last executing test programs:

3m38.397201536s ago: executing program 2 (id=214):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
open(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x418)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0)

3m36.228258039s ago: executing program 2 (id=230):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

3m35.91060838s ago: executing program 2 (id=231):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}}, 0x0)

3m35.709906101s ago: executing program 2 (id=236):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00')

3m34.610892688s ago: executing program 2 (id=239):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x8000, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmsg$inet6(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = dup(r4)
sendmsg$netlink(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)

3m33.554796271s ago: executing program 2 (id=242):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

3m33.241345184s ago: executing program 32 (id=242):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

3m12.0318301s ago: executing program 4 (id=317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)

2m49.740718085s ago: executing program 4 (id=317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)

2m16.742919136s ago: executing program 4 (id=317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)

1m43.748655486s ago: executing program 4 (id=317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)

53.893996118s ago: executing program 4 (id=317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)

17.612841837s ago: executing program 1 (id=703):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r5 = semget$private(0x0, 0x3, 0x502)
semctl$SETVAL(r5, 0x3, 0x10, 0x0)
semop(r5, &(0x7f0000000880)=[{0x0, 0x23, 0x800}], 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, &(0x7f0000000d80)=""/4096, 0x0, 0x1000, 0x0, 0x4, 0x10000, @value=r4}, 0x28)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
sendfile(r6, r6, 0x0, 0x40008)

15.701962911s ago: executing program 3 (id=706):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f0000001b80)=ANY=[@ANYRES64=0x0], 0x4, 0xc45, &(0x7f0000002080)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000380)='./file1\x00', 0x1014800, &(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESOCT=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
sendto$inet(r4, &(0x7f0000001240)="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", 0xffffffffffffff95, 0x8040841, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x80186e84, &(0x7f0000000440)={@desc={0x1, 0x4000, @auto="c51c458e580abf28"}})
ioctl$FS_IOC_SETVERSION(r1, 0x40045201, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)="e66f494762e75d38fade", 0xa}, {&(0x7f00000001c0)="9820155f76a0905ec32b5226a0939cc0464ff372252ed6f3ce3c1fef1bd42fb05ce88d9b6f2120eb963e45e8b3c410960b3cd4d371fce102747d1e5179b36fdef272b8ee829b3a85a3698c0e4b9ded9688806d451e53e9c221935b07a7ab46cc40527693b38bcde485816c3e4884b19a05c3d0e9e8796e61bd8b51c23fc67789f1a6c528d1f7115c97bbe320908a9285acd931661045f1156360b8393d47", 0x9e}, {&(0x7f0000000280)="9e3d9fdb1cd0c414279343af738cf3246e4a53ad8a91fbf3e8778d6251444d394d", 0x21}, {&(0x7f00000002c0)="fe66e920d49ea6d0fa3deabb8a01ec9a661c668e115a", 0x16}, {&(0x7f0000000300)="36ac4b65d209151195d8e0ceb76ce832c230a0ba12a1dfe0d9295a8e2cb1ed90ce922f808a91e945fa87e925689e9fcecdb5ce9997f08d55908d63d46ef98f91d299aa9463c3261efa62a5927fc80bb682982739067e148e28841c79f81ee97af0c90103", 0x64}], 0x5)
renameat2(r0, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x6)

13.966840265s ago: executing program 1 (id=708):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
timerfd_create(0x9, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x100, 0x0, 0x10}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

12.701790217s ago: executing program 0 (id=710):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000240000000200119078000000000000000800000000001090780200000000000000"], 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
unshare(0x22020400)
timerfd_create(0x9, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

12.383939804s ago: executing program 3 (id=711):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x100, 0x0, 0x10}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

11.526875539s ago: executing program 1 (id=712):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@stripe={'stripe', 0x3d, 0x8000003}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}], [{@smackfsdef={'smackfsdef', 0x3d, '%^'}}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r6, 0x80000000)
syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600000ce00140600fe8000000000000000000000000000bbfe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c20000ad7a00000000004000000000a2037b16f72f3d345755a6a613db7dd61af472501c50899fed876fdce6c945fad8ca8b8304c25de0bc161348507698c21c3c58bbf72a4f226bd718045caeb3fa31237228b620e5f4f53f6dcceea33a5d2842dd"], 0x0)
syz_io_uring_setup(0x14b77, &(0x7f0000000540)={0x0, 0xeb6d, 0x10, 0x1, 0xfb}, &(0x7f00000001c0), &(0x7f0000000300))
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000180)=0x9)
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "010b00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0xffff}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

10.487794269s ago: executing program 1 (id=713):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
flistxattr(r2, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18cb, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x32315241, 0x0, @discrete={0xfffffe01, 0x6}})

10.286873752s ago: executing program 0 (id=714):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[], 0x0)
ptrace(0x10, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000880)=0x8000000)
socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0xffff, &(0x7f00000001c0))

10.114880769s ago: executing program 3 (id=716):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
socket$inet(0x2, 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0)

8.134358458s ago: executing program 5 (id=717):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100003050000", @ANYRES32=0x0, @ANYBLOB="03080100000000002000128007000100677265f41300028008000600ac00"], 0x48}}, 0x0)

7.748091508s ago: executing program 3 (id=718):
io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0000000400000004000000030000", @ANYBLOB='\x00'/15, @ANYBLOB], 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

7.714815607s ago: executing program 1 (id=719):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000240)="04ec1a", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x26, &(0x7f0000000000)=""/113, &(0x7f0000000080)=0x71)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4)
shutdown(r0, 0x1)

7.7132424s ago: executing program 5 (id=720):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[], 0x0)
ptrace(0x10, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000880)=0x8000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
io_setup(0xffff, &(0x7f00000001c0))

7.61600247s ago: executing program 0 (id=721):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f0000001b80)=ANY=[@ANYRES64=0x0], 0x4, 0xc45, &(0x7f0000002080)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000380)='./file1\x00', 0x1014800, &(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESOCT=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
sendto$inet(r4, &(0x7f0000001240)="73c5e3121465ccc3631c8ad1738c6e9e41bcc75f6470caa95f0dad99d34ee5a2d212cab34385b6c4f2655e3df6cd6486285fa20e2bbdf2f3e222437a56d34ead4fd7f83264210eae8b8ac494ebd5e03104b1c22d3afc50e44313e00077ca7b0915fc65b49014842b44258b7cb1e0bd8ca9df5d086067bdd0ad830f927f0ccf9272734d18bbd2c91cf49ae8d838126f5e25696a151c5ed765958bbf09a0073dcbcb9b735bc77116a116c987d38b6b8485156fa6baef39376fbc7b67de5d5cf78059da6c3a960efb3ee35bfdec96840c862b1e62945e85db7423caf62683aac6e954c9ec6636c5feeafc466a9ace88c56c3280fddde04969fd274c22f78bc4f2f32d25c36a0dc42b124f20cf04bcff82131f56fabcf38b203269e29ceae2d27eb28a39a5926b87bd22f246441707170b04084531e3d4152806bfe2dadc17f5167d42e51c220cf8278936865e6f7810136624082c0ce99e8db0a2f3be8a55ae8e4a9b1f80d695b9dbdf5cad7a2176384b0ae9258bed1215cb753715d5cacd87761d43e00d54e5c4631bf9d8b8f2102ef2ea1c4d5134daaf087c666535d72967818aec5f009ef2d56fa83bda48482493f6db67244e6ce068fb127db99793e6bc4f5f962c9174c72603a6631fbef5e67f94d5f00696e997982ba87628876da834d46101182fc1d33e1770e96d5e540bff76041f83ba7d1052df028fd4c02e42dbd80000ec36528b6dfa7f6ddef1199632c27d6d46e60129043eb62620946447c0f3addb3985d558ca99035004ec847ab40959819be7bbb6a25d318479fdd4ba88a1904dd294c1b236715ca88f210ed5677aef26ac85b0d1104a2a6f660ed3ff037b862c071a4071b561f0cc2cc43216c44dd007637fe44760633bed09464e6f5cda1e1cb4d9ce73c9d9bddb9652cc97310e9e7ce5ef3912d7b8453d3d530fc55fdb41c2157fb655e85e93062af920ac0998853baf8c3a9b42bab3bc1bdac0139f2d00d8cdd9de8164943f3708354873a348f93ef335f2db84f6b02972b23d02b51106483e1e52bb60b520425f00bf7f1893faca6c2e4c20aaa4acfba876fe5b48ca42a093de81ef26f3f6cc16a74b99c7eab8051aa7268cc2dcb6fbd4bd4f758eb21c57d9817d1024432112240d2ae954461ecc3dcde35a343fbccf462a6f2f409d5d236e021d81b58c5a78ee13cc5d7ff5d3104bb0750b1c3499a8cb87add3c75aa714ea179375fc229a4b3e6bcbd282179bdd26c30ecc92e7cbd26816a6049576d709acf5ea6b0482558131214d657a61e3634e97ade49bcf999fb67269c1aeaf50849808fc323961eecc9baccb1fd8c5ff4aee216954e2980086c5b44fcf3b5434a5bc8622f476221660373d51f85ea9863163baecf34cdacc540cd202d0eac18cda4c481bb63f9ff089e165c26cf5a02e549a72f901c4dd1b857836ffff00007f5acb0b20218f52df8644f19a9152243166eeffbeeaea3871b063a98d08e92780e5968e6e4c8f683fd6c6c9a3ce0963a222edc319153bccb9499992b65fbdb54837fcfea02272a528292d9a366ea545bde0ddec126f61b81b2f391c5630001569c0479d3be3059ba17899e41edf9545c8eefbec4097b4b249bbdfa2b38bc62ff2d462fc1cd8659638cfbeec915b0deff773f168ac8dc93606cf7e05dbd6070baeb5f70f4ae456f77829c1c448d13c9dd6fd0a49d90c7c64d055db6faccf9a5ff207642f931eb6d2642c4bf7cb131c0b5b9725a0cd8257b10f1fa685acadd37cc63a0a322db5cd09b562a7d86a34de883d71c9865af26e84dd2ddcf02a2247376344d451c8e16057e3457f99e333c087de2ee606a662dc420ffb6104043a2e5efcfe40cc81237f2a707ae6ab1d3151e366731b886af3433f92b288f7cb59e010ace141407e7aca5c0f194a5911cef2b880b465481e4ac71fa1d1a02bf67e38e7e550bf5fdb3863588432d685b61d1ab81b83676d29febfbc977535e859ac91b29ca27078fc64dbd6c46dc8098b08d2e4fb2fa24657501821657efa2e1cd1f86a1365750fe9611924aef4e24a625bcbdb1bfa666d1a6718ef9f43b06e98102ce4b2c0149dbfd52f16af0fc1a6422ee6353c18ca73fb260681a5cc43f2fb6189f415088c0f0cd105ad334141f4eb270fb6df14d2b716c98566a96cd5119a18e42f0dd67ac5b894545d5179daa70f03e8478152653da6aa7960dea9face681e87f42d9ab509fa1d85f2a24738b2fd63e3b48f60b92cc0cdfd4b7f7d4ce97c07f2ddbdb2bc363faa9333c973184b63c0fa0e6547533a424257e6e188507480137171124bc0856aae9da6a6e5c23bbd48a36a4ed4507d4ac671d508e8dc648da0459b9db211d6bab867ff93503ed8b7631034d48a65898d383195205e007e6849bd1a1bf82e4268caf5404b9319319cc216b64bf151887f4a1a3553e811387b6271349b6397a1502003b9673927cf4d2e55f4d3adac5435748878d18eb27432085ed90a9f15e64c61bc3e5164b9d44d085081670670389cd5070b7cb1461dcaf233be6bd7241c9c6dc0fd8f6b301de3d7b6ba2d172053d135f824b22ce88676aa62da4ee682f85b5c7ddd8c2aa1c6e1852ae28c523b828c52cf941249cce55fd0e0a9ee9992e7e28dd7b3ad2756b71d5b90304f9a3c65ede175", 0xffffffffffffff95, 0x8040841, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x80186e84, &(0x7f0000000440)={@desc={0x1, 0x4000, @auto="c51c458e580abf28"}})
ioctl$FS_IOC_SETVERSION(r1, 0x40045201, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)="e66f494762e75d38fade", 0xa}, {&(0x7f00000001c0)="9820155f76a0905ec32b5226a0939cc0464ff372252ed6f3ce3c1fef1bd42fb05ce88d9b6f2120eb963e45e8b3c410960b3cd4d371fce102747d1e5179b36fdef272b8ee829b3a85a3698c0e4b9ded9688806d451e53e9c221935b07a7ab46cc40527693b38bcde485816c3e4884b19a05c3d0e9e8796e61bd8b51c23fc67789f1a6c528d1f7115c97bbe320908a9285acd931661045f1156360b8393d47", 0x9e}, {&(0x7f0000000280)="9e3d9fdb1cd0c414279343af738cf3246e4a53ad8a91fbf3e8778d6251444d394d", 0x21}, {&(0x7f00000002c0)="fe66e920d49ea6d0fa3deabb8a01ec9a661c668e115a", 0x16}, {&(0x7f0000000300)="36ac4b65d209151195d8e0ceb76ce832c230a0ba12a1dfe0d9295a8e2cb1ed90ce922f808a91e945fa87e925689e9fcecdb5ce9997f08d55908d63d46ef98f91d299aa9463c3261efa62a5927fc80bb682982739067e148e28841c79f81ee97af0c90103", 0x64}], 0x5)
renameat2(r0, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x6)

6.737903482s ago: executing program 3 (id=722):
syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000005d80)='./file0\x00', 0x0, &(0x7f0000005dc0), 0x1, 0x5d0c, &(0x7f0000005e00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000022c0)='./bus\x00', 0x141842, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_INTERRUPT(r2, 0x0, 0x0)
ftruncate(r1, 0x2007ff3)
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)='u', 0x1}], 0x1, 0x100000, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x100001)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002280)=0xffffffffffffffff, 0x4)

5.533730203s ago: executing program 0 (id=723):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r5 = semget$private(0x0, 0x3, 0x502)
semctl$SETVAL(r5, 0x3, 0x10, 0x0)
semop(r5, &(0x7f0000000880)=[{0x0, 0x23, 0x800}], 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, &(0x7f0000000d80)=""/4096, 0x0, 0x1000, 0x0, 0x4, 0x10000, @value=r4}, 0x28)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
preadv(r7, &(0x7f0000001240)=[{&(0x7f0000000200)=""/34, 0x22}], 0x1, 0x0, 0x0)

4.070733129s ago: executing program 5 (id=724):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000240000000200119078000000000000000800000000001090780200000000000000"], 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
unshare(0x22020400)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

3.72634265s ago: executing program 4 (id=317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)

1.845560733s ago: executing program 0 (id=725):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x0, &(0x7f0000000ec0)={[{@nodioread_nolock}, {@usrjquota}, {@delalloc}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
socket$inet(0x2, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="04ec1a", 0x3, 0x1c005, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)

1.84502397s ago: executing program 1 (id=726):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)

1.844634662s ago: executing program 5 (id=727):
syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x66}, "c847e934af1f206677ac1b0d320b76362c98d0d70cb4eb438b77d80a20fff14403b3e11b28f2d5e3c9a553ba63672dd5522914720f8287669bedd9604a8bb7a0a739d06a3202c34014dc465a767b553cd4fbad928f9dc0f19738cfdd921f8d0465cc340f036f"}, 0x6a)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0)

1.84446831s ago: executing program 3 (id=728):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
socket$inet(0x2, 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0)

1.7676347s ago: executing program 5 (id=729):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
flistxattr(r2, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18cb, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x32315241, 0x0, @discrete={0xfffffe01, 0x6}})

184.133151ms ago: executing program 0 (id=730):
openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r3, 0x0, 0x1500}, 0x38)

0s ago: executing program 5 (id=731):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xffffffffffffffff)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f1", 0x8)
listen(r3, 0x3)
accept(r3, &(0x7f0000000040)=@qipcrtr, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

urnal. Quota mode: none.
[   42.851590][ T6640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.861728][ T6451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.494092][ T6640] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   43.522022][ T6640] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28
[   43.546953][ T6640] EXT4-fs (loop1): This should not happen!! Data will be lost
[   43.546953][ T6640] 
[   43.549481][ T6640] EXT4-fs (loop1): Total free blocks count 0
[   43.551059][ T6640] EXT4-fs (loop1): Free/Dirty block details
[   43.552642][ T6640] EXT4-fs (loop1): free_blocks=4293918720
[   43.587484][ T6640] EXT4-fs (loop1): dirty_blocks=48
[   43.588921][ T6640] EXT4-fs (loop1): Block reservation details
[   43.590473][ T6640] EXT4-fs (loop1): i_reserved_data_blocks=3
[   43.648071][ T6664] loop2: detected capacity change from 0 to 4096
[   43.713851][ T6664] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   43.719102][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.733599][ T6446] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   43.827547][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'.
[   43.937801][ T6664] ntfs3(loop2): ino=9, mi_enum_attr
[   43.939214][ T6664] ntfs3(loop2): Failed to load $Secure (-22).
[   43.940697][ T6664] ntfs3(loop2): Failed to initialize $Secure (-22).
[   44.204018][ T6683] loop3: detected capacity change from 0 to 32768
[   44.692179][ T6683] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc,no_data_io
[   44.697269][ T6683] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[   44.699573][ T6683] bcachefs (loop3): Version upgrade required:
[   44.699573][ T6683] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   44.699573][ T6683] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[   44.699573][ T6683]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[   44.718567][ T6683] bcachefs (loop3): dropping and reconstructing all alloc info
[   44.919274][ T6706] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET)
[   45.025953][ T6708] loop2: detected capacity change from 0 to 128
[   45.050984][ T6710] loop1: detected capacity change from 0 to 128
[   45.084695][ T6708] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.095339][ T6710] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.100710][ T6683] bcachefs (loop3): accounting_read... done
[   46.006697][ T6683] bcachefs (loop3): alloc_read... done
[   46.006741][ T6683] bcachefs (loop3): stripes_read... done
[   46.006776][ T6683] bcachefs (loop3): snapshots_read... done
[   46.012211][ T6683] bcachefs (loop3): done starting filesystem
[   46.238453][ T6455] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.241737][ T6440] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.349046][ T6720] loop0: detected capacity change from 0 to 2048
[   46.384660][ T6720] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[   46.408328][ T6446] bcachefs (loop3): shutting down
[   46.428916][ T6446] bcachefs (loop3): shutdown complete
[   46.832547][ T6729] loop2: detected capacity change from 0 to 32768
[   46.950106][ T6729] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   47.034819][ T6729] XFS (loop2): Ending clean mount
[   47.043200][ T6729] XFS (loop2): Quotacheck needed: Please wait.
[   47.079529][ T6729] XFS (loop2): Quotacheck: Done.
[   47.120544][ T6455] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   47.164815][ T2272] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   47.393963][ T2272] usb 1-1: Using ep0 maxpacket: 8
[   47.403946][ T2272] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[   47.407130][ T2272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   47.419930][ T2272] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   47.422521][ T2272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.424848][ T2272] usb 1-1: Product: syz
[   47.427406][ T2272] usb 1-1: Manufacturer: syz
[   47.435979][ T6749] loop2: detected capacity change from 0 to 32768
[   47.437990][ T2272] usb 1-1: SerialNumber: syz
[   47.442032][ T2272] usb 1-1: config 0 descriptor??
[   47.444005][ T6749] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.75 (6749)
[   47.457237][ T6749] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   47.460204][ T6749] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   47.462580][ T6749] BTRFS info (device loop2): disk space caching is enabled
[   47.464762][ T6749] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   47.470557][ T2272] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[   47.608431][ T6749] BTRFS info (device loop2): rebuilding free space tree
[   47.628464][ T6749] BTRFS info (device loop2): disabling free space tree
[   47.630748][ T6749] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   47.633335][ T6749] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   47.676735][ T6493] usb 1-1: USB disconnect, device number 3
[   47.702083][ T6455] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   47.862267][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.864681][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.060646][ T6782] loop2: detected capacity change from 0 to 736
[   48.060987][ T6780] warning: `syz.4.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.062643][ T6782] iso9660: Bad value for 'mode'
[   48.117226][ T6782] loop2: detected capacity change from 0 to 16
[   48.142795][ T6782] erofs (device loop2): mounted with root inode @ nid 36.
[   48.213252][ T6784] loop4: detected capacity change from 0 to 1024
[   48.216433][ T6784] EXT4-fs: inline encryption not supported
[   48.221028][ T6784] EXT4-fs: Ignoring removed i_version option
[   48.222639][ T6784] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.240347][ T6786] loop2: detected capacity change from 0 to 256
[   48.245948][ T6784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.252808][ T6786] exfat: Deprecated parameter 'namecase'
[   48.277006][ T6786] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[   48.398533][ T6794] loop2: detected capacity change from 0 to 8192
[   48.772641][ T6810] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.256871][ T6441] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.586017][ T6834] loop4: detected capacity change from 0 to 512
[   49.599500][ T6834] EXT4-fs: Ignoring removed orlov option
[   49.609551][ T6834] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   49.628256][ T6834] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   49.632393][ T6834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[   49.638278][ T6834] System zones: 1-12
[   49.642114][ T6834] EXT4-fs (loop4): 1 truncate cleaned up
[   49.648305][ T6834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.651175][ T6835] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   49.653767][ T6835] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   49.656991][ T6835] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   49.663360][ T6834] EXT4-fs (loop4): shut down requested (2)
[   49.690990][ T6441] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.774904][ T6846] bridge_slave_0: left allmulticast mode
[   49.778390][ T6846] bridge_slave_0: left promiscuous mode
[   49.783169][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.800065][ T6846] bridge_slave_1: left allmulticast mode
[   49.803232][ T6846] bridge_slave_1: left promiscuous mode
[   49.809822][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.862503][ T6846] bond0: (slave bond_slave_0): Releasing backup interface
[   50.003726][ T6846] bond0: (slave bond_slave_1): Releasing backup interface
[   50.053098][ T6846] team0: Port device team_slave_0 removed
[   50.059775][ T6846] team0: Port device team_slave_1 removed
[   50.062037][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.066393][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.071042][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.073144][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.160082][ T6856] loop4: detected capacity change from 0 to 1024
[   50.162383][ T6856] EXT4-fs: inline encryption not supported
[   50.165327][ T6856] EXT4-fs: Ignoring removed i_version option
[   50.169102][ T6856] EXT4-fs: Ignoring removed nomblk_io_submit option
[   50.245371][ T6856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.364096][ T6861] loop1: detected capacity change from 0 to 1024
[   50.413248][ T6863] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   50.438710][ T6861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.621755][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.637298][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.652524][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.696167][ T6875] tipc: Can't bind to reserved service type 1
[   50.862150][ T6884] bridge_slave_0: left allmulticast mode
[   50.863708][ T6884] bridge_slave_0: left promiscuous mode
[   50.865247][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.872274][ T6884] bridge_slave_1: left allmulticast mode
[   50.877279][ T6884] bridge_slave_1: left promiscuous mode
[   50.878710][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.883589][ T6884] bond0: (slave bond_slave_0): Releasing backup interface
[   50.956348][ T6884] bond0: (slave bond_slave_1): Releasing backup interface
[   51.039322][ T6884] team0: Port device team_slave_0 removed
[   51.059460][ T6884] team0: Port device team_slave_1 removed
[   51.071169][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.079911][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.089488][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.097905][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.170125][ T6441] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.302406][ T6890] loop2: detected capacity change from 0 to 2048
[   51.305050][ T6890] hpfs: Unknown parameter 'ÿ017777777777777777777770xffffffffffffffff0xffffffffffffffff18446744073709551615'
[   51.403286][ T6896] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   51.839014][ T6913] loop3: detected capacity change from 0 to 1024
[   51.842383][ T6913] EXT4-fs: inline encryption not supported
[   51.844123][ T6913] EXT4-fs: Ignoring removed i_version option
[   51.845885][ T6913] EXT4-fs: Ignoring removed nomblk_io_submit option
[   51.862548][ T6913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.060822][ T6494] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   52.546597][ T6931] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   52.558776][ T6494] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   52.561522][ T6494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.574404][ T6494] usb 1-1: Product: syz
[   52.575504][ T6494] usb 1-1: Manufacturer: syz
[   52.576698][ T6494] usb 1-1: SerialNumber: syz
[   52.581265][ T6928] loop1: detected capacity change from 0 to 2048
[   52.590059][ T6928] hpfs: Unknown parameter 'ÿ017777777777777777777770xffffffffffffffff0xffffffffffffffff18446744073709551615'
[   52.604109][ T6494] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   52.611482][ T6493] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2
[   52.621737][ T6493] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw
[   52.629916][ T6934] loop4: detected capacity change from 0 to 128
[   52.639010][ T6934] affs: Bad value for 'reserved'
[   52.674057][ T6454] Bluetooth: min 6 > max 0
[   52.735882][ T6446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.839805][ T6945] netlink: 'syz.3.135': attribute type 1 has an invalid length.
[   52.905751][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'.
[   52.912440][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.135'.
[   52.943691][ T6945] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.414478][ T6963] vlan2: entered allmulticast mode
[   53.416135][ T6963] bond0: entered allmulticast mode
[   53.536650][ T6967] loop1: detected capacity change from 0 to 2048
[   53.538982][ T6967] hpfs: Unknown parameter 'ÿ017777777777777777777770xffffffffffffffff0xffffffffffffffff18446744073709551615'
[   54.317977][ T6977] loop2: detected capacity change from 0 to 1024
[   54.323588][ T6977] EXT4-fs: inline encryption not supported
[   54.330883][ T6977] EXT4-fs: Ignoring removed i_version option
[   54.335288][ T6977] EXT4-fs: Ignoring removed nomblk_io_submit option
[   54.352746][ T6977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.397641][ T6984] netlink: 'syz.3.150': attribute type 1 has an invalid length.
[   54.439187][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'.
[   54.474602][ T6984] 8021q: adding VLAN 0 to HW filter on device bond2
[   54.734735][ T6454] Bluetooth: hci0: command tx timeout
[   54.813621][ T2272] usb 1-1: USB disconnect, device number 4
[   55.220382][ T6455] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.722910][ T7027] bridge_slave_0: left allmulticast mode
[   56.740300][ T7027] bridge_slave_0: left promiscuous mode
[   56.741887][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.761715][ T7027] bridge_slave_1: left allmulticast mode
[   56.780204][ T7027] bridge_slave_1: left promiscuous mode
[   56.797477][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.816574][ T7027] bond0: (slave bond_slave_0): Releasing backup interface
[   56.915653][ T7027] bond0: (slave bond_slave_1): Releasing backup interface
[   56.983951][ T7027] team0: Port device team_slave_0 removed
[   57.009232][ T7027] team0: Port device team_slave_1 removed
[   57.016875][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.027750][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.040522][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.052987][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.097676][ T7029] vlan2: entered allmulticast mode
[   57.101150][ T7029] bond0: entered allmulticast mode
[   57.312262][ T7041] loop3: detected capacity change from 0 to 1024
[   57.339281][ T7041] EXT4-fs: inline encryption not supported
[   57.340995][ T7041] EXT4-fs: Ignoring removed i_version option
[   57.342637][ T7041] EXT4-fs: Ignoring removed nomblk_io_submit option
[   57.415206][ T7041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.900727][ T7063] bridge_slave_0: left allmulticast mode
[   57.902365][ T7063] bridge_slave_0: left promiscuous mode
[   57.904111][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.909063][ T7063] bridge_slave_1: left allmulticast mode
[   57.910713][ T7063] bridge_slave_1: left promiscuous mode
[   57.913097][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.919324][ T7063] bond0: (slave bond_slave_0): Releasing backup interface
[   57.996995][ T7063] bond0: (slave bond_slave_1): Releasing backup interface
[   58.106926][ T7063] team0: Port device team_slave_0 removed
[   58.156053][ T7063] team0: Port device team_slave_1 removed
[   58.165219][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.178304][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.189499][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.195243][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.393415][ T6446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.396609][ T7071] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   58.812545][ T7087] loop3: detected capacity change from 0 to 32768
[   59.301116][ T7098] loop2: detected capacity change from 0 to 1024
[   59.303335][ T7098] EXT4-fs: inline encryption not supported
[   59.327161][ T7098] EXT4-fs: Ignoring removed i_version option
[   59.331139][ T7098] EXT4-fs: Ignoring removed nomblk_io_submit option
[   59.375713][ T7098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.881807][   T30] audit: type=1326 audit(59.858:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb215ad28 code=0x7ffc0000
[   59.898014][   T30] audit: type=1326 audit(59.858:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb215ad28 code=0x7ffc0000
[   59.903211][   T30] audit: type=1326 audit(59.868:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=30 compat=0 ip=0xffffb215ad28 code=0x7ffc0000
[   59.923612][   T30] audit: type=1326 audit(59.868:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb215ad28 code=0x7ffc0000
[   59.929939][ T6455] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.938715][   T30] audit: type=1326 audit(59.868:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb215ad28 code=0x7ffc0000
[   60.306289][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'.
[   60.725809][ T7139] netlink: 64 bytes leftover after parsing attributes in process `syz.0.206'.
[   60.780544][ T7137] loop1: detected capacity change from 0 to 1024
[   60.785986][ T7137] EXT4-fs: inline encryption not supported
[   60.787403][ T7137] EXT4-fs: Ignoring removed i_version option
[   60.788972][ T7137] EXT4-fs: Ignoring removed nomblk_io_submit option
[   60.821060][ T7137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.157145][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.926758][ T7169] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   61.929259][ T7169] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   61.931554][ T7169] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[   62.009780][ T7175] loop1: detected capacity change from 0 to 1024
[   62.012030][ T7175] EXT4-fs: inline encryption not supported
[   62.013471][ T7175] EXT4-fs: Ignoring removed i_version option
[   62.034020][ T7175] EXT4-fs: Ignoring removed nomblk_io_submit option
[   62.096710][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.099338][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.201454][ T7175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.096196][ T7193] netlink: 'syz.4.223': attribute type 1 has an invalid length.
[   63.226983][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.820414][ T7208] loop4: detected capacity change from 0 to 512
[   63.835237][ T7208] EXT4-fs: Ignoring removed nobh option
[   63.845340][ T7208] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent
[   64.456070][ T7225] loop2: detected capacity change from 0 to 256
[   64.469015][ T7223] netlink: 148 bytes leftover after parsing attributes in process `syz.0.235'.
[   64.496006][ T2364] ieee802154 phy0 wpan0: encryption failed: -22
[   64.498092][ T2364] ieee802154 phy1 wpan1: encryption failed: -22
[   65.244204][ T7228] loop1: detected capacity change from 0 to 1024
[   65.246379][ T7228] EXT4-fs: inline encryption not supported
[   65.247811][ T7228] EXT4-fs: Ignoring removed i_version option
[   65.249236][ T7228] EXT4-fs: Ignoring removed nomblk_io_submit option
[   65.367415][ T7228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.152985][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.824885][  T571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.017743][  T571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.152886][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   67.157293][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   67.163625][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   67.167739][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   67.170159][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   67.172184][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   67.215778][  T571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.240056][ T7252] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   67.242224][ T7252] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   67.244850][ T7252] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   67.506464][ T7271] loop1: detected capacity change from 0 to 32768
[   67.528639][ T7271] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.253 (7271)
[   67.711410][  T571] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.124344][ T7271] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   68.127209][ T7271] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   68.129392][ T7271] BTRFS info (device loop1): disk space caching is enabled
[   68.131173][ T7271] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   68.288216][ T7271] BTRFS info (device loop1): rebuilding free space tree
[   68.298431][ T7271] BTRFS info (device loop1): disabling free space tree
[   68.300356][ T7271] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   68.303063][ T7271] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   69.135764][  T549] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   69.210446][ T7309] loop3: detected capacity change from 0 to 512
[   69.214723][ T6454] Bluetooth: hci4: command tx timeout
[   69.220433][ T6440] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   69.221072][ T7309] EXT4-fs: Ignoring removed nobh option
[   69.232505][ T7309] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[   69.615667][ T3850] cfg80211: failed to load regulatory.db
[   71.106072][  T571] bond0 (unregistering): Released all slaves
[   71.140205][ T7328] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   71.142623][ T7328] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   71.145663][ T7328] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   71.305400][ T6454] Bluetooth: hci4: command tx timeout
[   72.416221][ T7364] loop4: detected capacity change from 0 to 512
[   74.172710][ T6454] Bluetooth: hci4: command tx timeout
[   74.555127][ T7364] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.270: bg 0: block 5: invalid block bitmap
[   74.571313][ T7364] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[   74.576347][ T7364] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.270: invalid indirect mapped block 3 (level 2)
[   74.583206][ T7364] EXT4-fs (loop4): 2 truncates cleaned up
[   74.586369][ T7364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.064634][ T7378] loop1: detected capacity change from 0 to 512
[   75.227836][ T7378] EXT4-fs: Ignoring removed nobh option
[   75.232985][ T6441] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.241907][ T7378] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent
[   75.545699][ T7381] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   75.548111][ T7381] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   75.550206][ T7381] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[   75.558422][ T7255] chnl_net:caif_netlink_parms(): no params data found
[   76.276541][ T6454] Bluetooth: hci4: command tx timeout
[   76.339694][ T7413] loop1: detected capacity change from 0 to 128
[   76.364779][ T7413] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.608729][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.612151][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.621482][ T7255] bridge_slave_0: entered allmulticast mode
[   77.419155][ T7255] bridge_slave_0: entered promiscuous mode
[   77.423950][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.425822][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.427838][ T7255] bridge_slave_1: entered allmulticast mode
[   77.430211][ T7255] bridge_slave_1: entered promiscuous mode
[   77.533151][ T6440] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.591341][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.603471][ T7428] bridge_slave_0: left allmulticast mode
[   77.610612][ T7428] bridge_slave_0: left promiscuous mode
[   77.612193][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.617595][ T7428] bridge_slave_1: left allmulticast mode
[   77.619078][ T7428] bridge_slave_1: left promiscuous mode
[   77.629931][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.787433][ T7428] bond0: (slave bond_slave_0): Releasing backup interface
[   78.028512][ T7428] bond0: (slave bond_slave_1): Releasing backup interface
[   78.507941][ T7428] team0: Port device team_slave_0 removed
[   78.550441][ T7428] team0: Port device team_slave_1 removed
[   78.555154][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.557119][ T7428] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.560551][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.562455][ T7428] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.602441][  T571] hsr_slave_0: left promiscuous mode
[   78.608888][  T571] hsr_slave_1: left promiscuous mode
[   78.614253][ T7444] loop0: detected capacity change from 0 to 128
[   78.628367][ T7444] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   78.629426][ T7442] loop1: detected capacity change from 0 to 512
[   78.633646][ T7442] EXT4-fs: Ignoring removed nobh option
[   78.640593][ T7442] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent
[   78.654222][  T571] veth1_macvtap: left promiscuous mode
[   78.662677][  T571] veth0_macvtap: left promiscuous mode
[   78.670952][  T571] veth1_vlan: left promiscuous mode
[   78.673555][  T571] veth0_vlan: left promiscuous mode
[   80.228183][ T6451] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   80.741558][ T7461] loop3: detected capacity change from 0 to 512
[   81.588824][ T7461] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.298: bg 0: block 5: invalid block bitmap
[   81.594689][ T7461] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[   81.597938][ T7461] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.298: invalid indirect mapped block 3 (level 2)
[   81.603217][ T7461] EXT4-fs (loop3): 2 truncates cleaned up
[   81.607945][ T7461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.773737][ T7464] loop0: detected capacity change from 0 to 256
[   81.776987][ T7464] exfat: Deprecated parameter 'utf8'
[   81.853615][ T7464] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   82.708941][ T6446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.339610][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.348697][ T7438] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   85.350978][ T7438] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   85.352914][ T7438] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[   85.461337][ T7255] team0: Port device team_slave_0 added
[   85.495547][ T7482] loop1: detected capacity change from 0 to 128
[   85.538666][ T7482] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   85.550317][ T7255] team0: Port device team_slave_1 added
[   85.775323][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.777143][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.782809][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.423569][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.434339][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.459253][ T6440] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.473054][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.646121][ T7510] loop0: detected capacity change from 0 to 512
[   86.648199][ T7510] EXT4-fs: Ignoring removed nobh option
[   86.650260][ T7510] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent
[   87.279150][ T7255] hsr_slave_0: entered promiscuous mode
[   87.292631][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.344354][ T7255] hsr_slave_1: entered promiscuous mode
[   87.375081][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.419579][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.446132][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.751197][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.768241][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.246002][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.250016][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.252451][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.255551][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.259688][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.262399][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.372042][ T7541] loop1: detected capacity change from 0 to 128
[   88.382495][ T7541] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   88.515022][ T7255] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   88.519164][ T7255] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   88.522890][ T7255] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   88.963066][  T571] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.259871][ T7255] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   89.276122][ T6440] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   89.367992][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.373325][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.387698][  T571] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.388515][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.396558][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.436473][ T7560] netlink: 'syz.3.324': attribute type 1 has an invalid length.
[   89.499716][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'.
[   89.503531][  T571] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.625836][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.628125][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.726139][  T571] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.734642][ T7566] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.365945][   T53] Bluetooth: hci1: command tx timeout
[   90.480610][ T7581] loop3: detected capacity change from 0 to 512
[   90.487641][ T7583] loop0: detected capacity change from 0 to 512
[   90.489679][ T7583] EXT4-fs: Ignoring removed nobh option
[   90.491891][ T7581] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   90.495648][ T7581] EXT4-fs (loop3): blocks per group (8192) and clusters per group (9) inconsistent
[   90.498177][ T7583] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent
[   91.051655][ T7613] loop3: detected capacity change from 0 to 128
[   91.070729][ T7613] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   91.970732][ T6446] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.414521][   T53] Bluetooth: hci1: command tx timeout
[   92.488914][ T7623] netlink: 'syz.0.335': attribute type 1 has an invalid length.
[   92.542371][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'.
[   93.087363][  T571] bond0 (unregistering): Released all slaves
[   93.162062][ T7624] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.195950][ T7532] chnl_net:caif_netlink_parms(): no params data found
[   93.236342][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.345981][ T7255] 8021q: adding VLAN 0 to HW filter on device team0
[   94.134188][ T7643] loop1: detected capacity change from 0 to 512
[   94.138190][ T7643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   94.149753][ T7643] EXT4-fs (loop1): blocks per group (8192) and clusters per group (9) inconsistent
[   94.154632][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.156551][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.495089][   T53] Bluetooth: hci1: command tx timeout
[   94.575563][ T7661] loop1: detected capacity change from 0 to 128
[   94.603136][ T7661] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   94.671495][  T222] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.673413][  T222] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.711634][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.713394][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.730536][ T7532] bridge_slave_0: entered allmulticast mode
[   94.741498][ T7532] bridge_slave_0: entered promiscuous mode
[   94.776577][ T7255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.779238][ T7255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.458033][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.467181][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.470734][ T7532] bridge_slave_1: entered allmulticast mode
[   95.472818][ T7532] bridge_slave_1: entered promiscuous mode
[   95.502168][  T571] hsr_slave_0: left promiscuous mode
[   95.511906][  T571] hsr_slave_1: left promiscuous mode
[   95.531652][  T571] veth1_macvtap: left promiscuous mode
[   95.533086][  T571] veth0_macvtap: left promiscuous mode
[   95.535914][  T571] veth1_vlan: left promiscuous mode
[   95.537290][  T571] veth0_vlan: left promiscuous mode
[   95.588984][ T6440] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   95.833082][ T7684] loop3: detected capacity change from 0 to 512
[   95.835922][ T7684] EXT4-fs: Ignoring removed nobh option
[   95.847851][ T7684] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[   96.573937][   T53] Bluetooth: hci1: command tx timeout
[   99.986514][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.991229][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.043214][ T7689] vlan2: entered allmulticast mode
[  100.059332][ T7689] bond0: entered allmulticast mode
[  100.168756][ T7695] netlink: 'syz.1.347': attribute type 1 has an invalid length.
[  100.176894][ T7532] team0: Port device team_slave_0 added
[  100.181324][ T7532] team0: Port device team_slave_1 added
[  100.225133][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'.
[  100.350086][ T7700] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.433400][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.456217][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.470579][ T7706] loop1: detected capacity change from 0 to 512
[  100.480604][ T7706] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  100.486346][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.491875][ T7706] EXT4-fs (loop1): blocks per group (8192) and clusters per group (9) inconsistent
[  100.496183][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.508691][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.521417][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.865818][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.915728][ T7532] hsr_slave_0: entered promiscuous mode
[  100.917661][ T7532] hsr_slave_1: entered promiscuous mode
[  100.919508][ T7532] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.921608][ T7532] Cannot create hsr debugfs directory
[  100.927614][ T7712] loop3: detected capacity change from 0 to 4096
[  101.058565][ T7712] netlink: 48 bytes leftover after parsing attributes in process `syz.3.352'.
[  101.559690][ T7255] veth0_vlan: entered promiscuous mode
[  101.582082][ T7255] veth1_vlan: entered promiscuous mode
[  101.622240][ T7744] loop3: detected capacity change from 0 to 2048
[  101.853168][ T7255] veth0_macvtap: entered promiscuous mode
[  101.907968][ T7255] veth1_macvtap: entered promiscuous mode
[  101.908960][ T7759] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.937706][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.012961][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.038376][ T7255] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.040827][ T7255] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.042997][ T7255] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.061399][ T7255] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.089447][ T7759] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  102.102301][ T7759] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  102.135321][ T7759] Remounting filesystem read-only
[  102.149836][ T6446] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  102.228423][ T7532] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.242013][ T7532] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.289152][ T7295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.292368][ T7532] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.297432][ T7295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.322770][ T7532] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.415488][ T7640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.418275][ T7640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.752366][ T7782] loop3: detected capacity change from 0 to 1024
[  102.758485][ T7782] EXT4-fs: Ignoring removed oldalloc option
[  102.829890][ T7782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.299601][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.366970][ T6446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.407494][ T7532] 8021q: adding VLAN 0 to HW filter on device team0
[  103.471323][  T222] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.473335][  T222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.491817][  T222] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.493670][  T222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.506690][ T7791] netlink: 'syz.3.360': attribute type 1 has an invalid length.
[  103.538315][ T7791] netlink: 76 bytes leftover after parsing attributes in process `syz.3.360'.
[  103.542499][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'.
[  103.686749][ T7532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.731077][ T7791] 8021q: adding VLAN 0 to HW filter on device bond4
[  103.826232][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.828683][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.082169][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.180066][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.727202][ T7816] loop5: detected capacity change from 0 to 512
[  104.753146][ T7816] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  104.771240][ T7816] EXT4-fs (loop5): blocks per group (8192) and clusters per group (9) inconsistent
[  104.820594][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.209634][ T7831] loop5: detected capacity change from 0 to 256
[  105.234102][ T7831] FAT-fs (loop5): Directory bread(block 64) failed
[  105.236076][ T7831] FAT-fs (loop5): Directory bread(block 65) failed
[  105.237830][ T7831] FAT-fs (loop5): Directory bread(block 66) failed
[  105.239517][ T7831] FAT-fs (loop5): Directory bread(block 67) failed
[  105.241210][ T7831] FAT-fs (loop5): Directory bread(block 68) failed
[  105.242864][ T7831] FAT-fs (loop5): Directory bread(block 69) failed
[  105.245190][ T7831] FAT-fs (loop5): Directory bread(block 70) failed
[  105.247003][ T7831] FAT-fs (loop5): Directory bread(block 71) failed
[  105.248702][ T7831] FAT-fs (loop5): Directory bread(block 72) failed
[  105.250476][ T7831] FAT-fs (loop5): Directory bread(block 73) failed
[  106.253312][ T7532] veth0_vlan: entered promiscuous mode
[  106.293385][ T7532] veth1_vlan: entered promiscuous mode
[  106.394139][ T7532] veth0_macvtap: entered promiscuous mode
[  106.403324][ T7532] veth1_macvtap: entered promiscuous mode
[  106.432183][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.446909][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.448922][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.480935][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.487870][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.520891][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.547578][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.561278][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.572240][ T7532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.598832][ T7532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.606677][ T7532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.609080][ T7532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.789249][ T1943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.809387][ T1943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.829928][ T1970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.847420][ T1970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.896301][ T7860] netlink: 'syz.5.372': attribute type 1 has an invalid length.
[  106.899651][ T7860] netlink: 76 bytes leftover after parsing attributes in process `syz.5.372'.
[  106.903253][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.372'.
[  107.289599][ T7871] loop1: detected capacity change from 0 to 512
[  107.483384][ T7871] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.374: bg 0: block 5: invalid block bitmap
[  107.487451][ T7871] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  107.497545][ T7871] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.374: invalid indirect mapped block 3 (level 2)
[  107.503312][ T7871] EXT4-fs (loop1): 2 truncates cleaned up
[  107.505365][ T7871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.980909][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.210535][ T7887] netlink: 116 bytes leftover after parsing attributes in process `syz.1.376'.
[  109.167770][ T7901] loop5: detected capacity change from 0 to 16
[  109.187389][ T7901] erofs (device loop5): mounted with root inode @ nid 36.
[  109.219543][ T7897] loop3: detected capacity change from 0 to 4096
[  109.305682][ T7897] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  109.312706][ T7901] erofs (device loop5): invalid logical cluster 0 at nid 36
[  109.344059][ T7904] erofs (device loop5): readahead error at folio 12 @ nid 36
[  109.352334][ T7901] syz.5.380: attempt to access beyond end of device
[  109.352334][ T7901] loop5: rw=0, sector=296, nr_sectors = 8 limit=16
[  109.370101][ T7904] erofs (device loop5): readahead error at folio 10 @ nid 36
[  109.377742][ T7904] erofs (device loop5): readahead error at folio 6 @ nid 36
[  109.382648][ T7901] erofs (device loop5): read error -5 @ 0 of nid 36
[  109.387165][ T7904] erofs (device loop5): readahead error at folio 4 @ nid 36
[  109.391992][ T7901] erofs (device loop5): fail to readdir of logical block 0 of nid 36
[  109.397659][ T7904] syz.5.380: attempt to access beyond end of device
[  109.397659][ T7904] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16
[  109.408837][ T7904] syz.5.380: attempt to access beyond end of device
[  109.408837][ T7904] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  109.420313][ T7904] syz.5.380: attempt to access beyond end of device
[  109.420313][ T7904] loop5: rw=524288, sector=6520, nr_sectors = 16 limit=16
[  109.429463][ T7904] syz.5.380: attempt to access beyond end of device
[  109.429463][ T7904] loop5: rw=524288, sector=34359736328, nr_sectors = 16 limit=16
[  109.437699][ T7904] syz.5.380: attempt to access beyond end of device
[  109.437699][ T7904] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16
[  109.445719][ T7904] syz.5.380: attempt to access beyond end of device
[  109.445719][ T7904] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16
[  109.456916][ T7904] syz.5.380: attempt to access beyond end of device
[  109.456916][ T7904] loop5: rw=524288, sector=536576856, nr_sectors = 16 limit=16
[  109.581308][ T7897] ntfs3(loop3): ino=19, mi_enum_attr
[  109.590043][ T7897] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  109.962280][ T7915] netlink: 'syz.5.383': attribute type 1 has an invalid length.
[  109.971435][ T7915] netlink: 76 bytes leftover after parsing attributes in process `syz.5.383'.
[  109.975149][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.383'.
[  110.035812][ T7918] loop0: detected capacity change from 0 to 256
[  110.066695][ T7918] FAT-fs (loop0): Directory bread(block 64) failed
[  110.068413][ T7918] FAT-fs (loop0): Directory bread(block 65) failed
[  110.070193][ T7918] FAT-fs (loop0): Directory bread(block 66) failed
[  110.071869][ T7918] FAT-fs (loop0): Directory bread(block 67) failed
[  110.073644][ T7918] FAT-fs (loop0): Directory bread(block 68) failed
[  110.075683][ T7918] FAT-fs (loop0): Directory bread(block 69) failed
[  110.077401][ T7918] FAT-fs (loop0): Directory bread(block 70) failed
[  110.079134][ T7918] FAT-fs (loop0): Directory bread(block 71) failed
[  110.080843][ T7918] FAT-fs (loop0): Directory bread(block 72) failed
[  110.082556][ T7918] FAT-fs (loop0): Directory bread(block 73) failed
[  110.410689][ T7921] loop1: detected capacity change from 0 to 1024
[  110.416294][ T7921] EXT4-fs: Ignoring removed oldalloc option
[  111.098812][ T7897] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535
[  111.145647][ T7921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.412366][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.541144][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.955220][ T6454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.316552][ T6454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.348310][ T6454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.646009][ T6454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.649779][ T6454] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  112.651888][ T6454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.911254][ T7943] loop0: detected capacity change from 0 to 2048
[  112.996933][ T7951] loop3: detected capacity change from 0 to 16
[  113.022368][ T7951] erofs (device loop3): mounted with root inode @ nid 36.
[  113.039866][ T7943] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.066511][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.077551][ T7951] erofs (device loop3): invalid logical cluster 0 at nid 36
[  113.088332][ T7951] syz.3.391: attempt to access beyond end of device
[  113.088332][ T7951] loop3: rw=0, sector=296, nr_sectors = 8 limit=16
[  113.108489][ T7951] erofs (device loop3): read error -5 @ 0 of nid 36
[  113.112121][ T7951] erofs (device loop3): fail to readdir of logical block 0 of nid 36
[  113.118076][ T7951] erofs (device loop3): readahead error at folio 12 @ nid 36
[  113.120312][ T7951] erofs (device loop3): readahead error at folio 10 @ nid 36
[  113.122401][ T7951] erofs (device loop3): readahead error at folio 6 @ nid 36
[  113.128403][ T7951] erofs (device loop3): readahead error at folio 4 @ nid 36
[  113.130939][ T7951] syz.3.391: attempt to access beyond end of device
[  113.130939][ T7951] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16
[  113.327409][ T7953] loop1: detected capacity change from 0 to 32768
[  113.329569][ T7953] xfs: Unknown parameter 'context'
[  113.374504][ T7953] netlink: 44 bytes leftover after parsing attributes in process `syz.1.389'.
[  113.377067][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'.
[  113.382035][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.476339][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.597467][ T7928] chnl_net:caif_netlink_parms(): no params data found
[  114.253026][ T7983] netlink: 'syz.0.397': attribute type 1 has an invalid length.
[  114.316601][ T7986] netlink: 76 bytes leftover after parsing attributes in process `syz.0.397'.
[  114.337045][   T13] bridge_slave_1: left allmulticast mode
[  114.338603][   T13] bridge_slave_1: left promiscuous mode
[  114.344419][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.362799][   T13] bridge_slave_0: left allmulticast mode
[  114.370316][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'.
[  114.374158][   T13] bridge_slave_0: left promiscuous mode
[  114.376027][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.744027][ T6454] Bluetooth: hci1: command tx timeout
[  114.763668][ T7993] loop3: detected capacity change from 0 to 256
[  114.776528][ T7993] FAT-fs (loop3): Directory bread(block 64) failed
[  114.778444][ T7993] FAT-fs (loop3): Directory bread(block 65) failed
[  114.780240][ T7993] FAT-fs (loop3): Directory bread(block 66) failed
[  114.781965][ T7993] FAT-fs (loop3): Directory bread(block 67) failed
[  114.783684][ T7993] FAT-fs (loop3): Directory bread(block 68) failed
[  114.786923][ T7993] FAT-fs (loop3): Directory bread(block 69) failed
[  114.788705][ T7993] FAT-fs (loop3): Directory bread(block 70) failed
[  114.790351][ T7993] FAT-fs (loop3): Directory bread(block 71) failed
[  114.792215][ T7993] FAT-fs (loop3): Directory bread(block 72) failed
[  114.794476][ T7993] FAT-fs (loop3): Directory bread(block 73) failed
[  115.701866][ T6493] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested
[  115.707876][ T3850] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2
[  115.713683][ T3850] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw
[  116.820098][ T8011] loop5: detected capacity change from 0 to 2048
[  116.824425][ T6454] Bluetooth: hci1: command tx timeout
[  116.841952][ T8012] loop3: detected capacity change from 0 to 512
[  116.851826][ T8011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.858783][ T8012] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.403: bg 0: block 5: invalid block bitmap
[  116.862736][ T8012] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  116.865448][ T8012] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.403: invalid indirect mapped block 3 (level 2)
[  116.869409][ T8012] EXT4-fs (loop3): 2 truncates cleaned up
[  116.871393][ T8012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.411912][ T6446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.116716][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.157872][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.200229][   T13] bond0 (unregistering): Released all slaves
[  118.212907][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.216680][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.221130][ T7928] bridge_slave_0: entered allmulticast mode
[  118.227539][ T7928] bridge_slave_0: entered promiscuous mode
[  118.232525][ T7983] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.895372][ T6454] Bluetooth: hci1: command tx timeout
[  118.916764][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.920891][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.933524][ T7928] bridge_slave_1: entered allmulticast mode
[  118.938470][ T7928] bridge_slave_1: entered promiscuous mode
[  119.255745][ T8060] loop5: detected capacity change from 0 to 256
[  120.002665][ T7928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.024076][ T7928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.985173][ T6454] Bluetooth: hci1: command tx timeout
[  121.227471][ T8060] FAT-fs (loop5): Directory bread(block 64) failed
[  121.229264][ T8060] FAT-fs (loop5): Directory bread(block 65) failed
[  121.231084][ T8060] FAT-fs (loop5): Directory bread(block 66) failed
[  121.232954][ T8060] FAT-fs (loop5): Directory bread(block 67) failed
[  121.241814][ T8060] FAT-fs (loop5): Directory bread(block 68) failed
[  121.243558][ T8060] FAT-fs (loop5): Directory bread(block 69) failed
[  121.245336][ T8060] FAT-fs (loop5): Directory bread(block 70) failed
[  121.247003][ T8060] FAT-fs (loop5): Directory bread(block 71) failed
[  121.248694][ T8060] FAT-fs (loop5): Directory bread(block 72) failed
[  121.250343][ T8060] FAT-fs (loop5): Directory bread(block 73) failed
[  121.524143][ T8072] loop3: detected capacity change from 0 to 1024
[  121.529862][ T8072] EXT4-fs: Ignoring removed oldalloc option
[  122.394786][ T8072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.816567][ T6446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.918480][ T8077] loop1: detected capacity change from 0 to 2048
[  122.939333][ T8077] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.318942][   T13] hsr_slave_0: left promiscuous mode
[  123.326676][   T13] hsr_slave_1: left promiscuous mode
[  123.337575][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.366152][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.384621][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.386613][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.473320][   T13] veth1_macvtap: left promiscuous mode
[  123.477492][ T8095] netlink: 'syz.3.420': attribute type 1 has an invalid length.
[  123.480332][   T13] veth0_macvtap: left promiscuous mode
[  123.481879][   T13] veth1_vlan: left promiscuous mode
[  123.483256][   T13] veth0_vlan: left promiscuous mode
[  123.528617][ T8099] netlink: 76 bytes leftover after parsing attributes in process `syz.3.420'.
[  124.071601][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'.
[  125.934476][ T2364] ieee802154 phy0 wpan0: encryption failed: -22
[  125.936297][ T2364] ieee802154 phy1 wpan1: encryption failed: -22
[  125.998255][   T13] team0 (unregistering): Port device team_slave_1 removed
[  126.177459][   T13] team0 (unregistering): Port device team_slave_0 removed
[  128.322007][ T7928] team0: Port device team_slave_0 added
[  128.324205][ T8095] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  128.334784][ T7928] team0: Port device team_slave_1 added
[  128.453383][ T8127] loop3: detected capacity change from 0 to 1024
[  128.484622][ T8127] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.486434][ T8127] ext4: Unknown parameter 'obj_role'
[  128.600020][ T8134] netlink: 7 bytes leftover after parsing attributes in process `syz.5.428'.
[  128.711758][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.714238][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.723337][ T7928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.735976][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.737932][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.752322][ T7928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.867643][ T8138] loop3: detected capacity change from 0 to 512
[  128.997949][ T8138] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  129.000691][ T8138] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  129.020142][ T8138] EXT4-fs (loop3): 1 truncate cleaned up
[  129.025762][ T8138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.044056][ T6446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.219130][ T8157] loop3: detected capacity change from 0 to 2048
[  130.244849][ T7928] hsr_slave_0: entered promiscuous mode
[  130.246864][ T7928] hsr_slave_1: entered promiscuous mode
[  130.248590][ T7928] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.250636][ T7928] Cannot create hsr debugfs directory
[  130.335135][ T8157] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.527238][ T8173] netlink: 'syz.1.435': attribute type 1 has an invalid length.
[  130.542404][ T8173] netlink: 76 bytes leftover after parsing attributes in process `syz.1.435'.
[  130.571841][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'.
[  130.929747][ T8173] 8021q: adding VLAN 0 to HW filter on device bond2
[  132.337238][ T8216] loop1: detected capacity change from 0 to 1024
[  132.344430][ T8216] EXT4-fs: Ignoring removed nomblk_io_submit option
[  132.346153][ T8216] ext4: Unknown parameter 'obj_role'
[  132.532266][ T7928] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  132.676781][ T8226] loop1: detected capacity change from 0 to 512
[  133.534086][ T8226] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  133.536432][ T8226] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  133.561754][ T8226] EXT4-fs (loop1): 1 truncate cleaned up
[  133.563648][ T8226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.664708][ T7928] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  133.767394][ T7928] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  133.781012][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.795076][ T7928] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  134.021344][ T7928] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.168483][ T7928] 8021q: adding VLAN 0 to HW filter on device team0
[  134.174769][ T1970] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.176770][ T1970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.191367][ T8247] sctp: [Deprecated]: syz.5.446 (pid 8247) Use of int in maxseg socket option.
[  134.191367][ T8247] Use struct sctp_assoc_value instead
[  134.208695][ T1970] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.210496][ T1970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.216084][ T8250] netlink: 'syz.1.447': attribute type 1 has an invalid length.
[  134.355990][ T8253] netlink: 76 bytes leftover after parsing attributes in process `syz.1.447'.
[  134.412894][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'.
[  134.600891][ T7928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  134.627199][ T7928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.655009][ T8254] 8021q: adding VLAN 0 to HW filter on device bond3
[  136.906289][ T7928] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.824494][ T7928] veth0_vlan: entered promiscuous mode
[  138.835526][ T7928] veth1_vlan: entered promiscuous mode
[  138.853364][ T7928] veth0_macvtap: entered promiscuous mode
[  138.862071][ T7928] veth1_macvtap: entered promiscuous mode
[  138.879166][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.882356][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.992233][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.580270][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.582897][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.603022][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.609974][ T7928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.612106][ T7928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.619368][ T7928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.621596][ T7928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.671126][ T8308] netlink: 48 bytes leftover after parsing attributes in process `syz.5.454'.
[  139.771548][ T8324] netlink: 'syz.3.458': attribute type 1 has an invalid length.
[  139.913181][ T1970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.924445][ T8335] netlink: 76 bytes leftover after parsing attributes in process `syz.3.458'.
[  139.927884][ T1970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.948029][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'.
[  139.963048][ T7295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.965362][ T7295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.121891][ T8324] 8021q: adding VLAN 0 to HW filter on device bond5
[  140.660129][ T8352] loop5: detected capacity change from 0 to 1024
[  140.662409][ T8352] EXT4-fs: Ignoring removed oldalloc option
[  140.883642][ T8356] netlink: 'syz.1.461': attribute type 4 has an invalid length.
[  141.059677][ T8352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.384745][ T7255] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.741921][ T8377] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  143.201977][ T8397] loop1: detected capacity change from 0 to 4096
[  143.412697][ T8397] netlink: 48 bytes leftover after parsing attributes in process `syz.1.470'.
[  143.644442][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.648169][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.650877][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.663880][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.667681][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  143.669756][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.678775][ T1970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.889682][ T8421] netlink: 'syz.1.473': attribute type 1 has an invalid length.
[  143.895095][ T1970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.019188][ T8426] netlink: 76 bytes leftover after parsing attributes in process `syz.1.473'.
[  144.090318][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'.
[  144.303557][ T1970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.802729][ T8421] 8021q: adding VLAN 0 to HW filter on device bond5
[  145.075419][ T1970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.111582][   T53] Bluetooth: hci1: command tx timeout
[  146.779928][ T8410] chnl_net:caif_netlink_parms(): no params data found
[  146.861036][ T8477] loop3: detected capacity change from 0 to 4096
[  146.924021][ T8477] netlink: 48 bytes leftover after parsing attributes in process `syz.3.483'.
[  147.011993][ T1970] bridge_slave_1: left allmulticast mode
[  147.013557][ T1970] bridge_slave_1: left promiscuous mode
[  147.026446][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.050496][ T1970] bridge_slave_0: left allmulticast mode
[  147.052069][ T1970] bridge_slave_0: left promiscuous mode
[  147.053638][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.108674][ T8493] netlink: 'syz.5.486': attribute type 1 has an invalid length.
[  147.161978][ T8490] netlink: 76 bytes leftover after parsing attributes in process `syz.5.486'.
[  147.223993][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.486'.
[  148.173990][   T53] Bluetooth: hci1: command tx timeout
[  149.932927][ T8549] loop3: detected capacity change from 0 to 512
[  149.976038][ T8549] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.492: bg 0: block 5: invalid block bitmap
[  149.979557][ T8549] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  149.981789][ T8549] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.492: invalid indirect mapped block 3 (level 2)
[  149.985420][ T8549] EXT4-fs (loop3): 2 truncates cleaned up
[  149.987213][ T8549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.254074][   T53] Bluetooth: hci1: command tx timeout
[  150.568370][ T1970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.608225][ T1970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.655727][ T1970] bond0 (unregistering): Released all slaves
[  150.699046][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.700876][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.702738][ T8410] bridge_slave_0: entered allmulticast mode
[  150.707364][ T8410] bridge_slave_0: entered promiscuous mode
[  150.710341][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.712225][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.719719][ T8410] bridge_slave_1: entered allmulticast mode
[  150.721884][ T8410] bridge_slave_1: entered promiscuous mode
[  150.740989][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.749594][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.771673][ T8410] team0: Port device team_slave_0 added
[  150.780344][ T8410] team0: Port device team_slave_1 added
[  150.808022][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.809894][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.819845][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.832973][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.837485][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.847572][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.859071][ T8493] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  152.124652][ T6446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.151780][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.154174][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.336414][   T53] Bluetooth: hci1: command tx timeout
[  152.761867][ T8558] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  153.083205][ T8410] hsr_slave_0: entered promiscuous mode
[  153.110063][ T8410] hsr_slave_1: entered promiscuous mode
[  153.119468][ T8410] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.127185][ T8410] Cannot create hsr debugfs directory
[  153.621425][ T1970] hsr_slave_0: left promiscuous mode
[  153.635533][ T1970] hsr_slave_1: left promiscuous mode
[  153.637499][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.639448][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.646049][ T1970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.648112][ T1970] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.688142][ T1970] veth1_macvtap: left promiscuous mode
[  153.689591][ T1970] veth0_macvtap: left promiscuous mode
[  153.691113][ T1970] veth1_vlan: left promiscuous mode
[  153.692468][ T1970] veth0_vlan: left promiscuous mode
[  154.138398][ T8606] loop1: detected capacity change from 0 to 1024
[  154.144419][ T8606] EXT4-fs: Ignoring removed oldalloc option
[  154.821535][ T8606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.176124][ T8614] netlink: 'syz.5.503': attribute type 4 has an invalid length.
[  155.411466][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.167574][ T8622] netlink: 'syz.1.504': attribute type 4 has an invalid length.
[  156.899758][ T8627] loop3: detected capacity change from 0 to 8
[  156.914410][ T8627] SQUASHFS error: lzo decompression failed, data probably corrupt
[  156.919330][ T8627] SQUASHFS error: Failed to read block 0x82: -5
[  156.921049][ T8627] SQUASHFS error: Unable to read metadata cache entry [80]
[  156.923388][ T8627] SQUASHFS error: Unable to read inode 0x11f
[  158.746161][ T6449] Bluetooth: hci2: command 0x0406 tx timeout
[  158.747785][ T6449] Bluetooth: hci3: command 0x0406 tx timeout
[  159.378791][ T1970] team0 (unregistering): Port device team_slave_1 removed
[  159.557032][ T1970] team0 (unregistering): Port device team_slave_0 removed
[  161.784196][ T8636] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  163.507645][ T8650] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.535353][ T8650] bond0: (slave rose0): Enslaving as an active interface with an up link
[  165.468526][ T8684] loop3: detected capacity change from 0 to 4096
[  165.486427][ T8684] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  165.566470][ T8676] loop0: detected capacity change from 0 to 32768
[  165.576943][ T8676] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.515 (8676)
[  165.603614][ T8684] ntfs3(loop3): ino=19, mi_enum_attr
[  165.607285][ T8684] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  165.610405][ T8676] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.612875][ T8676] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  165.615843][ T8676] BTRFS info (device loop0): using free-space-tree
[  166.331870][ T8410] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  166.351739][ T8410] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  166.375451][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.378093][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.403024][ T8410] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  166.419117][ T8676] BTRFS info (device loop0): rebuilding free space tree
[  166.472311][ T8410] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  166.689066][ T8410] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.722256][ T8410] 8021q: adding VLAN 0 to HW filter on device team0
[  166.940123][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.942081][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.325205][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.326995][ T7295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.355400][ T1970] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  167.467921][ T6451] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.566725][ T8410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.960331][ T8410] veth0_vlan: entered promiscuous mode
[  168.025260][ T8410] veth1_vlan: entered promiscuous mode
[  168.195055][ T8758] netlink: 'syz.0.522': attribute type 4 has an invalid length.
[  168.718366][ T8410] veth0_macvtap: entered promiscuous mode
[  168.721754][ T8410] veth1_macvtap: entered promiscuous mode
[  168.777018][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.779767][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.805889][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.819619][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.822326][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.847592][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.883003][ T8410] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.902718][ T8410] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.916311][ T8410] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.918633][ T8410] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.560998][ T1970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.563707][ T1970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.060628][  T549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.062772][  T549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.135718][ T8792] netlink: 'syz.5.530': attribute type 4 has an invalid length.
[  171.933411][ T8807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.940440][ T8807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.285347][ T8823] loop1: detected capacity change from 0 to 4096
[  172.295830][ T8823] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  172.329022][ T6454] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  172.329357][ T8823] ntfs3(loop1): ino=19, mi_enum_attr
[  172.332722][ T8823] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  172.710685][ T8841] netlink: 'syz.0.536': attribute type 4 has an invalid length.
[  172.714344][ T8841] netlink: 'syz.0.536': attribute type 4 has an invalid length.
[  175.644905][ T8870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.754671][ T8866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.760270][ T8866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.785628][ T8866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.805911][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.839014][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.986408][ T8879] netlink: 'syz.5.545': attribute type 4 has an invalid length.
[  176.978691][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.056878][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.135752][ T3850] usb 1-1: no suitable firmware found!
[  177.137219][ T3850] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw
[  177.140328][ T2272] usb 1-1: ath9k_htc: USB layer deinitialized
[  177.147581][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.369284][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  177.376635][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  177.379213][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  177.382248][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  177.384946][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  177.387519][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  178.106250][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.266852][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'.
[  178.454027][ T6535] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  178.518257][ T8906] loop3: detected capacity change from 0 to 4096
[  178.520987][ T8906] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  178.604158][ T6535] usb 1-1: Using ep0 maxpacket: 8
[  178.613970][ T6535] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.152268][ T6535] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  179.173915][ T6535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.193980][ T6535] usb 1-1: Product: syz
[  179.195155][ T6535] usb 1-1: Manufacturer: syz
[  179.196425][ T6535] usb 1-1: SerialNumber: syz
[  179.229118][ T6535] usb 1-1: config 0 descriptor??
[  179.263532][ T8906] ntfs3(loop3): ino=19, mi_enum_attr
[  179.266114][ T8906] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  179.269377][   T13] bridge_slave_1: left allmulticast mode
[  179.270838][   T13] bridge_slave_1: left promiscuous mode
[  179.272420][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.282147][ T8914] loop5: detected capacity change from 0 to 8
[  179.284101][ T6535] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  179.290243][ T8914] SQUASHFS error: lzo decompression failed, data probably corrupt
[  179.292454][ T8914] SQUASHFS error: Failed to read block 0x82: -5
[  179.295402][   T13] bridge_slave_0: left allmulticast mode
[  179.296858][   T13] bridge_slave_0: left promiscuous mode
[  179.298448][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.303674][ T8914] SQUASHFS error: Unable to read metadata cache entry [80]
[  179.310598][ T8914] SQUASHFS error: Unable to read inode 0x11f
[  179.456219][ T6535] usb 1-1: USB disconnect, device number 5
[  179.935106][   T53] Bluetooth: hci1: command tx timeout
[  180.415595][ T8927] loop3: detected capacity change from 0 to 128
[  181.080878][ T8927] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.116706][ T6446] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  181.504003][ T8937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input2
[  182.013955][   T53] Bluetooth: hci1: command tx timeout
[  183.009290][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'.
[  183.011568][ T8960] netlink: 7 bytes leftover after parsing attributes in process `syz.0.563'.
[  183.655151][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.696048][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.735565][   T13] bond0 (unregistering): Released all slaves
[  183.865746][ T8892] chnl_net:caif_netlink_parms(): no params data found
[  184.150003][ T8979] loop0: detected capacity change from 0 to 8
[  184.164111][   T53] Bluetooth: hci1: command tx timeout
[  184.178629][ T8979] SQUASHFS error: lzo decompression failed, data probably corrupt
[  184.180807][ T8979] SQUASHFS error: Failed to read block 0x82: -5
[  184.182574][ T8979] SQUASHFS error: Unable to read metadata cache entry [80]
[  184.201769][ T8983] input: syz0 as /devices/virtual/input/input3
[  184.708181][ T8986] loop1: detected capacity change from 0 to 2048
[  184.780678][ T8986] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  184.802925][ T8986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.817317][ T8979] SQUASHFS error: Unable to read inode 0x11f
[  184.872219][ T8969] ALSA: mixer_oss: invalid OSS volume 'SPEA'
[  186.226815][   T53] Bluetooth: hci1: command tx timeout
[  186.264110][ T8998] loop5: detected capacity change from 0 to 4096
[  186.276059][ T8998] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  186.300206][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.307700][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.309633][ T8892] bridge_slave_0: entered allmulticast mode
[  186.326451][ T8892] bridge_slave_0: entered promiscuous mode
[  186.387108][ T8998] ntfs3(loop5): ino=19, mi_enum_attr
[  186.388774][ T8998] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  186.428984][ T9004] netlink: 'syz.1.570': attribute type 10 has an invalid length.
[  186.471466][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.473699][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.483999][ T8892] bridge_slave_1: entered allmulticast mode
[  186.486324][ T8892] bridge_slave_1: entered promiscuous mode
[  186.580388][ T9004] syz_tun: entered promiscuous mode
[  186.586474][ T9004] syz_tun: entered allmulticast mode
[  186.589047][ T9004] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  187.333308][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.389330][ T2364] ieee802154 phy0 wpan0: encryption failed: -22
[  187.391220][ T2364] ieee802154 phy1 wpan1: encryption failed: -22
[  187.514243][ T9025] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535
[  188.289320][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.400415][ T8892] team0: Port device team_slave_0 added
[  189.450559][ T8892] team0: Port device team_slave_1 added
[  189.455647][ T6454] Bluetooth: hci4: command 0x0406 tx timeout
[  190.718630][   T13] hsr_slave_0: left promiscuous mode
[  191.350563][   T13] hsr_slave_1: left promiscuous mode
[  191.352521][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.354244][ T9032] ALSA: mixer_oss: invalid OSS volume 'SPEA'
[  191.377678][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.407549][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.409500][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.466743][   T13] veth1_macvtap: left promiscuous mode
[  191.468883][   T13] veth0_macvtap: left promiscuous mode
[  191.477985][   T13] veth1_vlan: left promiscuous mode
[  191.488237][   T13] veth0_vlan: left promiscuous mode
[  191.873959][ T9067] input: syz0 as /devices/virtual/input/input4
[  192.227092][ T9067] loop3: detected capacity change from 0 to 2048
[  192.267685][ T9067] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  192.381241][ T9059] ALSA: mixer_oss: invalid OSS volume 'SPEA'
[  192.439067][ T9067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.601585][ T9054] loop5: detected capacity change from 0 to 32768
[  196.725885][ T9091] loop3: detected capacity change from 0 to 32768
[  196.741635][ T9091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.587 (9091)
[  196.771624][ T9091] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  196.776475][ T9091] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm
[  196.778745][ T9091] BTRFS info (device loop3): using free-space-tree
[  197.418406][ T9091] BTRFS info (device loop3 state M): max_inline set to 0
[  197.468054][ T6446] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  197.604479][ T9124] loop3: detected capacity change from 0 to 2048
[  197.611483][ T9124] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  197.613556][ T9124] UDF-fs: Scanning with blocksize 512 failed
[  197.642789][ T9124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.785270][   T13] team0 (unregistering): Port device team_slave_1 removed
[  197.976709][   T13] team0 (unregistering): Port device team_slave_0 removed
[  200.041664][ T9070] netlink: 'syz.0.582': attribute type 29 has an invalid length.
[  201.417670][ T9139] input: syz0 as /devices/virtual/input/input5
[  201.429301][ T9139] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  201.631043][ T9144] loop0: detected capacity change from 0 to 2048
[  201.634384][ T9144] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  201.638316][ T9144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.772887][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.787723][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.824002][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.833097][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.839947][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.851013][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.858733][ T8892] hsr_slave_0: entered promiscuous mode
[  202.861232][ T8892] hsr_slave_1: entered promiscuous mode
[  202.863149][ T8892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.865973][ T8892] Cannot create hsr debugfs directory
[  202.873113][ T9157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.882901][ T9157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.013321][ T9153] ALSA: mixer_oss: invalid OSS volume 'SPEA'
[  204.047844][ T9162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.058127][ T9157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.120951][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.123345][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.186845][ T9205] netlink: 'syz.3.606': attribute type 4 has an invalid length.
[  207.274823][ T9205] netlink: 'syz.3.606': attribute type 4 has an invalid length.
[  209.171408][ T9214] netlink: 'syz.5.607': attribute type 4 has an invalid length.
[  209.227762][ T9215] netlink: 'syz.5.607': attribute type 4 has an invalid length.
[  209.883593][ T9221] input: syz0 as /devices/virtual/input/input8
[  209.920472][ T9221] loop3: detected capacity change from 0 to 2048
[  209.936348][ T9221] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  209.940792][ T9221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.754620][ T9229] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  210.890352][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.903448][ T9234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.907693][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.916356][ T9234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.931655][ T9238] SET target dimension over the limit!
[  210.934069][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.950366][ T9234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.966195][ T8892] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  210.970153][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.972476][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.978458][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.980911][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.988751][ T8892] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  211.044989][ T8892] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  211.061658][ T8892] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  211.257741][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.270598][ T8892] 8021q: adding VLAN 0 to HW filter on device team0
[  211.279410][  T571] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.281414][  T571] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.306901][  T222] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.308905][  T222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.644732][ T9273] netlink: 'syz.5.617': attribute type 4 has an invalid length.
[  213.727555][ T9276] netlink: 'syz.5.617': attribute type 4 has an invalid length.
[  214.160545][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.164697][ T9280] loop1: detected capacity change from 0 to 8
[  214.179763][ T9280] SQUASHFS error: lzo decompression failed, data probably corrupt
[  214.181818][ T9280] SQUASHFS error: Failed to read block 0x82: -5
[  214.183441][ T9280] SQUASHFS error: Unable to read metadata cache entry [80]
[  214.222024][ T9280] SQUASHFS error: Unable to read inode 0x11f
[  214.460741][ T9301] netlink: 'syz.5.622': attribute type 10 has an invalid length.
[  214.566395][ T9301] syz_tun: entered promiscuous mode
[  215.015842][ T9288] loop0: detected capacity change from 0 to 4096
[  215.042863][ T9301] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  215.056818][ T9288] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  215.198916][ T9288] ntfs3(loop0): ino=19, mi_enum_attr
[  215.200254][ T9288] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  215.216352][ T8892] veth0_vlan: entered promiscuous mode
[  215.220510][ T8892] veth1_vlan: entered promiscuous mode
[  215.249341][ T9288] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535
[  216.066044][ T9323] loop1: detected capacity change from 0 to 2048
[  216.268718][ T9323] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  216.273632][ T9323] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.760927][ T8892] veth0_macvtap: entered promiscuous mode
[  216.764857][ T8892] veth1_macvtap: entered promiscuous mode
[  216.771615][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.774469][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.777889][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.781866][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.785116][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.788309][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.791904][ T8892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.794335][ T8892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.797169][ T8892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.799625][ T8892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.053910][ T9332] netlink: 'syz.5.625': attribute type 4 has an invalid length.
[  217.140783][ T9333] netlink: 'syz.5.625': attribute type 4 has an invalid length.
[  217.660053][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.626'.
[  217.688835][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.699232][ T9330] netlink: 'syz.0.626': attribute type 10 has an invalid length.
[  217.731787][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.753081][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.761627][ T9330] syz_tun: entered promiscuous mode
[  217.794382][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.800546][ T9330] syz_tun: entered allmulticast mode
[  217.844545][ T9330] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  217.850476][ T7937] bond0: (slave syz_tun): interface is now down
[  217.860627][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.868878][ T7937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.883148][ T7297] bond0: (slave syz_tun): interface is now down
[  217.889049][ T7937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.916696][  T571] bond0: (slave syz_tun): interface is now down
[  217.940105][  T571] bond0: (slave syz_tun): interface is now down
[  217.997390][   T43] bond0: (slave syz_tun): interface is now down
[  218.015091][  T571] bond0: (slave syz_tun): interface is now down
[  218.987986][   T13] bond0: (slave syz_tun): interface is now down
[  219.024320][   T13] bond0: (slave syz_tun): interface is now down
[  219.334211][   T13] bond0: (slave syz_tun): interface is now down
[  219.363938][  T222] bond0: (slave syz_tun): interface is now down
[  219.711465][ T9363] netlink: 'syz.5.629': attribute type 4 has an invalid length.
[  219.894533][ T9352] netlink: 'syz.5.629': attribute type 4 has an invalid length.
[  219.981425][ T1943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.984023][ T7297] bond0: (slave syz_tun): interface is now down
[  220.023914][ T1943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.033073][ T7297] bond0: now running without any active interface!
[  220.215860][ T9368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.247545][ T9376] loop5: detected capacity change from 0 to 8
[  220.250112][ T9368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.262644][ T9376] SQUASHFS error: lzo decompression failed, data probably corrupt
[  220.268424][ T9376] SQUASHFS error: Failed to read block 0x82: -5
[  220.270162][ T9376] SQUASHFS error: Unable to read metadata cache entry [80]
[  220.278130][ T9376] SQUASHFS error: Unable to read inode 0x11f
[  220.403634][ T9368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.304544][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.307347][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.641928][ T9401] loop5: detected capacity change from 0 to 4096
[  224.294004][ T9401] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  224.661822][ T9412] loop1: detected capacity change from 0 to 2048
[  224.720296][ T9412] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  224.730724][ T9412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.934689][ T9401] ntfs3(loop5): ino=19, mi_enum_attr
[  224.936296][ T9401] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  225.557825][ T9423] netlink: 'syz.0.640': attribute type 4 has an invalid length.
[  225.729745][ T9423] netlink: 'syz.0.640': attribute type 4 has an invalid length.
[  228.406135][ T7297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.802158][ T9451] loop3: detected capacity change from 0 to 8
[  228.812193][ T9451] SQUASHFS error: lzo decompression failed, data probably corrupt
[  228.831087][ T9451] SQUASHFS error: Failed to read block 0x82: -5
[  228.832651][ T9451] SQUASHFS error: Unable to read metadata cache entry [80]
[  228.834781][ T9451] SQUASHFS error: Unable to read inode 0x11f
[  228.984830][ T6454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  228.988797][ T6454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  228.991381][ T6454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  228.995543][ T6454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  228.998270][ T6454] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  229.000179][ T6454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  229.866741][ T7297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.578059][ T9466] netlink: 'syz.1.648': attribute type 4 has an invalid length.
[  230.672565][ T9468] netlink: 'syz.1.648': attribute type 4 has an invalid length.
[  231.184522][ T9477] netlink: 'syz.5.651': attribute type 1 has an invalid length.
[  231.349981][ T7297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.063611][ T9483] netlink: 'syz.0.650': attribute type 4 has an invalid length.
[  232.067615][ T6454] Bluetooth: hci1: command tx timeout
[  232.150595][ T9484] netlink: 'syz.0.650': attribute type 4 has an invalid length.
[  232.573015][ T9479] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  232.575911][ T9479] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  232.578376][ T9479] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  232.580678][ T9479] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  232.585003][ T9479] bond2: (slave geneve2): making interface the new active one
[  232.589665][ T9479] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  232.833066][ T7297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.833412][ T9491] netlink: 'syz.5.655': attribute type 10 has an invalid length.
[  232.852486][ T9491] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  232.939349][ T9496] netlink: 'syz.1.652': attribute type 4 has an invalid length.
[  233.024752][ T9497] netlink: 'syz.1.652': attribute type 4 has an invalid length.
[  233.676332][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.656'.
[  233.708299][ T9498] loop3: detected capacity change from 0 to 4096
[  233.720125][ T9498] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  233.751155][ T9495] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  233.860279][ T9506] loop0: detected capacity change from 0 to 2048
[  233.867762][ T9506] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  233.871842][ T9506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.090227][ T9498] ntfs3(loop3): ino=19, mi_enum_attr
[  234.091680][ T9498] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  234.094174][ T6454] Bluetooth: hci1: command tx timeout
[  234.114872][ T9457] chnl_net:caif_netlink_parms(): no params data found
[  234.169289][ T9511] netlink: 'syz.5.658': attribute type 29 has an invalid length.
[  234.193443][ T9511] netlink: 'syz.5.658': attribute type 29 has an invalid length.
[  234.198132][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.203291][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.214180][ T9457] bridge_slave_0: entered allmulticast mode
[  234.218622][ T9457] bridge_slave_0: entered promiscuous mode
[  234.224445][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.226375][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.244374][ T9457] bridge_slave_1: entered allmulticast mode
[  234.252113][ T9457] bridge_slave_1: entered promiscuous mode
[  234.975135][ T9457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.025596][ T9457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.113696][ T9524] loop0: detected capacity change from 0 to 8
[  236.097773][ T9524] SQUASHFS error: lzo decompression failed, data probably corrupt
[  236.108416][ T9524] SQUASHFS error: Failed to read block 0x82: -5
[  236.123682][ T9457] team0: Port device team_slave_0 added
[  236.134290][ T9527] netlink: 'syz.1.662': attribute type 4 has an invalid length.
[  236.135794][ T9457] team0: Port device team_slave_1 added
[  236.186079][ T9531] netlink: 'syz.1.662': attribute type 4 has an invalid length.
[  236.239140][ T9524] SQUASHFS error: Unable to read metadata cache entry [80]
[  236.243949][ T6454] Bluetooth: hci1: command tx timeout
[  236.245717][ T7297] bridge_slave_1: left allmulticast mode
[  236.247374][ T7297] bridge_slave_1: left promiscuous mode
[  236.254579][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.258032][ T9524] SQUASHFS error: Unable to read inode 0x11f
[  236.428102][ T7297] bridge_slave_0: left allmulticast mode
[  236.432941][ T7297] bridge_slave_0: left promiscuous mode
[  236.443119][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.377347][ T9557] netlink: 'syz.0.665': attribute type 4 has an invalid length.
[  237.463992][ T9558] netlink: 'syz.0.665': attribute type 4 has an invalid length.
[  238.254381][ T6454] Bluetooth: hci1: command tx timeout
[  238.320118][ T9566] netlink: 'syz.5.666': attribute type 4 has an invalid length.
[  239.277389][   T30] audit: type=1326 audit(239.258:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715ad28 code=0x7fc00000
[  239.282916][   T30] audit: type=1326 audit(239.258:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715ad28 code=0x7fc00000
[  239.294078][   T30] audit: type=1326 audit(239.258:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715ad28 code=0x7fc00000
[  239.299551][   T30] audit: type=1326 audit(239.258:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715ad28 code=0x7fc00000
[  239.310254][   T30] audit: type=1326 audit(239.258:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715ad28 code=0x7fc00000
[  239.316373][   T30] audit: type=1326 audit(239.258:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715ad28 code=0x7fc00000
[  239.321834][   T30] audit: type=1326 audit(239.258:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715ad28 code=0x7fc00000
[  239.340444][   T30] audit: type=1326 audit(239.258:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715ad28 code=0x7fc00000
[  239.351027][   T30] audit: type=1326 audit(239.258:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715ad28 code=0x7fc00000
[  239.356462][   T30] audit: type=1326 audit(239.258:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715ad28 code=0x7fc00000
[  239.932709][ T7297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  239.966131][ T7297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  240.005834][ T7297] bond0 (unregistering): Released all slaves
[  240.042003][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.044055][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.051219][ T9457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.219906][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.221757][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.234171][ T9457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.331822][ T9457] hsr_slave_0: entered promiscuous mode
[  240.341071][ T9457] hsr_slave_1: entered promiscuous mode
[  240.342962][ T9457] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.374024][ T9457] Cannot create hsr debugfs directory
[  241.154015][ T6442] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  242.741606][ T9591] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11
[  242.746771][ T6442] usb 1-1: Using ep0 maxpacket: 8
[  242.766337][ T6442] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  242.774445][ T6442] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  242.776993][ T6442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.779248][ T6442] usb 1-1: Product: syz
[  242.780452][ T6442] usb 1-1: Manufacturer: syz
[  242.781573][ T6442] usb 1-1: SerialNumber: syz
[  242.804139][ T9593] loop5: detected capacity change from 0 to 2048
[  242.813652][ T9593] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  242.839248][ T9593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.851389][ T6442] usb 1-1: config 0 descriptor??
[  242.862046][ T6442] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  243.112389][ T6535] usb 1-1: USB disconnect, device number 6
[  245.064219][ T9612] netlink: 'syz.5.673': attribute type 4 has an invalid length.
[  245.092818][ T9612] netlink: 'syz.5.673': attribute type 4 has an invalid length.
[  245.651891][ T9617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.675'.
[  245.792505][ T9622] netlink: 'syz.1.675': attribute type 10 has an invalid length.
[  245.819876][ T9623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.677'.
[  245.873302][ T7297] hsr_slave_0: left promiscuous mode
[  245.879513][ T7297] hsr_slave_1: left promiscuous mode
[  245.881440][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.883561][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.887093][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.890230][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.227153][ T7297] veth1_macvtap: left promiscuous mode
[  246.249626][ T7297] veth0_macvtap: left promiscuous mode
[  246.276294][ T7297] veth1_vlan: left promiscuous mode
[  246.297760][ T7297] veth0_vlan: left promiscuous mode
[  248.298006][ T9649] loop0: detected capacity change from 0 to 256
[  248.300161][ T9649] exfat: Unknown parameter ''
[  248.788822][ T9653] loop3: detected capacity change from 0 to 164
[  248.888345][ T2364] ieee802154 phy0 wpan0: encryption failed: -22
[  248.890236][ T2364] ieee802154 phy1 wpan1: encryption failed: -22
[  251.581009][ T7297] team0 (unregistering): Port device team_slave_1 removed
[  251.745023][ T7297] team0 (unregistering): Port device team_slave_0 removed
[  254.176207][ T9666] netlink: 'syz.1.682': attribute type 4 has an invalid length.
[  254.264205][ T9666] netlink: 'syz.1.682': attribute type 4 has an invalid length.
[  256.017139][ T9683] pim6reg: entered allmulticast mode
[  256.260711][ T9683] pim6reg: left allmulticast mode
[  257.137886][ T9693] netlink: 'syz.5.689': attribute type 4 has an invalid length.
[  257.216385][ T9694] netlink: 'syz.5.689': attribute type 4 has an invalid length.
[  257.705198][ T9457] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  257.776003][ T9457] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  257.832136][ T9457] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  257.888576][ T9457] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  258.006329][ T9457] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.143001][ T9457] 8021q: adding VLAN 0 to HW filter on device team0
[  258.180486][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.182406][ T7296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.200580][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.202536][ T7296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.252312][ T9730] netlink: 'syz.3.695': attribute type 4 has an invalid length.
[  259.261570][ T9730] netlink: 'syz.3.695': attribute type 4 has an invalid length.
[  259.839019][ T9740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.863206][ T9740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.881692][ T9740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.907117][ T9740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.931685][ T9740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.961265][ T9457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.943655][ T9457] veth0_vlan: entered promiscuous mode
[  261.058794][ T9764] loop0: detected capacity change from 0 to 1024
[  261.063977][ T9764] EXT4-fs: Ignoring removed oldalloc option
[  261.193680][ T9764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.628216][ T9457] veth1_vlan: entered promiscuous mode
[  261.770340][ T9457] veth0_macvtap: entered promiscuous mode
[  261.773537][ T9457] veth1_macvtap: entered promiscuous mode
[  261.809499][ T6451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.833164][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.970323][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.066687][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.090159][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.110516][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.123425][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.143713][ T9457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.164042][ T9457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.166428][ T9457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.168823][ T9457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.572851][ T6454] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  262.576089][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: kworker/u9:7 Not tainted 6.14.0-rc3-syzkaller-ga1c24ab82279 #0
[  262.576107][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  262.576115][ T6454] Workqueue: hci2 hci_rx_work
[  262.576133][ T6454] Call trace:
[  262.576137][ T6454]  show_stack+0x2c/0x3c (C)
[  262.576155][ T6454]  dump_stack_lvl+0xe4/0x150
[  262.576170][ T6454]  dump_stack+0x1c/0x28
[  262.576184][ T6454]  sysfs_create_dir_ns+0x278/0x318
[  262.576199][ T6454]  kobject_add_internal+0x598/0xb04
[  262.576212][ T6454]  kobject_add+0x14c/0x224
[  262.576223][ T6454]  device_add+0x3a0/0xa6c
[  262.576238][ T6454]  hci_conn_add_sysfs+0xc8/0x1d0
[  262.576254][ T6454]  le_conn_complete_evt+0x9ec/0xf80
[  262.576268][ T6454]  hci_le_conn_complete_evt+0x114/0x404
[  262.576282][ T6454]  hci_le_meta_evt+0x2a4/0x478
[  262.576293][ T6454]  hci_event_packet+0x884/0x1060
[  262.576304][ T6454]  hci_rx_work+0x31c/0xb04
[  262.576316][ T6454]  process_one_work+0x810/0x1638
[  262.576329][ T6454]  worker_thread+0x97c/0xeec
[  262.576342][ T6454]  kthread+0x65c/0x7b0
[  262.576353][ T6454]  ret_from_fork+0x10/0x20
[  262.576471][ T6454] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  262.627649][ T6454] Bluetooth: hci2: failed to register connection device
[  263.007539][   T53] Bluetooth: hci3: SCO packet for unknown connection handle 200
[  263.096131][  T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.097999][  T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.186661][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.188551][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.312039][ T9796] loop1: detected capacity change from 0 to 164
[  264.320998][ T9804] netlink: 40 bytes leftover after parsing attributes in process `syz.0.705'.
[  264.448149][ T9807] loop3: detected capacity change from 0 to 2048
[  264.491958][ T9807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.078860][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  266.078879][   T30] audit: type=1326 audit(265.998:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9809 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa355ad28 code=0x7fc00000
[  267.226161][ T9832] netlink: 'syz.1.708': attribute type 4 has an invalid length.
[  267.305615][ T9833] netlink: 'syz.1.708': attribute type 4 has an invalid length.
[  268.710357][ T9854] netlink: 'syz.3.711': attribute type 4 has an invalid length.
[  268.881270][ T9861] loop1: detected capacity change from 0 to 1024
[  268.883423][ T9861] EXT4-fs: Ignoring removed oldalloc option
[  268.888008][ T9854] netlink: 'syz.3.711': attribute type 4 has an invalid length.
[  268.900432][ T9861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.355997][ T6454] Bluetooth: hci2: command 0x0406 tx timeout
[  269.620007][ T6440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.866197][   T53] Bluetooth: hci4: SCO packet for unknown connection handle 200
[  272.229609][ T9883] netlink: 40 bytes leftover after parsing attributes in process `syz.5.717'.
[  272.478338][ T9892] loop0: detected capacity change from 0 to 2048
[  273.227144][ T9892] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  274.423953][   T30] audit: type=1326 audit(274.398:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.5.720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9155ad28 code=0x7fc00000
[  275.532317][ T9906] loop0: detected capacity change from 0 to 164
[  276.044847][ T9898] loop3: detected capacity change from 0 to 32768
[  276.277633][ T9898] read_mapping_page failed!
[  276.279386][ T9898] jfs_mount: Failed to read AGGREGATE_I
[  276.280880][ T9898] Mount JFS Failure: -5
[  276.282064][ T9898] jfs_mount failed w/return code = -5
[  277.321056][ T9911] netlink: 'syz.5.724': attribute type 4 has an invalid length.
[  277.676838][   T44] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.777244][   T44] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.876672][   T44] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.955100][   T44] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.111765][   T44] bridge_slave_1: left allmulticast mode
[  278.113328][   T44] bridge_slave_1: left promiscuous mode
[  278.116197][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.119365][   T44] bridge_slave_0: left allmulticast mode
[  278.120824][   T44] bridge_slave_0: left promiscuous mode
[  278.123056][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.174589][   T53] Bluetooth: hci4: SCO packet for unknown connection handle 200
[  278.240920][ T9918] loop0: detected capacity change from 0 to 2048
[  278.283123][ T9918] EXT4-fs: Ignoring removed mblk_io_submit option
[  278.341133][ T6454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  278.352229][ T6454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  278.355317][ T6454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  278.358451][ T6454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  278.360903][ T6454] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  278.363056][ T6454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  278.410605][ T9918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.614298][ T9933] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  279.627062][ T1943] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1706 with error 28
[  279.633365][ T1943] EXT4-fs (loop0): This should not happen!! Data will be lost
[  279.633365][ T1943] 
[  279.724453][ T1943] EXT4-fs (loop0): Total free blocks count 0
[  279.726107][ T1943] EXT4-fs (loop0): Free/Dirty block details
[  279.727657][ T1943] EXT4-fs (loop0): free_blocks=0
[  279.728970][ T1943] EXT4-fs (loop0): dirty_blocks=1712
[  279.730390][ T1943] EXT4-fs (loop0): Block reservation details
[  279.732069][ T1943] EXT4-fs (loop0): i_reserved_data_blocks=107
[  279.827572][ T6451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.926538][   T53] Bluetooth: hci1: command tx timeout
[  280.932058][   T53] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  280.934925][   T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u9:0 Not tainted 6.14.0-rc3-syzkaller-ga1c24ab82279 #0
[  280.934946][   T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  280.934954][   T53] Workqueue: hci4 hci_rx_work
[  280.934973][   T53] Call trace:
[  280.934976][   T53]  show_stack+0x2c/0x3c (C)
[  280.934995][   T53]  dump_stack_lvl+0xe4/0x150
[  280.935011][   T53]  dump_stack+0x1c/0x28
[  280.935024][   T53]  sysfs_create_dir_ns+0x278/0x318
[  280.935041][   T53]  kobject_add_internal+0x598/0xb04
[  280.935054][   T53]  kobject_add+0x14c/0x224
[  280.935065][   T53]  device_add+0x3a0/0xa6c
[  280.935079][   T53]  hci_conn_add_sysfs+0xc8/0x1d0
[  280.935095][   T53]  le_conn_complete_evt+0x9ec/0xf80
[  280.935110][   T53]  hci_le_conn_complete_evt+0x114/0x404
[  280.935123][   T53]  hci_le_meta_evt+0x2a4/0x478
[  280.935134][   T53]  hci_event_packet+0x884/0x1060
[  280.935145][   T53]  hci_rx_work+0x31c/0xb04
[  280.935157][   T53]  process_one_work+0x810/0x1638
[  280.935171][   T53]  worker_thread+0x97c/0xeec
[  280.935183][   T53]  kthread+0x65c/0x7b0
[  280.935194][   T53]  ret_from_fork+0x10/0x20
[  280.935333][   T53] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  280.990654][   T53] Bluetooth: hci4: failed to register connection device
[  281.111872][   T53] ==================================================================
[  281.113870][   T53] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x5a0/0xde4
[  281.115828][   T53] Read of size 8 at addr ffff0000c76a3480 by task kworker/u9:0/53
[  281.117917][   T53] 
[  281.118513][   T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u9:0 Not tainted 6.14.0-rc3-syzkaller-ga1c24ab82279 #0
[  281.118527][   T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  281.118536][   T53] Workqueue: hci4 hci_rx_work
[  281.118554][   T53] Call trace:
[  281.118557][   T53]  show_stack+0x2c/0x3c (C)
[  281.118576][   T53]  dump_stack_lvl+0xe4/0x150
[  281.118591][   T53]  print_report+0x198/0x538
[  281.118605][   T53]  kasan_report+0xd8/0x138
[  281.118617][   T53]  __asan_report_load8_noabort+0x20/0x2c
[  281.118631][   T53]  l2cap_connect_cfm+0x5a0/0xde4
[  281.118644][   T53]  hci_connect_cfm+0x120/0x1d4
[  281.118655][   T53]  le_conn_complete_evt+0xa70/0xf80
[  281.118669][   T53]  hci_le_conn_complete_evt+0x114/0x404
[  281.118683][   T53]  hci_le_meta_evt+0x2a4/0x478
[  281.118694][   T53]  hci_event_packet+0x884/0x1060
[  281.118705][   T53]  hci_rx_work+0x31c/0xb04
[  281.118717][   T53]  process_one_work+0x810/0x1638
[  281.118730][   T53]  worker_thread+0x97c/0xeec
[  281.118743][   T53]  kthread+0x65c/0x7b0
[  281.118754][   T53]  ret_from_fork+0x10/0x20
[  281.118765][   T53] 
[  281.146250][   T53] Allocated by task 53:
[  281.147320][   T53]  kasan_save_track+0x40/0x78
[  281.148606][   T53]  kasan_save_alloc_info+0x40/0x50
[  281.149963][   T53]  __kasan_kmalloc+0xac/0xc4
[  281.151193][   T53]  __kmalloc_cache_noprof+0x2cc/0x428
[  281.152599][   T53]  l2cap_chan_create+0x58/0x6a0
[  281.153916][   T53]  l2cap_sock_new_connection_cb+0x164/0x284
[  281.155540][   T53]  l2cap_connect_cfm+0x2fc/0xde4
[  281.156864][   T53]  hci_connect_cfm+0x120/0x1d4
[  281.158071][   T53]  le_conn_complete_evt+0xa70/0xf80
[  281.159454][   T53]  hci_le_conn_complete_evt+0x114/0x404
[  281.160939][   T53]  hci_le_meta_evt+0x2a4/0x478
[  281.162209][   T53]  hci_event_packet+0x884/0x1060
[  281.163499][   T53]  hci_rx_work+0x31c/0xb04
[  281.164614][   T53]  process_one_work+0x810/0x1638
[  281.165919][   T53]  worker_thread+0x97c/0xeec
[  281.167073][   T53]  kthread+0x65c/0x7b0
[  281.168173][   T53]  ret_from_fork+0x10/0x20
[  281.169293][   T53] 
[  281.169900][   T53] Freed by task 9944:
[  281.170912][   T53]  kasan_save_track+0x40/0x78
[  281.172099][   T53]  kasan_save_free_info+0x54/0x6c
[  281.173409][   T53]  __kasan_slab_free+0x64/0x8c
[  281.174663][   T53]  kfree+0x180/0x478
[  281.175674][   T53]  l2cap_chan_put+0x174/0x254
[  281.176940][   T53]  l2cap_sock_cleanup_listen+0x108/0x290
[  281.178368][   T53]  l2cap_sock_release+0x5c/0x1b4
[  281.179613][   T53]  sock_close+0xa4/0x1e8
[  281.180729][   T53]  __fput+0x340/0x760
[  281.181770][   T53]  ____fput+0x20/0x30
[  281.182796][   T53]  task_work_run+0x230/0x2e0
[  281.184071][   T53]  get_signal+0x1324/0x1500
[  281.185206][   T53]  do_signal+0x22c/0x3a04
[  281.186257][   T53]  do_notify_resume+0x74/0x1f4
[  281.187497][   T53]  el0_svc+0xac/0x168
[  281.188561][   T53]  el0t_64_sync_handler+0x84/0x108
[  281.189937][   T53]  el0t_64_sync+0x198/0x19c
[  281.191146][   T53] 
[  281.191727][   T53] The buggy address belongs to the object at ffff0000c76a3000
[  281.191727][   T53]  which belongs to the cache kmalloc-2k of size 2048
[  281.195411][   T53] The buggy address is located 1152 bytes inside of
[  281.195411][   T53]  freed 2048-byte region [ffff0000c76a3000, ffff0000c76a3800)
[  281.198947][   T53] 
[  281.199491][   T53] The buggy address belongs to the physical page:
[  281.201013][   T53] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1076a0
[  281.203106][   T53] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  281.205228][   T53] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  281.207183][   T53] page_type: f5(slab)
[  281.208148][   T53] raw: 05ffc00000000040 ffff0000c0002000 dead000000000100 dead000000000122
[  281.210347][   T53] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[  281.212546][   T53] head: 05ffc00000000040 ffff0000c0002000 dead000000000100 dead000000000122
[  281.214753][   T53] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[  281.217093][   T53] head: 05ffc00000000003 fffffdffc31da801 ffffffffffffffff 0000000000000000
[  281.219266][   T53] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  281.221656][   T53] page dumped because: kasan: bad access detected
[  281.223384][   T53] 
[  281.223969][   T53] Memory state around the buggy address:
[  281.225407][   T53]  ffff0000c76a3380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  281.227614][   T53]  ffff0000c76a3400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  281.229644][   T53] >ffff0000c76a3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  281.231749][   T53]                    ^
[  281.232780][   T53]  ffff0000c76a3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  281.234937][   T53]  ffff0000c76a3580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  281.237106][   T53] ==================================================================
[  281.288360][   T53] Disabling lock debugging due to kernel taint
[  281.290039][   T53] Unable to handle kernel paging request at virtual address fbd51fffffffff91
[  281.292363][   T53] KASAN: maybe wild-memory-access in range [0xdeacfffffffffc88-0xdeacfffffffffc8f]
[  281.302719][   T53] Mem abort info:
[  281.303684][   T53]   ESR = 0x0000000096000004
[  281.304949][   T53]   EC = 0x25: DABT (current EL), IL = 32 bits
[  281.306800][   T53]   SET = 0, FnV = 0
[  281.307757][   T53]   EA = 0, S1PTW = 0
[  281.308746][   T53]   FSC = 0x04: level 0 translation fault
[  281.310233][   T53] Data abort info:
[  281.311111][   T53]   ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000
[  281.312706][   T53]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[  281.314320][   T53]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[  281.315879][   T53] [fbd51fffffffff91] address between user and kernel address ranges
[  281.317892][   T53] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
[  281.319721][   T53] Modules linked in:
[  281.320642][   T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u9:0 Tainted: G    B              6.14.0-rc3-syzkaller-ga1c24ab82279 #0
[  281.323691][   T53] Tainted: [B]=BAD_PAGE
[  281.324736][   T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  281.327226][   T53] Workqueue: hci4 hci_rx_work
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  281.328477][   T53] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  281.330507][   T53] pc : l2cap_connect_cfm+0x53c/0xde4
[  281.331869][   T53] lr : l2cap_connect_cfm+0x538/0xde4
[  281.333220][   T53] sp : ffff800099447460
[  281.334287][   T53] x29: ffff800099447500 x28: ffff0000c76a3000 x27: 1fffe0001a435a03
[  281.336291][   T53] x26: dfff800000000000 x25: ffff0000c76a34b0 x24: ffff0000d21ad01a
[  281.338319][   T53] x23: dead000000000100 x22: ffff0000d21ad2c0 x21: 1fffe00019444807
[  281.340438][   T53] x20: ffff0000ca22403d x19: deacfffffffffc8c x18: 0000000000000008
[  281.342602][   T53] x17: 0000000000000000 x16: ffff800080bf9c60 x15: 0000000000000001
[  281.344842][   T53] x14: 1ffff0001262e6f8 x13: 0000000000000000 x12: 0000000000000000
[  281.346994][   T53] x11: 0000000000100000 x10: fffffffffffffff8 x9 : ffff8000977fd400
[  281.349110][   T53] x8 : 1bd59fffffffff91 x7 : 0000000000000001 x6 : 0000000000000001
[  281.351170][   T53] x5 : ffff800099446b18 x4 : ffff80008fcaf720 x3 : ffff80008a97da18
[  281.353210][   T53] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001
[  281.355316][   T53] Call trace:
[  281.356225][   T53]  l2cap_connect_cfm+0x53c/0xde4 (P)
[  281.357573][   T53]  hci_connect_cfm+0x120/0x1d4
[  281.358860][   T53]  le_conn_complete_evt+0xa70/0xf80
[  281.360226][   T53]  hci_le_conn_complete_evt+0x114/0x404
[  281.361636][   T53]  hci_le_meta_evt+0x2a4/0x478
[  281.362913][   T53]  hci_event_packet+0x884/0x1060
[  281.364173][   T53]  hci_rx_work+0x31c/0xb04
[  281.365296][   T53]  process_one_work+0x810/0x1638
[  281.366632][   T53]  worker_thread+0x97c/0xeec
[  281.367796][   T53]  kthread+0x65c/0x7b0
[  281.368898][   T53]  ret_from_fork+0x10/0x20
[  281.370091][   T53] Code: 52800081 aa1303e0 9756d3d3 d343fe68 (38fa6908) 
[  281.371843][   T53] ---[ end trace 0000000000000000 ]---
[  281.896835][   T53] Kernel panic - not syncing: Oops: Fatal exception
[  281.898672][   T53] SMP: stopping secondary CPUs
[  281.899994][   T53] Kernel Offset: disabled
[  281.901138][   T53] CPU features: 0x200,00002070,00800250,82017203
[  281.902767][   T53] Memory Limit: none
[  282.426366][   T53] Rebooting in 86400 seconds..