last executing test programs:

1m7.131797897s ago: executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x101d0)

1m5.575526471s ago: executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x541b, &(0x7f00000002c0)={0x0, 0xa, 0x0, "80194ec5080b2af0a101000000c1c7d37c231e00"})

1m5.417674462s ago: executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = geteuid()
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x400000, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYBLOB="4eb7ba12d330905b06712908bf30df4ccfdbbea3a4d49a7753b192856fcface51b05046a83194da4de6afd784ed3290b2d54d851fb94d8b060e047626ae69c8fddd8aa95dc54eaed81b5c2f959ae681119191ff728ad276a216b58cc78e400c184f741478f322d962db17ce044c8df4f38323fb1f6e7e27bcff0f63adc6509363345b05232921010ce9fc9a65c0f", @ANYRES64=0x0, @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x2b8, &(0x7f00000004c0)="$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")
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
write$evdev(r1, &(0x7f0000000000), 0x100000008)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x80084502, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

57.388783033s ago: executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r1, 0x7, &(0x7f00000006c0))
fcntl$lock(r0, 0x7, &(0x7f00000006c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000080))
fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x2})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
iopl(0x3)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x1f}, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r5, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c)
accept4$inet6(r5, 0x0, 0x0, 0x0)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$yama_ptrace_scope(r7, &(0x7f0000000640)='0\x00', 0x2)

56.943075209s ago: executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x4000000000000f4, 0x20400c0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x4, 0x0}}], 0x1, 0x0, 0x0)

56.635051247s ago: executing program 4:
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)
dup(0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x17, 0x3, [{0x1, 0x11, "c869136de900010000000000000059"}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

56.369996457s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x80}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0xfffe}, 0x90)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f00000003c0), 0x0, 0x53d, &(0x7f0000001980)="$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")

56.295892128s ago: executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
signalfd(0xffffffffffffffff, 0x0, 0x3)

55.070123762s ago: executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="001d3cb440be78938b5fffdc52c6dd2d4271c541f84aa25c2da840c52d7e2c22a02e0926c91b00beef7dbca315276a02a2cfafb25caec3db8604d9df29a5efe1ce989bfc552384"], 0x1, 0xd99, &(0x7f0000000e80)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xa0, 0x2, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xec4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x114}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x37}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008804}, 0x20000006)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
renameat2(r2, &(0x7f0000000280)='./file1\x00', r2, &(0x7f0000000980)='./file0\x00', 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = socket$rds(0x15, 0x5, 0x0)
unshare(0x20000400)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x5, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000000c0)=""/247)

54.60668454s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080009001000000008000500", @ANYRES32=r2], 0x4c}}, 0x0)
r3 = socket(0x9, 0x6, 0x707e8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000288563"], 0xffdd)
write$cgroup_devices(r4, &(0x7f0000000640)=ANY=[], 0xffdd)
getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000140)=""/197, &(0x7f0000000040)=0xc5)

54.183358845s ago: executing program 2:
dup(0xffffffffffffffff)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000100), 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5761, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x3, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, 0x0, 0x4e}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x48, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}, @AF_MPLS={0x4}, @AF_INET6={0x30, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfc}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x68}}, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
getpid()
r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
sendfile(r4, r5, 0x0, 0x7ffff000)

53.562761074s ago: executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
close(0x3)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0)
r2 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000000201005)

53.032371992s ago: executing program 1:
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001808ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @local, 0x0, 0x0, 0x5})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @host, 0x0, 0x0, 0x7})
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34565348}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
socket$alg(0x26, 0x5, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000f28146fdd91ce7a35f5710e58b5c1c33d60880646f42889422ca061913c95aa228d56e9dd48e59faa45f308d47285eeebf1c5eda04c7e409dd8ab37882ec604367229bdc684d01eb21682855ae"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000340)=<r10=>0x0)
syz_io_uring_submit(0x0, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r9, 0x41b, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1002, 0x0, 0x0, 0x40f00, 0x40}, 0x90)

52.586534308s ago: executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = syz_io_uring_setup(0xd19, &(0x7f0000000440)={0x0, 0x2f9, 0x5dd9a748534c128e, 0x2, 0x249}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x6, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102374, 0x19019)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000100)=0x6)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @dev={0xac, 0x14, 0x14, 0x42}}, 0xc)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000076c0)=[{{&(0x7f0000000300)=@caif=@util, 0x80, &(0x7f0000000680)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f00000004c0)=""/22, 0x16}], 0x5}, 0x6}, {{&(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/125, 0x7d}], 0x1, &(0x7f0000000840)=""/181, 0xb5}, 0x2}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/23, 0x17}], 0x3, &(0x7f0000000b80)=""/22, 0x16}, 0x1}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/180, 0xb4}], 0x1, &(0x7f0000000cc0)=""/49, 0x31}, 0x400}, {{&(0x7f0000000d00)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d80)=""/82, 0x52}], 0x1, &(0x7f0000000e40)=""/187, 0xbb}, 0x1}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000f00)=""/228, 0xe4}, {&(0x7f0000001000)=""/53, 0x35}, {&(0x7f0000001040)=""/131, 0x83}, {&(0x7f0000001100)}, {&(0x7f0000001140)=""/149, 0x95}], 0x5, &(0x7f00000022c0)=""/6, 0x6}, 0x5}, {{&(0x7f0000002300)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003900), 0x0, &(0x7f00000039c0)=""/4096, 0x1000}, 0x7fffffff}, {{&(0x7f00000049c0)=@l2tp6, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000004a40)=""/111, 0x6f}, {&(0x7f0000004ac0)=""/130, 0x82}, {&(0x7f0000004b80)=""/147, 0x93}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/93, 0x5d}, {&(0x7f0000005cc0)=""/36, 0x24}, {&(0x7f0000005d00)=""/17, 0x11}, {&(0x7f0000005d40)=""/71, 0x47}, {&(0x7f0000005dc0)=""/14, 0xe}, {&(0x7f0000005e00)=""/134, 0x86}], 0xa}, 0x4}, {{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000005f80)=""/210, 0xd2}, {&(0x7f0000006080)=""/14, 0xe}], 0x2, &(0x7f0000006100)=""/90, 0x5a}, 0x2}, {{&(0x7f0000006180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000007600)=[{&(0x7f0000006200)=""/244, 0xf4}, {&(0x7f0000006300)=""/64, 0x40}, {&(0x7f0000006340)=""/130, 0x82}, {&(0x7f0000006400)=""/4096, 0x1000}, {&(0x7f0000007400)=""/88, 0x58}, {&(0x7f0000007480)=""/160, 0xa0}, {&(0x7f0000007540)=""/91, 0x5b}, {&(0x7f00000075c0)=""/60, 0x3c}], 0x8, &(0x7f0000007680)=""/29, 0x1d}, 0x6}], 0xa, 0x2002, 0x0)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x6000200b})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000000)={0xa0000001})
getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000013772a7100000000000000000b7c00004a1b17fdf846ffc52f74f9cade3620e92da44b8e9dae2782ee36714c04b37282c5b4667e82964eda", @ANYRES8=r10, @ANYRESDEC=r7], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0xc5)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x0, 0x1})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r11, &(0x7f00000003c0)={0x0, 0xffd4, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}}, 0x0)
io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

50.136290514s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x101d0)

48.873036073s ago: executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
r0 = epoll_create(0x6)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f0000000040))

48.793967248s ago: executing program 0:
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x985a, &(0x7f000001c900)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)

48.669198724s ago: executing program 4:
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$eJzs3D1v00Acx/Gf40BIQTyKBzFVQkIsJNBWqrLRhY03gMRQtaGqcKE0LI2QoG+CnZWJl8A7YWVoBzYmDp19AcdJ8cUhcYS/H6mNY9/P/3Pbs32NEgGorEfx90Bn3HNjzLtlSU+fSKqV2jUAM2bc408DoHpChj5QUScbYXz9/xJIX7+/3Tp2X+c87x9ONpJJgp0/HKfyzdMCzzL5oyB+vF0fzi9JOj8Sro/ev3xM8ncz9S/49t/VX8rkG9755Pjv3RnOX5R0SdJlSVckXZV0TYp3e11uQ6r+dqb+rWTzkWc3AAAAAAD4Kzv7bA2e+E76s/mWT8sHY9fa2fPz3ag7fquHWpJ/6NV49ADPuvorBcsP8quZPuVyL7g2XL619SraLtgHoKhaevznGxlA/uNfY/+dFU45/utx/kPBNFBtvcP+i80o6h7MbUGaNGUvlcWLNgcL33Ibf7IL+pG8MjL7n8bgZGrXLPukAtd4br8v5bd5n9OmqYOe8djP3BdeP07u3mZQwl6U0mv60+4wyI7T+tAg+pz6Q4oiE/b2/8Fx2R2a8PeJIizj7ARgltpv9vbbvcP+/d29zZ3uTvfl2nqns762utJpx7fl7akm5wAW2Z+Lftk9AQAAAAAAAAAAAAAARd2QdHPy2Kkf7wEAAABgcU3+xqDGxG8nKvsYAQAAAAAAAAAAAAD43/0KAAD//3hpPUA=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000008100)={0x0, 0x0, &(0x7f00000080c0)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket(0x200000000000011, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)

48.420768153s ago: executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x10000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000a, 0x11012, r0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100001000000000000000000ac1414bb000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000003300000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000004c001400736d44000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000defab2bedfe5b6175bf644ce"], 0x13c}}, 0x0) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100001000000000000000000ac1414bb000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000003300000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000004c001400736d44000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000defab2bedfe5b6175bf644ce"], 0x13c}}, 0x0)
socket$inet(0x2, 0x2, 0x0)
userfaultfd(0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x7441, 0x2}, 0x10, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x108, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESOCT=r4, @ANYRES64], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000) (async)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
unshare(0x20090b80)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x22000, 0x1000, &(0x7f0000000000/0x1000)=nil})

44.015125223s ago: executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
close(0x3)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0)
r2 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000000201005)

43.709168094s ago: executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, &(0x7f0000000140))
mkdir(0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x2008002, &(0x7f0000000f40)=ANY=[@ANYBLOB='fileset=00000000000000021736,adinicb,uid=forget,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',adinicb,gid=ignore,utf8\x00\x00\x00\x00hor=00100000000000000002,\x00'], 0x2, 0xc3c, &(0x7f0000002740)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d11f0000000000000000000000000f00", <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x6, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000340)={"0180000000000000f2e2ad238a7b44a8d886010284ed9208000000affbf514fd", r5, <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{}]})
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r14, @ANYBLOB="14002380060010007f00000000ffffffff000000"], 0x30}}, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)

37.919128783s ago: executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@flushoncommit}, {@nossd_spread}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
sched_setscheduler(0x0, 0x0, 0x0)
getpid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
write(r4, &(0x7f0000000080), 0x0) (async)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x5, @vbi}) (async)
fchmod(r3, 0x504) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800090300000000000000000a000100000000ec060008"], 0x28}}, 0x0)
open(&(0x7f0000000100)='.\x00', 0x591002, 0x0) (async)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0xffff}]}) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{}]})

35.940086416s ago: executing program 3:
dup(0xffffffffffffffff)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000100), 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5761, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x3, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, 0x0, 0x4e}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x48, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}, @AF_MPLS={0x4}, @AF_INET6={0x30, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfc}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x68}}, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
getpid()
r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
sendfile(r4, r5, 0x0, 0x7ffff000)

30.09564995s ago: executing program 3:
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)
dup(0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x17, 0x3, [{0x1, 0x11, "c869136de900010000000000000059"}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

30.028090037s ago: executing program 3:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x141101)
dup(r1)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r3 = getpgrp(0x0)
pwritev(r2, &(0x7f0000000040), 0x0, 0x4000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6}, 0x0)
sched_setscheduler(r3, 0x0, &(0x7f0000000080)=0x6)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))

20.06936136s ago: executing program 1:
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = io_uring_setup(0x3964, &(0x7f0000000500))
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x3, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x2a, 0x0, 0x0, r0, 0x0}])

19.075456955s ago: executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfe, 0x228, &(0x7f00000004c0)="$eJzs28tOE2EUAODTUmliTNy7cSGJLpQW1AgrJcH7/fICBCohFm+4EGKibHwPnkyWblj4Aoxhqta2TC9SOhK+L2nmz5z/zH+mmTMzXTSA46sUUYhCzEdEkiSfP04k5bxLAkYj6WfS+OGtv5sM6trAGUCWsb023M67CmD0dubS/o/tiPj249Pi7898n8/vnbliuv3Sln+z3/zNQro9U2rNvxURt3tmF3aTrUb++bb17wy4/sm2/Lt95zfO/8K51vx7EXE/Ih5ExMOIeBQRjyPiSUQ83Wf9pbb1X7Stk5zusyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/VIjJzp3fk7/j+0xoKsbLlXqtmhk/kcanMqJbp8bT+HRmfiN+OTNeTuOTi2/qS0m5W6FAh2JL/xc74r36f6xH/5e69j+Qp7X1jVcL9Xrt/QEHe7eOYRznYhz0ONeHUUbH4F1EdJ2zOawvcyIihly8wZ9BeYjX/GCDG92vn/9ukPedCThslQ+rbytr6xuXVlYXlmvLtddTs9PVKzMzs9WrlfTNvpL5fu/nNhxxzYd+c9/XX9uzeRUFAAAAAAAAAAzkWUQ8z7sIAABgJEbxd6K8zxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAo+9nAAAA//9zGM9s")
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000030c0)={0x0, ""/256, <r3=>0x0, <r4=>0x0, <r5=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r6=>0x0, <r7=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000f40)=ANY=[@ANYRES64=r3, @ANYRES8, @ANYRES64=r5, @ANYRES64=r4, @ANYRES32, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT=r6, @ANYRES8, @ANYRES64=r7], 0x0, 0x0, &(0x7f0000000000))
r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0)
r9 = dup2(r2, r1)
dup2(r9, r8)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000400, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10040, 0x0)
mkdirat(r10, &(0x7f0000000180)='./bus\x00', 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000c80)=ANY=[@ANYRES16, @ANYRES8, @ANYRES8, @ANYBLOB="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", @ANYRESHEX, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000))
renameat2(r11, &(0x7f0000000380)='./file0\x00', r11, &(0x7f0000000200)='./bus/file0\x00', 0x0)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000020300000200000000000000fe88000032fdd8bd07d0a9000000000000000000000001fc01000000000000000000000000000004000400"/199], 0xc0}}, 0x0)

18.012264118s ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008806, &(0x7f00000003c0), 0x0, 0x5db, &(0x7f0000000bc0)="$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")
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
write$binfmt_script(r0, 0x0, 0xfffffe5d)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_procfs$namespace(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00')
read$FUSE(r1, &(0x7f00000082c0)={0x2020}, 0x1c00)

13.639759657s ago: executing program 0:
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x20, @loopback, 0x6}, 0x1c)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r6, 0x104, 0x4, 0x0, &(0x7f0000000580))
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4)
sendto$inet6(r7, &(0x7f00000000c0)='H', 0xffe4, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001a00)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0)
pwritev(r8, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x7ffff000}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000340)="527369587e0a4e47adce", 0xa}], 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', <r10=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}}, 0x0)

0s ago: executing program 3:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0xb02, 0x0)
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000140)="b1", 0x1}], 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000080))
r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x501880)
ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000180)=""/92)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r6, 0x0, 0x0)
getdents64(r6, &(0x7f0000000f80)=""/4107, 0x100b)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
unshare(0x6020400)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x5f)
read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000002140)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50)
write$FUSE_BMAP(r6, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, r9, {0x9}}, 0x18)
write$smackfs_access(r4, 0x0, 0x34)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
openat$cgroup_ro(r10, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0)
r11 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access\x00', 0x2, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
writev(r12, &(0x7f0000000480)=[{&(0x7f0000000180)="5febd0a274ef68c04bcf8714eaffa77ac14ffc04324d8a3a23bfeadff2179674faf663285879ce4c181a39cdacf74bff553352c4b3b1", 0x36}, {&(0x7f00000000c0)="99", 0x1}], 0x2)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

acity change from 0 to 64
[  101.199040][ T5432] netem: incorrect gi model size
[  101.240361][ T5432] netem: change failed
[  101.369687][ T5437] team0: entered promiscuous mode
[  101.378772][ T5437] team_slave_0: entered promiscuous mode
[  101.534239][ T5437] team_slave_1: entered promiscuous mode
[  101.545348][ T5437] team0: left promiscuous mode
[  101.561244][ T5437] team_slave_0: left promiscuous mode
[  101.586747][ T5437] team_slave_1: left promiscuous mode
[  101.664295][ T5430] loop0: detected capacity change from 0 to 4096
[  101.707126][ T5430] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  102.242501][ T5426] loop0: detected capacity change from 0 to 2048
[  102.291562][ T5270] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  102.347023][ T5447] loop4: detected capacity change from 0 to 512
[  102.407389][ T5447] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  102.455761][ T5447] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  102.563189][ T5447] EXT4-fs (loop4): 1 truncate cleaned up
[  102.591483][ T5447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.793956][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.067959][ T5463] loop3: detected capacity change from 0 to 40427
[  103.111023][ T5463] F2FS-fs (loop3): invalid crc value
[  103.138564][ T5463] F2FS-fs (loop3): Found nat_bits in checkpoint
[  103.213247][ T5463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  104.297616][ T5474] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0
[  104.964143][ T5461] loop1: detected capacity change from 0 to 40427
[  105.007951][ T5461] F2FS-fs (loop1): invalid crc value
[  105.065571][ T5472] loop4: detected capacity change from 0 to 32768
[  105.078772][ T5461] F2FS-fs (loop1): Found nat_bits in checkpoint
[  105.167723][ T5472] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  105.329066][ T5478] loop0: detected capacity change from 0 to 32768
[  105.469529][ T5461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  105.511490][ T5472] XFS (loop4): Ending clean mount
[  105.523572][ T5461] overlayfs: failed to resolve './file0': -2
[  105.820321][ T5105] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  106.548875][ T5112] syz-executor.1: attempt to access beyond end of device
[  106.548875][ T5112] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  106.600945][ T5112] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  106.636815][ T5112] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  106.686712][ T5497] loop3: detected capacity change from 0 to 32768
[  106.799077][ T5497] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  106.994466][ T5497] XFS (loop3): Ending clean mount
[  108.122245][ T5118] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.258195][ T5518] loop2: detected capacity change from 0 to 32768
[  108.323694][ T5518] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5518)
[  108.463883][ T5518] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  108.478443][ T5518] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  108.487285][ T5518] BTRFS info (device loop2): using free-space-tree
[  108.931780][ T5564] loop1: detected capacity change from 0 to 512
[  108.997391][ T5518] serio: Serial port pts0
[  109.002587][ T5564] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.006071][ T5571] loop3: detected capacity change from 0 to 16
[  109.081213][ T5571] erofs: (device loop3): mounted with root inode @ nid 36.
[  109.135062][ T5564] EXT4-fs (loop1): 1 truncate cleaned up
[  109.160429][ T5564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.192551][ T5106] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  109.374764][ T5157] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  109.690375][ T5112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.708357][ T5616] loop0: detected capacity change from 0 to 64
[  111.975324][ T5622] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  112.056167][ T5624] loop2: detected capacity change from 0 to 512
[  112.090687][ T5624] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  112.148930][ T5624] EXT4-fs (loop2): 1 truncate cleaned up
[  112.158755][ T5628] loop0: detected capacity change from 0 to 16
[  112.174449][ T5624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.204132][ T5628] erofs: (device loop0): mounted with root inode @ nid 36.
[  112.283744][ T5593] loop3: detected capacity change from 0 to 32768
[  112.365179][ T5593] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  112.447211][ T5106] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.617904][ T5593] XFS (loop3): Ending clean mount
[  112.719619][ T5643] random: crng reseeded on system resumption
[  112.918749][ T5118] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  113.752490][ T5668] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  113.913272][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  114.032163][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  114.251229][ T5643] loop0: detected capacity change from 0 to 3
[  114.262961][ T5643] syz-executor.0: attempt to access beyond end of device
[  114.262961][ T5643] loop0: rw=2048, sector=0, nr_sectors = 8 limit=3
[  114.484356][ T5680] loop1: detected capacity change from 0 to 16
[  115.095614][ T5680] erofs: (device loop1): mounted with root inode @ nid 36.
[  115.106119][ T5643] SQUASHFS error: Failed to read block 0x0: -5
[  115.132793][ T5643] unable to read squashfs_super_block
[  115.173192][ T5684] loop3: detected capacity change from 0 to 8
[  115.204933][ T5684] SQUASHFS error: lzo decompression failed, data probably corrupt
[  115.218039][ T5684] SQUASHFS error: Failed to read block 0x91: -5
[  115.230360][ T5163] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  115.249748][ T5684] SQUASHFS error: Unable to read metadata cache entry [8f]
[  115.263649][ T5684] SQUASHFS error: Unable to read inode 0x11f
[  115.364859][ T5684] loop3: detected capacity change from 0 to 256
[  115.391107][ T5684] exfat: Deprecated parameter 'utf8'
[  115.401908][ T5691] loop1: detected capacity change from 0 to 64
[  115.413052][ T5690] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  115.425662][ T5684] exfat: Deprecated parameter 'namecase'
[  115.453225][ T5684] exfat: Deprecated parameter 'utf8'
[  115.458732][ T5684] exfat: Deprecated parameter 'namecase'
[  115.466821][ T5163] usb 5-1: Using ep0 maxpacket: 16
[  115.502683][ T5163] usb 5-1: descriptor type invalid, skip
[  115.537205][ T5163] usb 5-1: config 0 has no interfaces?
[  115.576367][ T5163] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.591762][ T5163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.602550][ T5163] usb 5-1: Product: syz
[  115.616748][ T5163] usb 5-1: Manufacturer: syz
[  115.627537][ T5684] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d)
[  115.643547][ T5163] usb 5-1: SerialNumber: syz
[  115.678034][ T5163] usb 5-1: config 0 descriptor??
[  116.012773][ T5697] loop0: detected capacity change from 0 to 256
[  116.100484][ T5163] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  116.339563][ T5163] usb 2-1: Using ep0 maxpacket: 8
[  116.358375][ T5163] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.399306][ T5163] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  116.441045][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.488026][ T5163] usb 2-1: config 0 descriptor??
[  116.558084][ T5163] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  116.622152][ T5163] usb 2-1: No valid video chain found.
[  116.739969][ T5710] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  116.915633][   T58] Bluetooth: hci5: Frame reassembly failed (-84)
[  116.929577][   T58] Bluetooth: hci5: Frame reassembly failed (-84)
[  117.424093][  T783] usb 5-1: USB disconnect, device number 2
[  117.521625][ T5709] loop2: detected capacity change from 0 to 32768
[  117.845234][ T5709] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,background_compression=zstd,str_hash=crc64,nojournal_transaction_names
[  117.864701][ T5709] bcachefs (loop2): recovering from clean shutdown, journal seq 8
[  117.902409][ T5709] bcachefs (loop2): alloc_read... done
[  117.908839][ T5709] bcachefs (loop2): stripes_read... done
[  117.915488][ T5709] bcachefs (loop2): snapshots_read... done
[  117.934391][ T5709] bcachefs (loop2): journal_replay... done
[  117.942819][ T5709] bcachefs (loop2): resume_logged_ops... done
[  117.962317][ T5709] bcachefs (loop2): going read-write
[  118.002812][ T5709] bcachefs (loop2): done starting filesystem
[  118.123158][ T5736] loop0: detected capacity change from 0 to 1764
[  118.195481][ T5736] iso9660: Corrupted directory entry in block 0 of inode 1792
[  118.326321][ T5106] bcachefs (loop2): shutting down
[  118.409374][ T5106] bcachefs (loop2): going read-only
[  118.417191][ T5106] bcachefs (loop2): finished waiting for writes to stop
[  118.457699][ T5106] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10
[  118.541926][ T5106] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11
[  118.592160][ T5106] bcachefs (loop2): shutdown complete, journal seq 12
[  118.642633][ T5106] bcachefs (loop2): marking filesystem clean
[  118.805311][ T5106] bcachefs (loop2): shutdown complete
[  118.969461][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  120.621425][   T46] usb 2-1: USB disconnect, device number 2
[  121.212379][   T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.259481][   T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  121.432498][   T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.479485][   T46] usb 5-1: Using ep0 maxpacket: 8
[  121.487848][   T46] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  121.515519][   T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  121.539784][   T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  121.567827][   T46] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  121.598549][   T46] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  121.632495][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.644479][   T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.839672][   T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.894990][   T46] usb 5-1: GET_CAPABILITIES returned 0
[  121.940661][   T46] usbtmc 5-1:16.0: can't read capabilities
[  122.086293][ T5752] loop3: detected capacity change from 0 to 32768
[  122.123498][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  122.134079][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  122.149713][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  122.171937][ T5752] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5752)
[  122.200091][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  122.214527][   T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  122.228511][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  122.366778][ T5158] usb 5-1: USB disconnect, device number 3
[  122.411639][   T58] bridge_slave_1: left allmulticast mode
[  122.447434][ T5752] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.474469][   T58] bridge_slave_1: left promiscuous mode
[  122.520073][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.529750][ T5752] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  122.599443][ T5752] BTRFS info (device loop3): using free-space-tree
[  122.672580][   T58] bridge_slave_0: left allmulticast mode
[  122.679929][   T58] bridge_slave_0: left promiscuous mode
[  122.687758][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.428946][ T5803] loop4: detected capacity change from 0 to 1024
[  124.137823][ T5118] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.289400][ T5113] Bluetooth: hci3: command tx timeout
[  124.318408][ T5803] EXT4-fs: Ignoring removed orlov option
[  124.328019][ T5803] EXT4-fs (loop4): Test dummy encryption mode enabled
[  124.336518][ T5803] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  124.413339][ T5803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.695240][ T5787] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use)
[  124.754961][ T5820] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.786005][ T5800] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  125.524708][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.574522][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.614844][   T58] bond0 (unregistering): Released all slaves
[  125.804853][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.449464][ T5113] Bluetooth: hci3: command tx timeout
[  127.761066][ T5764] chnl_net:caif_netlink_parms(): no params data found
[  128.043654][ T5856] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  128.272511][ T5831] loop1: detected capacity change from 0 to 40427
[  128.328048][   T58] hsr_slave_0: left promiscuous mode
[  128.346430][ T5868] loop3: detected capacity change from 0 to 128
[  128.356146][   T58] hsr_slave_1: left promiscuous mode
[  128.362017][ T5831] F2FS-fs (loop1): Found nat_bits in checkpoint
[  128.397258][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.419482][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.452782][ T5868] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  128.477062][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.503768][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.527757][ T5868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.536934][ T5113] Bluetooth: hci3: command tx timeout
[  128.662892][ T5838] loop4: detected capacity change from 0 to 32768
[  128.674330][   T58] veth1_macvtap: left promiscuous mode
[  128.720454][   T58] veth0_macvtap: left promiscuous mode
[  128.741266][   T58] veth1_vlan: left promiscuous mode
[  128.756948][   T29] audit: type=1804 audit(1718083650.799:9): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2433295368/syzkaller.e3JGXi/30/file0/control" dev="loop3" ino=125 res=1 errno=0
[  128.796302][   T58] veth0_vlan: left promiscuous mode
[  129.081659][ T5838] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  129.114884][ T5838] bcachefs (loop4): recovering from clean shutdown, journal seq 13
[  129.166083][ T5838] bcachefs (loop4): alloc_read... done
[  129.187956][ T5838] bcachefs (loop4): stripes_read... done
[  129.228762][ T5838] bcachefs (loop4): snapshots_read... done
[  129.277570][ T5838] bcachefs (loop4): journal_replay... done
[  129.288881][ T5838] bcachefs (loop4): resume_logged_ops... done
[  129.297543][ T5838] bcachefs (loop4): going read-write
[  129.316901][ T5838] bcachefs (loop4): bch2_copygc_start(): error creating copygc thread EINTR
[  129.380756][ T5838] bcachefs (loop4): error starting copygc thread
[  129.399491][ T5838] bcachefs (loop4): going read-only
[  129.404800][ T5838] bcachefs (loop4): finished waiting for writes to stop
[  129.444277][ T5838] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13
[  129.485200][ T5838] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13
[  129.540872][ T5838] bcachefs (loop4): shutdown complete, journal seq 14
[  129.605092][ T5838] bcachefs (loop4): marking filesystem clean
[  129.618030][ T5838] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR
[  129.626988][ T5838] bcachefs (loop4): shutting down
[  129.670968][ T5838] bcachefs (loop4): shutdown complete
[  129.824170][ T5889] loop2: detected capacity change from 0 to 4096
[  130.284354][ T5891] loop1: detected capacity change from 0 to 32768
[  130.319016][ T5891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5891)
[  130.373969][ T5891] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.411186][ T5891] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  130.450492][ T5891] BTRFS info (device loop1): using free-space-tree
[  130.616324][   T53] Bluetooth: hci3: command tx timeout
[  130.891286][   T29] audit: type=1804 audit(1718083652.939:10): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3206981694/syzkaller.Zc0DWm/21/file1/bus" dev="loop1" ino=263 res=1 errno=0
[  130.931183][   T58] team0 (unregistering): Port device team_slave_1 removed
[  131.027578][   T58] team0 (unregistering): Port device team_slave_0 removed
[  131.595190][ T5112] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.925581][   T29] audit: type=1400 audit(1718083653.939:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5922 comm="syz-executor.4" dest=20002 netif=wpan0
[  132.171956][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  132.294625][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.337444][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.377774][ T5764] bridge_slave_0: entered allmulticast mode
[  132.397099][ T5764] bridge_slave_0: entered promiscuous mode
[  132.470209][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.477402][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.561959][ T5764] bridge_slave_1: entered allmulticast mode
[  132.583975][ T5764] bridge_slave_1: entered promiscuous mode
[  132.890102][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.973583][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.275601][ T5925] loop4: detected capacity change from 0 to 32768
[  133.292660][ T5764] team0: Port device team_slave_0 added
[  133.304651][ T5925] xfs: Unknown parameter 'mtpt'
[  133.324848][ T5764] team0: Port device team_slave_1 added
[  133.336957][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  133.345932][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  133.610184][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.617196][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.725101][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.768687][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.799372][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.878259][ T5933] loop3: detected capacity change from 0 to 32768
[  133.915201][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.571595][ T5935] loop2: detected capacity change from 0 to 32768
[  134.614544][ T5764] hsr_slave_0: entered promiscuous mode
[  134.657580][ T5935] jfs_mount: dbMount failed w/rc = -22
[  134.679808][ T5764] hsr_slave_1: entered promiscuous mode
[  134.700233][ T5935] Mount JFS Failure: -22
[  134.704640][ T5935] jfs_mount failed w/return code = -22
[  134.774621][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.817993][ T5764] Cannot create hsr debugfs directory
[  135.040856][ T5958] : entered promiscuous mode
[  135.100116][ T5933] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  135.303819][ T5945] loop1: detected capacity change from 0 to 32768
[  135.363426][ T5945] read_mapping_page failed!
[  135.372979][ T5945] ERROR: (device loop1): txCommit: 
[  135.372979][ T5945] 
[  135.460207][ T5945] read_mapping_page failed!
[  135.481566][ T5945] ERROR: (device loop1): txCommit: 
[  135.481566][ T5945] 
[  135.508170][ T5968] find_entry called with index = 0
[  135.526568][ T5968] read_mapping_page failed!
[  135.537260][ T5968] ERROR: (device loop1): txCommit: 
[  135.537260][ T5968] 
[  135.625145][ T5964] loop2: detected capacity change from 0 to 4096
[  135.637814][ T5945] jfs_rmdir: dtDelete returned -2
[  135.662685][   T29] audit: type=1400 audit(1718083657.699:12): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5969 comm="syz-executor.3" dest=20002 netif=wpan0
[  135.685284][ T5964] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  135.904569][ T5112] ERROR: (device loop1): diFree: numfree > numinos
[  135.904569][ T5112] 
[  135.907364][ T5964] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  135.949148][ T5112] ERROR: (device loop1): diFree: numfree > numinos
[  135.949148][ T5112] 
[  136.016096][ T5967] loop4: detected capacity change from 0 to 1024
[  136.075579][ T5964] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB
[  136.128427][ T5975] ntfs3: loop2: ino=22, The size of extended attributes must not exceed 64KiB
[  136.224674][ T5964] ntfs3: loop2: ino=23, The size of extended attributes must not exceed 64KiB
[  136.265647][ T5967] hfsplus: unable to load nls mapping "c"
[  136.284389][ T5967] hfsplus: unable to parse mount options
[  136.302450][ T5975] ntfs3: loop2: ino=24, The size of extended attributes must not exceed 64KiB
[  136.307788][ T5964] ntfs3: loop2: ino=25, The size of extended attributes must not exceed 64KiB
[  136.400519][ T5975] ntfs3: loop2: ino=26, The size of extended attributes must not exceed 64KiB
[  136.443077][ T5964] ntfs3: loop2: ino=27, The size of extended attributes must not exceed 64KiB
[  136.490636][ T5975] ntfs3: loop2: ino=0, ntfs_iget5
[  136.705948][ T5983] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.751933][   T29] audit: type=1800 audit(1718083658.799:13): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1950 res=0 errno=0
[  137.069988][ T5967] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET)
[  137.453153][ T5973] loop3: detected capacity change from 0 to 32768
[  137.872455][ T5973] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names
[  137.924633][ T5973] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  137.986933][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  138.029024][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  138.031848][ T5973] bcachefs (loop3): alloc_read... done
[  138.054204][ T5973] bcachefs (loop3): stripes_read... done
[  138.067217][ T5973] bcachefs (loop3): snapshots_read... done
[  138.111911][ T5973] bcachefs (loop3): journal_replay... done
[  138.122800][ T5973] bcachefs (loop3): resume_logged_ops... done
[  138.131824][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  138.147511][ T5973] bcachefs (loop3): going read-write
[  138.187109][ T5973] bcachefs (loop3): done starting filesystem
[  138.200045][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  138.630197][ T5973] mkiss: ax0: crc mode is auto.
[  138.713029][ T6022] loop2: detected capacity change from 0 to 64
[  138.773796][ T6025] loop1: detected capacity change from 0 to 64
[  139.100607][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.173919][ T5118] bcachefs (loop3): shutting down
[  139.189859][ T5118] bcachefs (loop3): going read-only
[  139.202606][ T5118] bcachefs (loop3): finished waiting for writes to stop
[  139.249628][ T5118] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11
[  139.256369][ T5764] 8021q: adding VLAN 0 to HW filter on device team0
[  139.316993][ T5118] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13
[  139.318246][   T29] audit: type=1400 audit(1718083661.359:14): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6034 comm="syz-executor.4" dest=20002 netif=wpan0
[  139.357418][ T5118] bcachefs (loop3): shutdown complete, journal seq 14
[  139.372232][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.374257][ T5118] bcachefs (loop3): marking filesystem clean
[  139.380288][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.402438][   T58] Bluetooth: hci5: Frame reassembly failed (-84)
[  139.560539][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.567699][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.611083][ T5118] bcachefs (loop3): shutdown complete
[  139.757415][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.063341][ T6049] loop4: detected capacity change from 0 to 64
[  140.316161][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.396604][ T5120] Bluetooth: hci6: sending frame failed (-49)
[  140.406408][ T5113] Bluetooth: hci6: Opcode 0x1003 failed: -49
[  140.662574][ T5764] veth0_vlan: entered promiscuous mode
[  140.754133][ T5764] veth1_vlan: entered promiscuous mode
[  140.891488][ T5764] veth0_macvtap: entered promiscuous mode
[  140.963025][ T5764] veth1_macvtap: entered promiscuous mode
[  140.984598][ T6032] loop2: detected capacity change from 0 to 32768
[  141.050737][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.099378][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.126952][ T6032] jfs_mount: dbMount failed w/rc = -22
[  141.133700][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.163590][ T6032] Mount JFS Failure: -22
[  141.168469][ T6032] jfs_mount failed w/return code = -22
[  141.212311][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.263583][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.308539][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.342688][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.379248][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.409504][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  141.475145][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.570710][ T6060] openvswitch: : Dropping previously announced user features
[  141.586455][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.639516][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.652343][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.669062][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.699281][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.711350][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.750985][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.770799][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.817094][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.849316][ T5191] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  141.858395][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.903451][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.075991][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.084991][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.216429][ T5191] usb 4-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa
[  142.236994][ T5191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.266041][ T5191] usb 4-1: Product: syz
[  142.276819][ T5191] usb 4-1: Manufacturer: syz
[  142.288456][ T5191] usb 4-1: SerialNumber: syz
[  142.303468][ T5191] usb 4-1: config 0 descriptor??
[  142.316184][ T5191] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state.
[  142.336040][ T5191] dvb-usb: bulk message failed: -22 (3/0)
[  142.394073][ T5191] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  142.411033][ T5191] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle)
[  142.422970][ T5191] usb 4-1: media controller created
[  142.440448][ T5191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  142.483896][ T6080] loop1: detected capacity change from 0 to 512
[  142.507222][ T5191] dvb-usb: bulk message failed: -22 (6/0)
[  142.525112][ T5191] dvb-usb: bulk message failed: -22 (6/0)
[  142.540455][ T5191] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle'
[  142.574063][ T6080] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent
[  142.645935][ T5191] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[  142.714286][ T5191] dvb-usb: schedule remote query interval to 150 msecs.
[  142.725983][ T5191] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected.
[  142.900272][ T5191] dvb-usb: bulk message failed: -22 (1/0)
[  142.909630][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.917515][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.939431][ T5191] dvb-usb: error while querying for an remote control event.
[  142.961774][ T5159] usb 4-1: USB disconnect, device number 2
[  142.989404][ T5156] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  143.058378][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.095337][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.126128][ T6080] loop1: detected capacity change from 0 to 512
[  143.261563][ T6080] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent
[  143.341553][ T5159] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected.
[  143.909081][ T6101] loop3: detected capacity change from 0 to 256
[  143.952123][ T6081] loop2: detected capacity change from 0 to 32768
[  144.013819][ T6081] jfs: Unrecognized mount option "noquota®" or missing value
[  144.391681][ T6101] FAT-fs (loop3): Directory bread(block 64) failed
[  144.426091][ T6101] FAT-fs (loop3): Directory bread(block 65) failed
[  144.453227][ T6101] FAT-fs (loop3): Directory bread(block 66) failed
[  144.479841][ T6101] FAT-fs (loop3): Directory bread(block 67) failed
[  144.492874][ T6095] loop0: detected capacity change from 0 to 8192
[  144.505735][ T6101] FAT-fs (loop3): Directory bread(block 68) failed
[  144.528539][ T6101] FAT-fs (loop3): Directory bread(block 69) failed
[  144.569687][ T6101] FAT-fs (loop3): Directory bread(block 70) failed
[  144.600760][ T6101] FAT-fs (loop3): Directory bread(block 71) failed
[  144.633597][ T6101] FAT-fs (loop3): Directory bread(block 72) failed
[  144.656868][ T6101] FAT-fs (loop3): Directory bread(block 73) failed
[  144.686602][ T6095]  loop0: AHDI p1 p2 p3
[  144.714847][ T6095] loop0: p1 size 16776960 extends beyond EOD, truncated
[  144.759306][   T29] audit: type=1800 audit(1718083666.799:15): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1967 res=0 errno=0
[  144.830120][ T6095] loop0: p3 start 12220416 is beyond EOD, truncated
[  144.963771][   T29] audit: type=1400 audit(1718083667.009:16): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6120 comm="syz-executor.1" dest=20002 netif=wpan0
[  145.030651][ T6125] loop2: detected capacity change from 0 to 64
[  145.198672][ T6128] loop1: detected capacity change from 0 to 64
[  145.327961][ T6130] Bluetooth: MGMT ver 1.22
[  145.357768][ T6130] loop4: detected capacity change from 0 to 128
[  145.396041][ T6130] FAT-fs (loop4): Unrecognized mount option "no" or missing value
[  145.624815][ T5113] Bluetooth: hci5: sending frame failed (-49)
[  145.633232][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  146.286365][ T6151] loop4: detected capacity change from 0 to 256
[  146.597683][ T6160] loop1: detected capacity change from 0 to 1024
[  146.672280][ T6159] loop2: detected capacity change from 0 to 512
[  146.693052][ T6160] EXT4-fs: Ignoring removed nomblk_io_submit option
[  146.743522][ T6159] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent
[  146.757332][ T6160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  146.795052][ T6160] EXT4-fs (loop1): Test dummy encryption mode enabled
[  146.909710][ T6160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.112514][ T5112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.225246][ T6175] loop0: detected capacity change from 0 to 256
[  147.296140][ T6175] FAT-fs (loop0): bogus logical sector size 0
[  147.359104][ T6175] FAT-fs (loop0): Can't find a valid FAT filesystem
[  147.461422][ T6182] loop1: detected capacity change from 0 to 256
[  147.664211][ T6185] loop2: detected capacity change from 0 to 512
[  147.739579][ T6185] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  147.834566][   T29] audit: type=1400 audit(1718083669.879:17): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6194 comm="syz-executor.4" dest=20002 netif=wpan0
[  147.852914][ T6185] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  147.940820][ T6185] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  147.988193][ T6185] EXT4-fs (loop2): 1 truncate cleaned up
[  148.021782][ T6185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.149405][ T5191] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  148.260805][ T6205] loop1: detected capacity change from 0 to 64
[  148.413175][ T5191] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  148.457288][ T5191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.499373][ T5191] usb 1-1: Product: syz
[  148.516831][ T5191] usb 1-1: Manufacturer: syz
[  148.540534][ T5191] usb 1-1: SerialNumber: syz
[  148.633223][ T5191] usb 1-1: config 0 descriptor??
[  148.815358][ T5106] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor.2: path /root/syzkaller-testdir3103939827/syzkaller.iHf8gi/42/bus/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  148.900472][   T12] Bluetooth: hci5: Frame reassembly failed (-84)
[  148.946204][ T5191] usb-storage 1-1:0.0: USB Mass Storage device detected
[  149.124904][ T5191] usb 1-1: USB disconnect, device number 2
[  149.424992][ T6228] loop4: detected capacity change from 0 to 256
[  149.483606][ T5106] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.559339][ T5106] syz-executor.2 (5106) used greatest stack depth: 18640 bytes left
[  149.608271][ T6228] FAT-fs (loop4): Directory bread(block 64) failed
[  149.650322][ T6228] FAT-fs (loop4): Directory bread(block 65) failed
[  149.676081][ T6228] FAT-fs (loop4): Directory bread(block 66) failed
[  149.713926][ T6233] loop0: detected capacity change from 0 to 256
[  149.724693][ T6228] FAT-fs (loop4): Directory bread(block 67) failed
[  149.752658][ T6228] FAT-fs (loop4): Directory bread(block 68) failed
[  149.804032][ T6228] FAT-fs (loop4): Directory bread(block 69) failed
[  149.813996][ T6233] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1f48c929, utbl_chksum : 0xe619d30d)
[  149.848561][ T6228] FAT-fs (loop4): Directory bread(block 70) failed
[  149.892296][ T6228] FAT-fs (loop4): Directory bread(block 71) failed
[  149.935425][  T956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.948193][ T6228] FAT-fs (loop4): Directory bread(block 72) failed
[  149.986669][ T6228] FAT-fs (loop4): Directory bread(block 73) failed
[  150.721744][ T6236] loop3: detected capacity change from 0 to 256
[  150.914502][  T956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.936313][ T5113] Bluetooth: hci5: command 0x1003 tx timeout
[  150.944015][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  151.412062][  T956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.684840][  T956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.719851][ T6258] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
[  151.975356][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.986184][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.996233][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.021162][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.031846][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  152.056590][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  152.306084][ T6273] loop4: detected capacity change from 0 to 1024
[  152.583261][  T956] bridge_slave_1: left allmulticast mode
[  152.588986][  T956] bridge_slave_1: left promiscuous mode
[  152.599494][  T956] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.630113][  T956] bridge_slave_0: left allmulticast mode
[  152.635846][  T956] bridge_slave_0: left promiscuous mode
[  152.669735][  T956] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.889705][   T46] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  153.108427][   T46] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  153.129327][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.206632][   T46] usb 2-1: config 0 descriptor??
[  153.918626][  T956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.942810][  T956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.968191][  T956] bond0 (unregistering): Released all slaves
[  154.086239][ T6301] loop0: detected capacity change from 0 to 256
[  154.138640][ T5113] Bluetooth: hci1: command tx timeout
[  154.221704][ T6301] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  154.247082][   T46] pegasus 2-1:0.0: probe with driver pegasus failed with error -71
[  154.261990][   T46] usb 2-1: USB disconnect, device number 3
[  154.303663][  T956] : left promiscuous mode
[  154.610371][ T5158] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  154.819287][ T5158] usb 1-1: Using ep0 maxpacket: 16
[  154.854347][ T5158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.058579][ T5158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.069135][ T5158] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  155.078410][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.109983][ T5158] usb 1-1: config 0 descriptor??
[  155.216809][ T6318] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  155.226141][ T6318] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.1'.
[  155.239826][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  155.286452][ T6318] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
[  156.130704][ T6329] loop1: detected capacity change from 0 to 64
[  156.207494][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  156.219035][ T5113] Bluetooth: hci1: command tx timeout
[  156.445241][ T6267] chnl_net:caif_netlink_parms(): no params data found
[  156.752158][  T956] hsr_slave_0: left promiscuous mode
[  156.782214][  T956] hsr_slave_1: left promiscuous mode
[  156.820022][  T956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.844028][  T956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.896809][  T956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.938089][  T956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.950904][ T5158] usbhid 1-1:0.0: can't add hid device: -71
[  156.975863][ T5158] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  157.070379][ T5158] usb 1-1: USB disconnect, device number 3
[  157.131535][  T956] veth1_macvtap: left promiscuous mode
[  157.137577][  T956] veth0_macvtap: left promiscuous mode
[  157.147755][  T956] veth1_vlan: left promiscuous mode
[  157.153434][  T956] veth0_vlan: left promiscuous mode
[  157.683281][ T6350] loop1: detected capacity change from 0 to 40427
[  157.733501][ T6350] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  157.741648][ T6350] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  157.788415][ T6350] F2FS-fs (loop1): Found nat_bits in checkpoint
[  157.876943][ T6350] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  157.884174][ T6350] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  158.291787][ T5113] Bluetooth: hci1: command tx timeout
[  158.326018][ T6337] loop4: detected capacity change from 0 to 32768
[  158.538612][   T29] audit: type=1800 audit(1718083680.579:18): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1962 res=0 errno=0
[  158.697728][ T6337] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,background_compression=zstd,str_hash=crc64,nojournal_transaction_names
[  158.715651][ T6337] bcachefs (loop4): recovering from clean shutdown, journal seq 8
[  158.812436][ T6337] bcachefs (loop4): alloc_read... done
[  158.818034][ T6337] bcachefs (loop4): stripes_read... done
[  158.844369][ T6337] bcachefs (loop4): snapshots_read... done
[  158.862997][ T6337] bcachefs (loop4): journal_replay... done
[  158.869027][ T6337] bcachefs (loop4): resume_logged_ops... done
[  158.877995][ T6337] bcachefs (loop4): going read-write
[  158.910791][ T6337] bcachefs (loop4): done starting filesystem
[  159.109627][ T5159] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  159.196126][ T6337] syz-executor.4 (6337) used greatest stack depth: 15544 bytes left
[  159.275060][ T5105] bcachefs (loop4): shutting down
[  159.280718][ T5105] bcachefs (loop4): going read-only
[  159.286329][ T5105] bcachefs (loop4): finished waiting for writes to stop
[  159.298804][ T5105] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  159.314425][ T5159] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  159.337815][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.366524][ T5159] usb 4-1: config 0 descriptor??
[  159.485552][ T5105] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15
[  159.505801][ T5105] bcachefs (loop4): shutdown complete, journal seq 16
[  159.526746][ T5105] bcachefs (loop4): marking filesystem clean
[  159.635008][ T5105] bcachefs (loop4): shutdown complete
[  159.776334][  T956] team0 (unregistering): Port device team_slave_1 removed
[  159.863077][  T956] team0 (unregistering): Port device team_slave_0 removed
[  160.409387][ T5113] Bluetooth: hci1: command tx timeout
[  160.431109][ T5159] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[  160.476820][ T5159] usb 4-1: USB disconnect, device number 3
[  160.704984][ T6377] loop4: detected capacity change from 0 to 40427
[  160.728328][ T6377] F2FS-fs (loop4): invalid crc value
[  160.757741][ T6377] F2FS-fs (loop4): Found nat_bits in checkpoint
[  160.817026][ T6377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  161.089855][ T6347] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  162.094782][ T6390] nft_compat: unsupported protocol 0
[  162.112086][ T6390] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'.
[  162.412862][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  162.436583][ T6396] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  162.581080][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.620450][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.627768][ T6267] bridge_slave_0: entered allmulticast mode
[  162.681573][ T6267] bridge_slave_0: entered promiscuous mode
[  162.778364][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.785213][ T6413] loop0: detected capacity change from 0 to 64
[  162.809388][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.849791][ T6267] bridge_slave_1: entered allmulticast mode
[  162.872033][ T6267] bridge_slave_1: entered promiscuous mode
[  163.130694][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.236543][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.287708][ T1058] Bluetooth: hci5: Frame reassembly failed (-84)
[  163.534794][ T6425] loop4: detected capacity change from 0 to 256
[  163.619455][ T6267] team0: Port device team_slave_0 added
[  163.624506][ T6425] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  163.708513][ T6267] team0: Port device team_slave_1 added
[  163.973565][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.005461][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.012631][   T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  164.053975][ T6396] loop1: detected capacity change from 0 to 32768
[  164.163345][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.247188][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.261847][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.288870][   T25] usb 5-1: Using ep0 maxpacket: 16
[  164.301055][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.312561][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.328432][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.366361][   T25] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  164.402370][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.429903][   T25] usb 5-1: config 0 descriptor??
[  164.572769][ T6267] hsr_slave_0: entered promiscuous mode
[  164.604266][ T6267] hsr_slave_1: entered promiscuous mode
[  165.331554][   T53] Bluetooth: hci5: command 0x1003 tx timeout
[  165.331582][ T5113] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  166.012205][   T51] Bluetooth: hci5: Frame reassembly failed (-84)
[  166.296044][   T25] usbhid 5-1:0.0: can't add hid device: -71
[  166.340029][   T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  166.387617][   T25] usb 5-1: USB disconnect, device number 4
[  166.670520][ T5191] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  166.893339][ T5191] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  166.929421][ T5191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.123595][ T5191] usb 1-1: config 0 descriptor??
[  167.523864][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  167.534265][  T956] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.554339][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  167.564360][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  167.573993][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  167.584031][ T5120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  167.595743][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  167.746995][  T956] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.885610][ T6466] loop4: detected capacity change from 0 to 512
[  167.946405][ T6466] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.4: invalid block
[  167.987607][ T6466] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1)
[  168.033661][  T956] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.055057][ T5120] Bluetooth: hci5: command 0xfc11 tx timeout
[  168.067817][ T5113] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  168.101518][ T6466] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1)
[  168.158053][ T6466] EXT4-fs (loop4): 2 truncates cleaned up
[  168.196668][ T6466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.210518][ T5191] pegasus 1-1:0.0: probe with driver pegasus failed with error -71
[  168.239474][ T5191] usb 1-1: USB disconnect, device number 4
[  168.265425][  T956] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.499673][   T29] audit: type=1804 audit(1718083690.539:19): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2433295368/syzkaller.e3JGXi/54/file0" dev="sda1" ino=1955 res=1 errno=0
[  168.575216][ T6480] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 5: invalid block bitmap
[  168.720270][ T6477] loop3: detected capacity change from 0 to 4096
[  168.761426][ T6477] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  168.826918][ T5105] EXT4-fs error (device loop4): ext4_lookup:1854: inode #17: comm syz-executor.4: iget: bad extended attribute block 6904
[  168.859068][ T5105] EXT4-fs error (device loop4): ext4_lookup:1854: inode #17: comm syz-executor.4: iget: bad extended attribute block 6904
[  169.121539][ T6476] loop3: detected capacity change from 0 to 8
[  169.143909][ T6476] squashfs: Unknown parameter ''
[  169.272707][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.286144][ T6476] loop3: detected capacity change from 0 to 2048
[  169.303799][ T6267] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  169.364243][ T6267] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  169.390137][ T5105] syz-executor.4 (5105) used greatest stack depth: 12792 bytes left
[  169.498882][ T6267] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  169.645183][  T956] bridge_slave_1: left allmulticast mode
[  169.652615][ T5120] Bluetooth: hci2: command tx timeout
[  169.669513][  T956] bridge_slave_1: left promiscuous mode
[  169.679106][  T956] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.741864][  T956] bridge_slave_0: left allmulticast mode
[  169.788068][  T956] bridge_slave_0: left promiscuous mode
[  169.805999][  T956] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.098704][ T6497] hub 9-0:1.0: USB hub found
[  170.103872][ T6497] hub 9-0:1.0: 8 ports detected
[  170.594979][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  170.598944][ T6499] loop0: detected capacity change from 0 to 32768
[  170.614119][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  170.644991][ T6499] bcachefs (/dev/loop0): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81)
[  170.659380][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  170.730364][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  170.738454][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  170.747758][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  170.883106][ T6499] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  170.898856][ T6499] bcachefs (loop0): recovering from clean shutdown, journal seq 13
[  170.943663][ T6499] bcachefs (loop0): alloc_read... done
[  170.950453][ T6499] bcachefs (loop0): stripes_read... done
[  170.956667][ T6499] bcachefs (loop0): snapshots_read... done
[  170.967883][ T6499] bcachefs (loop0): journal_replay... done
[  170.973938][ T6499] bcachefs (loop0): resume_logged_ops... done
[  170.980649][ T6499] bcachefs (loop0): going read-write
[  170.989687][ T6499] bcachefs (loop0): done starting filesystem
[  171.116725][  T956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.144582][  T956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.169569][  T956] bond0 (unregistering): Released all slaves
[  171.201438][ T6267] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  171.252697][   T29] audit: type=1800 audit(1718083693.299:20): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1073741828 res=0 errno=0
[  171.375233][ T6507] syz_tun: entered promiscuous mode
[  171.423385][ T6507] syz_tun: left promiscuous mode
[  171.424600][ T5764] bcachefs (loop0): shutting down
[  171.437222][ T5764] bcachefs (loop0): going read-only
[  171.442674][ T5764] bcachefs (loop0): finished waiting for writes to stop
[  171.460628][ T5764] bcachefs (loop0): flushing journal and stopping allocators, journal seq 17
[  171.481423][ T5764] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 19
[  171.508628][ T5764] bcachefs (loop0): shutdown complete, journal seq 20
[  171.527596][ T5764] bcachefs (loop0): marking filesystem clean
[  171.570777][ T6459] chnl_net:caif_netlink_parms(): no params data found
[  171.604795][ T5764] bcachefs (loop0): shutdown complete
[  171.731341][ T5120] Bluetooth: hci2: command tx timeout
[  172.003182][ T6516] loop3: detected capacity change from 0 to 40427
[  172.061309][ T6516] F2FS-fs (loop3): invalid crc value
[  172.093132][ T6516] F2FS-fs (loop3): Found nat_bits in checkpoint
[  172.158059][ T6516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  172.256531][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.283265][ T6267] 8021q: adding VLAN 0 to HW filter on device team0
[  172.332376][  T956] hsr_slave_0: left promiscuous mode
[  172.378692][  T956] hsr_slave_1: left promiscuous mode
[  172.390742][  T956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.419388][  T956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.441577][  T956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.451974][  T956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.484816][  T956] veth1_macvtap: left promiscuous mode
[  172.491514][  T956] veth0_macvtap: left promiscuous mode
[  172.497465][  T956] veth1_vlan: left promiscuous mode
[  172.503593][  T956] veth0_vlan: left promiscuous mode
[  172.910749][ T5120] Bluetooth: hci0: command tx timeout
[  173.673862][ T6529] loop0: detected capacity change from 0 to 4096
[  173.689821][ T6529] ntfs3: Unknown parameter 'GPL'
[  173.744289][ T5270] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  173.814960][ T5120] Bluetooth: hci2: command tx timeout
[  174.008728][  T956] team0 (unregistering): Port device team_slave_1 removed
[  174.063459][  T956] team0 (unregistering): Port device team_slave_0 removed
[  174.228935][ T6530] loop0: detected capacity change from 0 to 32768
[  174.353624][ T6530] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names
[  174.369863][ T6530] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  174.421454][ T6530] bcachefs (loop0): alloc_read... done
[  174.427071][ T6530] bcachefs (loop0): stripes_read... done
[  174.432945][ T6530] bcachefs (loop0): snapshots_read... done
[  174.441860][ T6530] bcachefs (loop0): journal_replay... done
[  174.447909][ T6530] bcachefs (loop0): resume_logged_ops... done
[  174.459662][ T6530] bcachefs (loop0): going read-write
[  174.478900][ T6530] bcachefs (loop0): done starting filesystem
[  174.813960][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.821296][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.884798][ T6529] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  174.964332][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.969380][ T5113] Bluetooth: hci0: command tx timeout
[  174.976298][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.984420][ T5764] bcachefs (loop0): shutting down
[  174.985902][ T6459] bridge_slave_0: entered allmulticast mode
[  174.995848][ T5764] bcachefs (loop0): going read-only
[  174.997340][ T6459] bridge_slave_0: entered promiscuous mode
[  175.017499][ T5764] bcachefs (loop0): finished waiting for writes to stop
[  175.027032][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.034865][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.042971][ T6459] bridge_slave_1: entered allmulticast mode
[  175.051002][ T6459] bridge_slave_1: entered promiscuous mode
[  175.071171][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.078413][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.088269][ T5764] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13
[  175.163783][ T5764] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 16
[  175.203062][ T5764] bcachefs (loop0): shutdown complete, journal seq 17
[  175.234460][ T5764] bcachefs (loop0): marking filesystem clean
[  175.265042][ T6459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.288861][ T5764] bcachefs (loop0): shutdown complete
[  175.293784][ T6459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.577010][ T6459] team0: Port device team_slave_0 added
[  175.651518][ T6500] chnl_net:caif_netlink_parms(): no params data found
[  175.679107][ T6459] team0: Port device team_slave_1 added
[  175.789681][   T46] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  175.889427][   T53] Bluetooth: hci2: command tx timeout
[  175.972099][  T956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.991308][   T46] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  176.005017][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.022308][   T46] usb 4-1: config 0 descriptor??
[  176.105262][  T956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.151692][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.158904][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.184945][    C0] vkms_vblank_simulate: vblank timer overrun
[  176.196028][ T6459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.417235][  T956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.446378][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.460076][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.486235][ T6459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.524288][  T956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.081790][   T53] Bluetooth: hci0: command tx timeout
[  177.303666][   T46] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[  177.389542][   T46] usb 4-1: USB disconnect, device number 4
[  177.452167][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.474032][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.499466][ T6500] bridge_slave_0: entered allmulticast mode
[  177.506997][ T6500] bridge_slave_0: entered promiscuous mode
[  177.533828][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.547322][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.561152][ T6500] bridge_slave_1: entered allmulticast mode
[  177.568864][ T6500] bridge_slave_1: entered promiscuous mode
[  177.684847][ T6563] loop0: detected capacity change from 0 to 8192
[  177.795629][ T6459] hsr_slave_0: entered promiscuous mode
[  177.841355][ T6459] hsr_slave_1: entered promiscuous mode
[  177.872713][ T6459] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.904767][ T6459] Cannot create hsr debugfs directory
[  177.959909][ T6572] dccp_close: ABORT with 1 bytes unread
[  178.025761][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.075192][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.326982][  T956] bridge_slave_1: left allmulticast mode
[  178.336076][  T956] bridge_slave_1: left promiscuous mode
[  178.347661][  T956] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.371742][  T956] bridge_slave_0: left allmulticast mode
[  178.377657][  T956] bridge_slave_0: left promiscuous mode
[  178.385455][  T956] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.029622][  T956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.045146][  T956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.056723][  T956] bond0 (unregistering): Released all slaves
[  179.086370][ T6500] team0: Port device team_slave_0 added
[  179.093262][   T53] Bluetooth: hci0: command tx timeout
[  179.117349][ T6500] team0: Port device team_slave_1 added
[  179.154175][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.559852][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.566862][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.679523][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.722072][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.729066][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.776715][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.151470][ T6588] loop3: detected capacity change from 0 to 32768
[  180.206799][ T6588] bcachefs (/dev/loop3): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81)
[  180.398276][  T956] hsr_slave_0: left promiscuous mode
[  180.435106][  T956] hsr_slave_1: left promiscuous mode
[  180.460441][  T956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.467919][  T956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.505894][  T956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.519328][  T956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.520425][ T6588] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  180.549793][ T6588] bcachefs (loop3): recovering from clean shutdown, journal seq 13
[  180.588711][  T956] veth1_macvtap: left promiscuous mode
[  180.613778][  T956] veth0_macvtap: left promiscuous mode
[  180.630843][  T956] veth1_vlan: left promiscuous mode
[  180.651859][  T956] veth0_vlan: left promiscuous mode
[  180.661197][ T6588] bcachefs (loop3): alloc_read... done
[  180.666803][ T6588] bcachefs (loop3): stripes_read... done
[  180.683009][ T6588] bcachefs (loop3): snapshots_read... done
[  180.702167][ T6588] bcachefs (loop3): journal_replay... done
[  180.729431][ T6588] bcachefs (loop3): resume_logged_ops... done
[  180.737221][ T6588] bcachefs (loop3): going read-write
[  180.790107][ T6588] bcachefs (loop3): done starting filesystem
[  180.795184][ T6609] loop0: detected capacity change from 0 to 32768
[  181.073687][ T6609] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names
[  181.157874][   T29] audit: type=1800 audit(1718083703.179:21): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=4101 res=0 errno=0
[  181.185500][ T6609] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  181.286617][ T5118] bcachefs (loop3): shutting down
[  181.310810][ T5118] bcachefs (loop3): going read-only
[  181.318262][ T5118] bcachefs (loop3): finished waiting for writes to stop
[  181.350445][ T5118] bcachefs (loop3): flushing journal and stopping allocators, journal seq 17
[  181.391345][ T6609] bcachefs (loop0): alloc_read... done
[  181.396042][ T5118] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 18
[  181.397008][ T6609] bcachefs (loop0): stripes_read... done
[  181.425811][ T5118] bcachefs (loop3): shutdown complete, journal seq 19
[  181.425831][ T6609] bcachefs (loop0): snapshots_read... done
[  181.444349][ T5118] bcachefs (loop3): marking filesystem clean
[  181.507256][ T6609] bcachefs (loop0): journal_replay... done
[  181.516408][ T5118] bcachefs (loop3): shutdown complete
[  181.537978][ T6609] bcachefs (loop0): resume_logged_ops... done
[  181.560316][ T6609] bcachefs (loop0): going read-write
[  181.610182][ T6609] bcachefs (loop0): done starting filesystem
[  181.888158][ T5764] bcachefs (loop0): shutting down
[  181.893542][ T5764] bcachefs (loop0): going read-only
[  181.898791][ T5764] bcachefs (loop0): finished waiting for writes to stop
[  181.935995][ T5764] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12
[  181.987716][ T5764] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13
[  182.024987][ T5764] bcachefs (loop0): shutdown complete, journal seq 14
[  182.056636][ T5764] bcachefs (loop0): marking filesystem clean
[  182.111863][ T5764] bcachefs (loop0): shutdown complete
[  182.371042][ T5162] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  182.576701][ T5162] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  182.588810][ T5162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.631699][ T5162] usb 4-1: config 0 descriptor??
[  182.774236][  T956] team0 (unregistering): Port device team_slave_1 removed
[  182.908794][  T956] team0 (unregistering): Port device team_slave_0 removed
[  183.254701][ T6680] fuse: Unknown parameter ''
[  183.277721][ T6680] loop0: detected capacity change from 0 to 8
[  183.285617][ T6680] squashfs: Unknown parameter ''
[  183.353123][ T5270] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  183.656609][ T5162] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[  183.687768][ T5162] usb 4-1: USB disconnect, device number 5
[  184.512098][ T6500] hsr_slave_0: entered promiscuous mode
[  184.547008][ T6500] hsr_slave_1: entered promiscuous mode
[  184.572130][ T6500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.597978][ T6500] Cannot create hsr debugfs directory
[  184.705238][ T6708] loop0: detected capacity change from 0 to 512
[  184.812853][ T6708] EXT4-fs (loop0): filesystem is read-only
[  184.949107][ T6710] loop0: detected capacity change from 0 to 16
[  185.008805][ T6710] erofs: (device loop0): mounted with root inode @ nid 36.
[  185.188606][ T6267] veth0_vlan: entered promiscuous mode
[  185.207769][ T6267] veth1_vlan: entered promiscuous mode
[  185.418875][ T6267] veth0_macvtap: entered promiscuous mode
[  185.473207][ T6267] veth1_macvtap: entered promiscuous mode
[  185.506835][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.518222][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.532796][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.543946][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.556509][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.622095][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.633854][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.650376][ T6714] loop0: detected capacity change from 0 to 16
[  185.660072][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.673292][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.683917][ T6714] erofs: (device loop0): erofs_read_inode: bogus i_mode (3300) @ nid 36
[  185.695400][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.699363][ T5191] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  185.755538][ T6267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.789246][ T6267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.798016][ T6267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.840116][ T6267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.909875][ T5191] usb 4-1: Using ep0 maxpacket: 8
[  185.926870][ T5191] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  185.953853][ T5191] usb 4-1: config 0 has no interface number 0
[  185.981074][ T6459] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  185.984999][ T5191] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  186.014281][ T6459] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  186.019575][ T5191] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  186.032393][ T5191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.054934][ T5191] usb 4-1: config 0 descriptor??
[  186.128772][ T6459] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  186.137516][ T5191] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  186.153522][ T6459] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  186.368765][ T5162] usb 4-1: USB disconnect, device number 6
[  186.382587][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.429669][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.553342][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.588075][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.787373][ T6500] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  186.814760][ T6500] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  186.858712][ T6734] loop2: detected capacity change from 0 to 256
[  186.891002][ T6500] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  186.894575][ T6734] FAT-fs (loop2): bogus logical sector size 0
[  186.937177][ T6734] FAT-fs (loop2): Can't find a valid FAT filesystem
[  186.944024][ T6500] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  187.002972][ T6459] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.077693][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  187.097545][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  187.147945][ T6459] 8021q: adding VLAN 0 to HW filter on device team0
[  187.232834][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.240143][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.298178][ T6725] loop0: detected capacity change from 0 to 32768
[  187.298850][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.311958][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.341786][ T6725] bcachefs (/dev/loop0): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81)
[  187.648850][ T6725] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  187.668674][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.709476][ T6725] bcachefs (loop0): recovering from clean shutdown, journal seq 13
[  187.730174][ T5158] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  187.755215][ T6500] 8021q: adding VLAN 0 to HW filter on device team0
[  187.787341][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.794605][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.832000][ T6725] bcachefs (loop0): alloc_read... done
[  187.841052][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.848254][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.859347][ T6725] bcachefs (loop0): stripes_read... done
[  187.879650][ T6725] bcachefs (loop0): snapshots_read... done
[  187.917063][ T6725] bcachefs (loop0): journal_replay... done
[  187.936578][ T6725] bcachefs (loop0): resume_logged_ops... done
[  187.959760][ T6725] bcachefs (loop0): going read-write
[  187.959943][ T5158] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  188.001852][ T5158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.013402][ T6725] bcachefs (loop0): done starting filesystem
[  188.037534][ T5158] usb 4-1: config 0 descriptor??
[  188.288607][ T6459] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.412128][   T29] audit: type=1800 audit(1718083710.459:22): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=4101 res=0 errno=0
[  188.542090][ T6459] veth0_vlan: entered promiscuous mode
[  188.617052][ T6459] veth1_vlan: entered promiscuous mode
[  188.670455][ T5764] bcachefs (loop0): shutting down
[  188.722814][ T5764] bcachefs (loop0): going read-only
[  188.728125][ T5764] bcachefs (loop0): finished waiting for writes to stop
[  188.747482][ T5764] bcachefs (loop0): flushing journal and stopping allocators, journal seq 17
[  188.811385][ T5764] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18
[  188.837103][ T6459] veth0_macvtap: entered promiscuous mode
[  188.844750][ T5764] bcachefs (loop0): shutdown complete, journal seq 19
[  188.854299][ T5764] bcachefs (loop0): marking filesystem clean
[  188.907476][ T6459] veth1_macvtap: entered promiscuous mode
[  188.946312][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.956288][ T5764] bcachefs (loop0): shutdown complete
[  189.015130][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.032469][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.079217][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.098865][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.103052][ T5158] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[  189.126814][ T6742] loop2: detected capacity change from 0 to 40427
[  189.136714][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.168510][ T5158] usb 4-1: USB disconnect, device number 7
[  189.179343][ T6742] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  189.187221][ T6742] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  189.208814][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.255824][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.284565][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.295414][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.305507][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.316045][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.326176][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.338116][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.355170][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.398321][ T6742] F2FS-fs (loop2): invalid crc value
[  189.401721][ T6459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.426294][ T6459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.439519][ T6459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.441644][ T6742] F2FS-fs (loop2): Found nat_bits in checkpoint
[  189.448383][ T6459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.768747][ T6742] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  189.808747][ T6742] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  189.897606][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.913738][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.042244][ T6500] veth0_vlan: entered promiscuous mode
[  190.056356][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.072447][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.102331][ T6500] veth1_vlan: entered promiscuous mode
[  190.288911][ T6500] veth0_macvtap: entered promiscuous mode
[  190.340824][ T6500] veth1_macvtap: entered promiscuous mode
[  190.353426][ T6794] loop1: detected capacity change from 0 to 512
[  190.391576][ T6794] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  190.432660][ T6794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002]
[  190.444808][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.468181][ T6794] System zones: 1-12
[  190.474060][ T6794] EXT4-fs (loop1): orphan cleanup on readonly fs
[  190.494062][ T6794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set
[  190.513276][ T6794] EXT4-fs (loop1): Remounting filesystem read-only
[  190.520762][ T6794] EXT4-fs (loop1): 1 truncate cleaned up
[  190.528042][ T6794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  190.528123][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.558754][ T6794] EXT4-fs warning (device loop1): dx_probe:822: inode #2: lblock 0: comm syz-executor.1: error -117 reading directory block
[  190.577040][ T6794] EXT4-fs warning (device loop1): dx_probe:822: inode #2: lblock 0: comm syz-executor.1: error -117 reading directory block
[  190.602062][ T6794] EXT4-fs warning (device loop1): dx_probe:822: inode #2: lblock 0: comm syz-executor.1: error -117 reading directory block
[  190.638271][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.730550][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.756900][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.807788][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.891311][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.912130][ T6799] loop3: detected capacity change from 0 to 512
[  190.924513][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.956587][ T6799] EXT4-fs (loop3): filesystem is read-only
[  190.967216][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.998916][ T6459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  191.033092][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.070689][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.131920][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.160021][ T6800] loop3: detected capacity change from 0 to 16
[  191.196784][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.225429][ T6800] erofs: (device loop3): mounted with root inode @ nid 36.
[  191.225541][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.306728][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.335273][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.362972][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.403054][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.471702][ T6500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.520407][ T6500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.555802][ T6500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.606410][ T6500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.880862][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  191.929625][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  191.946078][ T6811] loop1: detected capacity change from 0 to 256
[  191.978858][ T6811] FAT-fs (loop1): bogus logical sector size 0
[  191.993722][  T956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.015272][ T6811] FAT-fs (loop1): Can't find a valid FAT filesystem
[  192.029025][  T956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.331040][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.378522][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.438145][ T6817] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'.
[  192.909363][    T8] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  192.955909][ T6824] loop2: detected capacity change from 0 to 40427
[  192.977714][ T6824] F2FS-fs (loop2): invalid crc value
[  193.014285][ T6824] F2FS-fs (loop2): Found nat_bits in checkpoint
[  193.100333][ T6824] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  193.251902][    T8] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  193.251942][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.271344][    T8] usb 1-1: config 0 descriptor??
[  194.774525][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  194.783178][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  194.926722][    T8] pegasus 1-1:0.0: probe with driver pegasus failed with error -71
[  194.985564][    T8] usb 1-1: USB disconnect, device number 5
[  195.286713][ T6849] loop2: detected capacity change from 0 to 512
[  195.322618][ T6849] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  195.374595][ T6849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002]
[  195.391236][ T6849] System zones: 1-12
[  195.419655][ T6849] EXT4-fs (loop2): orphan cleanup on readonly fs
[  195.478519][ T6849] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 361: padding at end of block bitmap is not set
[  195.551597][ T6849] EXT4-fs (loop2): Remounting filesystem read-only
[  195.564947][ T6849] EXT4-fs (loop2): 1 truncate cleaned up
[  195.594530][ T6849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  195.689050][ T6849] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block
[  195.741635][ T6849] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block
[  195.778813][ T6849] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block
[  196.452638][ T6859] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'.
[  196.673431][ T6852] loop3: detected capacity change from 0 to 40427
[  196.706566][ T6852] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  196.718973][ T6852] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  196.735237][ T6852] F2FS-fs (loop3): invalid crc value
[  196.773911][ T6852] F2FS-fs (loop3): Found nat_bits in checkpoint
[  196.790666][ T6267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  197.010698][ T6852] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  197.044637][ T6852] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  197.207208][ T6872] loop2: detected capacity change from 0 to 512
[  197.230748][ T6872] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  197.283747][ T6872] EXT4-fs (loop2): 1 truncate cleaned up
[  197.304286][ T6872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.493371][ T6267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.932707][ T6867] loop0: detected capacity change from 0 to 32768
[  197.990809][ T6867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6867)
[  198.015382][ T6865] loop4: detected capacity change from 0 to 32768
[  198.083625][ T6865] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6865)
[  198.126659][ T6867] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  198.126786][ T6867] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  198.126847][ T6867] BTRFS info (device loop0): using free-space-tree
[  198.127518][ T6865] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  198.127594][ T6865] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  198.127627][ T6865] BTRFS info (device loop4): using free-space-tree
[  199.015891][ T6916] loop3: detected capacity change from 0 to 40427
[  199.075619][ T6916] F2FS-fs (loop3): invalid crc value
[  199.164807][ T6916] F2FS-fs (loop3): Found nat_bits in checkpoint
[  199.235892][ T6916] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  200.046549][ T6500] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  200.359821][ T5764] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.908053][ T6932] loop2: detected capacity change from 0 to 1024
[  200.926404][ T6932] EXT4-fs: Ignoring removed orlov option
[  201.033596][ T6932] EXT4-fs (loop2): Test dummy encryption mode enabled
[  201.063524][ T6932] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  201.153696][ T6932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.866719][ T6267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.971718][ T5113] Bluetooth: hci4: command 0x0406 tx timeout
[  202.006732][ T6938] loop3: detected capacity change from 0 to 512
[  202.104081][ T6938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  202.169287][    T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  202.189893][ T6938] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  202.191112][ T6938] EXT4-fs: failed to create workqueue
[  202.251582][ T6938] EXT4-fs (loop3): mount failed
[  202.382321][    T8] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  202.406981][    T8] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184
[  202.416806][   T25] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  202.436713][    T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  202.488020][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.566468][ T6948] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  202.588636][    T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  202.615733][   T25] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  202.650495][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.679704][   T25] usb 5-1: config 0 descriptor??
[  202.681787][ T6948] loop3: detected capacity change from 0 to 2048
[  202.889787][ T6948] loop3: detected capacity change from 0 to 256
[  203.309659][    T8] gspca_sn9c2028: read1 error -110
[  203.336262][    T8] gspca_sn9c2028: read1 error -32
[  203.349829][    T8] sn9c2028 1-1:220.0: probe with driver sn9c2028 failed with error -32
[  203.456916][ T6953] loop3: detected capacity change from 0 to 512
[  203.507683][ T6953] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  203.576988][ T6953] EXT4-fs (loop3): 1 truncate cleaned up
[  203.590715][ T6953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.722740][   T25] pegasus 5-1:0.0: probe with driver pegasus failed with error -71
[  203.759659][ T5118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.799338][   T25] usb 5-1: USB disconnect, device number 5
[  204.116011][ T6963] bridge0: port 3(team0) entered blocking state
[  204.144423][ T6963] bridge0: port 3(team0) entered disabled state
[  204.177361][ T6963] team0: entered allmulticast mode
[  204.231267][ T6963] team_slave_0: entered allmulticast mode
[  204.308295][ T6960] loop2: detected capacity change from 0 to 40427
[  204.309309][ T6963] team_slave_1: entered allmulticast mode
[  204.346747][ T6960] F2FS-fs (loop2): invalid crc value
[  204.372675][ T6935] loop0: detected capacity change from 0 to 32768
[  204.373837][ T6963] team0: entered promiscuous mode
[  204.394938][   T29] audit: type=1400 audit(1718083726.439:23): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6965 comm="syz-executor.1" dest=20002 netif=wpan0
[  204.434284][ T6960] F2FS-fs (loop2): Found nat_bits in checkpoint
[  204.435072][ T6935] jfs_mount: Mount Failure: superblock is corrupt!
[  204.494984][ T6935] Mount JFS Failure: -22
[  204.519520][ T6935] jfs_mount failed w/return code = -22
[  204.525589][ T6963] team_slave_0: entered promiscuous mode
[  204.536168][ T6963] team_slave_1: entered promiscuous mode
[  204.558117][ T6963] bridge0: port 3(team0) entered blocking state
[  204.565218][ T6963] bridge0: port 3(team0) entered forwarding state
[  204.589086][ T6967] loop1: detected capacity change from 0 to 1024
[  204.599421][ T5163] usb 1-1: USB disconnect, device number 6
[  204.649923][ T6960] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  204.880986][ T6971] loop4: detected capacity change from 0 to 40427
[  205.433653][ T6971] loop4: detected capacity change from 0 to 256
[  205.636645][ T6967] hfsplus: bad catalog entry type
[  207.073918][   T29] audit: type=1800 audit(1718083729.119:24): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="loop4" ino=1048621 res=0 errno=0
[  207.475360][   T11] hfsplus: b-tree write err: -5, ino 4
[  207.634934][ T6998] loop3: detected capacity change from 0 to 512
[  207.749672][ T6998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  208.145030][ T6998] EXT4-fs (loop3): 1 truncate cleaned up
[  208.477877][ T6998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.835416][ T5118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.896348][ T7017] loop4: detected capacity change from 0 to 256
[  208.955360][ T7017] FAT-fs (loop4): bogus logical sector size 0
[  208.989290][ T7017] FAT-fs (loop4): Can't find a valid FAT filesystem
[  209.448740][ T7026] loop2: detected capacity change from 0 to 40427
[  209.502485][ T7026] F2FS-fs (loop2): invalid crc value
[  209.571088][ T7026] F2FS-fs (loop2): Found nat_bits in checkpoint
[  209.647024][ T7026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  211.321422][ T7041] loop0: detected capacity change from 0 to 64
[  211.345411][ T7041] hfs: unable to parse mount options
[  211.429847][ T5270] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  211.674449][ T7041] loop0: detected capacity change from 0 to 4096
[  211.732034][ T7041] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  211.839496][ T7041] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  212.230711][ T7037] loop1: detected capacity change from 0 to 40427
[  212.242258][   T11] ntfs3: loop0: ino=5, "/" ntfs3_write_inode failed, -22.
[  212.277234][ T7037] F2FS-fs (loop1): invalid crc value
[  212.295721][   T58] ntfs3: loop0: ino=5, "/" ntfs3_write_inode failed, -22.
[  212.326930][ T7045] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  212.341132][ T7037] F2FS-fs (loop1): Found nat_bits in checkpoint
[  212.869734][   T29] audit: type=1400 audit(1718083734.899:25): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7050 comm="syz-executor.2" dest=20002 netif=wpan0
[  212.901538][ T7054] loop3: detected capacity change from 0 to 64
[  212.913539][ T7051] loop2: detected capacity change from 0 to 1024
[  212.969012][ T7053] Bad inode number on dev loop3: 6 is out of range
[  213.017373][ T7051] hfsplus: bad catalog entry type
[  213.187692][   T58] hfsplus: b-tree write err: -5, ino 4
[  213.224170][ T7058] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  213.268363][ T7058] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.0'.
[  213.310231][ T7058] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  213.343290][ T7058] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  213.422876][ T7065] loop2: detected capacity change from 0 to 512
[  213.454273][ T7065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  213.613766][ T7065] EXT4-fs (loop2): 1 truncate cleaned up
[  213.638829][ T7065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.550116][ T6267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.572776][ T7071] loop0: detected capacity change from 0 to 64
[  215.062013][ T7076] loop1: detected capacity change from 0 to 40427
[  215.144230][ T7076] F2FS-fs (loop1): invalid crc value
[  215.224787][ T7076] F2FS-fs (loop1): Found nat_bits in checkpoint
[  215.314565][ T7076] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  215.521451][   T51] Bluetooth: hci5: Frame reassembly failed (-84)
[  216.099410][ T5159] IPVS: starting estimator thread 0...
[  216.209683][ T7089] IPVS: using max 17 ests per chain, 40800 per kthread
[  216.421044][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  217.032211][ T7100] loop2: detected capacity change from 0 to 64
[  217.042999][ T7100] hfs: unable to parse mount options
[  217.104188][ T5270] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  217.536949][ T7100] loop2: detected capacity change from 0 to 4096
[  217.569301][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  217.569745][ T5113] Bluetooth: hci5: command 0x1003 tx timeout
[  217.580075][ T7100] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  217.888665][ T7100] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  218.114287][ T7108] loop0: detected capacity change from 0 to 64
[  218.179113][ T1058] ntfs3: loop2: ino=5, "/" ntfs3_write_inode failed, -22.
[  218.251068][ T7100] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  218.441938][   T29] audit: type=1400 audit(1718083740.489:26): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7111 comm="syz-executor.0" dest=20002 netif=wpan0
[  218.502232][ T7112] loop0: detected capacity change from 0 to 1024
[  218.555095][ T2466] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22.
[  218.671267][ T7112] hfsplus: bad catalog entry type
[  218.881302][ T7114] loop1: detected capacity change from 0 to 512
[  218.961697][ T7114] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  218.969769][ T1058] hfsplus: b-tree write err: -5, ino 4
[  219.006472][ T7114] EXT4-fs (loop1): 1 truncate cleaned up
[  219.025283][ T7114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.124691][ T6459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.488244][   T29] audit: type=1400 audit(1718083741.529:27): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7122 comm="syz-executor.1" dest=20002 netif=wpan0
[  219.502063][ T7123] loop1: detected capacity change from 0 to 1024
[  219.560546][ T7123] hfsplus: bad catalog entry type
[  220.539835][  T956] hfsplus: b-tree write err: -5, ino 4
[  220.809689][ T7134] loop1: detected capacity change from 0 to 64
[  221.498867][ T7139] loop4: detected capacity change from 0 to 40427
[  221.587001][ T7139] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  221.596011][ T7139] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  221.635447][ T7139] F2FS-fs (loop4): Found nat_bits in checkpoint
[  221.709829][ T7146] loop1: detected capacity change from 0 to 64
[  221.729443][ T7139] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  221.736640][ T7139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  226.899708][   T29] audit: type=1400 audit(1718083748.939:28): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7151 comm="syz-executor.0" dest=20002 netif=wpan0
[  226.923806][ T7152] loop0: detected capacity change from 0 to 1024
[  227.064061][ T7156] loop2: detected capacity change from 0 to 512
[  227.149096][ T7156] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  227.162986][ T7152] hfsplus: bad catalog entry type
[  227.238205][ T7156] EXT4-fs (loop2): 1 truncate cleaned up
[  227.252569][ T7156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.151879][ T6267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.263422][ T1058] hfsplus: b-tree write err: -5, ino 4
[  228.311886][ T7164] loop3: detected capacity change from 0 to 64
[  228.531285][   T29] audit: type=1800 audit(1718083750.579:29): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1936 res=0 errno=0
[  228.626319][ T7171] loop1: detected capacity change from 0 to 256
[  228.634561][ T7174] loop2: detected capacity change from 0 to 64
[  228.664280][ T7171] FAT-fs (loop1): bogus logical sector size 0
[  228.685615][ T7171] FAT-fs (loop1): Can't find a valid FAT filesystem
[  228.790962][ T7176] loop0: detected capacity change from 0 to 512
[  228.810776][   T11] Bluetooth: hci5: Frame reassembly failed (-84)
[  228.990839][ T7176] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  229.084855][ T7176] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it
[  229.133802][ T5120] Bluetooth: hci6: sending frame failed (-49)
[  229.143140][ T5113] Bluetooth: hci6: Opcode 0x1003 failed: -49
[  229.342496][ T7176] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[  229.664032][ T7176] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  229.723258][ T7176] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino
[  229.781960][ T7176] EXT4-fs (loop0): Remounting filesystem read-only
[  229.806567][ T7176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.929628][ T7176] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  230.005727][ T7176] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it
[  230.102635][ T7176] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[  230.572876][ T7188] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  230.645081][ T7188] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it
[  230.742273][ T7188] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[  230.813215][ T7184] loop4: detected capacity change from 0 to 32768
[  230.849297][ T7184] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7184)
[  230.870663][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  230.962603][  T783] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  231.058364][ T7184] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  231.089626][ T7184] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  231.119952][ T7184] BTRFS info (device loop4): using free-space-tree
[  231.324543][  T783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.409798][ T7011] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  231.447007][  T783] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  231.495677][ T7184] BTRFS info (device loop4): rebuilding free space tree
[  231.520838][  T783] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40
[  231.559253][  T783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.567313][  T783] usb 1-1: Product: syz
[  231.575086][ T7207] loop3: detected capacity change from 0 to 8
[  231.599373][  T783] usb 1-1: Manufacturer: syz
[  231.599523][ T7011] usb 3-1: Using ep0 maxpacket: 32
[  231.604008][  T783] usb 1-1: SerialNumber: syz
[  231.623967][ T7207] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  231.644992][ T7011] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.683732][ T7011] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.721188][ T7207] cramfs: bad root offset 140
[  231.741721][ T7011] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  231.770179][ T7011] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  231.801694][ T7011] usb 3-1: Product: syz
[  231.835618][ T7011] usb 3-1: Manufacturer: syz
[  231.887562][ T7011] hub 3-1:4.0: USB hub found
[  231.902511][ T7207] loop3: detected capacity change from 0 to 256
[  231.959702][ T6500] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  232.084394][ T7011] hub 3-1:4.0: 2 ports detected
[  232.259985][  T783] usb 1-1: USB disconnect, device number 7
[  232.362214][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.478125][ T7213] loop3: detected capacity change from 0 to 512
[  232.529694][ T7213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  232.684458][ T7213] EXT4-fs (loop3): 1 truncate cleaned up
[  232.695877][ T7213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.792867][ T7219] bridge0: port 3(team0) entered blocking state
[  232.823393][ T7222] loop0: detected capacity change from 0 to 256
[  232.824446][ T7219] bridge0: port 3(team0) entered disabled state
[  232.840624][ T5118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.850384][ T7219] team0: entered allmulticast mode
[  232.858021][ T7219] team_slave_0: entered allmulticast mode
[  232.884748][ T7219] team_slave_1: entered allmulticast mode
[  232.910989][ T7219] team0: entered promiscuous mode
[  232.916195][ T7219] team_slave_0: entered promiscuous mode
[  232.985963][ T7219] team_slave_1: entered promiscuous mode
[  233.024580][ T7219] bridge0: port 3(team0) entered blocking state
[  233.031154][ T7219] bridge0: port 3(team0) entered forwarding state
[  233.318517][ T7011] hub 3-1:4.0: activate --> -90
[  234.409562][  T783] usb 3-1: USB disconnect, device number 2
[  234.526941][ T7011] usb 3-1-port2: attempt power cycle
[  234.681226][   T29] audit: type=1400 audit(1718083756.729:30): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7235 comm="syz-executor.3" dest=20002 netif=wpan0
[  234.768930][ T7237] loop0: detected capacity change from 0 to 128
[  234.800603][ T7237] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  234.880216][ T7237] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  234.985088][ T7241] loop4: detected capacity change from 0 to 64
[  235.042078][ T7232] overlayfs: overlapping lowerdir path
[  236.585851][ T5113] Bluetooth: hci5: sending frame failed (-49)
[  236.598115][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  236.709425][ T7254] loop0: detected capacity change from 0 to 512
[  236.738068][ T7254] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  236.800802][ T7254] EXT4-fs (loop0): 1 truncate cleaned up
[  236.810638][ T7254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.000662][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.357493][   T29] audit: type=1400 audit(1718083759.359:31): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7269 comm="syz-executor.4" dest=20002 netif=wpan0
[  237.378741][    C1] vkms_vblank_simulate: vblank timer overrun
[  238.574913][ T7275] loop4: detected capacity change from 0 to 512
[  238.593237][   T29] audit: type=1326 audit(1718083760.629:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1ec7cf69 code=0x7ffc0000
[  238.689623][   T29] audit: type=1326 audit(1718083760.639:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1ec7cf69 code=0x7ffc0000
[  238.704465][ T7275] EXT4-fs (loop4): orphan cleanup on readonly fs
[  238.711649][    C1] vkms_vblank_simulate: vblank timer overrun
[  238.768474][   T29] audit: type=1326 audit(1718083760.659:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea1ec7cf69 code=0x7ffc0000
[  238.809047][ T7275] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  238.887052][ T7275] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  238.919277][   T29] audit: type=1326 audit(1718083760.659:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1ec7cf69 code=0x7ffc0000
[  238.972789][   T29] audit: type=1326 audit(1718083760.659:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1ec7cf69 code=0x7ffc0000
[  239.001208][ T7275] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  239.032592][   T29] audit: type=1326 audit(1718083760.669:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea1ec7cf69 code=0x7ffc0000
[  239.069370][ T7275] EXT4-fs (loop4): 1 truncate cleaned up
[  239.087515][ T7275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  239.100280][   T29] audit: type=1326 audit(1718083760.669:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1ec7cf69 code=0x7ffc0000
[  239.108217][ T7282] loop2: detected capacity change from 0 to 4096
[  239.219310][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.340799][ T7283] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  239.399018][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  239.719777][ T7285] syzkaller0: entered promiscuous mode
[  239.731025][ T7285] syzkaller0: entered allmulticast mode
[  239.767953][ T7268] loop0: detected capacity change from 0 to 40427
[  239.782388][ T7268] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  239.801360][ T7268] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  239.879320][ T7280] loop3: detected capacity change from 0 to 32768
[  239.901671][ T7280] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7280)
[  239.981236][ T7280] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  240.011855][ T7280] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  240.030345][ T7280] BTRFS info (device loop3): using free-space-tree
[  240.461437][ T7310] loop0: detected capacity change from 0 to 512
[  240.496410][ T7310] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  240.557915][ T7310] EXT4-fs (loop0): 1 truncate cleaned up
[  240.590720][ T7310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.606417][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  240.607824][   T29] audit: type=1804 audit(1718083762.649:45): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2433295368/syzkaller.e3JGXi/96/file0/cgroup.controllers" dev="loop3" ino=263 res=1 errno=0
[  240.767751][   T29] audit: type=1804 audit(1718083762.699:46): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3890238611/syzkaller.TuMTs5/19/file0/bus/bus" dev="overlay" ino=10 res=1 errno=0
[  240.792640][    C1] vkms_vblank_simulate: vblank timer overrun
[  240.873531][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.784678][ T7328] loop0: detected capacity change from 0 to 40427
[  241.794019][ T7328] F2FS-fs (loop0): Unrecognized mount option "active_lßogs=4" or missing value
[  242.187316][   T29] audit: type=1804 audit(1718083764.229:47): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2723403156/syzkaller.IPwdDP/55/bus" dev="sda1" ino=1966 res=1 errno=0
[  242.618249][ T7328] loop0: detected capacity change from 0 to 32768
[  242.626962][ T7328] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7328)
[  242.645688][ T7328] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.656087][ T7328] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  242.664896][ T7328] BTRFS info (device loop0): disk space caching is enabled
[  242.836252][ T7328] BTRFS info (device loop0): rebuilding free space tree
[  242.936727][ T7328] BTRFS info (device loop0): disabling free space tree
[  242.945695][ T7328] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  242.957718][ T7328] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  243.123825][ T7328] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  243.486416][   T29] audit: type=1804 audit(1718083765.529:48): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2723403156/syzkaller.IPwdDP/55/bus" dev="sda1" ino=1966 res=1 errno=0
[  243.497501][ T7328] loop0: detected capacity change from 0 to 64
[  243.546009][ T7328] hfs: get root inode failed
[  245.212665][ T7360] loop4: detected capacity change from 0 to 64
[  246.679136][    C0] sched: RT throttling activated
[  248.849342][ T5120] Bluetooth: hci3: command 0x0406 tx timeout
[  249.808682][ T5118] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  249.981968][   T29] audit: type=1800 audit(1718083772.029:49): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="overlay" ino=10 res=0 errno=0
[  250.088119][   T29] audit: type=1804 audit(1718083772.059:50): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2723403156/syzkaller.IPwdDP/59/file0/bus/bus" dev="overlay" ino=10 res=1 errno=0
[  250.311073][ T7367] loop0: detected capacity change from 0 to 2048
[  251.987858][ T7373] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'.
[  252.021459][ T7374] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'.
[  256.240081][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  256.246529][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  256.441694][ T7378] loop3: detected capacity change from 0 to 32768
[  256.456780][ T7378] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7378)
[  256.479322][ T7378] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  256.496956][ T7378] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  256.505906][ T7378] BTRFS info (device loop3): using free-space-tree
[  257.866274][ T5118] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  263.734831][   T29] audit: type=1400 audit(1718083785.779:51): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7401 comm="syz-executor.3" dest=20002 netif=wpan0
[  274.187289][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  274.205710][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  274.215298][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  274.232271][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  274.243925][ T5120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  274.253847][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.161463][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  275.172228][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  275.181376][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  275.196716][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  275.206585][   T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  275.214242][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  276.289321][   T53] Bluetooth: hci2: command tx timeout
[  277.089068][ T5113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  277.100997][ T5113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  277.109763][ T5113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  277.117991][ T5113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  277.126318][ T5113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  277.135217][ T5113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  277.249324][ T5113] Bluetooth: hci5: command tx timeout
[  278.369319][ T5113] Bluetooth: hci2: command tx timeout
[  278.776292][ T5113] Bluetooth: hci1: command 0x0406 tx timeout
[  279.169523][ T5113] Bluetooth: hci6: command tx timeout
[  279.329304][ T5113] Bluetooth: hci5: command tx timeout
[  280.449221][ T5113] Bluetooth: hci2: command tx timeout
[  281.104595][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  281.122112][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  281.134263][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  281.146835][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  281.157980][ T5113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  281.169359][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  281.249346][ T5113] Bluetooth: hci6: command tx timeout
[  281.409365][ T5113] Bluetooth: hci5: command tx timeout
[  282.529266][ T5113] Bluetooth: hci2: command tx timeout
[  283.252980][ T5113] Bluetooth: hci7: command tx timeout
[  283.329330][ T5113] Bluetooth: hci6: command tx timeout
[  283.489243][ T5113] Bluetooth: hci5: command tx timeout
[  285.329637][ T5113] Bluetooth: hci7: command tx timeout
[  285.409255][ T5113] Bluetooth: hci6: command tx timeout
[  287.409576][ T5113] Bluetooth: hci7: command tx timeout
[  289.489478][ T5113] Bluetooth: hci7: command tx timeout
[  294.217512][ T5120] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  294.234992][ T5120] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  294.245030][ T5120] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  294.253517][ T5120] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  294.261462][ T5120] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  294.270700][ T5120] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  296.289333][ T5120] Bluetooth: hci8: command tx timeout
[  298.369557][ T5120] Bluetooth: hci8: command tx timeout
[  300.449267][ T5120] Bluetooth: hci8: command tx timeout
[  302.529226][ T5120] Bluetooth: hci8: command tx timeout
[  314.609379][ T5120] Bluetooth: hci0: command 0x0406 tx timeout
[  317.655907][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  317.669212][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  339.179639][ T5120] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  339.190767][ T5120] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  339.199526][ T5120] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  339.207932][ T5120] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  339.217521][ T5120] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  339.226229][ T5120] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  340.147462][ T5113] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  340.158558][ T5113] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  340.168267][ T5113] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  340.185421][ T5113] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  340.199851][ T5113] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  340.207548][ T5113] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  341.249376][ T5113] Bluetooth: hci9: command tx timeout
[  342.118180][ T5120] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  342.130062][ T5120] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  342.138661][ T5120] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  342.148867][ T5120] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  342.156934][ T5120] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  342.164528][ T5120] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  342.289502][ T5120] Bluetooth: hci10: command tx timeout
[  343.329488][ T5120] Bluetooth: hci9: command tx timeout
[  344.209521][ T5120] Bluetooth: hci11: command tx timeout
[  344.379584][ T5120] Bluetooth: hci10: command tx timeout
[  345.409401][ T5120] Bluetooth: hci9: command tx timeout
[  346.127011][ T5113] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  346.144031][ T5113] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  346.152574][ T5113] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  346.161769][ T5113] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  346.169801][ T5113] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  346.177332][ T5113] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  346.289281][ T5120] Bluetooth: hci11: command tx timeout
[  346.449841][ T5113] Bluetooth: hci10: command tx timeout
[  347.489400][ T5120] Bluetooth: hci9: command tx timeout
[  348.215662][ T5120] Bluetooth: hci12: command tx timeout
[  348.371027][ T5120] Bluetooth: hci11: command tx timeout
[  348.529397][ T5120] Bluetooth: hci10: command tx timeout
[  350.289696][ T5120] Bluetooth: hci12: command tx timeout
[  350.449222][ T5120] Bluetooth: hci11: command tx timeout
[  352.369415][ T5120] Bluetooth: hci12: command tx timeout
[  354.449457][ T5120] Bluetooth: hci12: command tx timeout
[  359.254250][ T5113] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  359.266601][ T5113] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  359.275647][ T5113] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  359.285557][ T5113] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  359.293605][ T5113] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  359.302796][ T5113] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  361.409613][ T5113] Bluetooth: hci13: command tx timeout
[  363.489323][ T5113] Bluetooth: hci13: command tx timeout
[  365.569390][ T5113] Bluetooth: hci13: command tx timeout
[  367.649327][ T5113] Bluetooth: hci13: command tx timeout
[  379.094437][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  379.101487][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  396.529223][ T5113] Bluetooth: hci2: command 0x0406 tx timeout
[  399.609333][   T30] INFO: task syz-executor.2:7329 blocked for more than 143 seconds.
[  399.617395][   T30]       Not tainted 6.10.0-rc3-syzkaller #0
[  399.635894][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  399.655873][   T30] task:syz-executor.2  state:D stack:26112 pid:7329  tgid:7325  ppid:6267   flags:0x00000006
2024/06/11 05:32:01 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  399.709653][   T30] Call Trace:
[  399.713022][   T30]  <TASK>
[  399.715983][   T30]  __schedule+0x1796/0x49d0
[  399.768304][   T30]  ? __pfx___schedule+0x10/0x10
[  399.774984][   T30]  ? __pfx_lock_release+0x10/0x10
[  399.789146][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  399.794821][   T30]  ? schedule+0x90/0x320
[  399.814819][   T30]  schedule+0x14b/0x320
[  399.829106][   T30]  schedule_preempt_disabled+0x13/0x30
[  399.834635][   T30]  __mutex_lock+0x6a4/0xd70
[  399.849169][   T30]  ? __mutex_lock+0x527/0xd70
[  399.854079][   T30]  ? nl802154_pre_doit+0xb5/0xac0
[  399.869415][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  399.889123][   T30]  nl802154_pre_doit+0xb5/0xac0
[  399.894147][   T30]  ? __nla_parse+0x40/0x60
[  399.898607][   T30]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  399.927284][   T30]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  399.949445][   T30]  genl_rcv_msg+0xaaa/0xec0
[  399.954019][   T30]  ? mark_lock+0x9a/0x350
[  399.958387][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  399.979719][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  399.984823][   T30]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  400.014983][   T30]  ? __pfx_nl802154_set_channel+0x10/0x10
[  400.029093][   T30]  ? __pfx_nl802154_post_doit+0x10/0x10
[  400.034726][   T30]  ? __pfx___might_resched+0x10/0x10
[  400.059381][   T30]  netlink_rcv_skb+0x1e3/0x430
[  400.064222][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  400.094359][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  400.100275][   T30]  genl_rcv+0x28/0x40
[  400.104403][   T30]  netlink_unicast+0x7ea/0x980
[  400.124866][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  400.139097][   T30]  ? __virt_addr_valid+0x183/0x520
[  400.144327][   T30]  ? __check_object_size+0x49c/0x900
[  400.169391][   T30]  ? bpf_lsm_netlink_send+0x9/0x10
[  400.174768][   T30]  netlink_sendmsg+0x8db/0xcb0
[  400.199318][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  400.204778][   T30]  ? __import_iovec+0x536/0x820
[  400.219111][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  400.224516][   T30]  ? security_socket_sendmsg+0x87/0xb0
[  400.249795][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  400.255157][   T30]  __sock_sendmsg+0x221/0x270
[  400.280230][   T30]  ____sys_sendmsg+0x525/0x7d0
[  400.285110][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  400.315139][   T30]  __sys_sendmsg+0x2b0/0x3a0
[  400.319856][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  400.325054][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  400.349109][   T30]  ? do_syscall_64+0x100/0x230
[  400.353950][   T30]  ? do_syscall_64+0xb6/0x230
[  400.358659][   T30]  do_syscall_64+0xf3/0x230
[  400.379453][   T30]  ? clear_bhb_loop+0x35/0x90
[  400.400377][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.406362][   T30] RIP: 0033:0x7fea1ec7cf69
[  400.425070][   T30] RSP: 002b:00007fea1e7de0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  400.450615][   T30] RAX: ffffffffffffffda RBX: 00007fea1edb4050 RCX: 00007fea1ec7cf69
[  400.458658][   T30] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 000000000000000b
[  400.489423][   T30] RBP: 00007fea1ecda6fe R08: 0000000000000000 R09: 0000000000000000
[  400.497465][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.534996][   T30] R13: 000000000000006e R14: 00007fea1edb4050 R15: 00007ffedb649bf8
[  400.549110][   T30]  </TASK>
[  400.566488][   T30] INFO: task syz-executor.4:7360 blocked for more than 144 seconds.
[  400.589246][   T30]       Not tainted 6.10.0-rc3-syzkaller #0
[  400.595190][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  400.625021][   T30] task:syz-executor.4  state:D stack:24768 pid:7360  tgid:7359  ppid:6500   flags:0x00004006
[  400.649368][   T30] Call Trace:
[  400.652697][   T30]  <TASK>
[  400.655653][   T30]  __schedule+0x1796/0x49d0
[  400.679038][   T30]  ? __pfx___schedule+0x10/0x10
[  400.693404][   T30]  ? __pfx_lock_release+0x10/0x10
[  400.698498]