last executing test programs:

2m48.199459758s ago: executing program 5 (id=313):
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/76, 0x4c}], 0x1}, 0x40008}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket(0x22, 0x2, 0x3)
getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000280)={@broadcast, @multicast2, <r5=>0x0}, &(0x7f0000000380)=0xc)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r5, 0x1, 0xfffffffffffffc61, @random="00010100"}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x33, @rand_addr=0x64010102, 0x4e23, 0x2, 'nq\x00', 0x6, 0x3ff, 0x64}, 0x2c)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"})
syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)=ANY=[@ANYRES16=r0], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0})

2m36.766360204s ago: executing program 5 (id=336):
socket$nl_netfilter(0x10, 0x3, 0xc)
setuid(0xee01)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0xfffffffc, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x7, 0x8, 0x40, 0x3}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x80, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
syz_usb_connect(0x0, 0x81, 0x0, 0x0)
syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a1, 0x200, 0x7, 0x304}, &(0x7f00000004c0)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_COPY$syz(r7, 0x3b83, &(0x7f0000000440)={0x28, 0x10000, r8, r8, 0x7ffffffffffffffe, 0x2})
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0})

2m28.917501749s ago: executing program 5 (id=353):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
shutdown(r3, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)

2m28.416415834s ago: executing program 2 (id=354):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
write$apparmor_exec(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='exec :'], 0x149)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4000000000003, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x100, 0x3, 0x300a, 0x1, 0x6, 0x4, 0x1, 0x1}})
socket(0x22, 0x80000, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
semget$private(0x0, 0x7, 0x0)
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
socket$nl_route(0x10, 0x3, 0x0)
lstat(&(0x7f0000000780)='./cgroup\x00', &(0x7f0000000200))
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB=',g', @ANYRESDEC=0x0])
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40700, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x127000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67)

2m27.691691282s ago: executing program 5 (id=355):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
fsopen(&(0x7f0000000240)='jfs\x00', 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x1eb640)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x1a00, 0x0, 0xffffffffffffffff, 0x2fc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50)

2m26.945133178s ago: executing program 5 (id=357):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
open(0x0, 0x185102, 0x2b)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r1 = openat(0xffffffffffffff9c, 0x0, 0x103041, 0x16)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

2m26.271545584s ago: executing program 2 (id=359):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0xffffffd3, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
setpriority(0x2, 0x0, 0x6)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000600)=<r7=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x40, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x5, 0x8}, {0x8, 0x3}, {0xb, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r10, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x3c0, 0x300, 0x3c00, 0x1000, 0xbb3a, 0x2, 0x0, 0x100, {0x0, 0x40002000}, {0x0, 0x2, 0x1}, {0x4000000, 0x7}, {0xfe, 0x8, 0x40000}, 0x0, 0x3f0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3})
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1e, 0x0, 0x11)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x20, 0x0, 0x8c, {0x8c, 0x10, "43695536924897de8281a51797d85507823c565d490c6aa43f92273161543e193b67909f62b9f334fb5e339b2e3ada23c5ff26ff0255a3f42e729d52e88ff59e84fc2ceb83abf84aaa2347bd4732c6499e1f6addbff9c2cfdf1f9105d641710c96f7b69455202ed3b9aad6e69de7d82c01c456c801d7cbdae2f5c61377255282763b56002ca6a6caeba5"}}, &(0x7f0000000240)={0x0, 0x3, 0x26, @string={0x26, 0x3, "62d663d80cde6d25b109944f64b577a9384269e3da389a8c570c4e159a75a06fc1a6990f"}}}, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x20, 0x1f, 0x8, "1961e80543f21d6f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xee}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0xc0, 0x5, 0x4, "63e8d5e3"}, &(0x7f00000003c0)={0x40, 0x5, 0x3, "9bcfb0"}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0xa, &(0x7f0000000100)=[{0x81, 0x34, 0xc, 0x4}, {0x3, 0x2, 0x68, 0xb}, {0x2, 0x2, 0x5}, {0x3, 0x1, 0x1, 0x4}, {0x6, 0x2, 0xf8, 0x1}, {0x200, 0xe, 0xd9, 0xfffffff7}, {0x1, 0x4, 0x28}, {0x6, 0x8, 0x2, 0xe}, {0x2, 0x0, 0xa9, 0x4}, {0x5d12, 0x1, 0x7, 0x616}]})
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x31, {0x31, 0x6, "45010000009017b2b6821d55c79feb35c8221b17bd1d70d300a84119d16918127341cb95b2a4e6ab15c2618dc1b290"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2m25.588893889s ago: executing program 5 (id=361):
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0)

2m18.765222251s ago: executing program 2 (id=370):
syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x4, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0)
close(0x4)

2m18.653676306s ago: executing program 2 (id=371):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
write$apparmor_exec(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='exec :'], 0x149)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4000000000003, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x100, 0x3, 0x300a, 0x1, 0x6, 0x4, 0x1, 0x1}})
socket(0x22, 0x80000, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
semget$private(0x0, 0x7, 0x0)
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
socket$nl_route(0x10, 0x3, 0x0)
lstat(&(0x7f0000000780)='./cgroup\x00', &(0x7f0000000200))
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB=',g', @ANYRESDEC=0x0])
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40700, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x127000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67)

2m18.505213131s ago: executing program 3 (id=372):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$inet(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getegid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8d0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)

2m17.993418491s ago: executing program 2 (id=373):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
open(0x0, 0x185102, 0x2b)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x16)
pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0)

2m17.248535168s ago: executing program 2 (id=374):
openat(0xffffffffffffff9c, 0x0, 0x101142, 0x0)
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r3)
fallocate(r0, 0x0, 0x0, 0x1001f0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)

2m11.431219202s ago: executing program 4 (id=379):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000080)={'syzkaller1\x00', @ifru_map={0xbb37, 0x3, 0x307, 0x0, 0xa, 0x9e}})
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xffffffff, 0xfffffffd}}, 0x10)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x0, 0x3f, 0xc}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003800), 0x2, 0x0)
writev(r6, &(0x7f0000001000)=[{&(0x7f0000000000)="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", 0x369}], 0x1)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x1000, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x71, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x4}, {0x0, 0x2, 0x8000000000}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'rmd160-generic\x00'}, 0x0, 0x180}}]}, 0x13c}}, 0x0)

2m9.0415625s ago: executing program 32 (id=361):
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0)

2m9.021557565s ago: executing program 3 (id=382):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000084010500ac1414aa000000000000000000000000000000003300000000000000640101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000020003c00000002000000fe80000000000000000000000000000000a3e56be0"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

2m9.020604426s ago: executing program 4 (id=383):
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0)
r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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")
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}}, 0x0, 0x0, 0x0)

2m8.733111239s ago: executing program 3 (id=384):
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080), &(0x7f0000000180)=0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180))

2m8.031058949s ago: executing program 3 (id=385):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close_range(r0, 0xffffffffffffffff, 0x0)

2m7.588805422s ago: executing program 3 (id=386):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
open(0x0, 0x185102, 0x2b)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x16)
pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0)

2m6.253774824s ago: executing program 3 (id=388):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030404000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="11030200000000002c0012800b0001006970766c616e00001c0002800600020003000000060001"], 0x54}, 0x1, 0xba01}, 0x810)

2m5.229913848s ago: executing program 4 (id=390):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fstat(r0, &(0x7f00000002c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000002080)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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")
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x62)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r5, 0x3)
accept4(r5, 0x0, 0x0, 0x0)
shutdown(r5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x22, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'bcachefs\x00'}}, {}, {@uname={'uname', 0x3d, 'bcachefs\x00'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'bcachefs\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@audit}, {@euid_gt={'euid>', 0xee00}}, {@seclabel}, {@uid_lt={'uid<', r6}}]}})

2m3.545373006s ago: executing program 4 (id=391):
r0 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)

2m0.193720825s ago: executing program 33 (id=374):
openat(0xffffffffffffff9c, 0x0, 0x101142, 0x0)
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r3)
fallocate(r0, 0x0, 0x0, 0x1001f0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)

1m58.907017623s ago: executing program 4 (id=399):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
open(0x0, 0x185102, 0x2b)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x16)
pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0)

1m57.31724478s ago: executing program 4 (id=401):
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0)
r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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")
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}}, 0x0, 0x0, 0x0)

1m48.926429485s ago: executing program 34 (id=388):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030404000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="11030200000000002c0012800b0001006970766c616e00001c0002800600020003000000060001"], 0x54}, 0x1, 0xba01}, 0x810)

1m40.955264312s ago: executing program 35 (id=401):
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0)
r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBqNVIFjUjsrEqChNSAEMohQhFcerUSp7GySSvHRWmEyAYoSJw4oR44FKFw6AkhhFQOCFHOSEhcOOUeiRuHHABXM7O7Xtsbx25ir9t+PtJ43ts3773f/DJ/dsexNsBn1rnXsr+XIueOn79Z1u/d7XTv3e1cG5STTCVpJM16laKdFB8mZ1Mv+Xz5Yn+44mHzvHL/g6L57vudutbsL9X2jc36bTB2y15yYFjZl2SmLv53y8NuGK9aqnEuro73cFObNRbDuMuEHRskDiZtZYPeamPjkd23ft4Ce9bt+r65wXRyMPXdtbrF9a8Oj74yTN6m16be7sUBAAAAO2XsZ/lRTz3Ig9zMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4divo7A4v+0hiUZ1IMvv+/NfKd+q0Jh/uY3rlcrb771KQDAQAAAAAAAIDH8sKDPMjNHBrUV4rqd/4vVpXD1c/P5a3cyEKWciI3M5/lLGcpc0mmRwZq3ZxfXl6a29jzlyl7rqys3O73PDW256m1cfXWBzrufxps2AgAAAAAAAAAPrN+lHOrv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC9oEj21atqOTwoT6fRTHIgSauYGW7emmiwT8BfJh0AAAAA7Lx2f32o+H9dWCmqz/xHqs/9B/JWrmc5i1lONwu5VD0LqD/1N/7R63Tv3e1cK5eNA3/j39uKoxox9bOH8TPPVls8N+xxLt/O93I8M7mQpSzm+5nPchYyk29VpfkUme4/vZi+d7edQawb4z27pnZhfWwvjJTL+I5WkbRzOYtVbCdysTUIvdHf7ujIbH9sJetmvFNmp3i1b4s5utRfl3v0i/56b5iu9nz/MCOz/dyX2Xh6NO8bc7/N42T9THNpDJ9BHV6dpayun+lj5fxgf13m+qc7m/NtPkpbm4nez8va4Og7snnOky//868XrjSuX71y+cbxvXMYfUzrj4nOSCae31ImumUmeo+RiQOPE/+T0+pno76Kbu9q+WLV91AW8528kUtZyOnMZi5nMpuv5VQ6OTWS1+c2z2t1rjW2d64d+1K/UN6TfjZyb9o1Uw9rKPP69EheR69001Xb6CurWXpmC1kqWhmfpX+NDaX5hX6hnOPHI3ecyVufibmRTDy7eSZ+/b+VJDe6168uXZl/c5M5bv354EuD8qBQnrbvrL02/+ZJ7tc29He3PF6eKf+xUt82Ro+Osu3ZQVudr6KZ1X6Hh21r73OtVqrzuW571JlajnTkzriR6rbnx87SqdqOjrSteZeTN9IdvgsBYA87+PLBVvt+++/t99o/aV9pnz/wzakzU19sZf/fmn/a97vGbxtfL17Oe/lhDk06UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS48fatq/Pd7sLSHiyk8YQHvDO2aZCK+pXW3tj3T2pharMj6vdJNunemkTM7SR7InVp7sJcUxnTdH74SjtpDONJcnWPfMEdsBNOLl978+SNt299ZfHa/OsLry9cP3Xm9KunO1+du33y8mJ3Ybb+OekogZ2w+jZg0pEAAAAAAAAAAAAAW7Ubf94wZtqiN4F9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6Zzr2W/b0UmZs9MVvW793tdMtlUF7dspmkkaT4QVJ8mJxNvWR6ZLjiYfO8cv+DX7307vud1bGag+0b6/r94T8rK9vci15/yUySff31o01tabyLI+P1thlYrRjuYZmwY4PEwaR9FAAA///howfX")
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}}, 0x0, 0x0, 0x0)

20.984271334s ago: executing program 0 (id=530):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x6, 0xa, 0x200, 0x0})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x104e25}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x200, 0x12}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)='nl802154\x00', <r6=>0x0}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r2, r0, 0x5, 0x24, 0x0, @void, @void, @void, @value=r6, r5}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x82000, 0x0)

19.75821646s ago: executing program 0 (id=531):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000080)={'syzkaller1\x00', @ifru_map={0xbb37, 0x3, 0x307, 0x0, 0xa, 0x9e}})
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xffffffff, 0xfffffffd}}, 0x10)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x0, 0x3f, 0xc}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003800), 0x2, 0x0)
writev(r6, &(0x7f0000001000)=[{&(0x7f0000000000)="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", 0x365}], 0x1)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x1000, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x71, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x4}, {0x0, 0x2, 0x8000000000}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'rmd160-generic\x00'}, 0x0, 0x180}}]}, 0x13c}}, 0x0)

18.484787021s ago: executing program 0 (id=532):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
r1 = dup(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socket$unix(0x1, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0)

17.385065237s ago: executing program 0 (id=533):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002003, 0x0)

17.134194905s ago: executing program 0 (id=534):
unshare(0x22020600)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0xb, 0x0, 0x0)

16.802673612s ago: executing program 0 (id=535):
socket(0x40000000015, 0x805, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
rename(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.254826127s ago: executing program 1 (id=542):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a010400000000000000000700000008000840000000010900010073797a30000000001c000980100002800c00017c08"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

6.002927309s ago: executing program 1 (id=543):
socket$key(0xf, 0x3, 0x2)
r0 = socket$kcm(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, 0x0, 0x40000003, 0x4, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60)
ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000240), 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x1)
ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0xad8})
ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000080)=0x8)
ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

4.812964059s ago: executing program 1 (id=544):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d4619719"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000300)={0x54, 0xffff, 0x0, {0x0, 0x68bd}, {0x0, 0x400}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]})

3.089163847s ago: executing program 1 (id=545):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x1000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x3ff, r1}, 0x38)

2.917124957s ago: executing program 1 (id=546):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x20040000)
sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c)

1.292260797s ago: executing program 36 (id=535):
socket(0x40000000015, 0x805, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
rename(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 1 (id=548):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x6, 0xa, 0x200, 0x0})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x104e25}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x200, 0x12}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)='nl802154\x00', <r6=>0x0}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r2, r0, 0x5, 0x24, 0x0, @void, @void, @void, @value=r6, r5}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x82000, 0x0)

kernel console output (not intermixed with test programs):

94967295 subj=unconfined op=collect_data cause=failed comm="syz.3.277" name="file2" dev="loop3" ino=348 res=0 errno=0
[  209.783227][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.994007][ T5932] udevd[5932]: incorrect cramfs checksum on /dev/loop3
[  210.024154][ T7015] tipc: Started in network mode
[  210.066190][ T7015] tipc: Node identity 7efd7dd0ea01, cluster identity 4711
[  210.128944][ T7015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.205811][ T7022] syzkaller0: entered promiscuous mode
[  210.257975][ T7022] syzkaller0: entered allmulticast mode
[  210.383610][ T5971] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  210.446766][ T7022] tipc: Resetting bearer <eth:syzkaller0>
[  210.491120][ T7014] tipc: Resetting bearer <eth:syzkaller0>
[  210.519326][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.528056][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.576037][ T5971] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.615041][ T7014] tipc: Disabling bearer <eth:syzkaller0>
[  210.644135][ T5971] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.712275][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.759925][ T5971] usb 6-1: Product: syz
[  210.800396][ T5971] usb 6-1: Manufacturer: syz
[  210.849842][ T5971] usb 6-1: SerialNumber: syz
[  211.058268][ T7034] loop3: detected capacity change from 0 to 512
[  211.096317][ T7034] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  211.177820][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.227728][ T7034] EXT4-fs (loop3): 1 truncate cleaned up
[  211.229057][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.279891][ T5971] usb 6-1: bad CDC descriptors
[  211.290868][ T7034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.298164][ T5971] usb 6-1: USB disconnect, device number 4
[  212.193480][ T5981] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  212.395742][ T5981] usb 6-1: Using ep0 maxpacket: 8
[  212.439518][ T7045] program syz.2.285 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  212.502053][ T5981] usb 6-1: config index 0 descriptor too short (expected 301, got 72)
[  212.520834][ T5981] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  212.533080][ T5981] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  212.533985][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.584378][ T6030] net_ratelimit: 4 callbacks suppressed
[  212.584400][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.702873][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.713182][ T5981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  212.727730][ T5981] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  212.759039][ T5981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  212.771359][ T5981] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  212.791714][ T5981] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  212.801466][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.941599][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.065836][ T5981] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22
[  213.977390][ T7056] loop1: detected capacity change from 0 to 8
[  213.984361][ T7056] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  214.204419][ T7056] cramfs: Error -5 while decompressing!
[  214.209995][ T7056] cramfs: ffffffff99bf6668(26)->ffff88806a639000(4096)
[  214.216934][ T7056] cramfs: Error -3 while decompressing!
[  214.222464][ T7056] cramfs: ffffffff99bf6682(26)->ffff88806a63a000(4096)
[  214.229356][ T7056] cramfs: Error -3 while decompressing!
[  214.234939][ T7056] cramfs: ffffffff99bf669c(16)->ffff88806a63b000(4096)
[  214.243122][ T7056] cramfs: Error -5 while decompressing!
[  214.248702][ T7056] cramfs: ffffffff99bf6668(26)->ffff88806a639000(4096)
[  214.255903][   T30] audit: type=1800 audit(1757947697.060:19): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.289" name="file2" dev="loop1" ino=348 res=0 errno=0
[  214.370107][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.378304][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.378864][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.394591][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.417118][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.454670][ T1544] usb 6-1: USB disconnect, device number 5
[  214.866237][ T7067] loop4: detected capacity change from 0 to 8
[  214.874657][ T7067] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  214.912530][ T7069] loop3: detected capacity change from 0 to 1024
[  214.925576][ T7067] cramfs: Error -5 while decompressing!
[  214.931135][ T7067] cramfs: ffffffff99bf2668(26)->ffff888054b88000(4096)
[  214.938073][ T7067] cramfs: Error -3 while decompressing!
[  214.943632][ T7067] cramfs: ffffffff99bf2682(26)->ffff888054b89000(4096)
[  214.950471][ T7067] cramfs: Error -3 while decompressing!
[  214.958068][ T7067] cramfs: ffffffff99bf269c(16)->ffff888054b8a000(4096)
[  214.965011][ T7067] cramfs: Error -5 while decompressing!
[  214.970536][ T7067] cramfs: ffffffff99bf2668(26)->ffff888054b88000(4096)
[  214.983300][   T30] audit: type=1800 audit(1757947697.790:20): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.291" name="file2" dev="loop4" ino=348 res=0 errno=0
[  215.388558][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.392812][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.487792][ T7082] syz.4.295 uses obsolete (PF_INET,SOCK_PACKET)
[  215.666122][   T13] hfsplus: b-tree write err: -5, ino 4
[  216.068737][ T7078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.292'.
[  216.474568][ T5867] Bluetooth: hci1: command 0x0406 tx timeout
[  216.480909][ T5880] Bluetooth: hci3: command 0x0406 tx timeout
[  216.487193][ T5867] Bluetooth: hci2: command 0x0406 tx timeout
[  216.496740][ T5880] Bluetooth: hci4: command 0x0406 tx timeout
[  216.502758][ T5880] Bluetooth: hci5: command 0x0406 tx timeout
[  216.880466][ T7097] loop4: detected capacity change from 0 to 512
[  216.895810][ T7097] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  217.084736][ T7097] EXT4-fs (loop4): 1 truncate cleaned up
[  217.091919][ T7097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.041778][ T7109] sg_write: data in/out 852092/81 bytes for SCSI command 0x1c-- guessing data in;
[  218.041778][ T7109]    program syz.0.300 not setting count and/or reply_len properly
[  218.497132][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.585011][ T5981] net_ratelimit: 6 callbacks suppressed
[  218.585033][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.599044][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.019801][ T7119] loop2: detected capacity change from 0 to 8
[  219.026768][ T7119] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  219.655165][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.685490][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.701997][ T7119] cramfs: Error -5 while decompressing!
[  219.707810][ T7119] cramfs: ffffffff99bf6668(26)->ffff88806beee000(4096)
[  219.714683][ T7119] cramfs: Error -3 while decompressing!
[  219.720200][ T7119] cramfs: ffffffff99bf6682(26)->ffff888075c12000(4096)
[  219.727095][ T7119] cramfs: Error -3 while decompressing!
[  219.732645][ T7119] cramfs: ffffffff99bf669c(16)->ffff88804dadc000(4096)
[  219.739554][ T7119] cramfs: Error -5 while decompressing!
[  219.745113][ T7119] cramfs: ffffffff99bf6668(26)->ffff88806beee000(4096)
[  219.757187][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.793783][   T30] audit: type=1800 audit(1757947702.550:21): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.305" name="file2" dev="loop2" ino=348 res=0 errno=0
[  219.842029][ T6022] udevd[6022]: incorrect cramfs checksum on /dev/loop2
[  219.964483][ T7124] loop5: detected capacity change from 0 to 1024
[  220.093290][ T7129] loop2: detected capacity change from 0 to 8
[  220.102677][ T7129] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  220.120143][ T7129] cramfs: Error -5 while decompressing!
[  220.125833][ T7129] cramfs: ffffffff99bf2668(26)->ffff88806b635000(4096)
[  220.132739][ T7129] cramfs: Error -3 while decompressing!
[  220.138364][ T7129] cramfs: ffffffff99bf2682(26)->ffff88804d40b000(4096)
[  220.145287][ T7129] cramfs: Error -3 while decompressing!
[  220.150854][ T7129] cramfs: ffffffff99bf269c(16)->ffff888049b1c000(4096)
[  220.158083][ T7129] cramfs: Error -5 while decompressing!
[  220.163944][ T7129] cramfs: ffffffff99bf2668(26)->ffff88806b635000(4096)
[  220.205089][   T30] audit: type=1800 audit(1757947702.970:22): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.308" name="file2" dev="loop2" ino=348 res=0 errno=0
[  220.232635][ T5932] udevd[5932]: incorrect cramfs checksum on /dev/loop2
[  220.275683][ T5981] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  220.432716][ T5981] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  220.504518][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.929549][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.938290][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.977224][   T12] hfsplus: b-tree write err: -5, ino 4
[  221.922560][ T5981] IPVS: starting estimator thread 0...
[  221.948970][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.957561][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.053723][ T7142] IPVS: using max 25 ests per chain, 60000 per kthread
[  222.217310][ T5981] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  222.308916][ T7147] loop1: detected capacity change from 0 to 512
[  222.360311][ T7147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  222.488742][ T7137] loop3: detected capacity change from 0 to 32768
[  222.495498][ T7147] EXT4-fs (loop1): 1 truncate cleaned up
[  222.497412][ T7147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.557586][ T7137] jfs_mkdir: dtInsert returned -EIO
[  222.562846][ T7137] ERROR: (device loop3): jfs_mkdir: 
[  222.562846][ T7137] 
[  222.591215][ T5981] usb 6-1: device descriptor read/64, error -71
[  222.699645][ T7137] ERROR: (device loop3): remounting filesystem as read-only
[  223.697579][ T1544] net_ratelimit: 4 callbacks suppressed
[  223.697619][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.748162][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.860311][ T5981] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  224.154520][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.162837][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.254336][ T7158] loop0: detected capacity change from 0 to 128
[  224.303516][ T5981] usb 6-1: device descriptor read/64, error -71
[  224.314957][ T7158] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  224.344336][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.366041][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.434047][ T5981] usb usb6-port1: attempt power cycle
[  224.583247][ T7158] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  224.677657][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.984000][ T5981] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  225.584886][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.593308][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.617908][ T7108] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  225.805690][ T7166] loop1: detected capacity change from 0 to 8
[  225.814277][ T7166] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  226.467820][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.482928][ T7166] cramfs: Error -5 while decompressing!
[  226.488919][ T7166] cramfs: ffffffff99bf6668(26)->ffff88806c160000(4096)
[  226.495820][ T7166] cramfs: Error -3 while decompressing!
[  226.501361][ T7166] cramfs: ffffffff99bf6682(26)->ffff888075cd7000(4096)
[  226.508251][ T7166] cramfs: Error -3 while decompressing!
[  226.513843][ T7166] cramfs: ffffffff99bf669c(16)->ffff888075cd6000(4096)
[  226.520731][ T7166] cramfs: Error -5 while decompressing!
[  226.528158][ T7166] cramfs: ffffffff99bf6668(26)->ffff88806c160000(4096)
[  226.535264][   T30] audit: type=1800 audit(1757947709.340:23): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.320" name="file2" dev="loop1" ino=348 res=0 errno=0
[  226.678347][ T6022] udevd[6022]: incorrect cramfs checksum on /dev/loop1
[  226.773161][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.881312][ T7175] loop0: detected capacity change from 0 to 8
[  226.888269][ T7175] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  226.904603][ T7175] cramfs: Error -5 while decompressing!
[  226.910157][ T7175] cramfs: ffffffff99bf2668(26)->ffff88805021e000(4096)
[  226.917319][ T7175] cramfs: Error -3 while decompressing!
[  226.922882][ T7175] cramfs: ffffffff99bf2682(26)->ffff888049ac0000(4096)
[  226.929957][ T7175] cramfs: Error -3 while decompressing!
[  226.936915][ T7175] cramfs: ffffffff99bf269c(16)->ffff888049ac1000(4096)
[  226.943836][ T7175] cramfs: Error -5 while decompressing!
[  226.949366][ T7175] cramfs: ffffffff99bf2668(26)->ffff88805021e000(4096)
[  226.956731][   T30] audit: type=1800 audit(1757947709.760:24): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.324" name="file2" dev="loop0" ino=348 res=0 errno=0
[  227.084735][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'.
[  227.106371][ T6022] udevd[6022]: incorrect cramfs checksum on /dev/loop0
[  228.949023][   T24] net_ratelimit: 6 callbacks suppressed
[  228.949060][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.963481][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.089342][ T5872] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  229.477344][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.034085][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.074883][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.083050][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.103821][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.112012][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.122097][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.146406][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.225505][ T5872] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  230.238311][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.283681][ T5872] usb 4-1: config 0 descriptor??
[  230.512363][ T5872] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  230.567090][ T5872] [drm:udl_init] *ERROR* Selecting channel failed
[  230.585274][ T7195] loop1: detected capacity change from 0 to 512
[  230.615912][ T5872] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  230.624708][ T5872] [drm] Initialized udl on minor 2
[  230.638634][ T5872] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  230.649492][ T7195] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  230.687566][ T5872] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  230.823747][ T5981] usb 6-1: device descriptor read/8, error -110
[  230.845094][ T7195] EXT4-fs (loop1): 1 truncate cleaned up
[  230.853083][    T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  230.889359][ T7195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.909895][ T5872] usb 4-1: USB disconnect, device number 22
[  230.918487][    T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  231.134766][ T5981] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  231.178376][ T5981] usb 6-1: device descriptor read/8, error -32
[  231.912476][ T5981] usb usb6-port1: unable to enumerate USB device
[  231.990218][ T7207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'.
[  232.042736][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'.
[  232.083738][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'.
[  232.297471][ T7212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.335'.
[  232.422573][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.504944][ T5872] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  232.680604][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.717792][ T5872] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  232.747355][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.003694][ T5872] usb 5-1: Product: syz
[  233.013465][ T5872] usb 5-1: Manufacturer: syz
[  233.018078][ T5872] usb 5-1: SerialNumber: syz
[  233.244007][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.260398][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.271689][ T5872] usb 5-1: bad CDC descriptors
[  233.285378][ T5872] usb 5-1: USB disconnect, device number 13
[  234.279929][ T5959] net_ratelimit: 16 callbacks suppressed
[  234.279951][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.303714][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.463637][ T5872] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  234.793066][ T7236] tipc: Started in network mode
[  234.812504][ T7236] tipc: Node identity 1a4ad3682578, cluster identity 4711
[  234.855634][ T7236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.899929][ T7237] syzkaller0: entered promiscuous mode
[  235.028929][ T7237] syzkaller0: entered allmulticast mode
[  235.043671][ T5872] usb 5-1: Using ep0 maxpacket: 8
[  235.059576][ T5872] usb 5-1: config index 0 descriptor too short (expected 301, got 72)
[  235.072243][ T5872] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  235.287556][ T5872] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  235.304625][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.336153][ T7238] tipc: Resetting bearer <eth:syzkaller0>
[  235.383856][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.392707][ T7234] tipc: Resetting bearer <eth:syzkaller0>
[  235.425264][ T5872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  235.503494][ T5872] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  235.516906][ T7234] tipc: Disabling bearer <eth:syzkaller0>
[  235.591727][ T5872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  235.632635][ T5872] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  235.913580][ T7242] loop0: detected capacity change from 0 to 32768
[  235.968874][ T5872] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  235.978545][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.993492][ T5872] usb 5-1: can't set config #16, error -71
[  236.001090][ T5872] usb 5-1: USB disconnect, device number 14
[  236.090270][ T7242] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  236.090304][ T7242]   allowing incompatible features above 0.0: (unknown version)
[  236.090319][ T7242]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  236.134997][ T7242] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  236.143145][ T7242] bcachefs (loop0): initializing new filesystem
[  236.157225][ T7242] bcachefs (loop0): going read-write
[  236.199005][ T7242] bcachefs (loop0): marking superblocks
[  236.213042][ T7242] bcachefs (loop0): initializing freespace
[  236.222473][ T7242] bcachefs (loop0): done initializing freespace
[  236.230745][ T7242] bcachefs (loop0): reading snapshots table
[  236.236693][ T7242] bcachefs (loop0): reading snapshots done
[  236.261993][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.295997][ T7242] bcachefs (loop0): done starting filesystem
[  236.317195][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.485582][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.494712][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.118228][ T5873] bcachefs (loop0): shutting down
[  237.123265][ T5873] bcachefs (loop0): going read-only
[  237.163574][ T5873] bcachefs (loop0): finished waiting for writes to stop
[  237.267937][ T5873] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  237.724328][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.732915][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.905780][ T5873] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  237.945248][ T5873] bcachefs (loop0): clean shutdown complete, journal seq 4
[  237.998924][ T5873] bcachefs (loop0): marking filesystem clean
[  238.042534][ T7262] loop2: detected capacity change from 0 to 512
[  238.129789][ T7262] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  238.201956][ T5873] bcachefs (loop0): shutdown complete
[  238.233754][ T1544] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  238.257680][ T7262] EXT4-fs (loop2): 1 truncate cleaned up
[  238.326854][ T7262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.885655][ T1544] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  238.957064][ T1544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.010970][ T1544] usb 5-1: config 0 descriptor??
[  239.195590][ T5869] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.313942][ T5872] net_ratelimit: 2 callbacks suppressed
[  239.313964][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.383976][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.470669][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'.
[  239.491255][ T1544] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  239.542183][ T1544] [drm:udl_init] *ERROR* Selecting channel failed
[  239.647617][ T1544] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  239.682171][ T1544] [drm] Initialized udl on minor 2
[  239.716088][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.724907][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.744415][ T1544] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  239.754523][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.771846][ T1544] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  239.779985][ T6080] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  239.784180][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.796557][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.810649][ T6080] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  239.818575][ T1544] usb 5-1: USB disconnect, device number 15
[  239.864354][ T6080] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  240.201207][ T7280] sg_write: data in/out 852092/81 bytes for SCSI command 0x1c-- guessing data in;
[  240.201207][ T7280]    program syz.3.346 not setting count and/or reply_len properly
[  240.531053][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.550390][ T1023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.559411][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.406986][ T7296] loop5: detected capacity change from 0 to 4096
[  242.687805][ T7301] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.024345][ T7303] loop5: detected capacity change from 4096 to 64
[  243.310876][ T7308] loop3: detected capacity change from 0 to 32768
[  243.393996][ T1544] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  243.624498][ T1544] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.653547][ T1544] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.673702][ T1544] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  243.683883][ T1544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.745622][ T1544] usb 3-1: config 0 descriptor??
[  243.855526][ T7308] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  243.855565][ T7308]   allowing incompatible features above 0.0: (unknown version)
[  243.855580][ T7308]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  243.900123][ T7308] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  243.908408][ T7308] bcachefs (loop3): initializing new filesystem
[  243.921674][ T7308] bcachefs (loop3): going read-write
[  244.228212][ T7316] loop4: detected capacity change from 0 to 32768
[  244.281336][ T7308] bcachefs (loop3): marking superblocks
[  244.297386][ T7308] bcachefs (loop3): initializing freespace
[  244.307666][ T7308] bcachefs (loop3): done initializing freespace
[  244.317375][ T7308] bcachefs (loop3): reading snapshots table
[  244.323329][ T7308] bcachefs (loop3): reading snapshots done
[  244.400148][ T7308] bcachefs (loop3): done starting filesystem
[  244.428847][ T6031] net_ratelimit: 9 callbacks suppressed
[  244.428865][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  244.582577][ T7316] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  244.582612][ T7316]   allowing incompatible features above 0.0: (unknown version)
[  244.582626][ T7316]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  244.627902][ T7316] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  244.636151][ T7316] bcachefs (loop4): initializing new filesystem
[  244.652210][ T7316] bcachefs (loop4): going read-write
[  244.713769][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.429511][ T7316] bcachefs (loop4): marking superblocks
[  245.442758][ T7316] bcachefs (loop4): initializing freespace
[  245.452067][ T7316] bcachefs (loop4): done initializing freespace
[  245.460797][ T7316] bcachefs (loop4): reading snapshots table
[  245.467293][ T7316] bcachefs (loop4): reading snapshots done
[  245.467518][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.484454][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.540090][ T7316] bcachefs (loop4): done starting filesystem
[  245.784148][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.795160][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.804193][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.816812][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.503941][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.557665][ T5863] bcachefs (loop4): shutting down
[  246.562723][ T5863] bcachefs (loop4): going read-only
[  246.604740][ T5865] bcachefs (loop3): shutting down
[  246.618835][ T5865] bcachefs (loop3): going read-only
[  246.632720][ T5865] bcachefs (loop3): finished waiting for writes to stop
[  246.653895][ T5863] bcachefs (loop4): finished waiting for writes to stop
[  246.668230][ T5865] bcachefs (loop3): flushing journal and stopping allocators, journal seq 5
[  246.689816][ T5863] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4
[  246.738166][ T5865] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5
[  246.823858][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.878653][ T5865] bcachefs (loop3): clean shutdown complete, journal seq 6
[  246.905069][ T5865] bcachefs (loop3): marking filesystem clean
[  246.927338][ T5863] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4
[  246.970088][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.047111][ T5863] bcachefs (loop4): clean shutdown complete, journal seq 5
[  247.069722][ T5865] bcachefs (loop3): shutdown complete
[  247.081327][ T5863] bcachefs (loop4): marking filesystem clean
[  248.323927][ T5863] bcachefs (loop4): shutdown complete
[  248.490446][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.584039][ T7355] netlink: 52 bytes leftover after parsing attributes in process `syz.0.368'.
[  248.829440][ T1544] usbhid 3-1:0.0: can't add hid device: -32
[  248.839476][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.909213][ T1544] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  249.159265][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.954686][    C1] net_ratelimit: 8 callbacks suppressed
[  249.954711][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.144048][   T55] usb 3-1: USB disconnect, device number 12
[  250.205092][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.213252][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.433898][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.874253][   T12] bridge_slave_1: left allmulticast mode
[  250.881158][   T12] bridge_slave_1: left promiscuous mode
[  250.941300][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.022173][   T12] bridge_slave_0: left allmulticast mode
[  251.062197][   T12] bridge_slave_0: left promiscuous mode
[  251.113061][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.223929][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.233552][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.242382][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.251313][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.358099][ T7376] loop2: detected capacity change from 0 to 4096
[  251.467558][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.515349][ T7377] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  251.545089][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.615682][ T7376] loop2: detected capacity change from 4096 to 64
[  252.934078][ T7393] netlink: 'syz.3.372': attribute type 10 has an invalid length.
[  253.911659][ T7395] loop1: detected capacity change from 0 to 32768
[  254.148436][ T7395] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  254.148465][ T7395]   allowing incompatible features above 0.0: (unknown version)
[  254.148476][ T7395]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  254.194047][ T7395] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  254.202209][ T7395] bcachefs (loop1): initializing new filesystem
[  254.215146][ T7395] bcachefs (loop1): going read-write
[  254.309012][ T7395] bcachefs (loop1): marking superblocks
[  254.321230][ T7395] bcachefs (loop1): initializing freespace
[  254.330153][ T7395] bcachefs (loop1): done initializing freespace
[  254.338543][ T7395] bcachefs (loop1): reading snapshots table
[  254.344623][ T7395] bcachefs (loop1): reading snapshots done
[  256.483729][   T55] net_ratelimit: 16 callbacks suppressed
[  256.483749][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.509240][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  256.516840][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  256.537349][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.582643][ T7395] bcachefs (loop1): done starting filesystem
[  257.461400][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.482784][ T5860] bcachefs (loop1): shutting down
[  257.515559][ T5860] bcachefs (loop1): going read-only
[  257.520813][ T5860] bcachefs (loop1): finished waiting for writes to stop
[  257.543738][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.560773][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.582288][ T5860] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4
[  257.624212][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.704274][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.816623][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.840782][ T5860] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  257.870217][   T12] bond0 (unregistering): Released all slaves
[  257.914546][ T5860] bcachefs (loop1): clean shutdown complete, journal seq 5
[  257.922622][ T5860] bcachefs (loop1): marking filesystem clean
[  258.876929][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.886771][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.909557][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.116660][ T5860] bcachefs (loop1): shutdown complete
[  259.268793][ T5869] syz-executor: attempt to access beyond end of device
[  259.268793][ T5869] loop2: rw=395265, sector=4088, nr_sectors = 2 limit=64
[  259.323646][ T5869] Buffer I/O error on dev loop2, logical block 2044, lost sync page write
[  259.340490][ T7393] team0: Port device netdevsim0 added
[  259.386898][ T5869] NILFS (loop2): unable to write superblock: err=-5
[  259.553583][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.191760][ T7429] loop4: detected capacity change from 0 to 1024
[  260.602567][   T12] hsr_slave_0: left promiscuous mode
[  260.667376][   T12] hsr_slave_1: left promiscuous mode
[  260.710222][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.887914][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.127602][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.171011][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.327642][   T12] veth1_macvtap: left promiscuous mode
[  261.364589][   T12] veth0_macvtap: left promiscuous mode
[  261.370278][   T12] veth1_vlan: left promiscuous mode
[  261.453937][   T12] veth0_vlan: left promiscuous mode
[  261.965402][ T7446] loop3: detected capacity change from 0 to 4096
[  262.033896][   T55] net_ratelimit: 6 callbacks suppressed
[  262.033919][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.049115][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.081221][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  262.092538][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  262.100487][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  262.108747][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  262.117227][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  262.267070][ T7452] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  262.457276][ T7446] loop3: detected capacity change from 4096 to 64
[  263.066374][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.080131][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.102352][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.119911][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.138547][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.640568][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.712514][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.805114][ T7108] hfsplus: b-tree write err: -5, ino 4
[  264.250353][ T7466] loop4: detected capacity change from 0 to 32768
[  264.265430][ T5881] Bluetooth: hci1: command tx timeout
[  264.274802][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.318498][   T12] team0 (unregistering): Port device team_slave_1 removed
[  264.390292][   T12] team0 (unregistering): Port device team_slave_0 removed
[  264.436882][ T7466] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  264.436914][ T7466]   allowing incompatible features above 0.0: (unknown version)
[  264.436929][ T7466]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  264.481670][ T7466] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  264.490054][ T7466] bcachefs (loop4): initializing new filesystem
[  264.504195][ T7466] bcachefs (loop4): going read-write
[  264.537501][ T7466] bcachefs (loop4): marking superblocks
[  264.551016][ T7466] bcachefs (loop4): initializing freespace
[  264.559918][ T7466] bcachefs (loop4): done initializing freespace
[  264.568282][ T7466] bcachefs (loop4): reading snapshots table
[  264.574226][ T7466] bcachefs (loop4): reading snapshots done
[  264.612156][ T7466] bcachefs (loop4): done starting filesystem
[  265.512575][ T5863] bcachefs (loop4): shutting down
[  265.533535][ T5863] bcachefs (loop4): going read-only
[  265.538763][ T5863] bcachefs (loop4): finished waiting for writes to stop
[  265.579790][ T5863] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3
[  265.668835][ T5863] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  265.692732][ T5863] bcachefs (loop4): clean shutdown complete, journal seq 4
[  265.710091][ T5863] bcachefs (loop4): marking filesystem clean
[  265.782173][ T5863] bcachefs (loop4): shutdown complete
[  266.343587][ T5864] Bluetooth: hci1: command tx timeout
[  267.039915][ T5865] syz-executor: attempt to access beyond end of device
[  267.039915][ T5865] loop3: rw=395265, sector=4088, nr_sectors = 2 limit=64
[  267.074036][ T5865] Buffer I/O error on dev loop3, logical block 2044, lost sync page write
[  267.100199][ T5865] NILFS (loop3): unable to write superblock: err=-5
[  267.544064][ T6031] net_ratelimit: 10 callbacks suppressed
[  267.544089][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.558053][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.624543][   T12] IPVS: stop unused estimator thread 0...
[  267.658976][ T7449] chnl_net:caif_netlink_parms(): no params data found
[  268.109024][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.426294][ T5864] Bluetooth: hci1: command tx timeout
[  268.506982][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.524113][ T7108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.534442][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.567966][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.584343][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.789563][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.970317][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.018317][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.057961][ T7449] bridge_slave_0: entered allmulticast mode
[  269.092612][ T7449] bridge_slave_0: entered promiscuous mode
[  269.143801][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.184868][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.192030][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.268168][ T7449] bridge_slave_1: entered allmulticast mode
[  269.325415][ T7449] bridge_slave_1: entered promiscuous mode
[  269.542910][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.624736][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.633040][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.885858][ T7521] netlink: 52 bytes leftover after parsing attributes in process `syz.0.398'.
[  270.040205][   T49] team0: Port device netdevsim0 removed
[  270.054171][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  270.088201][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.257629][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  270.302546][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  270.346790][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  270.385339][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.386150][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  270.410582][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.422573][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  270.426695][   T24] usb 2-1: Product: syz
[  270.456625][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  270.465955][ T5881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  270.480908][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  270.503731][ T5864] Bluetooth: hci1: command tx timeout
[  270.532138][   T24] usb 2-1: Manufacturer: syz
[  270.550728][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.575282][   T24] usb 2-1: SerialNumber: syz
[  270.590185][ T7525] loop4: detected capacity change from 0 to 4096
[  270.809323][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.829218][ T7530] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.840712][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.903227][ T7449] team0: Port device team_slave_0 added
[  270.908298][ T7529] loop0: detected capacity change from 0 to 1764
[  270.944505][   T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  270.961059][ T7449] team0: Port device team_slave_1 added
[  271.001956][   T24] usb 2-1: USB disconnect, device number 9
[  271.024529][ T7525] loop4: detected capacity change from 4096 to 64
[  272.133752][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  272.228044][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.250606][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.333497][   T24] usb 2-1: Using ep0 maxpacket: 8
[  272.349773][ T5863] syz-executor: attempt to access beyond end of device
[  272.349773][ T5863] loop4: rw=395265, sector=4088, nr_sectors = 2 limit=64
[  272.358506][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.385130][   T24] usb 2-1: config index 0 descriptor too short (expected 301, got 72)
[  272.393319][   T24] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  272.393859][ T5863] Buffer I/O error on dev loop4, logical block 2044, lost sync page write
[  272.440935][ T5863] NILFS (loop4): unable to write superblock: err=-5
[  272.455802][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.491734][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.497886][   T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  272.551812][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  272.561752][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  272.571905][   T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.581773][   T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  272.591046][ T5864] Bluetooth: hci3: command tx timeout
[  272.603463][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.634302][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.782043][ T6031] net_ratelimit: 6 callbacks suppressed
[  272.782067][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.823807][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.823810][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.839991][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.995353][   T24] usb 2-1: usb_control_msg returned -71
[  273.000972][   T24] usbtmc 2-1:16.0: can't read capabilities
[  273.410740][   T24] usb 2-1: USB disconnect, device number 10
[  273.679349][ T7449] hsr_slave_0: entered promiscuous mode
[  273.728556][ T7449] hsr_slave_1: entered promiscuous mode
[  273.777752][ T7449] debugfs: 'hsr0' already exists in 'hsr'
[  273.796498][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.812435][ T7449] Cannot create hsr debugfs directory
[  273.864167][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.123066][   T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.274251][ T7534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.283719][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.387955][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.596025][   T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.657951][ T7566] loop1: detected capacity change from 0 to 8
[  274.664950][ T7566] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  274.675041][ T5864] Bluetooth: hci3: command tx timeout
[  274.860939][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.928531][ T5932] udevd[5932]: incorrect cramfs checksum on /dev/loop1
[  275.000446][ T5932] udevd[5932]: incorrect cramfs checksum on /dev/loop1
[  275.378673][ T7568] cramfs: Error -5 while decompressing!
[  275.384558][ T7568] cramfs: ffffffff99bf6668(26)->ffff88806a5b5000(4096)
[  275.391475][ T7568] cramfs: Error -3 while decompressing!
[  275.397100][ T7568] cramfs: ffffffff99bf6682(26)->ffff8880759d8000(4096)
[  275.404175][ T7568] cramfs: Error -3 while decompressing!
[  275.409719][ T7568] cramfs: ffffffff99bf669c(16)->ffff888052664000(4096)
[  275.416671][ T7568] cramfs: Error -5 while decompressing!
[  275.422212][ T7568] cramfs: ffffffff99bf6668(26)->ffff88806a5b5000(4096)
[  275.433770][   T30] audit: type=1800 audit(1757947758.240:25): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.406" name="file2" dev="loop1" ino=348 res=0 errno=0
[  275.601523][   T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.855459][   T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.743593][ T5864] Bluetooth: hci3: command tx timeout
[  277.178775][ T7526] chnl_net:caif_netlink_parms(): no params data found
[  277.774059][   T49] bridge_slave_1: left allmulticast mode
[  277.779840][   T49] bridge_slave_1: left promiscuous mode
[  277.846067][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.867444][   T49] bridge_slave_0: left allmulticast mode
[  277.873113][   T49] bridge_slave_0: left promiscuous mode
[  277.889305][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.944134][   T55] net_ratelimit: 15 callbacks suppressed
[  277.944157][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.092267][   T49] bridge_slave_1: left allmulticast mode
[  278.117463][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.136495][   T49] bridge_slave_1: left promiscuous mode
[  278.142265][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.277546][   T49] bridge_slave_0: left allmulticast mode
[  278.309385][   T49] bridge_slave_0: left promiscuous mode
[  278.382489][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.432826][ T7594] loop1: detected capacity change from 0 to 1764
[  278.592677][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.782772][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.906152][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.983870][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.163446][ T5864] Bluetooth: hci3: command tx timeout
[  279.184510][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.624443][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.024061][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.032770][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.921761][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.967530][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.010623][   T49] bond0 (unregistering): Released all slaves
[  281.826901][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  281.857235][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.880122][   T49] bond0 (unregistering): Released all slaves
[  282.015313][ T7590] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  282.038614][ T7590] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  282.210856][ T7590] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  282.249962][ T7590] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  282.304266][   T49] tipc: Left network mode
[  282.330492][ T7590] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  282.398180][ T7590] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  282.429528][ T7590] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  282.484493][ T7590] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  282.561812][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  282.585134][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  282.604064][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  282.615007][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  282.627245][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  282.724796][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.746634][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.790274][ T7526] bridge_slave_0: entered allmulticast mode
[  282.842948][ T7526] bridge_slave_0: entered promiscuous mode
[  283.262416][ T7620] netlink: 'syz.1.416': attribute type 5 has an invalid length.
[  283.324942][ T6031] net_ratelimit: 13 callbacks suppressed
[  283.324978][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.401377][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.415633][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.439414][ T7526] bridge_slave_1: entered allmulticast mode
[  283.460396][ T7622] new mount options do not match the existing superblock, will be ignored
[  283.468355][ T7526] bridge_slave_1: entered promiscuous mode
[  283.471303][ T7622] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  283.692692][ T7449] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  283.786067][ T7526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.844710][ T7526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.023905][ T5881] Bluetooth: hci5: command 0x0406 tx timeout
[  284.061323][ T7449] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  284.097461][ T7449] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  284.290827][ T5881] Bluetooth: hci1: command 0x0c1a tx timeout
[  284.341719][ T7449] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  284.344056][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.453451][ T5881] Bluetooth: hci3: command 0x0c1a tx timeout
[  284.727037][ T5881] Bluetooth: hci2: command tx timeout
[  284.966784][ T7526] team0: Port device team_slave_0 added
[  284.983862][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.015692][ T7526] team0: Port device team_slave_1 added
[  285.303742][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.360638][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.384594][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.393994][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.410535][    C0] vkms_vblank_simulate: vblank timer overrun
[  285.539394][ T7526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.655643][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.696673][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.787373][ T7108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.800710][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.809648][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.818730][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.850018][ T7526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.072393][   T49] hsr_slave_0: left promiscuous mode
[  286.109097][ T5881] Bluetooth: hci5: command 0x0406 tx timeout
[  286.133431][   T49] hsr_slave_1: left promiscuous mode
[  286.139598][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.147590][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.169031][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.179976][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.208052][ T7645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.222701][   T49] hsr_slave_0: left promiscuous mode
[  286.267977][   T49] hsr_slave_1: left promiscuous mode
[  286.289092][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.323526][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.343497][ T5881] Bluetooth: hci1: command 0x0c1a tx timeout
[  286.356346][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.373152][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.452559][   T49] veth1_macvtap: left promiscuous mode
[  286.476312][   T49] veth0_macvtap: left promiscuous mode
[  286.497663][   T49] veth1_vlan: left promiscuous mode
[  286.503602][ T5881] Bluetooth: hci3: command 0x0c1a tx timeout
[  286.523402][   T49] veth0_vlan: left promiscuous mode
[  286.660515][   T49] veth1_macvtap: left promiscuous mode
[  286.676127][   T49] veth0_macvtap: left promiscuous mode
[  286.681783][   T49] veth1_vlan: left promiscuous mode
[  286.729456][   T49] veth0_vlan: left promiscuous mode
[  286.753788][ T5881] Bluetooth: hci2: command tx timeout
[  288.343952][ T5971] net_ratelimit: 24 callbacks suppressed
[  288.343982][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.346251][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.366689][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.387195][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.428709][ T5881] Bluetooth: hci1: command 0x0c1a tx timeout
[  288.504351][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.578519][    T9] IPVS: starting estimator thread 0...
[  288.591288][ T7655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.599880][ T5881] Bluetooth: hci3: command 0x0c1a tx timeout
[  288.703492][ T7656] IPVS: using max 25 ests per chain, 60000 per kthread
[  288.842324][ T5881] Bluetooth: hci2: command tx timeout
[  288.999590][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.232663][ T7660] loop1: detected capacity change from 0 to 1764
[  289.263553][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  289.272699][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  289.280511][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  289.289271][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  289.298955][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  289.649515][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.033746][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.288548][   T49] team0 (unregistering): Port device team_slave_1 removed
[  290.440851][   T49] team0 (unregistering): Port device team_slave_0 removed
[  290.673738][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.903760][ T5881] Bluetooth: hci2: command tx timeout
[  291.393763][ T5881] Bluetooth: hci4: command tx timeout
[  292.608599][   T49] team0 (unregistering): Port device team_slave_1 removed
[  292.835456][   T49] team0 (unregistering): Port device team_slave_0 removed
[  293.463562][ T5881] Bluetooth: hci4: command tx timeout
[  293.466908][ T4799] net_ratelimit: 9 callbacks suppressed
[  293.466926][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.485621][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.498013][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.623964][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.787020][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.793718][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.117707][ T7526] hsr_slave_0: entered promiscuous mode
[  294.137405][ T7526] hsr_slave_1: entered promiscuous mode
[  294.161527][ T7526] debugfs: 'hsr0' already exists in 'hsr'
[  294.179043][ T7526] Cannot create hsr debugfs directory
[  294.423890][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.664309][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.830198][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.332832][ T7680] sg_write: data in/out 852092/81 bytes for SCSI command 0x1c-- guessing data in;
[  295.332832][ T7680]    program syz.0.426 not setting count and/or reply_len properly
[  295.543671][ T5881] Bluetooth: hci4: command tx timeout
[  296.003265][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.244595][ T7685] loop0: detected capacity change from 0 to 8
[  296.251536][ T7685] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  296.615611][ T7691] cramfs: Error -5 while decompressing!
[  296.621262][ T7691] cramfs: ffffffff99bf2668(26)->ffff888049ef1000(4096)
[  296.628456][ T7691] cramfs: Error -3 while decompressing!
[  296.634210][ T7691] cramfs: ffffffff99bf2682(26)->ffff888049ef2000(4096)
[  296.641150][ T7691] cramfs: Error -3 while decompressing!
[  296.646790][ T7691] cramfs: ffffffff99bf269c(16)->ffff888049ef3000(4096)
[  296.653988][ T7691] cramfs: Error -5 while decompressing!
[  296.659581][ T7691] cramfs: ffffffff99bf2668(26)->ffff888049ef1000(4096)
[  297.202485][   T30] audit: type=1800 audit(1757947779.470:26): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.428" name="file2" dev="loop0" ino=348 res=0 errno=0
[  297.222032][    C1] vkms_vblank_simulate: vblank timer overrun
[  297.229622][ T7667] udevd[7667]: incorrect cramfs checksum on /dev/loop0
[  297.293589][ T7667] udevd[7667]: incorrect cramfs checksum on /dev/loop0
[  297.358901][ T7606] chnl_net:caif_netlink_parms(): no params data found
[  297.623897][ T5881] Bluetooth: hci4: command tx timeout
[  298.585207][ T4799] net_ratelimit: 14 callbacks suppressed
[  298.585229][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.601526][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.613551][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.835102][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.842892][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.879969][ T7606] bridge_slave_0: entered allmulticast mode
[  298.916385][ T7606] bridge_slave_0: entered promiscuous mode
[  298.968417][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.014519][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.056668][ T7606] bridge_slave_1: entered allmulticast mode
[  299.097075][ T7606] bridge_slave_1: entered promiscuous mode
[  299.303979][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.312287][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.599068][ T7606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.752470][ T7606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.943588][ T7526] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  299.980263][ T7526] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  300.029505][ T7526] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  300.218423][ T7606] team0: Port device team_slave_0 added
[  300.263779][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.270086][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.322839][ T7526] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  300.332373][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.343780][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.352172][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.381115][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.392169][ T7661] chnl_net:caif_netlink_parms(): no params data found
[  300.470730][ T7606] team0: Port device team_slave_1 added
[  300.858675][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.882392][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.908384][    C1] vkms_vblank_simulate: vblank timer overrun
[  300.979212][ T7606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.189973][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.295571][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.302555][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.328529][    C1] vkms_vblank_simulate: vblank timer overrun
[  301.540123][ T7606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.728742][ T7449] 8021q: adding VLAN 0 to HW filter on device team0
[  301.875921][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.319524][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.407198][ T4799] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.414412][ T4799] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.482645][ T4799] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.489901][ T4799] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.664124][ T7754] netlink: 52 bytes leftover after parsing attributes in process `syz.1.442'.
[  303.681300][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.772436][ T7606] hsr_slave_0: entered promiscuous mode
[  303.805678][ T7606] hsr_slave_1: entered promiscuous mode
[  303.812013][ T7606] debugfs: 'hsr0' already exists in 'hsr'
[  303.853853][ T7606] Cannot create hsr debugfs directory
[  303.877661][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.905958][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.932200][ T7661] bridge_slave_0: entered allmulticast mode
[  303.974046][ T7661] bridge_slave_0: entered promiscuous mode
[  304.080248][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.115806][ T7661] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.152359][ T7661] bridge_slave_1: entered allmulticast mode
[  304.180640][ T7661] bridge_slave_1: entered promiscuous mode
[  304.188929][   T24] net_ratelimit: 29 callbacks suppressed
[  304.188947][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.355318][ T7664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.364319][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.639814][ T7762] loop1: detected capacity change from 0 to 32768
[  304.644112][ T7766] netlink: 'syz.0.446': attribute type 1 has an invalid length.
[  304.648484][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.654676][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.823720][ T7775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.446'.
[  304.830140][ T7762] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  304.855242][ T7762]   allowing incompatible features above 0.0: (unknown version)
[  304.863730][ T7762]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  304.879355][ T7762] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  304.887606][ T7762] bcachefs (loop1): initializing new filesystem
[  304.902732][ T7762] bcachefs (loop1): going read-write
[  304.915154][ T7775] openvswitch: netlink: Flow actions attr not present in new flow.
[  304.958790][ T7762] bcachefs (loop1): marking superblocks
[  304.973700][ T7762] bcachefs (loop1): initializing freespace
[  304.983751][ T7762] bcachefs (loop1): done initializing freespace
[  304.992480][ T7762] bcachefs (loop1): reading snapshots table
[  304.998452][ T7762] bcachefs (loop1): reading snapshots done
[  305.033219][ T7762] bcachefs (loop1): done starting filesystem
[  305.311111][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.764524][ T7770] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  305.870707][ T7770] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  305.947577][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.982649][ T5860] bcachefs (loop1): shutting down
[  306.015306][ T5860] bcachefs (loop1): going read-only
[  306.047835][ T5860] bcachefs (loop1): finished waiting for writes to stop
[  306.075264][ T5860] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  306.147241][ T7780] gretap1: entered promiscuous mode
[  306.184688][ T5860] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  306.221848][ T5860] bcachefs (loop1): clean shutdown complete, journal seq 4
[  306.226560][ T7780] bond1: (slave gretap1): making interface the new active one
[  306.248377][ T7780] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  306.273243][ T5860] bcachefs (loop1): marking filesystem clean
[  306.343982][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.352094][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.405570][ T5860] bcachefs (loop1): shutdown complete
[  306.410508][ T7775] macvlan2: entered promiscuous mode
[  306.429267][ T7775] macvlan2: entered allmulticast mode
[  306.449118][ T7775] bond1: entered promiscuous mode
[  306.491121][ T7775] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  306.558584][ T7775] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  306.631367][ T7775] bond1: left promiscuous mode
[  306.810008][ T7661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.960101][ T7661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.217359][ T7661] team0: Port device team_slave_0 added
[  307.360717][ T7661] team0: Port device team_slave_1 added
[  307.969608][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.012563][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.059629][ T7661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.157928][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.198687][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.324581][ T7661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.479157][ T7526] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.953159][   T49] bridge_slave_1: left allmulticast mode
[  308.997632][   T49] bridge_slave_1: left promiscuous mode
[  309.004223][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.083331][   T49] bridge_slave_0: left allmulticast mode
[  309.089169][   T49] bridge_slave_0: left promiscuous mode
[  309.124808][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.384872][    T9] net_ratelimit: 7 callbacks suppressed
[  309.384896][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.463759][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.624747][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.103859][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.112718][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.121490][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.130498][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.506177][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.144743][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.196641][ T5959] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  311.384065][ T5959] usb 1-1: Using ep0 maxpacket: 8
[  311.404419][ T5959] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  311.430441][ T5959] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  311.464683][ T5959] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  311.510760][ T5959] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  311.544115][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.560668][ T5959] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.591976][ T5959] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  311.617619][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.720348][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.770644][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.797411][ T7810] netlink: 'syz.1.447': attribute type 2 has an invalid length.
[  311.817031][   T49] bond0 (unregistering): Released all slaves
[  311.881558][ T5959] usb 1-1: usb_control_msg returned -32
[  311.892890][ T5959] usbtmc 1-1:16.0: can't read capabilities
[  311.934095][ T7661] hsr_slave_0: entered promiscuous mode
[  311.970772][ T7661] hsr_slave_1: entered promiscuous mode
[  312.002831][ T7661] debugfs: 'hsr0' already exists in 'hsr'
[  312.033815][ T7661] Cannot create hsr debugfs directory
[  312.248205][ T7824] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  312.450466][   T24] usb 1-1: USB disconnect, device number 8
[  312.804111][ T7526] 8021q: adding VLAN 0 to HW filter on device team0
[  312.848525][ T7606] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  312.978889][   T49] hsr_slave_0: left promiscuous mode
[  313.059685][   T49] hsr_slave_1: left promiscuous mode
[  313.086604][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.121203][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.330448][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  313.405993][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  313.530337][   T49] veth1_macvtap: left promiscuous mode
[  313.564768][   T49] veth0_macvtap: left promiscuous mode
[  313.578520][   T49] veth1_vlan: left promiscuous mode
[  313.606467][   T49] veth0_vlan: left promiscuous mode
[  313.734406][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.456'.
[  313.763807][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  313.904677][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'.
[  313.976719][   T24] usb 2-1: Using ep0 maxpacket: 8
[  314.010824][   T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  314.063698][   T24] usb 2-1: config 179 has no interface number 0
[  314.116092][   T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  314.204709][   T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  314.268924][   T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  314.327891][   T24] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  314.398886][   T24] usb 2-1: config 179 interface 65 has no altsetting 0
[  314.488969][   T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  314.551164][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.667154][ T6031] net_ratelimit: 12 callbacks suppressed
[  314.667177][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.827904][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.836232][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.853763][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.867660][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.877511][ T7108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.905081][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.914846][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.351520][   T24] usb 2-1: USB disconnect, device number 11
[  316.509674][ T1544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.509763][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  316.534110][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  316.913405][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.978204][   T49] team0 (unregistering): Port device team_slave_1 removed
[  317.007665][ T7847] netlink: 52 bytes leftover after parsing attributes in process `syz.1.457'.
[  317.111938][   T49] team0 (unregistering): Port device team_slave_0 removed
[  318.238891][ T7606] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  318.316404][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.428978][ T7606] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  318.535963][ T7606] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  318.736102][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.743248][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.066340][ T7860] program syz.1.458 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.077811][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.084941][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.023930][   T24] net_ratelimit: 7 callbacks suppressed
[  320.023953][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.037883][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.328142][ T7661] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  320.478172][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.532134][ T7661] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  320.659652][ T7661] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  320.843644][ T7661] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  320.980203][ T7606] 8021q: adding VLAN 0 to HW filter on device team0
[  321.066881][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.075173][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.183715][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.190900][ T7108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.386057][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.393218][ T7108] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.944708][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.948680][ T7526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.952950][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.029478][ T7902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.038103][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.085368][ T7902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.113952][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.385822][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  322.397738][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  322.406990][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  322.417167][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  322.431999][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  323.032692][ T7661] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.516481][ T7930] netlink: 52 bytes leftover after parsing attributes in process `syz.1.467'.
[  323.609150][ T7661] 8021q: adding VLAN 0 to HW filter on device team0
[  324.075148][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.082300][ T7618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.508420][ T5864] Bluetooth: hci1: command tx timeout
[  324.701776][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.708985][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.839231][ T7606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.061088][ T7526] veth0_vlan: entered promiscuous mode
[  325.235047][   T55] net_ratelimit: 15 callbacks suppressed
[  325.235072][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.250455][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.488947][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.666737][ T7526] veth1_vlan: entered promiscuous mode
[  326.104328][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.269070][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.277499][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.592756][ T5864] Bluetooth: hci1: command tx timeout
[  326.683176][ T7664] bridge_slave_1: left allmulticast mode
[  326.702666][ T7664] bridge_slave_1: left promiscuous mode
[  326.739812][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.801223][ T7664] bridge_slave_0: left allmulticast mode
[  326.822657][ T7664] bridge_slave_0: left promiscuous mode
[  326.863664][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.304548][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.312761][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.023723][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.042977][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.703527][ T5881] Bluetooth: hci1: command tx timeout
[  330.213357][ T7664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.246357][ T7664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.277337][ T7664] bond0 (unregistering): Released all slaves
[  330.480397][ T7661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  330.585226][ T5959] net_ratelimit: 4 callbacks suppressed
[  330.585260][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.599662][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.602140][ T7992] netlink: 52 bytes leftover after parsing attributes in process `syz.0.479'.
[  330.684965][ T7910] chnl_net:caif_netlink_parms(): no params data found
[  330.746595][ T5881] Bluetooth: hci1: command 0x0419 tx timeout
[  330.920408][ T7664] hsr_slave_0: left promiscuous mode
[  331.005266][ T7664] hsr_slave_1: left promiscuous mode
[  331.036413][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0
[  331.074066][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.082383][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.119934][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1
[  331.140544][ T5881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  331.150403][ T5881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  331.161395][ T5881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  331.170384][ T5881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  331.179826][ T5881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  331.628928][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.637284][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.867024][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.062112][ T8007] program syz.1.482 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.753827][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.773516][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.788259][ T7664] team0 (unregistering): Port device team_slave_1 removed
[  332.823844][ T5864] Bluetooth: hci1: command 0x0419 tx timeout
[  333.053370][ T7664] team0 (unregistering): Port device team_slave_0 removed
[  333.224783][ T5864] Bluetooth: hci6: command tx timeout
[  333.795503][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.853610][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  335.031935][ T7606] veth0_vlan: entered promiscuous mode
[  335.044820][   T24] usb 1-1: Using ep0 maxpacket: 32
[  335.074787][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.102407][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.124580][ T7910] bridge_slave_0: entered allmulticast mode
[  335.172213][ T7910] bridge_slave_0: entered promiscuous mode
[  335.222169][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.285125][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.293171][ T7910] bridge_slave_1: entered allmulticast mode
[  335.299905][   T24] usb 1-1: config 0 has no interfaces?
[  335.305417][ T5881] Bluetooth: hci6: command tx timeout
[  335.313361][ T7910] bridge_slave_1: entered promiscuous mode
[  335.321378][   T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  335.330589][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.338774][   T24] usb 1-1: Product: syz
[  335.390036][   T24] usb 1-1: Manufacturer: syz
[  335.470190][   T24] usb 1-1: SerialNumber: syz
[  335.773611][   T24] usb 1-1: config 0 descriptor??
[  335.863907][   T55] net_ratelimit: 6 callbacks suppressed
[  335.863933][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.887393][ T7606] veth1_vlan: entered promiscuous mode
[  335.989573][ T7606] veth0_macvtap: entered promiscuous mode
[  336.013020][ T7606] veth1_macvtap: entered promiscuous mode
[  336.068626][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.115056][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.201005][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'.
[  336.438254][ T7910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.535384][ T8038] loop1: detected capacity change from 0 to 8
[  336.542674][ T8038] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  336.574640][ T8014] dummy0: entered promiscuous mode
[  336.587625][ T7827] udevd[7827]: incorrect cramfs checksum on /dev/loop1
[  336.765107][ T8014] macvtap2: entered promiscuous mode
[  336.781555][ T7827] udevd[7827]: incorrect cramfs checksum on /dev/loop1
[  336.795154][ T8014] macvtap2: entered allmulticast mode
[  336.892949][ T8040] cramfs: Error -5 while decompressing!
[  336.898598][ T8040] cramfs: ffffffff99bf6668(26)->ffff88804db1b000(4096)
[  336.905836][ T8040] cramfs: Error -3 while decompressing!
[  336.911425][ T8040] cramfs: ffffffff99bf6682(26)->ffff88804db1a000(4096)
[  336.918987][ T8040] cramfs: Error -3 while decompressing!
[  336.924963][ T8040] cramfs: ffffffff99bf669c(16)->ffff88806a6d1000(4096)
[  336.932292][ T8040] cramfs: Error -5 while decompressing!
[  336.937927][ T8040] cramfs: ffffffff99bf6668(26)->ffff88804db1b000(4096)
[  337.516930][ T5881] Bluetooth: hci6: command 0x040f tx timeout
[  337.530847][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.539225][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.553998][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.562525][   T30] audit: type=1800 audit(1757947819.750:27): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.487" name="file2" dev="loop1" ino=348 res=0 errno=0
[  337.578379][ T8014] dummy0: entered allmulticast mode
[  337.645112][ T5959] usb 1-1: USB disconnect, device number 9
[  337.701158][ T7910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.987255][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.173843][ T7910] team0: Port device team_slave_0 added
[  338.247696][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.298159][ T7910] team0: Port device team_slave_1 added
[  338.584481][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.592776][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.943181][ T7910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.013877][ T7910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.039823][    C1] vkms_vblank_simulate: vblank timer overrun
[  339.124017][ T7910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.171842][ T7910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.202488][ T7910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.389362][ T7910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.451489][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.544113][ T5864] Bluetooth: hci6: command 0x040f tx timeout
[  339.633822][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.018596][ T4799] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.446941][ T4799] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.521144][ T7661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.072526][ T5872] net_ratelimit: 4 callbacks suppressed
[  341.072549][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.141543][ T4799] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.311692][ T8080] loop1: detected capacity change from 0 to 8
[  341.319798][ T8080] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  341.631564][ T8082] cramfs: Error -5 while decompressing!
[  341.637319][ T8082] cramfs: ffffffff99bf2668(26)->ffff888049d7b000(4096)
[  341.644373][ T8082] cramfs: Error -3 while decompressing!
[  341.649965][ T8082] cramfs: ffffffff99bf2682(26)->ffff88806afb9000(4096)
[  341.656959][ T8082] cramfs: Error -3 while decompressing!
[  341.662554][ T8082] cramfs: ffffffff99bf269c(16)->ffff888075de5000(4096)
[  341.669803][ T8082] cramfs: Error -5 while decompressing!
[  341.675417][ T8082] cramfs: ffffffff99bf2668(26)->ffff888049d7b000(4096)
[  342.242788][ T5864] Bluetooth: hci6: command 0x040f tx timeout
[  342.248919][   T30] audit: type=1800 audit(1757947824.480:28): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.497" name="file2" dev="loop1" ino=348 res=0 errno=0
[  342.284273][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.293066][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.303524][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.313959][ T7827] udevd[7827]: incorrect cramfs checksum on /dev/loop1
[  342.504650][ T7910] hsr_slave_0: entered promiscuous mode
[  342.541437][ T7910] hsr_slave_1: entered promiscuous mode
[  342.581336][ T7910] debugfs: 'hsr0' already exists in 'hsr'
[  342.584725][ T8086] netlink: 'syz.0.499': attribute type 1 has an invalid length.
[  342.614119][ T7910] Cannot create hsr debugfs directory
[  342.738130][ T4799] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.751898][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.499'.
[  342.796556][ T8090] openvswitch: netlink: Flow actions attr not present in new flow.
[  343.051605][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  343.063223][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  343.076859][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  343.085685][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  343.099698][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  343.164967][ T8089] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  343.178258][ T8089] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  343.303700][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.384166][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.632107][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.085325][ T8000] chnl_net:caif_netlink_parms(): no params data found
[  344.346374][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.424162][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.676587][ T7664] bridge_slave_1: left allmulticast mode
[  344.699459][ T7664] bridge_slave_1: left promiscuous mode
[  344.723245][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.765454][ T7664] bridge_slave_0: left allmulticast mode
[  344.784778][ T7664] bridge_slave_0: left promiscuous mode
[  344.812259][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.146183][ T5881] Bluetooth: hci2: command tx timeout
[  346.112328][ T7664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  346.155459][ T7664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  346.188559][ T7664] bond0 (unregistering): Released all slaves
[  346.423795][ T5959] net_ratelimit: 5 callbacks suppressed
[  346.423817][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.511796][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.584432][ T7664] hsr_slave_0: left promiscuous mode
[  346.612856][ T7664] hsr_slave_1: left promiscuous mode
[  346.645046][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.664576][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.691575][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.821071][ T7664] veth1_vlan: left promiscuous mode
[  346.842010][ T7664] veth0_vlan: left promiscuous mode
[  347.219336][ T8134] netlink: 'syz.1.507': attribute type 2 has an invalid length.
[  347.226109][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.231257][ T5881] Bluetooth: hci2: command tx timeout
[  347.512210][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.546158][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.805157][ T8140] loop0: detected capacity change from 0 to 128
[  347.835001][ T8140] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  347.890604][ T8140] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  348.199978][   T30] audit: type=1326 audit(1757947830.950:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.1.510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1803f8eba9 code=0x0
[  348.424416][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.585379][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.594626][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.867881][ T4799] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  349.315476][ T5881] Bluetooth: hci2: command tx timeout
[  349.357897][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  349.368074][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  349.382513][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  349.394771][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  349.409400][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  349.463730][ T8155] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  349.470275][ T8155] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  349.478718][ T8155] vhci_hcd vhci_hcd.0: Device attached
[  349.493842][ T8156] usbip_core: unknown command
[  349.498528][ T8156] vhci_hcd: unknown pdu 0
[  349.502848][ T8156] usbip_core: unknown command
[  349.592483][ T6002] vhci_hcd: stop threads
[  349.598191][ T7664] team0 (unregistering): Port device team_slave_1 removed
[  349.620096][ T6002] vhci_hcd: release socket
[  349.625132][ T6002] vhci_hcd: disconnect device
[  349.634424][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.902144][ T7664] team0 (unregistering): Port device team_slave_0 removed
[  351.383463][ T5864] Bluetooth: hci2: command tx timeout
[  351.469703][ T5864] Bluetooth: hci3: command tx timeout
[  351.476363][    T9] net_ratelimit: 3 callbacks suppressed
[  351.476381][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.783975][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.807428][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.345477][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.353885][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.743660][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.840544][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.859191][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.008423][ T8164] netlink: 'syz.0.514': attribute type 3 has an invalid length.
[  353.054990][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'.
[  353.543708][ T5864] Bluetooth: hci3: command tx timeout
[  353.881821][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.911050][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.483479][ T5971] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  354.658437][ T5971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  354.697135][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.708506][ T5971] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  354.778960][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.813313][ T5971] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  354.835583][ T8000] bridge_slave_0: entered allmulticast mode
[  354.880169][ T8000] bridge_slave_0: entered promiscuous mode
[  354.912214][ T5971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  354.943957][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.048729][ T5971] usb 1-1: Product: syz
[  355.052950][ T5971] usb 1-1: Manufacturer: syz
[  355.176613][ T8171] syzkaller1: tun_chr_ioctl cmd 1074025677
[  355.182641][ T8171] syzkaller1: linktype set to 774
[  355.261586][ T5971] usb 1-1: SerialNumber: syz
[  355.293883][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.316763][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.346164][ T8000] bridge_slave_1: entered allmulticast mode
[  355.503250][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.532171][ T8000] bridge_slave_1: entered promiscuous mode
[  355.568648][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.627735][ T5864] Bluetooth: hci3: command tx timeout
[  355.649084][ T5971] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  355.756059][ T5971] usb 1-1: USB disconnect, device number 10
[  356.153654][ T5971] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  356.208564][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.313569][ T5971] usb 1-1: Using ep0 maxpacket: 8
[  356.347197][ T5971] usb 1-1: config index 0 descriptor too short (expected 301, got 72)
[  356.383870][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.388769][ T5971] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  356.447208][ T5971] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  356.501682][ T5971] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  356.554451][ T5971] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  356.636263][ T5971] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.675239][ T5971] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  356.707967][ T5971] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  356.751247][ T5971] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  356.777222][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.920296][ T8000] team0: Port device team_slave_0 added
[  356.983712][   T55] net_ratelimit: 12 callbacks suppressed
[  356.983737][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.032614][ T5971] usb 1-1: usb_control_msg returned -32
[  357.052203][ T5971] usbtmc 1-1:16.0: can't read capabilities
[  357.063987][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.072490][ T8000] team0: Port device team_slave_1 added
[  357.143823][ T5971] usb 1-1: USB disconnect, device number 11
[  357.467323][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.548186][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.654660][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.676539][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.709331][ T5864] Bluetooth: hci3: command tx timeout
[  357.738877][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  358.024003][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.110772][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.174123][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  358.202375][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  358.320452][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  358.808007][ T8204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.829159][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.859085][ T8204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.873169][ T8094] chnl_net:caif_netlink_parms(): no params data found
[  358.897533][ T8204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.071743][ T8000] hsr_slave_0: entered promiscuous mode
[  359.107453][ T8000] hsr_slave_1: entered promiscuous mode
[  359.146304][ T8000] debugfs: 'hsr0' already exists in 'hsr'
[  359.152068][ T8000] Cannot create hsr debugfs directory
[  359.197509][ T7910] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  360.386267][ T7910] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  360.916694][ T7910] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  361.012607][ T7910] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  361.698004][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.738221][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.813971][ T8094] bridge_slave_0: entered allmulticast mode
[  361.821910][ T8094] bridge_slave_0: entered promiscuous mode
[  361.895177][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.929458][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.963888][ T8094] bridge_slave_1: entered allmulticast mode
[  361.980427][ T8094] bridge_slave_1: entered promiscuous mode
[  362.189216][ T6030] net_ratelimit: 11 callbacks suppressed
[  362.189242][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.271544][ T8240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.294611][ T8240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.303676][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.589968][ T6086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.599277][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.758373][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.992664][ T8153] chnl_net:caif_netlink_parms(): no params data found
[  363.227468][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.237595][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.399826][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.624203][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.984512][ T8094] team0: Port device team_slave_0 added
[  364.251209][ T8252] loop1: detected capacity change from 0 to 32768
[  364.271579][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.395428][ T8252] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  364.395466][ T8252]   allowing incompatible features above 0.0: (unknown version)
[  364.395477][ T8252]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  364.440560][ T8252] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  364.448758][ T8252] bcachefs (loop1): initializing new filesystem
[  364.462076][ T8252] bcachefs (loop1): going read-write
[  364.519120][ T8252] bcachefs (loop1): marking superblocks
[  364.532890][ T8252] bcachefs (loop1): initializing freespace
[  364.541630][ T8252] bcachefs (loop1): done initializing freespace
[  364.549900][ T8252] bcachefs (loop1): reading snapshots table
[  364.555846][ T8252] bcachefs (loop1): reading snapshots done
[  364.602878][ T8094] team0: Port device team_slave_1 added
[  364.642123][ T8252] bcachefs (loop1): done starting filesystem
[  365.485512][ T5860] bcachefs (loop1): shutting down
[  365.490597][ T5860] bcachefs (loop1): going read-only
[  365.593924][ T5860] bcachefs (loop1): finished waiting for writes to stop
[  365.640011][ T5860] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  365.775149][ T5860] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  365.831626][ T5860] bcachefs (loop1): clean shutdown complete, journal seq 4
[  365.844637][ T5860] bcachefs (loop1): marking filesystem clean
[  366.009727][ T5860] bcachefs (loop1): shutdown complete
[  366.059673][ T7664] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.117025][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  366.153034][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.264768][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  366.340564][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.386540][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.460616][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  366.487886][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.521046][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.557517][ T8153] bridge_slave_0: entered allmulticast mode
[  366.593696][ T8153] bridge_slave_0: entered promiscuous mode
[  366.670538][ T7664] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.751496][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.770043][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.777998][ T8153] bridge_slave_1: entered allmulticast mode
[  366.795748][ T8153] bridge_slave_1: entered promiscuous mode
[  367.027102][ T7664] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.108677][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.181763][ T8094] hsr_slave_0: entered promiscuous mode
[  367.192129][ T8094] hsr_slave_1: entered promiscuous mode
[  367.203204][ T8094] debugfs: 'hsr0' already exists in 'hsr'
[  367.217382][ T8094] Cannot create hsr debugfs directory
[  367.353953][ T7664] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.442313][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.463698][   T24] net_ratelimit: 8 callbacks suppressed
[  367.463719][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.570850][ T8276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.624206][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.750102][ T8153] team0: Port device team_slave_0 added
[  367.925856][ T8153] team0: Port device team_slave_1 added
[  369.087621][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.096136][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.101946][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.362599][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.402855][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.460423][ T8153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.490343][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.497631][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.523916][ T8153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.703779][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.104947][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.113917][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.143729][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.548285][ T5864] Bluetooth: hci3: command 0x0405 tx timeout
[  371.836760][ T8153] hsr_slave_0: entered promiscuous mode
[  371.865074][ T8153] hsr_slave_1: entered promiscuous mode
[  371.902351][ T8153] debugfs: 'hsr0' already exists in 'hsr'
[  371.942133][ T8153] Cannot create hsr debugfs directory
[  371.977084][ T8000] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  372.039814][ T8000] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  372.170017][ T7664] bridge_slave_1: left allmulticast mode
[  372.186997][ T7664] bridge_slave_1: left promiscuous mode
[  372.192990][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.267171][ T7664] bridge_slave_0: left allmulticast mode
[  372.296743][ T7664] bridge_slave_0: left promiscuous mode
[  372.302558][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.378256][ T7664] bridge_slave_1: left allmulticast mode
[  372.414193][ T7664] bridge_slave_1: left promiscuous mode
[  372.432023][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.568557][ T7664] bridge_slave_0: left allmulticast mode
[  372.633722][ T7664] bridge_slave_0: left promiscuous mode
[  372.707988][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.745067][ T5971] net_ratelimit: 5 callbacks suppressed
[  372.745086][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.826070][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.977973][ T8320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.987018][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.227056][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.235318][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.264842][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.273210][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.990147][ T7664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  375.055222][ T7664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  375.107988][ T7664] bond0 (unregistering): Released all slaves
[  375.303995][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.312983][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.763586][ T5971] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  375.933897][ T5971] usb 2-1: Using ep0 maxpacket: 16
[  375.950184][ T5971] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.988250][ T5971] usb 2-1: config 0 interface 0 has no altsetting 0
[  376.010860][ T5971] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  376.036993][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.074756][ T5971] usb 2-1: config 0 descriptor??
[  376.252910][ T7664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  376.282414][ T7664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  376.312995][ T7664] bond0 (unregistering): Released all slaves
[  376.601009][ T8000] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  376.634952][ T5971] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  376.711021][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'.
[  376.724439][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'.
[  376.822468][ T7664] hsr_slave_0: left promiscuous mode
[  376.860148][ T7664] hsr_slave_1: left promiscuous mode
[  376.884734][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.930144][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.001545][ T7664] hsr_slave_0: left promiscuous mode
[  377.038814][ T7664] hsr_slave_1: left promiscuous mode
[  377.051505][ T5971] usb 2-1: USB disconnect, device number 12
[  377.068185][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.109745][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.148775][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  377.190196][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.329823][ T7664] veth1_macvtap: left promiscuous mode
[  377.354201][ T7664] veth0_macvtap: left promiscuous mode
[  377.374880][ T7664] veth1_vlan: left promiscuous mode
[  377.380235][ T7664] veth0_vlan: left promiscuous mode
[  377.823921][ T8329] net_ratelimit: 7 callbacks suppressed
[  377.823944][ T8329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.837810][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.959456][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  377.965861][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  378.430202][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.438691][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.840351][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.906189][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.027509][ T7664] team0 (unregistering): Port device team_slave_1 removed
[  379.210286][ T7664] team0 (unregistering): Port device team_slave_0 removed
[  379.463966][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.472212][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.726582][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.734923][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.834237][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.846064][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.854651][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  382.865456][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  382.873936][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  382.882157][ T8350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'.
[  383.453928][ T8354] net_ratelimit: 1031 callbacks suppressed
[  383.453950][ T8354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.468509][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.683572][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.012916][ T8351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.024000][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.063844][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.072061][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.076747][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.088709][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.533557][ T5959] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  384.704264][ T5959] usb 2-1: Using ep0 maxpacket: 8
[  384.731002][ T5959] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  384.767023][ T5959] usb 2-1: config 179 has no interface number 0
[  384.773344][ T5959] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  384.821696][ T5959] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  384.860105][ T5959] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  384.894134][ T5959] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  384.932508][ T5959] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  384.977443][ T5959] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  384.987203][ T5881] Bluetooth: hci4: command tx timeout
[  384.995263][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.017231][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.055070][ T8356] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  385.072794][ T5959] xpad 2-1:179.65: probe with driver xpad failed with error -5
[  385.276412][ T5959] usb 2-1: USB disconnect, device number 13
[  385.424207][ T7664] team0 (unregistering): Port device team_slave_1 removed
[  385.539754][ T7664] team0 (unregistering): Port device team_slave_0 removed
[  387.063540][ T5881] Bluetooth: hci4: command tx timeout
[  387.103294][ T8000] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  387.169276][ T7910] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.727940][   T64] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  387.776770][   T64] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  387.836912][   T64] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  388.147636][   T64] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  389.149457][ T5881] Bluetooth: hci4: command tx timeout
[  389.380585][   T55] net_ratelimit: 15 callbacks suppressed
[  389.380609][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.394600][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.641036][ T5873] syz_tun (unregistering): left allmulticast mode
[  389.670739][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  389.685818][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  389.704250][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  389.727370][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  389.735298][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  390.448543][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.457853][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.063812][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.072184][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.231423][ T5881] Bluetooth: hci4: command tx timeout
[  391.383665][   T31] INFO: task syz-executor:5861 blocked for more than 143 seconds.
[  391.391734][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.418841][   T31]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  391.435839][   T31]       Blocked by coredump.
[  391.485881][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.494851][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.513829][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  391.557199][   T31] task:syz-executor    state:D stack:18856 pid:5861  tgid:5861  ppid:1      task_flags:0x40014c flags:0x00004002
[  391.674104][   T31] Call Trace:
[  391.677428][   T31]  <TASK>
[  391.680364][   T31]  __schedule+0x1798/0x4cc0
[  391.765348][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.771058][   T31]  ? __lock_acquire+0xab9/0xd20
[  391.853890][   T31]  ? __pfx___schedule+0x10/0x10
[  391.863574][ T5881] Bluetooth: hci1: command tx timeout
[  391.920928][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  391.974458][   T31]  ? schedule+0x91/0x360
[  391.978767][   T31]  schedule+0x165/0x360
[  391.982940][   T31]  wb_wait_for_completion+0x15f/0x260
[  392.085272][   T31]  ? __pfx_wb_wait_for_completion+0x10/0x10
[  392.091227][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  392.173781][   T31]  sync_inodes_sb+0x1bb/0xa10
[  392.178543][   T31]  ? __pfx_sync_inodes_sb+0x10/0x10
[  392.227429][   T31]  ? __pfx_nilfs_sync_fs+0x10/0x10
[  392.232602][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.298957][   T31]  ? __dentry_kill+0x53d/0x660
[  392.328310][   T31]  ? get_nr_dirty_inodes+0x1c4/0x210
[  392.374872][   T31]  sync_filesystem+0x17a/0x230
[  392.379693][   T31]  generic_shutdown_super+0x6f/0x2c0
[  392.421742][   T31]  kill_block_super+0x44/0x90
[  392.447267][   T31]  deactivate_locked_super+0xbc/0x130
[  392.452696][   T31]  cleanup_mnt+0x425/0x4c0
[  392.487076][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.492756][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.504082][   T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.535194][   T31]  task_work_run+0x1d4/0x260
[  392.539953][   T31]  ? __pfx_task_work_run+0x10/0x10
[  392.566922][   T31]  ? kmem_cache_free+0x18f/0x400
[  392.571898][   T31]  do_exit+0x6b5/0x2300
[  392.604248][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.609935][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  392.647343][   T31]  ? __pfx_do_exit+0x10/0x10
[  392.651984][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.683574][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  392.688879][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.715345][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.726949][   T31]  do_group_exit+0x21c/0x2d0
[  392.732221][   T31]  __x64_sys_exit_group+0x3f/0x40
[  392.747684][   T31]  x64_sys_call+0x21f7/0x2200
[  392.753007][   T31]  do_syscall_64+0xfa/0x3b0
[  392.767478][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.773328][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.793011][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  392.811137][   T31]  ? exc_page_fault+0x9f/0xf0
[  392.826487][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.844955][   T31] RIP: 0033:0x7f3cd3b8eba9
[  392.860287][   T31] RSP: 002b:00007ffebcc67708 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  392.886464][   T31] RAX: ffffffffffffffda RBX: 00007f3cd3c11c65 RCX: 00007f3cd3b8eba9
[  392.908782][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  392.932405][   T31] RBP: 000000000000000c R08: 00007ffebcc654a6 R09: 00007ffebcc689c0
[  392.956237][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffebcc689c0
[  392.981644][   T31] R13: 00007f3cd3c11c05 R14: 000055558baef4a8 R15: 00007ffebcc69a90
[  393.007346][   T31]  </TASK>
[  393.010693][   T31] 
[  393.010693][   T31] Showing all locks held in the system:
[  393.073903][   T31] 2 locks held by kworker/u8:0/12:
[  393.079059][   T31] 1 lock held by khungtaskd/31:
[  393.126448][   T31]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  393.223693][   T31] 2 locks held by kworker/u8:2/36:
[  393.228864][   T31] 2 locks held by kworker/1:2/55:
[  393.292480][   T31]  #0: ffff88801a478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  393.353761][   T31]  #1: ffffc90000bf7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  393.447264][   T31] 2 locks held by kworker/u8:5/1023:
[  393.452590][   T31]  #0: ffff88801cacf948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  393.566472][   T31]  #1: ffffc90003647bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  393.620273][   T31] 2 locks held by kworker/u8:6/1338:
[  393.668477][   T31] 2 locks held by dhcpcd/5523:
[  393.673265][   T31]  #0: ffffffff8f51e408 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x790
[  393.693416][   T31]  #1: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650
[  393.702875][   T31] 2 locks held by getty/5625:
[  393.770614][   T31]  #0: ffff88814d2d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  393.832185][   T31]  #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  393.895348][   T31] 2 locks held by syz-executor/5861:
[  393.900650][   T31]  #0: ffff88807e7ea0e0 (&type->s_umount_key#77){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  393.944438][ T5881] Bluetooth: hci1: command tx timeout
[  394.009881][   T31]  #1: ffff888024c9a7d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10
[  394.085459][   T31] 2 locks held by syz-executor/5863:
[  394.090769][   T31]  #0: ffff88802ff660e0 (&type->s_umount_key#77){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  394.177316][   T31]  #1: ffff888143b047d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10
[  394.247712][   T31] 2 locks held by syz-executor/5865:
[  394.253175][   T31]  #0: ffff88807ddd40e0 (&type->s_umount_key#77){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  394.311383][   T31]  #1: ffff8881437fe7d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10
[  394.380275][   T31] 2 locks held by syz-executor/5869:
[  394.399394][   T31]  #0: ffff88805553c0e0 (&type->s_umount_key#77){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  394.438605][   T31]  #1: ffff8881437f87d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10
[  394.466863][   T31] 4 locks held by kworker/1:7/6030:
[  394.472081][   T31] 3 locks held by kworker/1:8/6031:
[  394.504701][   T31]  #0: ffff88801a478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  394.543359][   T31]  #1: ffffc9000ac4fbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  394.577763][   T31]  #2: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  394.603690][ T6030] net_ratelimit: 5 callbacks suppressed
[  394.603712][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.615917][   T31] 5 locks held by kworker/u8:10/7108:
[  394.617717][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.629795][   T31]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  394.701582][   T31]  #1: ffffc90003d4fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  394.735692][   T31]  #2: ffffffff8f52d090 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  394.774749][   T31]  #3: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0
[  394.815291][   T31]  #4: ffff888027a114e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x1d0
[  394.842989][   T31] 1 lock held by segctord/7301:
[  394.858274][   T31] 3 locks held by segctord/7452:
[  394.863214][   T31] 1 lock held by segctord/7530:
[  394.891485][   T31] 4 locks held by syz-executor/8000:
[  394.908511][   T31]  #0: ffff88807b768dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  394.941952][   T31]  #1: ffff88807b7680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  394.974596][   T31]  #2: ffffffff8f69ede8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  395.012212][   T31]  #3: ffff88805524cb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  395.045774][   T31] 3 locks held by kworker/u8:14/8031:
[  395.055744][   T31]  #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  395.096030][   T31]  #1: ffffc900037ffbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  395.121076][   T31]  #2: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  395.145939][   T31] 3 locks held by syz-executor/8094:
[  395.151602][   T31]  #0: ffff88807f690dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  395.182696][   T31]  #1: ffff88807f6900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  395.211339][   T31]  #2: ffffffff8f69ede8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  395.249235][   T31] 3 locks held by syz-executor/8153:
[  395.263694][   T31]  #0: ffff88805564cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  395.287622][   T31]  #1: ffff88805564c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  395.327579][   T31]  #2: ffffffff8f69ede8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  395.359626][   T31] 3 locks held by syz-executor/8347:
[  395.380107][   T31]  #0: ffff88807d590dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  395.411670][   T31]  #1: ffff88807d5900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  395.443273][   T31]  #2: ffffffff8f69ede8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  395.475415][   T31] 3 locks held by syz-executor/8374:
[  395.480721][   T31]  #0: ffff88807b76cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  395.519523][   T31]  #1: ffff88807b76c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  395.552686][   T31]  #2: ffffffff8f69ede8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  395.584894][   T31] 2 locks held by dhcpcd/8395:
[  395.589673][   T31]  #0: ffff88802ef7a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  395.623840][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.632067][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.635618][   T31]  #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  395.677161][   T31] 
[  395.679519][   T31] =============================================
[  395.679519][   T31] 
[  395.727315][   T31] NMI backtrace for cpu 0
[  395.727338][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  395.727365][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  395.727380][   T31] Call Trace:
[  395.727390][   T31]  <TASK>
[  395.727400][   T31]  dump_stack_lvl+0x189/0x250
[  395.727439][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  395.727469][   T31]  ? __pfx__printk+0x10/0x10
[  395.727517][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  395.727556][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  395.727594][   T31]  ? __pfx__printk+0x10/0x10
[  395.727628][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.727661][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  395.727704][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  395.727743][   T31]  watchdog+0xf93/0xfe0
[  395.727784][   T31]  ? watchdog+0x1de/0xfe0
[  395.727829][   T31]  kthread+0x711/0x8a0
[  395.727864][   T31]  ? __pfx_watchdog+0x10/0x10
[  395.727897][   T31]  ? __pfx_kthread+0x10/0x10
[  395.727925][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.727956][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  395.727993][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.728021][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  395.728043][   T31]  ? __pfx_kthread+0x10/0x10
[  395.728075][   T31]  ret_from_fork+0x439/0x7d0
[  395.728105][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  395.728136][   T31]  ? __switch_to_asm+0x39/0x70
[  395.728167][   T31]  ? __switch_to_asm+0x33/0x70
[  395.728198][   T31]  ? __pfx_kthread+0x10/0x10
[  395.728230][   T31]  ret_from_fork_asm+0x1a/0x30
[  395.728280][   T31]  </TASK>
[  395.728290][   T31] Sending NMI from CPU 0 to CPUs 1:
[  395.890975][    C1] NMI backtrace for cpu 1
[  395.890995][    C1] CPU: 1 UID: 0 PID: 7301 Comm: segctord Not tainted syzkaller #0 PREEMPT(full) 
[  395.891021][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  395.891034][    C1] RIP: 0010:__list_add_valid_or_report+0x6d/0x130
[  395.891074][    C1] Code: 00 74 08 4c 89 e7 e8 72 84 52 fd 4d 39 34 24 75 71 4d 89 f4 49 c1 ec 03 43 80 3c 2c 00 74 08 4c 89 f7 e8 56 84 52 fd 49 39 1e <0f> 85 83 00 00 00 4d 39 f7 74 17 49 39 df 74 12 b0 01 5b 41 5c 41
[  395.891093][    C1] RSP: 0018:ffffc900034875a0 EFLAGS: 00000246
[  395.891114][    C1] RAX: dffffc0000000000 RBX: ffff888043eb5538 RCX: ffffffff8245bfba
[  395.891132][    C1] RDX: ffff888043eb5538 RSI: ffff888043eb5538 RDI: ffff888058eec300
[  395.891149][    C1] RBP: 1ffff110087d6aa8 R08: ffff888058eec2bf R09: 1ffff1100b1dd857
[  395.891166][    C1] R10: dffffc0000000000 R11: ffffed100b1dd858 R12: 1ffff110087d6aa7
[  395.891183][    C1] R13: dffffc0000000000 R14: ffff888043eb5538 R15: ffff888058eec300
[  395.891203][    C1] FS:  0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000
[  395.891222][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  395.891237][    C1] CR2: 0000558130757138 CR3: 0000000030d3a000 CR4: 0000000000350ef0
[  395.891254][    C1] Call Trace:
[  395.891263][    C1]  <TASK>
[  395.891275][    C1]  nilfs_segbuf_extend_segsum+0x2a1/0x3b0
[  395.891316][    C1]  nilfs_segbuf_reset+0x37/0x140
[  395.891352][    C1]  nilfs_segctor_do_construct+0x1334/0x6a40
[  395.891428][    C1]  ? __pfx_nilfs_segctor_do_construct+0x10/0x10
[  395.891455][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.891482][    C1]  ? __lock_acquire+0xab9/0xd20
[  395.891520][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.891545][    C1]  ? do_raw_spin_lock+0x121/0x290
[  395.891582][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.891610][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.891635][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  395.891664][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.891690][    C1]  ? _raw_spin_unlock+0x28/0x50
[  395.891723][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.891748][    C1]  ? nilfs_segctor_confirm+0x24e/0x2d0
[  395.891779][    C1]  nilfs_segctor_construct+0x17b/0x690
[  395.891807][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.891837][    C1]  nilfs_segctor_thread+0x6f7/0xe00
[  395.891861][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.891887][    C1]  ? __lock_acquire+0xab9/0xd20
[  395.891937][    C1]  ? __pfx_nilfs_segctor_thread+0x10/0x10
[  395.891962][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  395.892001][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[  395.892030][    C1]  ? __kthread_parkme+0x7b/0x200
[  395.892054][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.892080][    C1]  ? __kthread_parkme+0x1a1/0x200
[  395.892108][    C1]  kthread+0x711/0x8a0
[  395.892138][    C1]  ? __pfx_nilfs_segctor_thread+0x10/0x10
[  395.892163][    C1]  ? __pfx_kthread+0x10/0x10
[  395.892189][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.892217][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  395.892250][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.892275][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  395.892297][    C1]  ? __pfx_kthread+0x10/0x10
[  395.892325][    C1]  ret_from_fork+0x439/0x7d0
[  395.892350][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  395.892377][    C1]  ? __switch_to_asm+0x39/0x70
[  395.892406][    C1]  ? __switch_to_asm+0x33/0x70
[  395.892435][    C1]  ? __pfx_kthread+0x10/0x10
[  395.892463][    C1]  ret_from_fork_asm+0x1a/0x30
[  395.892504][    C1]  </TASK>
[  396.323495][ T5881] Bluetooth: hci1: command tx timeout
[  396.332546][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  396.339412][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  396.348526][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  396.358687][   T31] Call Trace:
[  396.361971][   T31]  <TASK>
[  396.364902][   T31]  dump_stack_lvl+0x99/0x250
[  396.369598][   T31]  ? __asan_memcpy+0x40/0x70
[  396.374197][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.379404][   T31]  ? __pfx__printk+0x10/0x10
[  396.384017][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.389665][   T31]  vpanic+0x281/0x750
[  396.393664][   T31]  ? __pfx_vpanic+0x10/0x10
[  396.398174][   T31]  ? preempt_schedule+0xae/0xc0
[  396.403030][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.408673][   T31]  ? preempt_schedule_common+0x83/0xd0
[  396.414144][   T31]  panic+0xb9/0xc0
[  396.417874][   T31]  ? __pfx_panic+0x10/0x10
[  396.422384][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.428028][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  396.433433][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.439081][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  396.445257][   T31]  watchdog+0xfd2/0xfe0
[  396.449436][   T31]  ? watchdog+0x1de/0xfe0
[  396.453787][   T31]  kthread+0x711/0x8a0
[  396.457879][   T31]  ? __pfx_watchdog+0x10/0x10
[  396.462570][   T31]  ? __pfx_kthread+0x10/0x10
[  396.467256][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.472900][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  396.478119][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.483763][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.488966][   T31]  ? __pfx_kthread+0x10/0x10
[  396.493572][   T31]  ret_from_fork+0x439/0x7d0
[  396.498171][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  396.503295][   T31]  ? __switch_to_asm+0x39/0x70
[  396.508525][   T31]  ? __switch_to_asm+0x33/0x70
[  396.513304][   T31]  ? __pfx_kthread+0x10/0x10
[  396.517993][   T31]  ret_from_fork_asm+0x1a/0x30
[  396.522787][   T31]  </TASK>
[  396.525922][   T31] Kernel Offset: disabled
[  396.530230][   T31] Rebooting in 86400 seconds..