocks=64
[  331.394715][ T7532] EXT4-fs (loop6): Block reservation details
[  331.498368][ T7532] EXT4-fs (loop6): i_reserved_data_blocks=4
[  331.550260][ T7536] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: block 8: comm syz.6.831: lblock 8 mapped to illegal pblock 8 (length 8)
[  331.636601][ T7536] EXT4-fs error (device loop6): ext4_ext_remove_space:2929: inode #15: comm syz.6.831: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  335.506322][ T7616] loop7: detected capacity change from 0 to 16
[  335.543821][ T7616] erofs: (device loop7): mounted with root inode @ nid 36.
[  335.782727][ T7604] loop1: detected capacity change from 0 to 40427
[  335.991571][ T7604] F2FS-fs (loop1): Zoned block device path is missing
[  336.261679][ T7604] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  336.705073][ T7604] F2FS-fs (loop1): invalid crc value
[  336.802141][ T7604] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  338.092497][ T7647] loop4: detected capacity change from 0 to 4096
[  338.167599][ T7647] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  338.197580][ T7647] EXT4-fs (loop4): inline encryption not supported
[  338.236778][ T7647] EXT4-fs (loop4): Test dummy encryption mode enabled
[  338.256212][   T21] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  338.265747][ T7647] EXT4-fs (loop4): Ignoring removed oldalloc option
[  338.326713][ T7647] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0002]
[  338.357560][ T7647] System zones: 0-5
[  338.429524][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  338.509239][ T7647] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,oldalloc,nogrpid,minixdf,. Quota mode: writeback.
[  338.652002][   T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  338.724981][   T21] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  339.010677][   T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  339.179864][ T7647] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  339.273955][   T21] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  339.420373][ T7665] overlayfs: conflicting lowerdir path
[  339.462162][ T7668] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.469334][ T7668] bridge0: port 2(bridge_slave_1) entered listening state
[  339.476752][ T7668] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.484048][ T7668] bridge0: port 1(bridge_slave_0) entered listening state
[  339.496016][   T21] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  339.531835][   T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.556584][   T21] usb 7-1: Product: syz
[  339.557499][ T7668] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  339.575563][   T21] usb 7-1: Manufacturer: syz
[  339.591183][   T21] usb 7-1: SerialNumber: syz
[  339.619156][   T21] usb 7-1: config 0 descriptor??
[  339.676577][ T7668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  339.693549][   T21] ums-isd200 7-1:0.0: USB Mass Storage device detected
[  340.623666][   T21] scsi host1: usb-storage 7-1:0.0
[  340.713544][   T21] usb 7-1: USB disconnect, device number 4
[  340.732868][ T7661] loop1: detected capacity change from 0 to 40427
[  340.855564][ T7661] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  340.916922][ T7661] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  341.825545][ T4235] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  342.295862][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.439619][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.511571][ T4235] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  342.596659][ T4235] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  342.645715][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.648107][ T2289] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  342.699841][ T4235] usb 5-1: config 0 descriptor??
[  342.900069][ T7727] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  343.507961][ T4235] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[  343.703961][ T4235] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  343.895687][ T4235] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  344.009587][ T2289] usb 7-1: too many configurations: 151, using maximum allowed: 8
[  344.051079][ T4235] usb 5-1: USB disconnect, device number 10
[  344.399457][ T7749] fido_id[7749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  344.667796][ T7003] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  344.774726][ T2289] usb 7-1: unable to read config index 5 descriptor/all
[  344.783101][ T2289] usb 7-1: can't read configurations, error -71
[  345.234606][ T7003] usb 2-1: unable to get BOS descriptor or descriptor too short
[  345.314911][ T7003] usb 2-1: not running at top speed; connect to a high speed hub
[  346.124895][ T7003] usb 2-1: config 111 has an invalid interface number: 187 but max is 1
[  346.143615][ T7003] usb 2-1: config 111 has no interface number 0
[  346.150057][ T7003] usb 2-1: config 111 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  346.217284][ T7003] usb 2-1: config 111 interface 1 altsetting 1 has an invalid endpoint with address 0x80, skipping
[  346.248256][ T7003] usb 2-1: config 111 interface 1 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  346.289275][ T7003] usb 2-1: config 111 interface 1 has no altsetting 0
[  346.318344][ T7003] usb 2-1: config 111 interface 187 has no altsetting 0
[  347.789184][ T7003] usb 2-1: string descriptor 0 read error: -71
[  347.795712][ T7003] usb 2-1: New USB device found, idVendor=12d1, idProduct=e550, bcdDevice= 7.2f
[  347.862155][ T7003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.884457][ T7003] usb 2-1: can't set config #111, error -71
[  347.897822][ T7003] usb 2-1: USB disconnect, device number 3
[  349.102074][ T7840] loop1: detected capacity change from 0 to 512
[  349.182686][ T7840] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  349.264225][ T7849] loop4: detected capacity change from 0 to 256
[  349.291081][ T7840] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nomblk_io_submit,. Quota mode: writeback.
[  349.349570][ T7840] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  349.362939][ T7849] FAT-fs (loop4): bogus sectors per cluster 30
[  349.369446][ T7849] FAT-fs (loop4): Can't find a valid FAT filesystem
[  349.970196][ T7866] loop6: detected capacity change from 0 to 128
[  350.489287][ T7840] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 3: comm syz.1.904: lblock 0 mapped to illegal pblock 3 (length 1)
[  350.596169][ T7840] EXT4-fs (loop1): Remounting filesystem read-only
[  350.889589][ T7840] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.904: Invalid inode table block 34 in block_group 0
[  351.017805][ T7840] EXT4-fs (loop1): Remounting filesystem read-only
[  351.038986][ T7840] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  351.050358][ T7872] netlink: 5 bytes leftover after parsing attributes in process `syz.0.912'.
[  351.090072][ T7840] EXT4-fs (loop1): Remounting filesystem read-only
[  351.120841][ T7840] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.904: mark_inode_dirty error
[  351.142236][ T7840] EXT4-fs (loop1): Remounting filesystem read-only
[  351.196012][ T7840] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  351.218451][ T7840] EXT4-fs (loop1): Remounting filesystem read-only
[  351.225579][ T7840] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.904: mark_inode_dirty error
[  351.713207][ T5713] Bluetooth: hci4: command 0x0406 tx timeout
[  352.330636][ T7840] EXT4-fs (loop1): Remounting filesystem read-only
[  352.351290][ T7840] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.904: Invalid block bitmap block 2 in block_group 0
[  352.542334][ T7840] EXT4-fs (loop1): Remounting filesystem read-only
[  352.582075][ T7840] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  352.699523][ T7840] EXT4-fs (loop1): Remounting filesystem read-only
[  352.710937][ T7840] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.904: mark_inode_dirty error
[  352.807737][ T7840] EXT4-fs (loop1): Remounting filesystem read-only
[  352.823422][ T7840] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.904: Invalid block bitmap block 2 in block_group 0
[  352.912647][ T7840] EXT4-fs (loop1): Remounting filesystem read-only
[  353.047001][ T4463] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  353.071628][ T4463] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  353.094697][ T4463] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  353.320805][ T7909] loop1: detected capacity change from 0 to 512
[  353.377215][ T7909] EXT4-fs (loop1): Ignoring removed bh option
[  353.386386][ T7909] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  353.437849][ T7909] EXT4-fs (loop1): 1 truncate cleaned up
[  353.482832][ T7909] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  354.403884][ T7893] loop4: detected capacity change from 0 to 40427
[  354.457721][ T7893] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  354.518913][ T7893] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  354.574511][ T7893] F2FS-fs (loop4): Unrecognized mount option "00000000000000000000004" or missing value
[  354.872586][ T7933] loop1: detected capacity change from 0 to 4096
[  355.157881][ T7933] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  355.430540][   T26] audit: type=1804 audit(1779081002.609:16): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.924" name="/newroot/162/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  355.746923][ T7957] sock: sock_set_timeout: `syz.4.929' (pid 7957) tries to set negative timeout
[  356.433306][ T4268] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  356.611267][ T7995] xt_hashlimit: size too large, truncated to 1048576
[  356.700355][ T4268] usb 2-1: Using ep0 maxpacket: 16
[  356.850222][ T4268] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  356.859346][ T7960] loop7: detected capacity change from 0 to 40427
[  356.875628][ T4268] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  357.119086][ T7960] F2FS-fs (loop7): invalid crc value
[  357.167997][ T7960] F2FS-fs (loop7): Found nat_bits in checkpoint
[  357.192023][ T4268] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  357.251444][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.313403][ T4268] usb 2-1: Product: syz
[  357.361277][ T4268] usb 2-1: Manufacturer: syz
[  357.404434][ T4268] usb 2-1: SerialNumber: syz
[  357.510379][ T7960] F2FS-fs (loop7): Start checkpoint disabled!
[  357.597840][ T7960] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  358.503940][   T26] audit: type=1800 audit(1779081005.192:17): pid=7960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.930" name="bus" dev="loop7" ino=10 res=0 errno=0
[  358.666774][ T4268] usb 2-1: 0:2 : does not exist
[  358.748053][ T4353] attempt to access beyond end of device
[  358.748053][ T4353] loop7: rw=2049, want=40976, limit=40427
[  358.886264][ T4268] usb 2-1: USB disconnect, device number 4
[  359.127489][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  359.697499][ T8050] loop7: detected capacity change from 0 to 1024
[  359.812937][ T8050] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  359.839356][ T8050] EXT4-fs (loop7): Unrecognized mount option "seclabel" or missing value
[  360.006438][ T8058] loop1: detected capacity change from 0 to 512
[  360.078479][ T8058] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  360.208051][ T8058] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback.
[  360.226951][ T8058] ext4 filesystem being mounted at /169/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.421077][ T8058] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.951: bad entry in directory: directory entry overrun - offset=128, inode=18, rec_len=1920, size=2036 fake=0
[  360.489104][ T4342] udevd[4342]: incorrect ext4 checksum on /dev/loop1
[  360.547681][ T8058] EXT4-fs (loop1): Remounting filesystem read-only
[  361.730885][ T8090] loop7: detected capacity change from 0 to 256
[  361.885105][ T8090] FAT-fs (loop7): Directory bread(block 64) failed
[  361.915139][ T8090] FAT-fs (loop7): Directory bread(block 65) failed
[  361.922016][ T8090] FAT-fs (loop7): Directory bread(block 66) failed
[  361.957878][ T8090] FAT-fs (loop7): Directory bread(block 67) failed
[  361.982352][ T8090] FAT-fs (loop7): Directory bread(block 68) failed
[  361.993494][ T8098] loop1: detected capacity change from 0 to 128
[  362.010790][ T8090] FAT-fs (loop7): Directory bread(block 69) failed
[  362.040662][ T8098] FAT-fs (loop1): Unrecognized mount option "dos1xflop" or missing value
[  362.043564][ T8090] FAT-fs (loop7): Directory bread(block 70) failed
[  362.098705][ T8090] FAT-fs (loop7): Directory bread(block 71) failed
[  362.127592][ T8090] FAT-fs (loop7): Directory bread(block 72) failed
[  362.158045][ T8090] FAT-fs (loop7): Directory bread(block 73) failed
[  362.621026][ T8119] loop7: detected capacity change from 0 to 512
[  362.643365][ T4263] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  362.772392][ T4469] Bluetooth: hci5: Frame reassembly failed (-84)
[  363.069377][ T4263] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  363.102095][ T4263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.143870][ T4263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.153758][ T4263] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  363.203592][ T4263] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  363.233368][ T4263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.260101][ T4263] usb 2-1: config 0 descriptor??
[  363.582664][   T26] audit: type=1326 audit(1779081010.199:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ddd3e59 code=0x7ffc0000
[  364.233962][   T26] audit: type=1326 audit(1779081010.199:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ddd3e59 code=0x7ffc0000
[  364.322365][   T26] audit: type=1326 audit(1779081010.208:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2c8ddd3e59 code=0x7ffc0000
[  364.346687][   T26] audit: type=1326 audit(1779081010.208:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ddd3e59 code=0x7ffc0000
[  364.377488][ T4263] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd
[  364.405550][   T26] audit: type=1326 audit(1779081010.208:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ddd3e59 code=0x7ffc0000
[  364.432839][ T4263] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  364.467066][ T4263] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  364.479771][   T26] audit: type=1326 audit(1779081010.217:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c8dd9468e code=0x7ffc0000
[  364.595228][   T26] audit: type=1326 audit(1779081010.217:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c8dd9468e code=0x7ffc0000
[  364.679909][ T4268] usb 2-1: USB disconnect, device number 5
[  364.689067][   T26] audit: type=1326 audit(1779081010.217:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ddd3e59 code=0x7ffc0000
[  364.754383][ T8156] fido_id[8156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  364.803387][   T26] audit: type=1326 audit(1779081010.217:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8ddd3e59 code=0x7ffc0000
[  364.917893][ T5562] Bluetooth: hci5: command 0x1003 tx timeout
[  364.935754][ T4254] Bluetooth: hci5: Frame reassembly failed (-84)
[  364.946076][ T4254] Bluetooth: hci5: Frame reassembly failed (-84)
[  365.354548][ T8176] loop1: detected capacity change from 0 to 256
[  365.475417][ T8176] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  365.858294][ T4263] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  366.146841][ T4263] usb 2-1: Using ep0 maxpacket: 8
[  366.286759][ T4263] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  366.307060][ T4263] usb 2-1: config 135 has an invalid descriptor of length 194, skipping remainder of the config
[  366.349494][ T4263] usb 2-1: config 135 has no interface number 0
[  366.367139][ T4263] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  366.400939][ T4263] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  366.435283][ T4263] usb 2-1: config 135 interface 230 has no altsetting 0
[  366.628141][ T4263] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  366.648337][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.669940][ T4263] usb 2-1: Product: syz
[  366.691520][ T4263] usb 2-1: Manufacturer: syz
[  366.702680][ T4263] usb 2-1: SerialNumber: syz
[  367.044602][ T4263] usb 2-1: Found UVC 0.00 device syz (18ec:3288)
[  367.051130][ T4263] usb 2-1: No valid video chain found.
[  367.081165][ T4263] usb 2-1: USB disconnect, device number 6
[  367.141195][ T4268] Bluetooth: hci5: command 0x1001 tx timeout
[  367.152351][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  368.069435][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'.
[  369.363201][ T2289] Bluetooth: hci5: command 0x1009 tx timeout
[  371.917334][ T2289] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  371.939542][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  371.948567][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  373.285029][ T2289] usb 2-1: Using ep0 maxpacket: 32
[  373.306401][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  373.461952][ T2289] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  373.469852][ T8318] overlayfs: failed to clone upperpath
[  373.489741][ T2289] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  373.691471][ T2289] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  373.700623][ T2289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.731921][ T2289] usb 2-1: Product: syz
[  373.737027][ T2289] usb 2-1: Manufacturer: syz
[  373.741725][ T2289] usb 2-1: SerialNumber: syz
[  374.129816][ T2289] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  374.150664][ T2289] usb 2-1: unit 1 not found!
[  374.198274][ T2289] usb 2-1: USB disconnect, device number 7
[  374.609186][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  374.946841][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1022'.
[  374.984160][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  375.122811][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.474843][ T8400] loop1: detected capacity change from 0 to 128
[  376.768807][ T8400] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  376.780144][ T8400] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.257067][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'.
[  378.218525][ T8417] loop1: detected capacity change from 0 to 1024
[  378.326799][ T8419] xt_hashlimit: size too large, truncated to 1048576
[  378.399291][ T8417] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  378.425337][ T8417] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  378.549509][ T8417] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: comm syz.1.1048: directory missing '..'
[  378.794897][ T8430] netlink: 'syz.6.1050': attribute type 1 has an invalid length.
[  381.773435][ T8451] loop7: detected capacity change from 0 to 256
[  381.830063][ T8451] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  381.897938][ T8451] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  382.062176][ T8451] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xda9016d0, utbl_chksum : 0xe619d30d)
[  382.810492][ T8465] loop1: detected capacity change from 0 to 256
[  382.932922][ T8465] FAT-fs (loop1): Directory bread(block 64) failed
[  382.966664][ T8465] FAT-fs (loop1): Directory bread(block 65) failed
[  382.974074][ T8465] FAT-fs (loop1): Directory bread(block 66) failed
[  383.021470][ T8465] FAT-fs (loop1): Directory bread(block 67) failed
[  383.050041][ T8465] FAT-fs (loop1): Directory bread(block 68) failed
[  383.071570][ T8465] FAT-fs (loop1): Directory bread(block 69) failed
[  383.104083][ T8465] FAT-fs (loop1): Directory bread(block 70) failed
[  383.114818][ T8465] FAT-fs (loop1): Directory bread(block 71) failed
[  383.139067][ T8465] FAT-fs (loop1): Directory bread(block 72) failed
[  383.177097][ T8465] FAT-fs (loop1): Directory bread(block 73) failed
[  384.195378][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[  384.289426][ T8458] 9pnet: Insufficient options for proto=fd
[  384.407800][ T8483] loop1: detected capacity change from 0 to 256
[  384.532659][ T8483] exFAT-fs (loop1): hint_cluster is invalid (17)
[  385.972827][ T8497] loop7: detected capacity change from 0 to 256
[  386.082989][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1074'.
[  386.141094][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1074'.
[  386.510012][ T8504] loop7: detected capacity change from 0 to 4096
[  386.657031][ T8485] loop1: detected capacity change from 0 to 40427
[  386.717584][ T8504] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  386.788633][ T8485] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  386.831237][ T8485] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  386.995724][ T8504] EXT4-fs (loop7): Test dummy encryption mode enabled
[  387.492404][ T8485] F2FS-fs (loop1): invalid crc value
[  387.537294][ T8504] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000004,nodelalloc,delalloc,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  387.589248][ T8485] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  387.661606][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  387.670317][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  387.815907][ T8504] overlayfs: upper fs is r/o, try multi-lower layers mount
[  387.896629][ T8485] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  387.932981][ T8485] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  388.297437][ T8529] loop7: detected capacity change from 0 to 2048
[  388.616297][ T8529] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  388.685444][ T8529] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  388.757544][   T26] audit: type=1800 audit(1779081033.799:27): pid=8529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1084" name="file3" dev="loop7" ino=16 res=0 errno=0
[  388.791161][ T8529] fs-verity: sha256 using implementation "sha256-avx2"
[  391.015801][ T8558] loop1: detected capacity change from 0 to 2048
[  391.105691][ T8566] overlayfs: missing 'lowerdir'
[  391.989489][ T8558] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  392.021924][ T8558] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.522499][ T8567] loop7: detected capacity change from 0 to 40427
[  392.572334][ T8567] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  392.583739][ T8567] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  392.616249][ T8567] F2FS-fs (loop7): invalid crc value
[  392.655664][ T8567] F2FS-fs (loop7): Found nat_bits in checkpoint
[  392.753638][ T8567] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  392.770868][ T8567] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  394.739923][ T8619] loop7: detected capacity change from 0 to 128
[  394.807992][ T8619] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  394.836369][ T8619] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  394.900685][   T26] audit: type=1800 audit(1779081039.545:28): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1104" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=1048664 res=0 errno=0
[  395.324974][ T8631] loop7: detected capacity change from 0 to 256
[  395.423861][ T8631] FAT-fs (loop7): Directory bread(block 64) failed
[  395.437748][ T8631] FAT-fs (loop7): Directory bread(block 65) failed
[  395.444511][ T8631] FAT-fs (loop7): Directory bread(block 66) failed
[  395.472014][ T8631] FAT-fs (loop7): Directory bread(block 67) failed
[  395.490296][ T8631] FAT-fs (loop7): Directory bread(block 68) failed
[  395.533592][ T8631] FAT-fs (loop7): Directory bread(block 69) failed
[  395.545981][ T8631] FAT-fs (loop7): Directory bread(block 70) failed
[  395.574745][ T8631] FAT-fs (loop7): Directory bread(block 71) failed
[  395.624704][ T8631] FAT-fs (loop7): Directory bread(block 72) failed
[  395.658595][ T8631] FAT-fs (loop7): Directory bread(block 73) failed
[  396.950718][ T8648] input: syz0 as /devices/virtual/input/input17
[  396.994282][ T2289] Bluetooth: hci2: command 0x0405 tx timeout
[  397.214092][   T26] audit: type=1326 audit(1779081041.716:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.0.1125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c8ddd3e59 code=0x0
[  399.577593][ T8678] loop1: detected capacity change from 0 to 16
[  399.637991][ T8678] erofs: (device loop1): mounted with root inode @ nid 36.
[  399.809393][ T8678] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  399.847084][ T8678] overlayfs: maximum fs stacking depth exceeded
[  400.706945][ T8691] tipc: Started in network mode
[  400.760456][ T8691] tipc: Node identity 5f0000000000002e0000000000000001, cluster identity 4711
[  400.813732][ T8691] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  403.365138][ T4268] Bluetooth: hci5: command 0x1003 tx timeout
[  403.371636][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  403.442735][ T8737] loop1: detected capacity change from 0 to 512
[  403.804975][ T8737] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1155: iget: bad i_size value: 38620345925642
[  404.071469][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.079038][    C0] bridge0: topology change detected, propagating
[  404.087618][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.094975][    C0] bridge0: topology change detected, propagating
[  404.108537][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  404.224606][ T8737] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1155: couldn't read orphan inode 15 (err -117)
[  404.279917][ T8737] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  405.168282][ T8754] netlink: 'syz.4.1158': attribute type 4 has an invalid length.
[  405.526836][ T5713] Bluetooth: hci5: command 0x1001 tx timeout
[  405.534978][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  405.641738][  T144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap
[  405.687235][  T144] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 892 with error 28
[  405.705705][ T8768] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  405.730057][  T144] EXT4-fs (loop1): This should not happen!! Data will be lost
[  405.730057][  T144] 
[  405.754342][  T144] EXT4-fs (loop1): Total free blocks count 0
[  405.773309][  T144] EXT4-fs (loop1): Free/Dirty block details
[  405.797637][  T144] EXT4-fs (loop1): free_blocks=0
[  405.809886][  T144] EXT4-fs (loop1): dirty_blocks=892
[  405.825646][  T144] EXT4-fs (loop1): Block reservation details
[  405.842124][  T144] EXT4-fs (loop1): i_reserved_data_blocks=892
[  407.747572][ T4268] Bluetooth: hci5: command 0x1009 tx timeout
[  410.258637][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  411.998947][ T8840] loop1: detected capacity change from 0 to 512
[  412.071903][ T8840] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  412.490069][ T8849] loop1: detected capacity change from 0 to 1024
[  412.670580][ T8849] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  412.963624][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1193'.
[  413.006559][ T8859] device vlan2 entered promiscuous mode
[  413.025249][ T8859] device syz_tun entered promiscuous mode
[  413.985941][ T8884] loop7: detected capacity change from 0 to 512
[  414.085240][ T8884] EXT4-fs (loop7): Test dummy encryption mode enabled
[  414.148726][ T8884] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.1202: inode has both inline data and extents flags
[  414.334301][ T8884] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1202: couldn't read orphan inode 15 (err -117)
[  414.357864][ T8884] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  414.565315][ T8884] loop_set_status: loop7 () has still dirty pages (nrpages=1)
[  414.649496][ T8896] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  414.672860][ T8896] fuse: Bad value for 'fd'
[  416.906216][ T8923] loop7: detected capacity change from 0 to 512
[  417.009582][ T8923] EXT4-fs error (device loop7): ext4_orphan_get:1432: comm syz.7.1214: bad orphan inode 13
[  417.064758][ T8923] ext4_test_bit(bit=12, block=4) = 1
[  417.114010][ T8923] is_bad_inode(inode)=0
[  417.176576][ T8923] NEXT_ORPHAN(inode)=0
[  417.202733][ T8923] max_ino=32
[  417.219345][ T8923] i_nlink=1
[  417.222595][ T8923] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  417.441656][ T8923] EXT4-fs warning (device loop7): dx_probe:845: inode #2: comm syz.7.1214: Hash code is SIPHASH, but hash not in dirent
[  417.507587][ T4237] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  417.514907][ T8923] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1214: Corrupt directory, running e2fsck is recommended
[  417.519152][ T5713] Bluetooth: hci2: command 0x0406 tx timeout
[  417.583006][ T8923] EXT4-fs warning (device loop7): dx_probe:845: inode #2: comm syz.7.1214: Hash code is SIPHASH, but hash not in dirent
[  417.627764][ T8923] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1214: Corrupt directory, running e2fsck is recommended
[  418.177770][ T4237] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40
[  418.306316][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.010717][ T4237] usb 2-1: Product: syz
[  419.034937][ T4237] usb 2-1: Manufacturer: syz
[  419.072484][ T4237] usb 2-1: SerialNumber: syz
[  420.977122][ T4237] usb 2-1: 1:1: invalid format type 0x1001 is detected, processed as PCM
[  420.985809][ T4237] usb 2-1: 1:1 : sample bitwidth 9 in over sample bytes 1
[  421.105246][ T4237] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  421.287949][ T4237] snd-usb-audio: probe of 2-1:1.0 failed with error -71
[  421.383966][ T4237] usb 2-1: USB disconnect, device number 8
[  421.555571][ T8967] loop7: detected capacity change from 0 to 4096
[  421.593074][ T8967] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  421.639945][ T8967] EXT4-fs (loop7): Test dummy encryption mode enabled
[  421.707399][ T8973] udevd[8973]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  421.836349][ T8967] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,mblk_io_submit,usrquota,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  422.153158][ T8967] overlayfs: missing 'lowerdir'
[  424.005248][ T9006] loop7: detected capacity change from 0 to 4096
[  424.071247][ T9006] EXT4-fs (loop7): inline encryption not supported
[  424.108913][ T9006] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  424.130741][ T9006] EXT4-fs (loop7): Ignoring removed bh option
[  424.185136][ T9006] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  424.204085][ T9006] System zones: 0-5
[  424.265185][ T9006] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,journal_dev=0x00000000000007ff,inlinecrypt,mblk_io_submit,grpjquota=,bh,nodiscard,nodiscard,,errors=continue. Quota mode: writeback.
[  424.495611][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1246'.
[  426.380177][ T9042] tipc: Started in network mode
[  426.380281][ T9042] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  426.382063][ T9042] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  428.294049][ T9066] loop1: detected capacity change from 0 to 256
[  432.454019][ T4268] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[  432.759992][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1281'.
[  433.128280][ T4268] usb 8-1: unable to get BOS descriptor or descriptor too short
[  433.278011][ T4268] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  433.438708][ T4268] usb 8-1: config 1 interface 0 altsetting 241 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  433.781294][ T4268] usb 8-1: config 1 interface 0 has no altsetting 0
[  435.424409][ T4268] usb 8-1: string descriptor 0 read error: -71
[  435.430823][ T4268] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a9, bcdDevice= 0.40
[  435.492914][ T4268] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.568349][ T4268] usb 8-1: can't set config #1, error -71
[  435.591238][ T4268] usb 8-1: USB disconnect, device number 2
[  435.904901][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'.
[  437.029688][ T9126] device syzkaller0 entered promiscuous mode
[  437.707364][ T9164] loop7: detected capacity change from 0 to 512
[  437.818525][ T9164] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.1297: inode has both inline data and extents flags
[  437.898973][ T9164] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1297: couldn't read orphan inode 15 (err -117)
[  437.942887][ T9164] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  439.955585][ T4237] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  440.209766][ T9189] loop7: detected capacity change from 0 to 256
[  440.270536][ T9189] exfat: Deprecated parameter 'namecase'
[  440.286574][ T4237] usb 2-1: Using ep0 maxpacket: 16
[  440.326602][ T9189] exfat: Deprecated parameter 'namecase'
[  440.366475][ T9189] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  440.415451][ T4237] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  440.445016][ T4237] usb 2-1: config 0 has no interface number 0
[  440.478996][ T4237] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  440.500542][ T4237] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  440.812775][ T9206] fuse: Bad value for 'fd'
[  440.920248][ T4237] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  440.940086][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.948159][ T4237] usb 2-1: Product: syz
[  440.974068][ T4237] usb 2-1: Manufacturer: syz
[  440.984871][ T4237] usb 2-1: SerialNumber: syz
[  441.013939][ T4237] usb 2-1: config 0 descriptor??
[  441.034921][ T9181] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  441.051517][ T9181] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  441.295312][ T9181] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  441.323231][ T9181] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  442.733827][ T4237] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  442.747912][ T4237] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  442.788941][ T4237] asix: probe of 2-1:0.34 failed with error -71
[  442.811550][ T4237] usb 2-1: USB disconnect, device number 9
[  443.051731][ T9236] loop7: detected capacity change from 0 to 256
[  443.118995][ T9236] exfat: Deprecated parameter 'utf8'
[  443.124470][ T9236] exfat: Deprecated parameter 'utf8'
[  443.171761][ T9236] exfat: Deprecated parameter 'utf8'
[  443.219262][ T9236] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  444.950324][ T9239] loop1: detected capacity change from 0 to 40427
[  444.989863][ T9239] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x1ffff
[  446.222527][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'.
[  447.852567][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  448.372938][ T4463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.512550][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1350'.
[  448.573468][ T9298] chnl_net:caif_netlink_parms(): no params data found
[  448.627189][ T4463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.763591][ T4463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.844698][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.852979][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.863021][ T9298] device bridge_slave_0 entered promiscuous mode
[  448.925821][ T4463] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.160217][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.189839][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.205108][ T9298] device bridge_slave_1 entered promiscuous mode
[  450.203363][ T4237] Bluetooth: hci5: command 0x0409 tx timeout
[  450.243139][ T9298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.470824][ T9298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.372608][ T1108] Bluetooth: hci5: command 0x041b tx timeout
[  452.501033][ T9298] team0: Port device team_slave_0 added
[  452.586506][ T9298] team0: Port device team_slave_1 added
[  452.909113][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.916509][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.057539][ T9298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.084508][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.107536][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.270555][ T9298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.286910][ T4463] tipc: Left network mode
[  453.316911][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  453.323456][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  453.335631][ T9298] device hsr_slave_0 entered promiscuous mode
[  453.364228][ T9298] device hsr_slave_1 entered promiscuous mode
[  453.387399][ T9298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  453.425060][ T9298] Cannot create hsr debugfs directory
[  454.104731][ T9298] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  454.127193][ T9298] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  454.155919][ T9298] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  454.174769][ T9298] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  454.412762][ T9298] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.517598][ T9298] 8021q: adding VLAN 0 to HW filter on device team0
[  454.536119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  454.557280][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  454.595276][ T5713] Bluetooth: hci5: command 0x040f tx timeout
[  454.624134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  454.645745][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  454.694276][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.701498][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.762249][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  454.788421][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  454.829230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  454.866046][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.873333][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.923640][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  454.967259][ T4463] device hsr_slave_0 left promiscuous mode
[  454.991804][ T4463] device hsr_slave_1 left promiscuous mode
[  455.027352][ T9401] loop7: detected capacity change from 0 to 256
[  455.118977][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.159246][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.258872][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.356216][ T9405] overlayfs: missing 'lowerdir'
[  455.643952][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.009009][ T4463] device bridge_slave_1 left promiscuous mode
[  456.039750][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.157492][ T4463] device bridge_slave_0 left promiscuous mode
[  456.163795][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.290292][ T4463] device veth1_macvtap left promiscuous mode
[  456.338842][ T4463] device veth0_macvtap left promiscuous mode
[  456.384669][ T4463] device veth1_vlan left promiscuous mode
[  456.601672][ T4463] team0 (unregistering): Port device geneve0 removed
[  456.647166][ T1356] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  456.694229][ T9423] loop1: detected capacity change from 0 to 1024
[  456.778711][ T4463] team0 (unregistering): Port device team_slave_1 removed
[  456.789752][ T9423] EXT4-fs (loop1): Can't support bigalloc feature without extents feature
[  456.789752][ T9423] 
[  456.810374][ T9423] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  456.818058][ T4237] Bluetooth: hci5: command 0x0419 tx timeout
[  456.826156][ T4463] team0 (unregistering): Port device team_slave_0 removed
[  456.852107][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.878839][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.924964][ T1356] usb 8-1: Using ep0 maxpacket: 16
[  456.994698][ T4463] bond0 (unregistering): Released all slaves
[  457.073763][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  457.085768][ T1356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.168390][ T9298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  457.207703][ T1356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.209262][ T9298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  457.227634][ T1356] usb 8-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  457.249646][ T1356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.261660][    T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  457.272435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  457.279271][ T1356] usb 8-1: config 0 descriptor??
[  457.305797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  457.325590][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  457.334857][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  457.344480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  457.363238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  457.374850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  457.395969][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  457.405393][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  457.414508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  457.544673][    T7] usb 2-1: Using ep0 maxpacket: 8
[  457.616964][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  457.635743][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  457.669640][ T9298] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.683975][    T7] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  457.696216][    T7] usb 2-1: config 135 has an invalid descriptor of length 128, skipping remainder of the config
[  457.714412][    T7] usb 2-1: config 135 has no interface number 0
[  457.729853][    T7] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  457.808978][    T7] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  457.824281][ T1356] wacom 0003:056A:0084.0003: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.7-1/input0
[  457.839099][    T7] usb 2-1: config 135 interface 230 has no altsetting 0
[  458.023021][ T1356] usb 8-1: USB disconnect, device number 3
[  458.029625][    T7] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  458.057196][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.093387][    T7] usb 2-1: Product: syz
[  458.108322][    T7] usb 2-1: Manufacturer: syz
[  458.175036][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  458.194634][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  458.196454][    T7] usb 2-1: SerialNumber: syz
[  458.225490][ T9456] fido_id[9456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  458.281104][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  458.304382][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  458.325223][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  458.357065][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  458.377445][ T9298] device veth0_vlan entered promiscuous mode
[  458.415734][ T9298] device veth1_vlan entered promiscuous mode
[  458.472314][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  458.493308][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  458.516141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  458.529812][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  458.539179][    T7] usb 2-1: Found UVC 0.00 device syz (18ec:3288)
[  458.545655][    T7] usb 2-1: No valid video chain found.
[  458.573350][ T9298] device veth0_macvtap entered promiscuous mode
[  458.610426][    T7] usb 2-1: USB disconnect, device number 10
[  458.714679][ T9470] loop7: detected capacity change from 0 to 256
[  458.936192][ T9472] overlayfs: missing 'lowerdir'
[  459.421009][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  459.445664][ T9298] device veth1_macvtap entered promiscuous mode
[  459.617960][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.672258][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.712938][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.756375][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.766724][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.820694][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.852452][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.884693][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.948969][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.965155][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  460.010297][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  460.069839][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  460.098726][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  460.140256][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  460.202000][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  460.249022][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  460.296375][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  460.364647][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.374128][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  460.409601][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  460.446159][ T9298] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.459643][ T9298] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.492135][ T9298] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.511454][ T9298] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.823481][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.847221][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.912653][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  460.941288][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.977549][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.028867][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  461.754015][ T9519] loop7: detected capacity change from 0 to 512
[  461.953966][ T9519] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  461.992493][ T9519] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.011754][ T9555] overlayfs: missing 'lowerdir'
[  465.697803][ T9568] loop1: detected capacity change from 0 to 16
[  465.827647][ T9571] loop7: detected capacity change from 0 to 512
[  465.847767][ T9568] erofs: (device loop1): mounted with root inode @ nid 36.
[  465.917479][ T9571] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  465.931833][ T9568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  466.018240][ T9571] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1401: invalid indirect mapped block 9 (level 0)
[  466.127884][ T9571] EXT4-fs (loop7): 1 truncate cleaned up
[  466.168128][ T9571] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,stripe=0x0000000000000000,dioread_lock,,errors=continue. Quota mode: none.
[  467.087146][ T4234] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  467.354409][ T4234] usb 8-1: Using ep0 maxpacket: 16
[  467.525583][ T4234] usb 8-1: unable to get BOS descriptor or descriptor too short
[  467.638491][ T4234] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  467.899999][ T4234] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  467.909139][ T4234] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.951233][ T9607] loop8: detected capacity change from 0 to 16
[  467.998164][ T4234] usb 8-1: Product: syz
[  468.013877][ T4234] usb 8-1: Manufacturer: syz
[  468.026808][ T4234] usb 8-1: SerialNumber: syz
[  468.252485][ T9607] erofs: (device loop8): mounted with root inode @ nid 36.
[  468.300233][ T9607] erofs: (device loop8): z_erofs_readahead: readahead error at page 23 @ nid 36
[  468.335070][ T9617] overlayfs: missing 'lowerdir'
[  468.609465][ T4234] usb 8-1: Audio class v2/v3 interfaces need an interface association
[  468.655048][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1410'.
[  468.711733][ T9607] erofs: (device loop8): z_erofs_readahead: readahead error at page 22 @ nid 36
[  469.040162][ T4234] snd-usb-audio: probe of 8-1:1.0 failed with error -22
[  469.073692][ T9607] erofs: (device loop8): z_erofs_readahead: readahead error at page 21 @ nid 36
[  469.161254][ T9607] erofs: (device loop8): z_erofs_readahead: readahead error at page 20 @ nid 36
[  469.171363][ T4234] usb 8-1: 2:1 : can't get High Capability descriptor
[  469.172034][ T9607] erofs: (device loop8): z_erofs_readahead: readahead error at page 18 @ nid 36
[  469.233328][ T9607] erofs: (device loop8): z_erofs_readahead: readahead error at page 17 @ nid 36
[  469.274029][ T9607] erofs: (device loop8): z_erofs_readahead: readahead error at page 16 @ nid 36
[  469.318885][ T9607] erofs: (device loop8): z_erofs_extent_lookback: unknown type 3 @ lcn 9 of nid 36
[  469.378974][ T9607] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 36
[  469.411488][    T7] usb 8-1: USB disconnect, device number 4
[  469.449635][ T9607] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 40959 of nid 36
[  469.506439][ T9607] erofs: (device loop8): z_erofs_readahead: readahead error at page 9 @ nid 36
[  469.543333][ T9607] attempt to access beyond end of device
[  469.543333][ T9607] loop8: rw=524288, want=67108888, limit=16
[  469.579958][ T9627] loop1: detected capacity change from 0 to 8192
[  469.589763][ T9607] attempt to access beyond end of device
[  469.589763][ T9607] loop8: rw=524288, want=736, limit=16
[  469.646945][ T9627] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  469.651664][ T9607] attempt to access beyond end of device
[  469.651664][ T9607] loop8: rw=524288, want=525160, limit=16
[  469.717576][ T9607] attempt to access beyond end of device
[  469.717576][ T9607] loop8: rw=524288, want=24, limit=16
[  471.305080][ T9663] overlayfs: missing 'lowerdir'
[  472.703443][ T9645] loop7: detected capacity change from 0 to 40427
[  472.788218][ T9645] F2FS-fs (loop7): build fault injection attr: rate: 174, type: 0x1ffff
[  473.284793][ T9687] tap0: tun_chr_ioctl cmd 1074025677
[  473.292671][ T9687] tap0: linktype set to 8
[  476.141680][ T9702] loop7: detected capacity change from 0 to 4096
[  476.205232][ T9702] EXT4-fs (loop7): inline encryption not supported
[  476.234906][ T9702] EXT4-fs (loop7): Test dummy encryption mode enabled
[  476.249594][ T9702] EXT4-fs (loop7): Ignoring removed bh option
[  476.266565][ T9702] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  476.342840][ T9702] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  476.522270][ T9702] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback.
[  476.965634][ T9724] loop7: detected capacity change from 0 to 512
[  477.061417][ T9728] overlayfs: missing 'lowerdir'
[  477.351130][ T9724] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  477.831999][ T9724] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.1434: inode #1: comm syz.7.1434: iget: illegal inode #
[  478.061909][ T9724] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1434: error while reading EA inode 1 err=-117
[  478.199611][ T9724] EXT4-fs (loop7): 1 orphan inode deleted
[  478.927390][ T9724] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000008,nombcache,noinit_itable,nomblk_io_submit,minixdf,nobarrier,inode_readahead_blks=0x0000000000000000,usrjquota=,block_validity,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  478.985192][ T9742] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1439'.
[  479.054137][ T9747] loop1: detected capacity change from 0 to 512
[  479.142169][ T9747] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  479.180396][ T9745] loop8: detected capacity change from 0 to 4096
[  479.281903][ T9747] EXT4-fs (loop1): invalid journal inode
[  479.302276][ T9747] EXT4-fs (loop1): can't get journal size
[  479.357406][ T9745] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  479.614383][ T9747] EXT4-fs (loop1): 1 truncate cleaned up
[  479.620291][ T9747] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  479.637313][ T9745] EXT4-fs (loop8): shut down requested (1)
[  480.017489][ T4235] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  480.284339][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1444'.
[  480.535021][ T9775] bond0: (slave bond_slave_0): Releasing backup interface
[  480.562451][ T4235] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  480.572645][ T4235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.638064][ T4235] usb 8-1: config 0 descriptor??
[  481.211381][ T9794] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1449'.
[  482.056885][ T9797] loop1: detected capacity change from 0 to 256
[  482.096676][ T9797] exfat: Deprecated parameter 'utf8'
[  482.150941][ T9797] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  482.918812][ T9814] loop1: detected capacity change from 0 to 2048
[  483.026693][ T9814]  loop1: p2 < > p4
[  483.034846][ T9814] loop1: p4 size 262144 extends beyond EOD, truncated
[  483.370563][ T9122] udevd[9122]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  483.389628][ T9355] udevd[9355]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  483.477308][ T9353] udevd[9353]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  483.485468][ T9122] udevd[9122]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  483.490236][ T4235] usb 8-1: Cannot set autoneg
[  483.522797][ T4235] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71
[  483.573202][ T4235] usb 8-1: USB disconnect, device number 5
[  483.811076][ T4263] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  484.249404][ T4263] usb 2-1: config 1 interface 0 has no altsetting 0
[  484.484278][ T4263] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40
[  484.505543][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.541208][ T4263] usb 2-1: Product: syz
[  484.560730][ T4263] usb 2-1: Manufacturer: syz
[  484.588080][ T4263] usb 2-1: SerialNumber: syz
[  484.856414][ T9857] xt_hashlimit: size too large, truncated to 1048576
[  486.300765][ T4263] usbhid 2-1:1.0: can't add hid device: -71
[  486.306963][ T4263] usbhid: probe of 2-1:1.0 failed with error -71
[  486.350788][ T4263] usb 2-1: USB disconnect, device number 11
[  487.593096][ T9891] loop7: detected capacity change from 0 to 512
[  487.606023][ T9893] loop8: detected capacity change from 0 to 16
[  487.722025][ T1108] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  487.749102][ T9891] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.1472: inode has both inline data and extents flags
[  487.759200][ T9893] erofs: (device loop8): mounted with root inode @ nid 36.
[  487.839163][ T9891] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1472: couldn't read orphan inode 15 (err -117)
[  487.855622][ T9893] attempt to access beyond end of device
[  487.855622][ T9893] loop8: rw=524288, want=1342177304, limit=16
[  487.912908][ T9891] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  487.968320][ T9893] attempt to access beyond end of device
[  487.968320][ T9893] loop8: rw=0, want=1342177280, limit=16
[  487.999973][ T1108] usb 2-1: Using ep0 maxpacket: 16
[  488.048100][   T26] audit: type=1800 audit(1779081126.715:30): pid=9893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1471" name="file1" dev="loop8" ino=86 res=0 errno=0
[  488.079127][ T9891] EXT4-fs (loop7): re-mounted. Opts: . Quota mode: writeback.
[  488.171774][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short
[  488.577414][ T1108] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  488.707571][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.047133][ T1108] usb 2-1: Product: syz
[  489.051370][ T1108] usb 2-1: Manufacturer: syz
[  489.088600][ T1108] usb 2-1: SerialNumber: syz
[  489.486419][ T1108] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[  489.518288][ T1108] usb 2-1: 1:1 : sample bitwidth 249 in over sample bytes 4
[  489.896878][ T1108] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  490.005873][ T7003] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  490.511373][ T7003] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  490.578001][ T7003] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  490.611264][ T1108] usb 2-1: unit 3 not found!
[  490.631111][ T7003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.665255][ T1108] usb 2-1: USB disconnect, device number 12
[  490.703519][ T7003] usb 9-1: config 0 descriptor??
[  491.404991][ T9910] loop8: detected capacity change from 0 to 512
[  491.490646][ T9910] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled
[  491.529274][ T9910] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  491.634417][ T9353] udevd[9353]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  491.643742][ T9910] EXT4-fs (loop8): 1 orphan inode deleted
[  491.729322][ T9910] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,mblk_io_submit,auto_da_alloc=0x0000000000000002,quota,. Quota mode: writeback.
[  491.784400][ T9910] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  491.934564][ T7003] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  491.980843][ T7003] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0004/input/input21
[  493.170916][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1489'.
[  493.273415][ T7003] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0
[  493.330555][ T9974] loop1: detected capacity change from 0 to 512
[  493.392047][ T7003] usb 9-1: USB disconnect, device number 2
[  494.384334][ T9972] loop7: detected capacity change from 0 to 4096
[  494.402326][ T9974] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=continue,acl,,errors=continue. Quota mode: none.
[  494.673135][ T9972] EXT4-fs (loop7): inline encryption not supported
[  494.757939][ T9972] EXT4-fs (loop7): Test dummy encryption mode enabled
[  495.525312][ T9972] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  495.583789][ T9972] EXT4-fs: failed to create workqueue
[  495.595660][ T9982] fido_id[9982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  495.706406][ T9972] EXT4-fs (loop7): mount failed
[  496.296704][T10009] xt_hashlimit: size too large, truncated to 1048576
[  496.401895][T10005] loop7: detected capacity change from 0 to 4096
[  496.488956][T10005] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  496.546478][T10005] EXT4-fs (loop7): Test dummy encryption mode enabled
[  496.601944][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  496.623323][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  496.634000][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  496.644688][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  496.672869][T10005] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000800,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  499.579991][T10053] loop7: detected capacity change from 0 to 8192
[  499.641996][T10053] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  500.145861][T10072] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1510'.
[  500.187580][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1510'.
[  500.203785][T10072] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1510'.
[  500.247364][T10072] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1510'.
[  504.898300][T10091] loop7: detected capacity change from 0 to 40427
[  504.944321][T10091] F2FS-fs (loop7): invalid crc value
[  504.980657][T10091] F2FS-fs (loop7): Found nat_bits in checkpoint
[  505.144994][T10091] F2FS-fs (loop7): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  505.729275][T10126] loop1: detected capacity change from 0 to 40427
[  505.789841][T10126] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  507.046176][T10160] loop7: detected capacity change from 0 to 256
[  507.127968][T10126] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  507.177352][T10126] F2FS-fs (loop1): invalid crc value
[  507.196116][T10126] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12)
[  507.438194][T10160] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[  507.502197][T10164] loop1: detected capacity change from 0 to 512
[  507.616834][T10164] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  507.717825][T10164] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.1537: corrupted in-inode xattr
[  507.737618][T10164] EXT4-fs (loop1): Remounting filesystem read-only
[  507.744425][T10164] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1537: couldn't read orphan inode 15 (err -117)
[  507.814018][T10164] EXT4-fs (loop1): Remounting filesystem read-only
[  507.820727][T10164] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,data_err=ignore,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,errors=remount-ro,lazytime,init_itable=0x0000000000000004,. Quota mode: none.
[  508.964520][T10180] loop7: detected capacity change from 0 to 256
[  508.968975][T10164] EXT4-fs (loop1): shut down requested (2)
[  509.210787][T10186] loop1: detected capacity change from 0 to 512
[  509.336869][T10186] EXT4-fs (loop1): Unrecognized mount option "fscontext=system_u" or missing value
[  510.534069][T10199] loop1: detected capacity change from 0 to 256
[  510.699298][T10199] exfat: Deprecated parameter 'utf8'
[  510.720500][T10199] exfat: Deprecated parameter 'utf8'
[  510.792254][T10199] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  511.380955][ T1108] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  511.637355][ T1108] usb 9-1: Using ep0 maxpacket: 8
[  511.769401][ T1108] usb 9-1: too many endpoints for config 0 interface 0 altsetting 2: 66, using maximum allowed: 30
[  511.789849][ T1108] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 200, changing to 11
[  511.815995][ T1108] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 66
[  511.848074][ T1108] usb 9-1: config 0 interface 0 has no altsetting 0
[  511.864567][ T1108] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  511.890922][ T1108] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.918604][ T1108] usb 9-1: config 0 descriptor??
[  512.484757][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.502902][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.522388][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.542347][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.569253][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.599143][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.609968][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.633743][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.653143][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.661477][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.691859][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.713516][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.722099][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.741576][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.759350][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.778514][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.802065][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.832073][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  512.853730][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  513.069773][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  513.078160][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  513.087961][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  513.096558][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  513.105169][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  513.113882][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  513.122276][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  514.878389][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  514.887158][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  514.900209][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  514.908918][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  514.917145][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  514.927394][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  514.935838][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  514.945419][ T1108] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0
[  514.958500][ T1108] logitech-djreceiver 0003:046D:C71F.0005: hidraw0: USB HID v0.02 Device [HID 046d:c71f] on usb-dummy_hcd.8-1/input0
[  515.093376][ T1108] usb 9-1: USB disconnect, device number 3
[  515.251876][T10248] fido_id[10248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  515.499242][T10252] loop1: detected capacity change from 0 to 256
[  515.670011][T10252] FAT-fs (loop1): Directory bread(block 64) failed
[  515.698081][T10252] FAT-fs (loop1): Directory bread(block 65) failed
[  515.713468][T10252] FAT-fs (loop1): Directory bread(block 66) failed
[  515.735693][T10252] FAT-fs (loop1): Directory bread(block 67) failed
[  515.762259][T10252] FAT-fs (loop1): Directory bread(block 68) failed
[  515.781977][T10252] FAT-fs (loop1): Directory bread(block 69) failed
[  515.809682][T10254] loop8: detected capacity change from 0 to 1024
[  515.949183][T10252] FAT-fs (loop1): Directory bread(block 70) failed
[  515.961816][T10252] FAT-fs (loop1): Directory bread(block 71) failed
[  515.994052][T10252] FAT-fs (loop1): Directory bread(block 72) failed
[  516.001681][T10252] FAT-fs (loop1): Directory bread(block 73) failed
[  516.022267][T10254] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  516.052114][T10254] EXT4-fs (loop8): invalid journal inode
[  516.073986][T10254] EXT4-fs (loop8): can't get journal size
[  516.120079][T10254] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b800e19c, mo2=0003]
[  516.150091][T10254] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #3: block 17104912: comm syz.8.1565: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  516.252826][T10254] EXT4-fs (loop8): failed to initialize system zone (-117)
[  516.262550][T10254] EXT4-fs (loop8): mount failed
[  516.354131][T10266] loop1: detected capacity change from 0 to 128
[  516.640579][T10266] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  516.714371][T10274] autofs4:pid:10274:autofs_fill_super: called with bogus options
[  517.127816][T10266] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  517.637709][T10266] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x1b)
[  518.002877][T10284] autofs4:pid:10284:autofs_fill_super: called with bogus options
[  518.854962][T10289] loop7: detected capacity change from 0 to 256
[  518.952892][T10289] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  518.989664][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  518.996486][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  519.082558][T10289] loop7: Can't mount, would change RO state
[  519.980101][T10310] loop8: detected capacity change from 0 to 512
[  520.171984][T10310] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  520.184041][T10310] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  520.908659][T10310] EXT4-fs error (device loop8): ext4_readdir:223: inode #12: comm syz.8.1582: path (unknown): directory fails checksum at offset 0
[  521.147093][T10322] loop1: detected capacity change from 0 to 512
[  521.336510][T10322] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1585: inode #1: comm syz.1.1585: iget: illegal inode #
[  521.390452][T10322] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1585: error while reading EA inode 1 err=-117
[  521.487160][T10322] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1585: inode #1: comm syz.1.1585: iget: illegal inode #
[  521.507405][T10322] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1585: error while reading EA inode 1 err=-117
[  521.523473][T10322] EXT4-fs (loop1): 1 orphan inode deleted
[  521.529258][T10322] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  521.564691][ T4233] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  521.708278][T10327] autofs4:pid:10327:autofs_fill_super: called with bogus options
[  523.949333][ T4233] usb 8-1: device descriptor read/all, error -71
[  525.806255][T10367] loop7: detected capacity change from 0 to 512
[  526.409519][T10367] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,errors=continue,acl,,errors=continue. Quota mode: none.
[  526.450270][T10374] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  526.465444][T10374] overlayfs: failed to set xattr on upper
[  526.471739][T10374] overlayfs: ...falling back to index=off,metacopy=off.
[  526.471808][T10367] EXT4-fs (loop7): shut down requested (0)
[  526.628812][T10367] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.1600: error -117 reading directory block
[  527.901276][T10402] loop1: detected capacity change from 0 to 2048
[  528.082145][T10402] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,acl,mb_optimize_scan=0x0000000000000000,journal_dev=0x0000000000000801,quota,noblock_validity,,errors=continue. Quota mode: writeback.
[  528.212501][T10402] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  528.307601][T10402] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1615: bg 0: block 345: padding at end of block bitmap is not set
[  528.394304][T10402] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  528.899585][T10427] loop1: detected capacity change from 0 to 1024
[  528.967379][T10427] EXT4-fs (loop1): Ignoring removed bh option
[  529.064365][T10427] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,user_xattr,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,nojournal_checksum,. Quota mode: none.
[  529.188824][T10408] loop7: detected capacity change from 0 to 40427
[  529.228398][T10427] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  529.311570][T10427] EXT4-fs (loop1): Remounting filesystem read-only
[  529.374025][T10427] EXT4-fs error (device loop1): ext4_ext_tree_init:872: inode #18: comm syz.1.1623: mark_inode_dirty error
[  529.461923][T10427] EXT4-fs (loop1): Remounting filesystem read-only
[  529.490254][T10427] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  529.556122][T10427] EXT4-fs (loop1): Remounting filesystem read-only
[  529.579260][T10427] EXT4-fs error (device loop1): __ext4_new_inode:1356: inode #18: comm syz.1.1623: mark_inode_dirty error
[  530.564577][T10427] EXT4-fs (loop1): Remounting filesystem read-only
[  530.594514][T10427] EXT4-fs error (device loop1) in __ext4_new_inode:1358: Corrupt filesystem
[  530.669014][T10427] EXT4-fs (loop1): Remounting filesystem read-only
[  530.695847][T10427] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  530.733278][T10427] EXT4-fs (loop1): Remounting filesystem read-only
[  530.765581][T10427] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #18: comm syz.1.1623: mark_inode_dirty error
[  530.840091][T10427] EXT4-fs (loop1): Remounting filesystem read-only
[  530.846955][T10427] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  531.626708][T10460] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1628'.
[  532.497740][   T26] audit: type=1326 audit(1779081168.320:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.7.1632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74860f6e59 code=0x7ffc0000
[  532.618315][   T26] audit: type=1326 audit(1779081168.358:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.7.1632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74860f6e59 code=0x7ffc0000
[  532.732948][T10473] loop7: detected capacity change from 0 to 256
[  532.744638][   T26] audit: type=1326 audit(1779081168.358:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.7.1632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f74860f6e59 code=0x7ffc0000
[  532.849200][   T26] audit: type=1326 audit(1779081168.358:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.7.1632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74860f6e59 code=0x7ffc0000
[  533.095923][T10480] autofs4:pid:10480:autofs_fill_super: called with bogus options
[  533.192444][T10473] FAT-fs (loop7): Directory bread(block 64) failed
[  533.254349][T10473] FAT-fs (loop7): Directory bread(block 65) failed
[  533.371635][   T26] audit: type=1326 audit(1779081168.358:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10461 comm="syz.7.1632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74860f6e59 code=0x7ffc0000
[  533.487908][T10473] FAT-fs (loop7): Directory bread(block 66) failed
[  533.668248][T10473] FAT-fs (loop7): Directory bread(block 67) failed
[  533.733262][T10473] FAT-fs (loop7): Directory bread(block 68) failed
[  533.809868][T10473] FAT-fs (loop7): Directory bread(block 69) failed
[  533.875205][T10473] FAT-fs (loop7): Directory bread(block 70) failed
[  533.914833][T10473] FAT-fs (loop7): Directory bread(block 71) failed
[  533.956196][T10473] FAT-fs (loop7): Directory bread(block 72) failed
[  534.010832][T10473] FAT-fs (loop7): Directory bread(block 73) failed
[  534.502596][T10455] loop1: detected capacity change from 0 to 40427
[  535.376648][T10549] loop7: detected capacity change from 0 to 256
[  535.657646][T10556] loop8: detected capacity change from 0 to 4096
[  536.463793][ T4237] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  536.489028][ T4237] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  537.576607][T10558] xt_hashlimit: size too large, truncated to 1048576
[  537.609888][T10556] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled
[  537.619654][T10556] EXT4-fs (loop8): Unrecognized mount option "seclabel" or missing value
[  538.551212][T10560] mmap: syz.6.1656 (10560) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  539.925184][T10559] fido_id[10559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  540.205780][T10579] loop1: detected capacity change from 0 to 256
[  540.339672][T10579] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  540.352685][ T4233] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  540.624131][T10583] overlayfs: failed to get inode (-116)
[  540.639283][ T4233] usb 8-1: Using ep0 maxpacket: 16
[  540.672612][T10583] overlayfs: failed to get inode (-116)
[  540.853479][ T4233] usb 8-1: unable to get BOS descriptor or descriptor too short
[  540.970744][ T4233] usb 8-1: config 7 has an invalid interface number: 164 but max is 0
[  540.982730][ T4233] usb 8-1: config 7 has no interface number 0
[  540.996284][ T4233] usb 8-1: config 7 interface 164 has no altsetting 0
[  541.206060][ T4233] usb 8-1: New USB device found, idVendor=0e8d, idProduct=7102, bcdDevice=93.12
[  541.232607][ T4233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.257772][T10591] loop1: detected capacity change from 0 to 512
[  541.264605][ T4233] usb 8-1: Product: syz
[  541.268787][ T4233] usb 8-1: Manufacturer: syz
[  541.291027][ T4233] usb 8-1: SerialNumber: syz
[  541.373299][T10591] EXT4-fs (loop1): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value
[  541.678041][ T4233] option 8-1:7.164: GSM modem (1-port) converter detected
[  541.748226][ T4233] usb 8-1: USB disconnect, device number 8
[  541.787847][ T4233] option 8-1:7.164: device disconnected
[  541.859966][T10592] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1668'.
[  543.259005][T10609] autofs4:pid:10609:autofs_fill_super: called with bogus options
[  544.238009][T10623] loop8: detected capacity change from 0 to 512
[  544.299390][T10623] EXT4-fs (loop8): Unrecognized mount option "fscontext=system_u" or missing value
[  544.373651][T10628] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1680'.
[  545.450814][T10630] device syzkaller0 entered promiscuous mode
[  546.759075][T10646] loop1: detected capacity change from 0 to 4096
[  546.893538][T10646] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  547.035956][T10646] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  547.146635][T10659] autofs4:pid:10659:autofs_fill_super: called with bogus options
[  547.244237][T10646] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  547.512526][T10646] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  547.899508][T10646] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  547.914457][T10646] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  547.938650][T10646] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  548.016193][T10646] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr.
[  548.044727][T10646] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  548.195878][T10674] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1692'.
[  548.341200][T10646] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  548.532688][T10646] ntfs: volume version 3.1.
[  550.892633][T10707] loop7: detected capacity change from 0 to 512
[  551.010659][T10707] EXT4-fs (loop7): Unrecognized mount option "fscontext=system_u" or missing value
[  551.492595][T10721] autofs4:pid:10721:autofs_fill_super: called with bogus options
[  552.304317][T10722] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1704'.
[  553.304197][T10751] autofs4:pid:10751:autofs_fill_super: called with bogus options
[  556.288602][T10816] loop8: detected capacity change from 0 to 512
[  556.507136][T10816] EXT4-fs (loop8): Unrecognized mount option "fscontext=system_u" or missing value
[  558.933483][T10869] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1743'.
[  559.901353][T10905] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  560.155667][T10913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  560.206805][T10913] device syzkaller0 entered promiscuous mode
[  560.243229][T10913] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  560.387901][T10913] tipc: Resetting bearer <eth:syzkaller0>
[  560.511029][T10912] tipc: Resetting bearer <eth:syzkaller0>
[  561.703954][T10912] tipc: Disabling bearer <eth:syzkaller0>
[  561.791252][ T2289] tipc: Node number set to 1593835567
[  561.909407][T10948] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input22
[  562.096944][T10956] loop1: detected capacity change from 0 to 512
[  562.174481][T10956] EXT4-fs (loop1): Unrecognized mount option "fscontext=system_u" or missing value
[  562.347126][T10964] tipc: Started in network mode
[  562.352659][T10964] tipc: Node identity b69b9ff2a069, cluster identity 4711
[  562.380175][T10963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input23
[  562.393979][T10964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  562.437145][T10971] device syzkaller0 entered promiscuous mode
[  562.509282][T10964] tipc: Resetting bearer <eth:syzkaller0>
[  562.566072][T10961] tipc: Resetting bearer <eth:syzkaller0>
[  562.623410][T10961] tipc: Disabling bearer <eth:syzkaller0>
[  567.356859][T11070] loop1: detected capacity change from 0 to 512
[  567.440232][T11070] EXT4-fs (loop1): Unrecognized mount option "fscontext=system_u" or missing value
[  567.890405][T11046] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.900818][T11046] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.528747][T11046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  569.941812][T11046] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  569.950883][T11046] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  569.960015][T11046] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  569.969906][T11046] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.091627][T11105] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  570.101997][T11105] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  570.111094][T11105] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  570.119966][T11105] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  570.278991][T11113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  570.332581][T11113] device syzkaller0 entered promiscuous mode
[  570.420049][T11109] tipc: Resetting bearer <eth:syzkaller0>
[  571.255270][T11123] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1795'.
[  571.476591][T11109] tipc: Disabling bearer <eth:syzkaller0>
[  571.744985][T11128] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input24
[  571.945248][T11136] loop1: detected capacity change from 0 to 512
[  572.027050][T11136] EXT4-fs (loop1): Unrecognized mount option "fscontext=system_u" or missing value
[  572.752721][T11162] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  572.761865][T11162] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  572.770605][T11162] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  572.779391][T11162] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  572.835546][T11154] kvm [11151]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xffb800002f81
[  572.865973][T11154] kvm [11151]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  572.899867][T11154] kvm [11151]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x4f00
[  572.950093][T11154] kvm [11151]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  572.975055][T11154] kvm [11151]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x8200
[  573.006905][T11154] kvm [11151]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  573.051553][T11154] kvm [11151]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x300004301
[  573.086609][T11154] kvm [11151]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xa00005e09, nop
[  573.127405][T11154] kvm [11151]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x370000fb40
[  573.181358][T11154] kvm [11151]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  573.215094][T11180] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1811'.
[  573.236771][T11180] loop7: detected capacity change from 0 to 64
[  574.106784][T11154] kvm [11151]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x200000a620
[  574.245153][T11188] loop7: detected capacity change from 0 to 512
[  574.468117][T11188] EXT4-fs (loop7): Unrecognized mount option "fscontext=system_u" or missing value
[  575.425339][T11201] syz.8.1818 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  576.519122][T11212] device syzkaller0 entered promiscuous mode
[  576.772759][T11224] overlayfs: missing 'lowerdir'
[  577.775137][T11233] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1827'.
[  578.009709][T11218] loop1: detected capacity change from 0 to 8192
[  578.184405][T11238] loop7: detected capacity change from 0 to 512
[  578.202776][T11218] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  578.384002][T11238] EXT4-fs (loop7): Unrecognized mount option "fscontext=system_u" or missing value
[  579.625136][T11258] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  580.225949][T11266] device syzkaller0 entered promiscuous mode
[  582.507288][ T1108] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  582.550406][ T4237] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  582.764935][ T1108] usb 8-1: Using ep0 maxpacket: 16
[  582.936182][ T1108] usb 8-1: unable to get BOS descriptor or descriptor too short
[  582.945811][ T4237] usb 9-1: config 0 has no interfaces?
[  583.087355][ T4237] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  583.105429][ T4237] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  583.133236][ T4237] usb 9-1: Product: syz
[  583.150022][ T4237] usb 9-1: Manufacturer: syz
[  583.228569][ T1108] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  583.249011][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.259285][ T4237] usb 9-1: config 0 descriptor??
[  583.283948][ T1108] usb 8-1: Product: syz
[  583.300131][ T1108] usb 8-1: Manufacturer: syz
[  583.335525][ T1108] usb 8-1: SerialNumber: syz
[  583.536510][T11294] udc-core: couldn't find an available UDC or it's busy
[  583.550232][T11294] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  583.760986][ T1108] usb 8-1: 1:1 : format type 0 is detected, processed as PCM
[  583.781379][ T1108] usb 8-1: 1:1 : sample bitwidth 249 in over sample bytes 4
[  583.817064][ T1108] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  583.885901][ T1108] usb 8-1: unit 3 not found!
[  584.042111][ T1108] usb 8-1: USB disconnect, device number 9
[  584.557975][T11323] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  584.628159][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  584.786591][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  584.793239][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  585.018333][T11331] overlayfs: missing 'lowerdir'
[  585.231878][T11323] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  585.333274][T11332] device syzkaller0 entered promiscuous mode
[  585.656940][ T1108] usb 9-1: USB disconnect, device number 4
[  586.678939][T11341] loop8: detected capacity change from 0 to 8192
[  586.747294][T11348] loop1: detected capacity change from 0 to 4096
[  587.360577][T11348] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  587.449015][T11348] EXT4-fs (loop1): Test dummy encryption mode enabled
[  587.529670][T11348] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000800,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  587.745269][T11341] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  588.328197][T11368] device syzkaller0 entered promiscuous mode
[  589.036545][ T1356] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  589.271961][T11382] loop7: detected capacity change from 0 to 4096
[  589.382046][T11382] __ntfs_warning: 10 callbacks suppressed
[  589.382088][T11382] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  589.439838][T11382] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  589.452013][T11382] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  589.464252][T11382] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  589.484910][T11382] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  589.496739][T11382] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  589.508746][T11382] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  589.529055][T11382] ntfs: (device loop7): check_mft_mirror(): Failed to read $MFTMirr.
[  589.537308][T11382] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  589.567383][T11382] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  589.589410][T11382] ntfs: volume version 3.1.
[  589.990097][ T1356] usb 9-1: config 0 has no interfaces?
[  590.130774][ T1356] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  590.176944][ T1356] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  590.388606][ T1356] usb 9-1: Product: syz
[  590.479737][ T1356] usb 9-1: Manufacturer: syz
[  590.672670][ T1356] usb 9-1: config 0 descriptor??
[  590.856862][T11396] device syzkaller0 entered promiscuous mode
[  590.921121][T11379] overlayfs: missing 'lowerdir'
[  591.029141][T11375] udc-core: couldn't find an available UDC or it's busy
[  591.045380][T11375] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  591.478815][T11416] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input25
[  591.973573][T11375] loop8: detected capacity change from 0 to 32768
[  592.293555][T11433] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.301280][T11433] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.668323][T11375] loop8: detected capacity change from 0 to 32768
[  592.705696][ T2289] usb 9-1: USB disconnect, device number 5
[  593.077095][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  593.131322][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  594.514688][T11433] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  594.524177][T11433] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  594.533779][T11433] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  594.542952][T11433] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.208274][T11460] loop7: detected capacity change from 0 to 128
[  595.268385][T11460] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  595.346668][T11460] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  595.633884][T11472] overlayfs: missing 'lowerdir'
[  597.380957][T11490] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  597.924454][T11491] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input26
[  601.009628][T11529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input27
[  601.219853][T11534] device syzkaller0 entered promiscuous mode
[  601.257304][T11533] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  601.269092][T11533] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  601.277621][T11533] CPU: 1 PID: 11533 Comm: syz.8.1904 Not tainted syzkaller #0
[  601.285208][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  601.295691][T11533] RIP: 0010:l2cap_unregister_user+0x27/0x1a0
[  601.301799][T11533] Code: 1f 40 00 55 41 57 41 56 41 55 41 54 53 50 48 89 f3 49 89 fe 49 bd 00 00 00 00 00 fc ff df e8 60 a0 95 f8 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 1a bf da f8 41 bf 58 09 00 00 4d
[  601.321519][T11533] RSP: 0018:ffffc900034679b0 EFLAGS: 00010246
[  601.327640][T11533] RAX: 0000000000000000 RBX: ffff8880796e0090 RCX: 0000000000080000
[  601.335744][T11533] RDX: ffffc90015760000 RSI: 00000000000008b5 RDI: 00000000000008b6
[  601.343749][T11533] RBP: 0000000000000000 R08: ffff888029a1802b R09: 1ffff11005343005
[  601.351750][T11533] R10: dffffc0000000000 R11: ffffed1005343006 R12: 1ffff9200068cf6b
[  601.359856][T11533] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[  601.367864][T11533] FS:  00007f1fd23f96c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  601.376907][T11533] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  601.383633][T11533] CR2: 00007f6594ae0dac CR3: 0000000068995000 CR4: 00000000003506e0
[  601.392045][T11533] DR0: 000000000000000d DR1: 0000000000000000 DR2: 0000000000000000
[  601.400056][T11533] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  601.408145][T11533] Call Trace:
[  601.411449][T11533]  <TASK>
[  601.414405][T11533]  hidp_connection_del+0xac/0x160
[  601.419466][T11533]  hidp_sock_ioctl+0x3a7/0x610
[  601.424260][T11533]  ? hidp_sock_release+0x170/0x170
[  601.429412][T11533]  ? rcu_lock_release+0x5/0x20
[  601.434248][T11533]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  601.439848][T11533]  sock_do_ioctl+0xfb/0x320
[  601.444419][T11533]  ? sock_show_fdinfo+0xb0/0xb0
[  601.449403][T11533]  sock_ioctl+0x4d2/0x710
[  601.453805][T11533]  ? sock_poll+0x410/0x410
[  601.458249][T11533]  ? bpf_lsm_file_ioctl+0x5/0x10
[  601.463224][T11533]  ? security_file_ioctl+0x7c/0xa0
[  601.468463][T11533]  ? sock_poll+0x410/0x410
[  601.472911][T11533]  __se_sys_ioctl+0xfa/0x170
[  601.477527][T11533]  do_syscall_64+0x4c/0xa0
[  601.482082][T11533]  ? clear_bhb_loop+0x30/0x80
[  601.487023][T11533]  ? clear_bhb_loop+0x30/0x80
[  601.491800][T11533]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  601.497719][T11533] RIP: 0033:0x7f1fd41c0e59
[  601.502162][T11533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.521907][T11533] RSP: 002b:00007f1fd23f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  601.530430][T11533] RAX: ffffffffffffffda RBX: 00007f1fd443a090 RCX: 00007f1fd41c0e59
[  601.538606][T11533] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000008
[  601.546804][T11533] RBP: 00007f1fd4256d6f R08: 0000000000000000 R09: 0000000000000000
[  601.554893][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  601.562878][T11533] R13: 00007f1fd443a128 R14: 00007f1fd443a090 R15: 00007ffce20f6f38
[  601.570865][T11533]  </TASK>
[  601.573882][T11533] Modules linked in:
[  601.595386][T11533] ---[ end trace e458f0aeaaf26a7b ]---
[  601.601211][T11533] RIP: 0010:l2cap_unregister_user+0x27/0x1a0
[  601.610891][T11533] Code: 1f 40 00 55 41 57 41 56 41 55 41 54 53 50 48 89 f3 49 89 fe 49 bd 00 00 00 00 00 fc ff df e8 60 a0 95 f8 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 1a bf da f8 41 bf 58 09 00 00 4d
[  601.634581][T11533] RSP: 0018:ffffc900034679b0 EFLAGS: 00010246
[  601.641656][T11533] RAX: 0000000000000000 RBX: ffff8880796e0090 RCX: 0000000000080000
[  601.652580][T11533] RDX: ffffc90015760000 RSI: 00000000000008b5 RDI: 00000000000008b6
[  601.660992][T11533] RBP: 0000000000000000 R08: ffff888029a1802b R09: 1ffff11005343005
[  601.688920][T11533] R10: dffffc0000000000 R11: ffffed1005343006 R12: 1ffff9200068cf6b
[  601.702789][T11533] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[  601.713232][T11533] FS:  00007f1fd23f96c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  601.725705][T11533] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  601.751639][T11533] CR2: 0000555558aafa38 CR3: 0000000068995000 CR4: 00000000003506e0
[  601.762011][T11533] DR0: 000000000000000d DR1: 0000000000000000 DR2: 0000000000000000
[  601.780444][T11533] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  601.802105][T11533] Kernel panic - not syncing: Fatal exception
[  601.808854][T11533] Kernel Offset: disabled
[  601.813183][T11533] Rebooting in 86400 seconds..