last executing test programs:

7m46.710298576s ago: executing program 4 (id=5):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYRES32], 0xfd, 0xc2d, &(0x7f0000001100)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

7m46.072063739s ago: executing program 4 (id=18):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x5, 0x82, 0x25, 0x20000004, 0x7ff, 0x44233, 0x100000000000000, 0x81, 0x9c1, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xf000, 0x80300})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m45.406508926s ago: executing program 4 (id=20):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m44.636018732s ago: executing program 32 (id=20):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m51.287213596s ago: executing program 0 (id=256):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8012, r2, 0x2000)

6m46.65348934s ago: executing program 0 (id=272):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
llistxattr(&(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x0, 0x1, 0xdc, 0x2, 0x6, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x0, 0x79, 0xfffffffc, 0x9, 0x1, 0x1000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

6m46.2507912s ago: executing program 0 (id=275):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$FIONREAD(r4, 0x40084d02, 0x0)

6m45.835544197s ago: executing program 0 (id=278):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

6m45.416062863s ago: executing program 0 (id=280):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

6m44.868112803s ago: executing program 0 (id=283):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x1860)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

6m44.206047841s ago: executing program 33 (id=283):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x1860)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

25.291654132s ago: executing program 5 (id=1567):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
epoll_create1(0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40})
r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

20.071082599s ago: executing program 5 (id=1575):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000"], 0x0}, 0x94)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x1a, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)

18.776886562s ago: executing program 5 (id=1578):
socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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")
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$eJzs3V9v29YZx/EfXbt2NSAbtiEIAic9TTbAGVyVkhsHWq846khmK5ECSbfxVRE0cmFE7op4AxbfbLnJNmB7Eb3d/W6H3e92b6NYr4bdaSAp2XL0r0mcyAm+HyE51OHDcx7Kgh7Qlo4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADk+HXXrThqBeHuXTOdX4+j9ni3lqViY+DWmWbGvJKT/dPamq4UXVd+err7cvbfDa0X99a1ljVrOv7B5R999JPlpeHxMxJ+JY4eHT+41+t1Hy46kQVp2jBIoqDtNa0JksjU3pG000hMI2jZZC9Jbdv4sfXSKDYb/i1TqdW2jC3vRbths+617LDzzvtV1902H5c71ouTKPzg43Li7wStVhA285hsdxZzJ3sifhKkJrVe25j9g153a16SWVDl+wRV5wVV3Wq1UqlWK9u3a7fvuO7yWId7ypHruhqLWPyTFot1zq/gwPNbGtR/tRQsDzvNhJuvumJFak/cO1b/f/6BnTnvaP3Pq3xf61dOd19VXv+vF/euT6v/U3KZcVuZdn7PdHt7OMaRHulYD3RPPfXU1cPTmM1zmemC35qyChUoUaRAbXl5jxn0GNW0rW25+lw7aiiRUUOBWrJKtKdEqWz+jPIVa1WeUkWKZbQhX7dkVFF/taYtGVmVtadIuwrVVF1ePsq+DvLHfWtGjlnQahZUmRH02fCZV50R9Ez1Pzd6yL+o/6D+4yLpD+v/095aRDYAAAAAAOBlcPLfvmfX/yu6Jq04agQt6y46LQAAAAAAcI7yv/yvZ03+zrhrcrj+BwAAAADgTePkn7FzJJX0brE1/EzV4JcA/R8uOkcAAAAAAPBi8r//X8+aUrb1rpynr/8BAAAAAMDr7k/T1tj/p9QfLAu46vzjP4rjFedx5+7PnEMv6/MOBwsEjq0TmDauOpcGg+TN9vLgnm/XncHqlyeLYH47aPbnrfXvnEMC+oveK2Leu1+094d7illKjaBly37U+qgiz7u0lNq76W+/Ovid8tP/c9i+5Hy3f9Drlr/4de9+nsvjbJTHh4NHamwdxRm5/EbXiphrk894Jf8gxmDekqNsXnf0/JeKw5emzik9PecT3ShibpSKtnT2/NeyOSvlaWdfZLEq6YXO/IluFjE3N24WzYQsqnOy6FZHH/+5j8VzZrE1K4vVg1536wWzAIBF2Z9dhXJvna27z/Eq92qq+xNtFDEbV/MX1uWrE17R3Xl1xZ1Q19dOpl8eZtH//ZQs/jb2HUjTamw2719P5q3k836THfDN1KqatKqO1r7+b79/+LUuHz06fv/g8N6X3S+7X1WrW9vuh657u6qV/DQGDbUHADDB/O/YmRvhfDjnqvrHJ28pKOsL6X/9/n1t5p82yN9xMHHUUn7Md/nbEDbnXLWWTsavaHPOVd1pbPUZYrdewU8CAIBX58acOjy9/jvDb/FzNudcd5dG3lK4OXp1/LbGro5HazkAAHg5bPytU0r/6MRx0Pm8UqtVvHTHmjjyPzFxUG9aE4Spjf0dL2xa04mjNPKjVrbxaVC3iUl2O50oTk0jik0nSoK7+Te/m8FXvye27YVp4CedlvUSa/woTD0/NfUg8U1n91etINmxcX5w0rF+0Ah8Lw2i0CTRbuzbsjGJtSOBQd2GadAIss3QdOKg7cV75tOotdu2pm4TPw46aVQMOJwrCBtR3M6HLS/6wQYA4II4enT84F6v1314pCWp1+s6yyc957Wx6HMEAABnUaUBAAAAAAAAAAAAAAAAAAAAALj4zu1Dfm/UxurLGPkzvdg4v/jlpF3vSJp9+L9L0mhPv/99J126CD+LMxvDRadnxPx9wi5Jf1h88q/XxqRXi7H1qAG8xv4fAAD//5RrUOQ=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa08, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

17.745056845s ago: executing program 6 (id=1580):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0)

14.890066845s ago: executing program 6 (id=1582):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
socket(0x2d, 0x80000, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

14.875824012s ago: executing program 3 (id=1583):
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xfffffffffffffea7)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d80)="bc"})
r2 = landlock_create_ruleset(&(0x7f0000000040)={0xc4}, 0x18, 0x0)
landlock_restrict_self(r2, 0xa)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
fcntl$setown(r0, 0x8, 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB])

14.350464497s ago: executing program 3 (id=1585):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x1, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r5, @ANYBLOB], 0x40}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ff"], 0x2c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x2, 0xf)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x8821}}, 0x20}}, 0x0)

14.247740867s ago: executing program 5 (id=1586):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setstatus(r3, 0x4, 0x40800)
connect$inet(r3, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)

13.968830581s ago: executing program 1 (id=1587):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0})
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, 0x0)

13.937601414s ago: executing program 3 (id=1588):
setreuid(0xffffffffffffffff, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x20000100)

12.683931384s ago: executing program 5 (id=1589):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x10)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0xffffffffffffff1a, &(0x7f0000000580)=0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d10, &(0x7f00000000c0)=0x44)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x2, 0xb, 0x6109, 0xc2}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x10)

12.382372744s ago: executing program 1 (id=1590):
syz_open_dev$sndctrl(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setgroups(0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x201)
ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000040)={0x0, 0xfffffffe, 0x7f, '\x00', &(0x7f0000000000)=0x5})
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045730, &(0x7f0000000080))
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x0)

12.335678625s ago: executing program 6 (id=1591):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}, '\b\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
setfsgid(0xee00)
r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

10.648306437s ago: executing program 5 (id=1592):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa1001)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0xc40)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r3, 0x2007ffb)
close(r3)
openat(r2, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}})

9.632099175s ago: executing program 1 (id=1593):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000051e000/0x2000)=nil)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x800)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4)

9.474937933s ago: executing program 6 (id=1594):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c00, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8000, 0x8, 0x5, 0x800, 0x1, 0x2, 0x2, 0x1, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x44880)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x2, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7ff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

8.444126437s ago: executing program 1 (id=1595):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
fcntl$dupfd(r2, 0x0, r1)
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x30000, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

7.095627588s ago: executing program 2 (id=1596):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6})
write(r0, &(0x7f0000000580), 0x0)

6.95934065s ago: executing program 6 (id=1597):
socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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")
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$eJzs3V9v29YZx/EfXbt2NSAbtiEIAic9TTbAGVyVkhsHWq846khmK5ECSbfxVRE0cmFE7op4AxbfbLnJNmB7Eb3d/W6H3e92b6NYr4bdaSAp2XL0r0mcyAm+HyE51OHDcx7Kgh7Qlo4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADk+HXXrThqBeHuXTOdX4+j9ni3lqViY+DWmWbGvJKT/dPamq4UXVd+err7cvbfDa0X99a1ljVrOv7B5R999JPlpeHxMxJ+JY4eHT+41+t1Hy46kQVp2jBIoqDtNa0JksjU3pG000hMI2jZZC9Jbdv4sfXSKDYb/i1TqdW2jC3vRbths+617LDzzvtV1902H5c71ouTKPzg43Li7wStVhA285hsdxZzJ3sifhKkJrVe25j9g153a16SWVDl+wRV5wVV3Wq1UqlWK9u3a7fvuO7yWId7ypHruhqLWPyTFot1zq/gwPNbGtR/tRQsDzvNhJuvumJFak/cO1b/f/6BnTnvaP3Pq3xf61dOd19VXv+vF/euT6v/U3KZcVuZdn7PdHt7OMaRHulYD3RPPfXU1cPTmM1zmemC35qyChUoUaRAbXl5jxn0GNW0rW25+lw7aiiRUUOBWrJKtKdEqWz+jPIVa1WeUkWKZbQhX7dkVFF/taYtGVmVtadIuwrVVF1ePsq+DvLHfWtGjlnQahZUmRH02fCZV50R9Ez1Pzd6yL+o/6D+4yLpD+v/095aRDYAAAAAAOBlcPLfvmfX/yu6Jq04agQt6y46LQAAAAAAcI7yv/yvZ03+zrhrcrj+BwAAAADgTePkn7FzJJX0brE1/EzV4JcA/R8uOkcAAAAAAPBi8r//X8+aUrb1rpynr/8BAAAAAMDr7k/T1tj/p9QfLAu46vzjP4rjFedx5+7PnEMv6/MOBwsEjq0TmDauOpcGg+TN9vLgnm/XncHqlyeLYH47aPbnrfXvnEMC+oveK2Leu1+094d7illKjaBly37U+qgiz7u0lNq76W+/Ovid8tP/c9i+5Hy3f9Drlr/4de9+nsvjbJTHh4NHamwdxRm5/EbXiphrk894Jf8gxmDekqNsXnf0/JeKw5emzik9PecT3ShibpSKtnT2/NeyOSvlaWdfZLEq6YXO/IluFjE3N24WzYQsqnOy6FZHH/+5j8VzZrE1K4vVg1536wWzAIBF2Z9dhXJvna27z/Eq92qq+xNtFDEbV/MX1uWrE17R3Xl1xZ1Q19dOpl8eZtH//ZQs/jb2HUjTamw2719P5q3k836THfDN1KqatKqO1r7+b79/+LUuHz06fv/g8N6X3S+7X1WrW9vuh657u6qV/DQGDbUHADDB/O/YmRvhfDjnqvrHJ28pKOsL6X/9/n1t5p82yN9xMHHUUn7Md/nbEDbnXLWWTsavaHPOVd1pbPUZYrdewU8CAIBX58acOjy9/jvDb/FzNudcd5dG3lK4OXp1/LbGro5HazkAAHg5bPytU0r/6MRx0Pm8UqtVvHTHmjjyPzFxUG9aE4Spjf0dL2xa04mjNPKjVrbxaVC3iUl2O50oTk0jik0nSoK7+Te/m8FXvye27YVp4CedlvUSa/woTD0/NfUg8U1n91etINmxcX5w0rF+0Ah8Lw2i0CTRbuzbsjGJtSOBQd2GadAIss3QdOKg7cV75tOotdu2pm4TPw46aVQMOJwrCBtR3M6HLS/6wQYA4II4enT84F6v1314pCWp1+s6yyc957Wx6HMEAABnUaUBAAAAAAAAAAAAAAAAAAAAALj4zu1Dfm/UxurLGPkzvdg4v/jlpF3vSJp9+L9L0mhPv/99J126CD+LMxvDRadnxPx9wi5Jf1h88q/XxqRXi7H1qAG8xv4fAAD//5RrUOQ=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa08, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

4.620082523s ago: executing program 2 (id=1598):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x6244, 0x0, r3, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x70bd2c, 0x0, {0xa, 0x68, 0x0, 0xc8, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4.529868465s ago: executing program 6 (id=1599):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x10)
waitid(0x2, r0, 0x0, 0x4, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2dc8c6008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

3.424474995s ago: executing program 2 (id=1600):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0})
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, 0x0)

2.391143378s ago: executing program 2 (id=1601):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$nfs4(0x0, 0x0, &(0x7f0000001a00), 0x10080, 0x0)
request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, &(0x7f00000000c0)=0x812)
ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0)
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x4}}, 0x18)

2.184057797s ago: executing program 3 (id=1602):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000)
r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000640)=<r7=>0x0)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
syz_io_uring_submit(r6, r7, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x12, 0xffffffffffffffff, 0x0)
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030302000000fedbdf250600000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4050)

1.45187562s ago: executing program 3 (id=1603):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4080)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)

701.27787ms ago: executing program 2 (id=1604):
sync()
sync()
sync()
sync()
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001480))
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
removexattr(0x0, &(0x7f0000000200)=@known='system.posix_acl_default\x00')
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10)
sync()
sync()
sync()
sync()
sync()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={0xffffffffffffffff, 0x0, 0x0, 0x92, 0x0, &(0x7f0000001140)=""/146, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfb3}, 0x50)
sync()
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sync()
ioprio_set$pid(0x1, 0x0, 0x6000)

314.367053ms ago: executing program 1 (id=1605):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000010000104a0518fd5000000", @ANYRES8=r0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e64"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399})
io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
unshare(0x8000000)
semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCFLSH(r4, 0x540b, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8000)
clock_nanosleep(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080)

238.362828ms ago: executing program 2 (id=1606):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

175.877145ms ago: executing program 3 (id=1607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
socket(0x1, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$MSR(0x0, 0x1013, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

0s ago: executing program 1 (id=1608):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0)

kernel console output (not intermixed with test programs):

 T125] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  153.028017][  T125] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  153.031316][ T5553] fido_id[5553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  153.072230][  T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.108927][  T125] usb 4-1: Product: syz
[  153.116076][  T125] usb 4-1: Manufacturer: syz
[  153.123031][ T5560] netlink: 'syz.2.269': attribute type 10 has an invalid length.
[  153.147938][  T125] usb 4-1: SerialNumber: syz
[  153.187959][  T125] usb 4-1: config 0 descriptor??
[  153.201756][ T5551] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  153.424660][ T5543] loop5: detected capacity change from 0 to 32768
[  153.448003][ T5551] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  153.494048][ T5543] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.266 (5543)
[  153.507831][ T5560] team0: Device veth1_vlan failed to register rx_handler
[  153.625277][ T5543] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  153.652324][ T5543] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  153.692308][ T5543] BTRFS info (device loop5): metadata ratio 0
[  153.751768][ T5543] BTRFS info (device loop5): using free space tree
[  154.122141][ T5543] BTRFS info (device loop5): enabling ssd optimizations
[  154.164327][ T5591] fuse: root generation should be zero
[  154.296800][   T26] audit: type=1800 audit(1773125956.769:6): pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.266" name="bus" dev="loop5" ino=263 res=0 errno=0
[  154.320631][  T125] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 105
[  154.444382][ T5606] loop1: detected capacity change from 0 to 8
[  154.573159][ T5606] SQUASHFS error: lzo decompression failed, data probably corrupt
[  154.604448][ T5606] SQUASHFS error: Failed to read block 0x91: -5
[  154.610789][ T5606] SQUASHFS error: Unable to read metadata cache entry [8f]
[  154.638875][ T5606] SQUASHFS error: Unable to read inode 0x11f
[  154.782220][ T5616] loop1: detected capacity change from 0 to 128
[  154.818597][ T5619] loop2: detected capacity change from 0 to 16
[  154.855431][ T5616] FAT-fs (loop1): Directory bread(block 32) failed
[  154.868509][ T5616] FAT-fs (loop1): Directory bread(block 33) failed
[  154.889749][ T5616] FAT-fs (loop1): Directory bread(block 34) failed
[  154.910436][ T5619] erofs: (device loop2): mounted with root inode @ nid 36.
[  154.957788][ T5616] FAT-fs (loop1): Directory bread(block 35) failed
[  155.030264][ T5616] FAT-fs (loop1): Directory bread(block 36) failed
[  155.080242][ T5616] FAT-fs (loop1): Directory bread(block 37) failed
[  155.107059][ T5616] FAT-fs (loop1): Directory bread(block 38) failed
[  155.136402][ T5616] FAT-fs (loop1): Directory bread(block 39) failed
[  155.174012][ T5616] FAT-fs (loop1): Directory bread(block 40) failed
[  155.180654][ T5616] FAT-fs (loop1): Directory bread(block 41) failed
[  155.347703][ T4433] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  155.466613][ T4329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.770380][ T5476] usb 4-1: USB disconnect, device number 14
[  155.974875][ T4329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.139222][ T4329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.222039][ T5634] input: syz1 as /devices/virtual/input/input6
[  156.348596][ T4329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.044760][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  157.065899][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  157.074751][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  157.084473][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  157.099161][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  157.106764][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  157.830012][ T5652] chnl_net:caif_netlink_parms(): no params data found
[  158.271860][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.289861][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.309319][ T5652] device bridge_slave_0 entered promiscuous mode
[  158.393764][ T5691] device syz_tun entered promiscuous mode
[  158.400383][ T5691] device vlan2 entered promiscuous mode
[  158.517080][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.532381][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.562089][ T5652] device bridge_slave_1 entered promiscuous mode
[  159.155009][ T4274] Bluetooth: hci4: command 0x0409 tx timeout
[  159.279479][ T5666] loop3: detected capacity change from 0 to 40427
[  159.345821][ T5666] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff
[  159.394544][ T5666] F2FS-fs (loop3): invalid crc value
[  159.420418][ T5666] F2FS-fs (loop3): Found nat_bits in checkpoint
[  159.563111][ T5666] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  159.601261][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.655363][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.720429][ T5712] loop5: detected capacity change from 0 to 7
[  159.741172][ T5712]  loop5:
[  159.744549][ T5712] loop5: partition table partially beyond EOD, truncated
[  159.751794][ T4329] device hsr_slave_0 left promiscuous mode
[  159.787351][ T4329] device hsr_slave_1 left promiscuous mode
[  159.825990][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.850981][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.904374][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.918932][ T5666] syz.3.294: attempt to access beyond end of device
[  159.918932][ T5666] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  159.934709][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.946160][ T4329] device bridge_slave_1 left promiscuous mode
[  159.952462][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.969045][ T4329] device bridge_slave_0 left promiscuous mode
[  159.975538][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.050520][ T4329] device veth1_macvtap left promiscuous mode
[  160.056826][ T4329] device veth0_macvtap left promiscuous mode
[  160.082850][ T4329] device veth1_vlan left promiscuous mode
[  160.085413][ T5717] sd 0:0:1:0: PR command failed: 1026
[  160.089460][ T4329] device veth0_vlan left promiscuous mode
[  160.120819][ T5717] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  160.128436][ T5717] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  160.139285][ T4277] syz-executor: attempt to access beyond end of device
[  160.139285][ T4277] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  160.526561][ T5714] loop5: detected capacity change from 0 to 32768
[  160.553991][ T5714] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.306 (5714)
[  160.629839][ T5714] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  160.650897][ T5714] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  160.679745][ T5714] BTRFS info (device loop5): using free space tree
[  161.082976][ T5714] BTRFS info (device loop5): enabling ssd optimizations
[  161.167129][   T26] audit: type=1800 audit(1773125963.639:7): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.306" name="file2" dev="loop5" ino=261 res=0 errno=0
[  161.233034][ T4274] Bluetooth: hci4: command 0x041b tx timeout
[  161.276902][ T5744] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4)
[  161.378158][ T5735] loop3: detected capacity change from 0 to 32768
[  161.445232][ T5735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.308 (5735)
[  161.502565][ T5735] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  161.513515][ T5735] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  161.522270][ T5735] BTRFS info (device loop3): using free space tree
[  161.636746][ T5729] loop1: detected capacity change from 0 to 32768
[  161.651905][ T4433] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  161.769218][ T5735] BTRFS info (device loop3): enabling ssd optimizations
[  162.058149][ T5729] XFS (loop1): Mounting V5 Filesystem
[  162.143927][   T26] audit: type=1800 audit(1773125964.619:8): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.308" name="file1" dev="loop3" ino=260 res=0 errno=0
[  162.273247][ T5778] BTRFS info (device loop3): scrub: started on devid 1
[  162.318005][ T5729] XFS (loop1): Ending clean mount
[  162.482367][ T5780] loop5: detected capacity change from 0 to 256
[  162.582505][ T5780] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  162.672573][ T4271] XFS (loop1): Unmounting Filesystem
[  162.894852][ T5778] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0
[  162.981746][ T5472] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  163.173256][ T4329] team0 (unregistering): Port device team_slave_1 removed
[  163.198260][ T5472] usb 6-1: Using ep0 maxpacket: 16
[  163.217045][ T5472] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.241435][ T5472] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.266659][ T5472] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  163.275888][ T5472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.286610][ T4329] team0 (unregistering): Port device team_slave_0 removed
[  163.293903][ T5472] usb 6-1: Product: syz
[  163.298106][ T5472] usb 6-1: Manufacturer: syz
[  163.315812][ T5472] usb 6-1: SerialNumber: syz
[  163.315819][ T4274] Bluetooth: hci4: command 0x040f tx timeout
[  163.375082][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.440810][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.562386][ T5472] usb 6-1: 0:2 : does not exist
[  163.577290][ T5472] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  163.645515][ T5472] usb 6-1: USB disconnect, device number 4
[  163.684896][ T4277] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.935829][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.484829][ T4329] bond0 (unregistering): Released all slaves
[  164.673058][ T5652] team0: Port device team_slave_0 added
[  164.682213][ T5652] team0: Port device team_slave_1 added
[  164.799820][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.843300][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.895895][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.923750][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.930771][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.013309][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.144001][ T5652] device hsr_slave_0 entered promiscuous mode
[  165.192405][ T5652] device hsr_slave_1 entered promiscuous mode
[  165.229560][ T5652] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.263468][ T5652] Cannot create hsr debugfs directory
[  165.393325][ T4274] Bluetooth: hci4: command 0x0419 tx timeout
[  165.488271][ T5819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  166.038564][ T5652] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  166.083696][ T5652] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  166.132800][ T5486] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  166.146075][ T5652] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  166.211217][ T5652] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  166.221155][ T5837] vcan0: tx drop: invalid da for name 0x0000000000000003
[  166.345477][ T5486] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  166.369569][ T5486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.399246][ T5486] usb 2-1: Product: syz
[  166.434284][ T5486] usb 2-1: Manufacturer: syz
[  166.459448][ T5486] usb 2-1: SerialNumber: syz
[  166.489359][ T5486] usb 2-1: config 0 descriptor??
[  166.546717][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.617132][ T5840] loop2: detected capacity change from 0 to 4096
[  166.631394][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.661513][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.704730][ T5652] 8021q: adding VLAN 0 to HW filter on device team0
[  166.731830][ T5486] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  166.750964][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.778699][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.820663][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.828016][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.870402][ T5842] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.921677][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.953590][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.988936][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  167.023278][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.030521][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.041633][ T5845] 9p: Unknown access argument 18446744073709551615: -34
[  167.079344][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  167.130071][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  167.170140][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  167.204155][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  167.227814][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  167.249567][ T5849] NILFS error (device loop2): nilfs_readdir: zero-length directory entry
[  167.267098][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  167.299292][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  167.339977][ T5652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  167.362043][ T5849] Remounting filesystem read-only
[  167.379755][ T5652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.417878][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  167.437393][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.477302][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  167.527088][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.544497][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  167.968132][ T5486] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  168.009945][ T5486] usb 2-1: USB disconnect, device number 7
[  168.153710][ T5867] fuse: Bad value for 'fd'
[  168.427363][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'.
[  168.507076][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'.
[  168.615766][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  168.632203][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  168.662155][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.251700][ T5905] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[  169.427856][ T5909] 8021q: adding VLAN 0 to HW filter on device bond2
[  169.479392][ T5909] bond1: (slave bond2): making interface the new active one
[  169.523762][ T5909] bond1: (slave bond2): Enslaving as an active interface with an up link
[  169.572081][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'.
[  169.737210][ T5905] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.851392][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  169.881046][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  170.036517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  170.210580][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  170.326758][ T5652] device veth0_vlan entered promiscuous mode
[  170.334238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.351259][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.379457][ T5652] device veth1_vlan entered promiscuous mode
[  170.398772][ T5923] fuse: Bad value for 'fd'
[  170.499181][ T5652] device veth0_macvtap entered promiscuous mode
[  170.559816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  170.573774][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  170.582067][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.693357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.714133][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  170.748880][ T5652] device veth1_macvtap entered promiscuous mode
[  170.777713][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  170.839584][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.897605][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.920902][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.936020][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.959640][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.972212][ T5938] fuse: Bad value for 'fd'
[  170.993405][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.016056][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.035447][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.061490][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.089329][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  171.107708][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  171.132096][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.167536][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.187402][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.205519][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.246807][ T5947] fuse: Bad value for 'fd'
[  171.258448][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.297110][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.329009][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.366092][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.404132][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.413694][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  171.435909][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  171.520376][ T5652] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.539765][ T5652] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.550773][ T5652] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.569361][ T5652] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.780294][ T4633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.801962][ T4633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.891795][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  171.935970][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.954651][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.988677][ T5961] syz.2.357 uses obsolete (PF_INET,SOCK_PACKET)
[  171.994532][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  172.282061][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.359'.
[  173.199483][ T5969] loop6: detected capacity change from 0 to 32768
[  173.364787][ T5969] XFS (loop6): Mounting V5 Filesystem
[  173.594274][ T5969] XFS (loop6): Ending clean mount
[  173.602808][ T5476] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  173.701070][   T26] audit: type=1800 audit(1773125976.169:9): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.284" name="file1" dev="loop6" ino=9286 res=0 errno=0
[  173.734363][ T6009] loop1: detected capacity change from 0 to 512
[  173.817144][   T26] audit: type=1800 audit(1773125976.199:10): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.284" name="file1" dev="loop6" ino=9286 res=0 errno=0
[  173.823946][ T5476] usb 3-1: Using ep0 maxpacket: 16
[  173.887070][ T5969] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 
[  173.901115][ T5969] XFS (loop6): Unmount and run xfs_repair
[  173.912467][ T5476] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  173.915801][ T5969] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  173.923831][ T5476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.942940][ T6009] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  173.953103][ T5476] usb 3-1: Product: syz
[  173.957367][ T5476] usb 3-1: Manufacturer: syz
[  173.962010][ T5476] usb 3-1: SerialNumber: syz
[  173.982287][ T6018] loop5: detected capacity change from 0 to 256
[  174.043567][ T6018] exfat: Deprecated parameter 'namecase'
[  174.053624][ T5969] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  174.064206][ T6009] fs-verity: sha256 using implementation "sha256-avx2"
[  174.075276][ T6018] exfat: Deprecated parameter 'utf8'
[  174.115157][ T6018] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  174.129527][ T5969] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  174.178168][ T5969] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  174.208239][ T5969] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  174.241165][ T5969] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  174.269591][ T5969] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  174.307821][ T5969] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  174.338462][ T5969] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  174.360478][ T5969] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74
[  174.408437][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  174.423785][ T5969] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1798/0x1e60 (fs/xfs/libxfs/xfs_defer.c:580).  Shutting down filesystem.
[  174.427874][ T6018] loop5: detected capacity change from 256 to 1
[  174.508423][ T5969] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  174.580442][ T6026] syz.5.371: attempt to access beyond end of device
[  174.580442][ T6026] loop5: rw=2049, sector=136, nr_sectors = 1 limit=1
[  174.639948][ T6026] Buffer I/O error on dev loop5, logical block 136, lost sync page write
[  174.826850][ T5652] XFS (loop6): Unmounting Filesystem
[  175.097738][ T6034] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  175.814942][ T5476] usb 3-1: MIDIStreaming interface descriptor not found
[  175.873082][ T5470] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  175.918617][ T5476] usb 3-1: USB disconnect, device number 5
[  176.072814][ T5470] usb 6-1: Using ep0 maxpacket: 16
[  176.089653][ T5470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.124835][ T5470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.150120][ T5470] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  176.187508][ T5470] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  176.205850][ T5470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.226497][ T5470] usb 6-1: config 0 descriptor??
[  176.671881][ T5470] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0003/input/input8
[  176.760490][ T6055] kvm: emulating exchange as write
[  176.831054][ T5470] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0
[  176.879115][ T5470] usb 6-1: USB disconnect, device number 5
[  177.159649][ T6062] fido_id[6062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  177.366805][ T6070] loop6: detected capacity change from 0 to 512
[  177.382510][ T6070] EXT4-fs: Ignoring removed nobh option
[  177.404600][ T6070] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  177.512107][ T6070] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #3: comm syz.6.381: corrupted inode contents
[  177.603511][ T6070] EXT4-fs error (device loop6): ext4_dirty_inode:6137: inode #3: comm syz.6.381: mark_inode_dirty error
[  177.645725][ T6070] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #3: comm syz.6.381: corrupted inode contents
[  177.669891][ T6070] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.381: mark_inode_dirty error
[  177.697707][ T6070] Quota error (device loop6): write_blk: dquota write failed
[  177.713424][ T6070] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  177.732738][ T6070] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.381: Failed to acquire dquot type 0
[  177.790430][ T6070] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #16: comm syz.6.381: corrupted inode contents
[  177.838926][ T6070] EXT4-fs error (device loop6): ext4_dirty_inode:6137: inode #16: comm syz.6.381: mark_inode_dirty error
[  177.863564][ T6070] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #16: comm syz.6.381: corrupted inode contents
[  177.902021][ T6070] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.381: mark_inode_dirty error
[  177.921886][ T6070] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #16: comm syz.6.381: corrupted inode contents
[  178.018592][ T6070] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  178.046338][ T6070] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #16: comm syz.6.381: corrupted inode contents
[  178.112404][ T6070] EXT4-fs error (device loop6): ext4_truncate:4318: inode #16: comm syz.6.381: mark_inode_dirty error
[  178.181868][ T6086] loop2: detected capacity change from 0 to 4096
[  178.243239][ T6070] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  178.253401][ T6086] EXT4-fs: inline encryption not supported
[  178.322332][ T6086] EXT4-fs (loop2): Test dummy encryption mode enabled
[  178.374498][ T6070] EXT4-fs (loop6): 1 truncate cleaned up
[  178.380333][ T6070] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  178.404891][ T6086] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  178.444083][ T6086] System zones: 0-5
[  178.480881][ T6086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  178.551415][ T6070] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.999528][ T4282] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Out of memory
[  179.056821][ T4282] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #2: comm syz-executor: mark_inode_dirty error
[  179.141313][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  179.284379][ T5652] EXT4-fs (loop6): unmounting filesystem.
[  180.811377][ T6102] loop1: detected capacity change from 0 to 32768
[  180.874361][ T6102] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.389 (6102)
[  180.888119][ T6142] kvm: vcpu 0: requested 768 ns lapic timer period limited to 200000 ns
[  180.948693][ T6102] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.980100][ T6102] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  180.995011][ T6102] BTRFS info (device loop1): using free space tree
[  181.392572][ T6102] BTRFS info (device loop1): enabling ssd optimizations
[  181.744983][   T46] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  181.890721][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.415653][   T26] audit: type=1326 audit(1773125984.889:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78f99c799 code=0x7ffc0000
[  182.471772][   T26] audit: type=1326 audit(1773125984.919:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff78f95cfce code=0x7ffc0000
[  182.526181][   T26] audit: type=1326 audit(1773125984.919:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78f99c799 code=0x7ffc0000
[  182.567306][   T26] audit: type=1326 audit(1773125984.919:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff78f99c799 code=0x7ffc0000
[  182.572951][ T5470] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  182.610197][   T26] audit: type=1326 audit(1773125984.929:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78f99c799 code=0x7ffc0000
[  182.732010][   T26] audit: type=1326 audit(1773125984.979:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78f99c799 code=0x7ffc0000
[  182.852900][ T5470] usb 6-1: Using ep0 maxpacket: 32
[  182.860007][ T5470] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  182.890871][ T6207] overlayfs: failed to clone upperpath
[  182.896839][ T5470] usb 6-1: config 0 has no interface number 0
[  182.911417][ T5470] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  182.939735][ T5470] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  183.002709][ T5470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.032181][ T5470] usb 6-1: Product: syz
[  183.042240][ T5470] usb 6-1: Manufacturer: syz
[  183.054923][ T5470] usb 6-1: SerialNumber: syz
[  183.089584][ T5470] usb 6-1: config 0 descriptor??
[  183.095936][ T6197] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  183.353040][ T6197] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  184.516845][ T6259] tipc: Started in network mode
[  184.529982][ T6259] tipc: Node identity 4, cluster identity 4711
[  184.554020][ T6259] tipc: Node number set to 4
[  184.958148][   T22] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  184.981068][ T5470] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  184.998912][ T5470] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  185.009968][ T5470] asix: probe of 6-1:0.188 failed with error -71
[  185.021567][ T5470] usb 6-1: USB disconnect, device number 6
[  185.162751][   T22] usb 2-1: Using ep0 maxpacket: 32
[  185.169767][   T22] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  185.178772][   T22] usb 2-1: config 0 has no interface number 0
[  185.195693][   T22] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  185.204983][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.214205][   T22] usb 2-1: Product: syz
[  185.218717][   T22] usb 2-1: Manufacturer: syz
[  185.224119][   T22] usb 2-1: SerialNumber: syz
[  185.240576][   T22] usb 2-1: config 0 descriptor??
[  185.255755][   T22] smsc95xx v2.0.0
[  185.663206][   T22] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  185.683456][   T22] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  185.768011][ T6291] device syzkaller0 entered promiscuous mode
[  185.789836][ T6291] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[  186.280726][ T6306] loop6: detected capacity change from 0 to 128
[  186.332753][ T5489] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  186.377628][ T6306] syz.6.439: attempt to access beyond end of device
[  186.377628][ T6306] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128
[  186.445971][ T6306] loop6: detected capacity change from 128 to 0
[  186.467835][ T6306] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000d00)
[  186.478295][ T6306] FAT-fs (loop6): Filesystem has been set read-only
[  186.552929][ T5489] usb 6-1: Using ep0 maxpacket: 16
[  186.560733][ T5489] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  186.592734][ T5489] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.603594][ T5489] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.654921][ T5489] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  186.682691][ T5489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.690910][ T5489] usb 6-1: Product: syz
[  186.712747][ T5489] usb 6-1: Manufacturer: syz
[  186.722034][ T5489] usb 6-1: SerialNumber: syz
[  186.918284][   T22] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  186.942434][   T22] smsc95xx: probe of 2-1:0.67 failed with error -71
[  186.972515][   T22] usb 2-1: USB disconnect, device number 8
[  187.168539][ T5489] usb 6-1: 0:2 : does not exist
[  187.762800][ T5476] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  187.882739][ T5473] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  187.942805][ T5476] usb 2-1: Using ep0 maxpacket: 16
[  187.954077][ T5476] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  187.963731][ T5476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.971841][ T5476] usb 2-1: Product: syz
[  187.976179][ T5476] usb 2-1: Manufacturer: syz
[  187.980907][ T5476] usb 2-1: SerialNumber: syz
[  187.989568][ T5476] usb 2-1: config 0 descriptor??
[  188.000015][ T5476] asix: probe of 2-1:0.0 failed with error -22
[  188.062794][ T5473] usb 7-1: Using ep0 maxpacket: 32
[  188.070730][ T5473] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.087365][ T5473] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.097985][ T5473] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  188.112477][ T5473] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.133224][ T5473] usb 7-1: config 0 descriptor??
[  188.140500][ T5473] hub 7-1:0.0: USB hub found
[  188.205251][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.216642][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.226986][   T22] usb 2-1: USB disconnect, device number 9
[  188.347280][ T5473] hub 7-1:0.0: 1 port detected
[  188.604253][ T5489] usb 6-1: USB disconnect, device number 7
[  188.816411][   T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  188.825235][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.858885][ T6325] overlayfs: failed to resolve './file0': -2
[  188.972490][ T6328] VFS: Mount too revealing
[  188.977386][ T5476] hub 7-1:0.0: activate --> -90
[  189.014912][   T22] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  189.032732][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.044351][   T22] usb 2-1: config 0 descriptor??
[  189.064525][   T22] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  189.254322][   T22] gp8psk: usb in 128 operation failed.
[  189.270045][   T22] gp8psk: usb in 137 operation failed.
[  189.289634][   T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  189.308710][   T22] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  189.320246][   T22] usb 2-1: media controller created
[  189.357565][   T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  189.415907][   T22] gp8psk_fe: Frontend attached
[  189.454530][   T22] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  189.466914][   T22] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  189.521441][ T6336] loop5: detected capacity change from 0 to 128
[  189.569137][ T6336] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  189.583162][ T6336] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.623695][   T22] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  189.636138][   T22] gp8psk: found Genpix USB device pID = 203 (hex)
[  189.740081][ T6336] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.451: No space for directory leaf checksum. Please run e2fsck -D.
[  189.766429][ T6336] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.451: checksumming directory block 0
[  189.772994][ T6338] EXT4-fs error (device loop5): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum
[  189.804229][ T4640] udevd[4640]: incorrect ext4 checksum on /dev/loop5
[  189.851510][  T128] usb 2-1: USB disconnect, device number 10
[  189.924202][ T4433] EXT4-fs (loop5): unmounting filesystem.
[  189.995066][ T5476] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  190.002365][ T5476] usb 7-1-port1: config error
[  190.025843][ T5473] usb 7-1: USB disconnect, device number 2
[  190.040088][  T128] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  191.625396][ T6383] loop6: detected capacity change from 0 to 512
[  191.803923][ T6383] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  192.068363][ T5652] EXT4-fs (loop6): unmounting filesystem.
[  193.963104][  T128] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  194.172674][  T128] usb 2-1: Using ep0 maxpacket: 32
[  194.180029][  T128] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255
[  194.196417][  T128] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  194.206819][  T128] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  194.220491][  T128] usb 2-1: Product: syz
[  194.225373][  T128] usb 2-1: Manufacturer: syz
[  194.230061][  T128] usb 2-1: SerialNumber: syz
[  194.246855][  T128] usb 2-1: config 0 descriptor??
[  194.252517][ T6413] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  194.275603][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  194.281992][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  195.447039][ T6452] loop6: detected capacity change from 0 to 512
[  195.508554][ T6452] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  195.620158][ T6452] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  195.651399][ T6452] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.858547][ T6452] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.485: Unrecognised inode hash code 20
[  195.916390][ T4258] udevd[4258]: incorrect ext4 checksum on /dev/loop6
[  195.929231][ T6452] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.485: Corrupt directory, running e2fsck is recommended
[  195.989721][ T6462] loop2: detected capacity change from 0 to 128
[  196.064884][ T6462] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  196.084433][ T6462] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  196.235056][ T5652] EXT4-fs (loop6): unmounting filesystem.
[  196.321402][ T6462] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS
[  196.425272][ T6435] loop5: detected capacity change from 0 to 32768
[  196.473987][ T6435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.480 (6435)
[  196.586135][ T6435] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.655183][ T6435] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  196.692950][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  196.705192][ T6466] dccp_close: ABORT with 32 bytes unread
[  196.711658][ T6435] BTRFS info (device loop5): using free space tree
[  196.838357][ T5470] usb 2-1: USB disconnect, device number 11
[  197.002243][ T6485] loop6: detected capacity change from 0 to 1024
[  197.102392][ T6435] BTRFS info (device loop5): enabling ssd optimizations
[  197.127590][ T6485] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  197.310275][ T6485] syz.6.494: attempt to access beyond end of device
[  197.310275][ T6485] loop6: rw=2051, sector=232, nr_sectors = 794 limit=1024
[  197.673449][ T6506] overlayfs: failed to clone upperpath
[  197.823284][ T5652] EXT4-fs (loop6): unmounting filesystem.
[  197.983191][ T4433] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  198.174830][ T6520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.501'.
[  198.298151][ T6520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.501'.
[  198.695552][ T6532] <
[  198.974703][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz.5.506'.
[  199.871190][ T6578] overlayfs: failed to clone upperpath
[  200.146740][ T6550] loop2: detected capacity change from 0 to 32768
[  200.230017][ T6550] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.510 (6550)
[  200.293670][ T6590] loop5: detected capacity change from 0 to 1024
[  200.295975][ T6550] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.366021][ T6550] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  200.409643][ T6550] BTRFS info (device loop2): using free space tree
[  200.418723][ T6590] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  200.545033][ T6610] EXT4-fs (loop5): shut down requested (0)
[  200.769707][ T6550] BTRFS info (device loop2): enabling ssd optimizations
[  201.214212][ T4433] EXT4-fs (loop5): unmounting filesystem.
[  201.252858][ T4320] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  201.356910][ T4282] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.457570][ T4320] usb 7-1: Using ep0 maxpacket: 16
[  201.485017][ T4320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  201.532159][ T4320] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  201.542467][ T4320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.551212][ T4320] usb 7-1: Product: syz
[  201.556006][ T4320] usb 7-1: Manufacturer: syz
[  201.560690][ T4320] usb 7-1: SerialNumber: syz
[  201.580775][ T4320] usb 7-1: config 0 descriptor??
[  201.615997][ T4320] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  201.633140][ T4320] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  202.214472][ T4320] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  202.906911][ T6676] loop2: detected capacity change from 0 to 512
[  202.919448][ T4320] em28xx 7-1:0.0: board has no eeprom
[  202.978157][ T6676] EXT4-fs: Ignoring removed nobh option
[  203.055728][ T6676] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #3: comm syz.2.532: corrupted inode contents
[  203.113759][ T6676] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #3: comm syz.2.532: mark_inode_dirty error
[  203.144567][ T6676] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #3: comm syz.2.532: corrupted inode contents
[  203.176617][ T6676] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.532: mark_inode_dirty error
[  203.189864][ T4320] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  203.225384][ T4320] em28xx 7-1:0.0: dvb set to bulk mode.
[  203.267579][ T6676] Quota error (device loop2): write_blk: dquota write failed
[  203.284883][ T6676] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  203.293842][ T4320] usb 7-1: USB disconnect, device number 3
[  203.309322][ T4320] em28xx 7-1:0.0: Disconnecting em28xx
[  203.327216][ T4318] em28xx 7-1:0.0: Binding DVB extension
[  203.336297][ T6676] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.532: Failed to acquire dquot type 0
[  203.405515][ T6676] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.532: corrupted inode contents
[  203.418330][ T6676] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #16: comm syz.2.532: mark_inode_dirty error
[  203.452289][ T6676] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.532: corrupted inode contents
[  203.464932][ T6676] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.532: mark_inode_dirty error
[  203.507614][ T6676] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.532: corrupted inode contents
[  203.560346][ T6676] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  203.594125][ T6676] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.532: corrupted inode contents
[  203.644718][ T4318] em28xx 7-1:0.0: Registering input extension
[  203.651728][ T4320] em28xx 7-1:0.0: Closing input extension
[  203.681387][ T6676] EXT4-fs error (device loop2): ext4_truncate:4318: inode #16: comm syz.2.532: mark_inode_dirty error
[  203.734361][ T6676] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  203.781202][ T6676] EXT4-fs (loop2): 1 truncate cleaned up
[  203.791698][ T4320] em28xx 7-1:0.0: Freeing device
[  203.798026][ T6676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  203.810111][ T6676] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.234089][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  204.609711][ T6738] loop5: detected capacity change from 0 to 128
[  204.661985][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'.
[  204.737411][ T6741] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  204.760021][ T6738] syz.5.552: attempt to access beyond end of device
[  204.760021][ T6738] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128
[  204.900836][ T6736] syz.5.552: attempt to access beyond end of device
[  204.900836][ T6736] loop5: rw=524288, sector=146, nr_sectors = 104 limit=128
[  205.045318][ T6738] syz.5.552: attempt to access beyond end of device
[  205.045318][ T6738] loop5: rw=0, sector=146, nr_sectors = 8 limit=128
[  205.094101][ T6738] syz.5.552: attempt to access beyond end of device
[  205.094101][ T6738] loop5: rw=0, sector=146, nr_sectors = 8 limit=128
[  205.208281][ T6738] syz.5.552: attempt to access beyond end of device
[  205.208281][ T6738] loop5: rw=0, sector=146, nr_sectors = 8 limit=128
[  205.250762][ T6738] syz.5.552: attempt to access beyond end of device
[  205.250762][ T6738] loop5: rw=0, sector=146, nr_sectors = 8 limit=128
[  205.399140][ T6738] syz.5.552: attempt to access beyond end of device
[  205.399140][ T6738] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128
[  205.805912][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  205.823119][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  205.903062][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'.
[  206.144778][ T6784] loop5: detected capacity change from 0 to 1024
[  206.168743][ T6784] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  206.251949][ T6784] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  206.342343][ T6789] input: syz0 as /devices/virtual/input/input10
[  206.375283][ T6790] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz.5.564: Invalid inode table block 11692674362692534836 in block_group 0
[  206.483368][ T6790] EXT4-fs (loop5): Remounting filesystem read-only
[  206.502814][ T6790] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  206.542808][ T6790] EXT4-fs (loop5): Remounting filesystem read-only
[  206.566079][ T6790] EXT4-fs error (device loop5): ext4_setattr:5531: inode #2: comm syz.5.564: mark_inode_dirty error
[  206.593068][ T4274] Bluetooth: hci0: command 0x0406 tx timeout
[  206.599169][ T4274] Bluetooth: hci2: command 0x0406 tx timeout
[  206.607810][ T4280] Bluetooth: hci3: command 0x0406 tx timeout
[  206.623095][ T6790] EXT4-fs (loop5): Remounting filesystem read-only
[  206.659359][ T6796] loop1: detected capacity change from 0 to 64
[  206.768123][ T6800] capability: warning: `syz.6.568' uses deprecated v2 capabilities in a way that may be insecure
[  206.853692][ T4433] EXT4-fs (loop5): unmounting filesystem.
[  207.462774][ T5476] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  207.643302][ T6828] overlayfs: failed to clone upperpath
[  207.667256][ T5476] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  207.691186][ T5476] usb 7-1: config 0 has no interface number 0
[  207.726104][ T5476] usb 7-1: config 0 interface 41 has no altsetting 0
[  207.741365][ T5476] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  207.764359][ T5476] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.785310][ T5476] usb 7-1: Product: syz
[  207.789792][ T5476] usb 7-1: Manufacturer: syz
[  207.808562][ T5476] usb 7-1: SerialNumber: syz
[  207.841814][ T5476] usb 7-1: config 0 descriptor??
[  208.263743][ T6845] loop1: detected capacity change from 0 to 512
[  208.312277][ T6845] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  208.388053][ T6845] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[  208.413836][ T6845] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.583: inode #15: comm syz.1.583: iget: illegal inode #
[  208.501282][ T6845] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.583: couldn't read orphan inode 15 (err -117)
[  208.548806][ T6845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  208.635228][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  208.677939][ T5476] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  210.001895][ T5476] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[  210.069632][ T5476] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[  210.094135][ T5476] CoreChips: probe of 7-1:0.41 failed with error -71
[  210.128121][ T5476] usb 7-1: USB disconnect, device number 4
[  210.194236][ T6889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.273448][ T4274] Bluetooth: hci0: command 0x0409 tx timeout
[  210.381226][ T6889] device syzkaller0 entered promiscuous mode
[  210.392178][ T6889] tipc: Resetting bearer <eth:syzkaller0>
[  210.502250][ T6888] tipc: Resetting bearer <eth:syzkaller0>
[  211.077912][ T6902] loop6: detected capacity change from 0 to 4096
[  211.251808][ T6902] EXT4-fs (loop6): Test dummy encryption mode enabled
[  211.324683][ T6902] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  212.613604][ T5473] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  212.828208][ T5473] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.839244][ T5473] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  212.863593][ T5473] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  212.889806][ T5473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  212.899964][ T5473] usb 6-1: SerialNumber: syz
[  213.181967][ T5473] usb 6-1: 0:2 : does not exist
[  213.286697][ T5473] usb 6-1: USB disconnect, device number 8
[  214.087504][ T6934] loop6: detected capacity change from 0 to 40427
[  214.116523][ T6934] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  214.147427][ T6934] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  214.207499][ T6934] F2FS-fs (loop6): Found nat_bits in checkpoint
[  214.336879][ T6934] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  214.344357][ T6934] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  214.609898][   T26] audit: type=1800 audit(1773126017.079:17): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.604" name="file1" dev="loop6" ino=11 res=0 errno=0
[  214.925764][ T4496] kworker/u4:11: attempt to access beyond end of device
[  214.925764][ T4496] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  215.395775][ T6943] overlayfs: failed to get inode (-116)
[  215.401664][ T6943] overlayfs: failed to get inode (-116)
[  216.648560][ T6888] tipc: Disabling bearer <eth:syzkaller0>
[  218.112017][ T5046] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.322536][ T5046] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.549857][ T5046] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.688867][ T6973] loop5: detected capacity change from 0 to 256
[  218.689756][ T6971] input: syz0 as /devices/virtual/input/input11
[  218.717857][ T5046] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.736207][ T6973] exfat: Deprecated parameter 'namecase'
[  218.776401][ T6973] exfat: Deprecated parameter 'utf8'
[  218.854231][ T6973] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  219.233636][ T6984] loop5: detected capacity change from 256 to 1
[  219.445776][ T4496] kworker/u4:11: attempt to access beyond end of device
[  219.445776][ T4496] loop5: rw=1, sector=224, nr_sectors = 1 limit=1
[  219.832168][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  219.843832][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  219.892899][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  219.908030][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  219.922510][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  219.930068][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.220201][ T6994] chnl_net:caif_netlink_parms(): no params data found
[  221.961417][ T4274] Bluetooth: hci1: command 0x0406 tx timeout
[  221.967693][ T4274] Bluetooth: hci0: command 0x0409 tx timeout
[  222.067141][ T6994] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.120772][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.163445][ T6994] device bridge_slave_0 entered promiscuous mode
[  222.229862][ T7054] loop5: detected capacity change from 0 to 128
[  222.265046][ T7054] EXT4-fs: Ignoring removed i_version option
[  222.315036][ T7054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003]
[  222.349735][ T7054] System zones: 1-3, 19-19, 35-36
[  222.400975][ T7054] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  222.427965][ T7054] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  222.606655][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.625311][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.685491][ T6994] device bridge_slave_1 entered promiscuous mode
[  222.781527][ T5046] device hsr_slave_0 left promiscuous mode
[  222.801912][ T5046] device hsr_slave_1 left promiscuous mode
[  222.819397][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.851959][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.889371][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.902022][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.939956][ T5046] device bridge_slave_1 left promiscuous mode
[  222.967580][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.995988][ T5046] device bridge_slave_0 left promiscuous mode
[  223.019440][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.163074][ T5046] device veth1_macvtap left promiscuous mode
[  223.169204][ T5046] device veth0_macvtap left promiscuous mode
[  223.196045][ T5046] device veth1_vlan left promiscuous mode
[  223.212118][ T5046] device veth0_vlan left promiscuous mode
[  223.589590][ T4433] EXT4-fs (loop5): unmounting filesystem.
[  223.705699][ T5046] bond3 (unregistering): (slave bridge1): Releasing backup interface
[  223.764121][ T5046] bond3 (unregistering): Released all slaves
[  224.032755][ T4274] Bluetooth: hci0: command 0x041b tx timeout
[  224.277601][ T5046] bond1 (unregistering): (slave bond2): Releasing backup interface
[  224.302169][ T5046] bond2 (unregistering): Released all slaves
[  224.739794][ T5046] bond1 (unregistering): Released all slaves
[  225.423350][ T5046] team0 (unregistering): Port device team_slave_1 removed
[  225.489152][ T5046] team0 (unregistering): Port device team_slave_0 removed
[  225.547811][ T5046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.608720][ T5046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.048363][ T5046] bond0 (unregistering): Released all slaves
[  226.112743][ T4274] Bluetooth: hci0: command 0x040f tx timeout
[  226.230198][ T6994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.347028][ T6994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.501777][ T6994] team0: Port device team_slave_0 added
[  226.517316][ T6994] team0: Port device team_slave_1 added
[  226.580980][ T6994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.598473][ T6994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.688948][ T6994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.822727][ T6994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.849510][ T6994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.942003][ T6994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.135350][ T6994] device hsr_slave_0 entered promiscuous mode
[  227.162128][ T6994] device hsr_slave_1 entered promiscuous mode
[  227.188393][ T6994] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.211829][ T6994] Cannot create hsr debugfs directory
[  228.195545][ T4274] Bluetooth: hci0: command 0x0419 tx timeout
[  228.394625][ T6994] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  228.426223][ T6994] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  228.472202][ T6994] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  228.506547][ T6994] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  228.768570][ T6994] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.831696][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  228.872405][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  228.897258][ T6994] 8021q: adding VLAN 0 to HW filter on device team0
[  228.969451][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  228.996873][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  229.029037][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.036246][ T4495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.089190][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  229.109082][ T7154] fuse: Bad value for 'fd'
[  229.176870][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  229.208852][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  229.231992][ T4495] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.239237][ T4495] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.340772][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  229.388282][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  229.441552][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  229.479727][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  229.626079][ T6994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  229.657194][ T6994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.679707][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  229.693306][ T7171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.706909][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  229.733937][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  229.760019][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  229.774354][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  229.782491][ T7175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.794090][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  229.806666][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  229.830995][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  229.870286][ T7179] loop2: detected capacity change from 0 to 256
[  229.886041][ T7164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.910484][   T26] audit: type=1800 audit(1773126032.379:18): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.666" name="bus" dev="loop2" ino=1048617 res=0 errno=0
[  231.709839][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.718697][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.571947][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.627492][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.959442][ T7186] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.968581][ T7186] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.978142][ T7186] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.987313][ T7186] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.158575][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  233.182894][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  233.194610][ T6994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.320543][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  233.340231][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  233.385010][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  233.411058][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  233.442241][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  233.488496][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  233.527094][ T6994] device veth0_vlan entered promiscuous mode
[  233.556430][ T6994] device veth1_vlan entered promiscuous mode
[  233.636496][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  233.666308][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  233.699378][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  233.736940][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  233.776210][ T6994] device veth0_macvtap entered promiscuous mode
[  233.801144][ T6994] device veth1_macvtap entered promiscuous mode
[  233.850679][ T7250] loop2: detected capacity change from 0 to 1024
[  233.899761][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.936737][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.971876][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.015741][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.049579][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.085497][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.125520][ T6994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.151134][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  234.166648][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  234.192127][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  234.211665][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  234.235040][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.254370][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.277975][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.300784][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.323985][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.368347][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.400924][ T6994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.425114][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  234.435854][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  234.478090][ T6994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.499667][ T6994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.587252][ T6994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.618451][ T6994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.899151][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.925040][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.954136][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  235.043622][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.062219][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.096123][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  235.384672][ T7274] md: md2 stopped.
[  237.530983][ T7349] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  238.433826][ T5472] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  238.489193][ T7380] binder_alloc: 7379: binder_alloc_buf size 64768 failed, no address space
[  238.519356][ T7380] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  238.592782][ T5472] usb 2-1: device descriptor read/64, error -71
[  238.874461][ T5472] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  238.884872][ T7387] netlink: 'syz.3.700': attribute type 10 has an invalid length.
[  239.027144][ T7387] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  239.046149][ T5472] usb 2-1: device descriptor read/64, error -71
[  239.185302][ T5472] usb usb2-port1: attempt power cycle
[  239.605302][ T5472] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  239.653736][ T5472] usb 2-1: device descriptor read/8, error -71
[  240.022736][ T5472] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  240.110882][ T5472] usb 2-1: device descriptor read/8, error -71
[  240.273429][ T5472] usb usb2-port1: unable to enumerate USB device
[  240.452854][ T7418] Invalid argument reading file caps for ./file0
[  241.635824][ T7431] xt_CT: No such helper "snmp_trap"
[  241.825934][ T7438] 9pnet_fd: p9_fd_create_tcp (7438): problem connecting socket to 127.0.0.1
[  244.496566][ T7488] loop5: detected capacity change from 0 to 1024
[  244.552073][ T7480] loop2: detected capacity change from 0 to 40427
[  244.602781][ T7480] F2FS-fs (loop2): Not support 16777216, larger than 256
[  246.771569][ T7303] hfsplus: b-tree write err: -5, ino 25
[  246.805905][ T7303] hfsplus: b-tree write err: -5, ino 4
[  246.812099][ T7303] hfsplus: b-tree write err: -5, ino 2
[  247.180859][ T7509] netlink: 'syz.5.739': attribute type 10 has an invalid length.
[  247.334732][ T7509] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  247.522667][ T5488] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  247.745353][ T5488] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  247.783482][ T5488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.809368][ T5488] usb 3-1: Product: syz
[  247.823985][ T5488] usb 3-1: Manufacturer: syz
[  247.832929][ T5488] usb 3-1: SerialNumber: syz
[  248.084664][ T5488] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  248.117447][ T5488] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  249.882953][ T7546] kvm: pic: non byte write
[  250.019279][ T5488] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71
[  250.041216][ T5488] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  250.066276][ T5488] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  250.130770][ T5488] lan78xx: probe of 3-1:1.0 failed with error -71
[  250.235088][ T5488] usb 3-1: USB disconnect, device number 6
[  251.314359][   T26] audit: type=1804 audit(1773126053.769:19): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.760" name="/newroot/161/file0" dev="fuse" ino=1 res=1 errno=0
[  252.162825][ T7571] loop1: detected capacity change from 0 to 128
[  252.224715][ T7571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  252.247638][ T7571] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  252.272699][ T5488] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  252.452714][ T5488] usb 6-1: Using ep0 maxpacket: 16
[  252.467342][ T5488] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.479562][ T7571] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  252.523293][ T5488] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.557209][ T5488] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  252.569453][ T5488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.579211][ T5488] usb 6-1: Product: syz
[  252.588060][ T5488] usb 6-1: Manufacturer: syz
[  252.594433][ T5488] usb 6-1: SerialNumber: syz
[  252.651050][ T6994] EXT4-fs (loop1): unmounting filesystem.
[  252.833265][ T5488] usb 6-1: 0:2 : does not exist
[  252.858937][ T5488] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  252.931057][ T5488] usb 6-1: USB disconnect, device number 9
[  253.184767][ T7568] loop2: detected capacity change from 0 to 40427
[  253.230258][ T7568] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  253.270724][ T7568] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  253.327720][ T7568] F2FS-fs (loop2): Found nat_bits in checkpoint
[  253.405753][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.508039][ T7568] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  253.517889][ T7568] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  253.574087][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.581882][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.783491][ T4282] syz-executor: attempt to access beyond end of device
[  253.783491][ T4282] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  254.490152][ T7611] binder: 7609:7611 ioctl c0306201 200000000180 returned -14
[  254.602135][ T7578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.688460][ T7578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.329788][ T7578] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.344651][ T7578] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.357284][ T7578] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.368170][ T7578] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.715596][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  255.722079][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  256.513154][ T7634] loop1: detected capacity change from 0 to 40427
[  256.565644][ T7634] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  256.600832][ T7634] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  256.668734][ T7634] F2FS-fs (loop1): Found nat_bits in checkpoint
[  256.932531][ T7634] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  256.960545][ T7634] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  257.308206][ T6994] syz-executor: attempt to access beyond end of device
[  257.308206][ T6994] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  260.537267][ T7754] netlink: 'syz.6.816': attribute type 9 has an invalid length.
[  260.545646][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.6.816'.
[  261.642947][ T5491] libceph: connect (1)[c::]:6789 error -101
[  261.681081][ T7771] loop2: detected capacity change from 0 to 128
[  261.728052][ T5491] libceph: mon0 (1)[c::]:6789 connect error
[  261.781430][ T7771] syz.2.829: attempt to access beyond end of device
[  261.781430][ T7771] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128
[  261.805408][ T7760] ceph: No mds server is up or the cluster is laggy
[  261.826313][ T5491] libceph: connect (1)[c::]:6789 error -101
[  261.832394][ T5491] libceph: mon0 (1)[c::]:6789 connect error
[  262.062943][ T7772] loop2: detected capacity change from 128 to 1
[  262.136030][ T7771] syz.2.829: attempt to access beyond end of device
[  262.136030][ T7771] loop2: rw=2049, sector=10, nr_sectors = 16 limit=1
[  262.373790][ T7774] syz.2.829: attempt to access beyond end of device
[  262.373790][ T7774] loop2: rw=2049, sector=6, nr_sectors = 2 limit=1
[  262.458381][ T7774] Buffer I/O error on dev loop2, logical block 3, lost sync page write
[  262.540422][ T7774] syz.2.829: attempt to access beyond end of device
[  262.540422][ T7774] loop2: rw=2049, sector=138, nr_sectors = 2 limit=1
[  262.925094][ T4282] syz-executor: attempt to access beyond end of device
[  262.925094][ T4282] loop2: rw=2049, sector=6, nr_sectors = 2 limit=1
[  262.947943][ T4282] Buffer I/O error on dev loop2, logical block 3, lost sync page write
[  262.968189][ T4282] syz-executor: attempt to access beyond end of device
[  262.968189][ T4282] loop2: rw=2049, sector=6, nr_sectors = 2 limit=1
[  262.988653][ T4282] Buffer I/O error on dev loop2, logical block 3, lost sync page write
[  263.137214][ T4282] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck
[  263.795677][ T7804] input: syz1 as /devices/virtual/input/input12
[  264.572739][ T5468] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  264.782760][ T5468] usb 6-1: Using ep0 maxpacket: 32
[  264.795057][ T5468] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.832611][ T5468] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  264.874997][ T5468] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 7.76
[  264.899265][ T5468] usb 6-1: New USB device strings: Mfr=169, Product=172, SerialNumber=31
[  264.960580][ T5468] usb 6-1: Product: syz
[  264.992673][ T5468] usb 6-1: Manufacturer: syz
[  264.998103][ T5468] usb 6-1: SerialNumber: syz
[  265.033695][ T5468] usb 6-1: config 0 descriptor??
[  265.780592][ T5491] usb 6-1: USB disconnect, device number 10
[  267.553191][ T7872] overlayfs: failed to clone lowerpath
[  267.852840][ T5491] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  267.948981][ T7842] loop2: detected capacity change from 0 to 32768
[  268.001302][ T7842] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.839 (7842)
[  268.075108][ T5491] usb 6-1: unable to get BOS descriptor or descriptor too short
[  268.100565][ T5491] usb 6-1: not running at top speed; connect to a high speed hub
[  268.130634][ T5491] usb 6-1: config 1 has an invalid interface number: 36 but max is 2
[  268.145346][ T7842] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.188374][ T5491] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  268.229211][ T7842] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  268.234211][ T5491] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  268.267484][ T5491] usb 6-1: config 1 has no interface number 0
[  268.287567][ T5491] usb 6-1: config 1 interface 36 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  268.349369][ T7842] BTRFS info (device loop2): setting nodatasum
[  268.361100][ T7881] xt_time: invalid argument - start or stop time greater than 23:59:59
[  269.150836][ T7842] BTRFS info (device loop2): force zlib compression, level 3
[  269.193757][ T7864] loop1: detected capacity change from 0 to 40427
[  269.200459][ T5491] usb 6-1: config 1 interface 36 has no altsetting 0
[  269.243816][ T7842] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  269.277445][ T7864] F2FS-fs (loop1): invalid crc value
[  269.280048][ T5491] usb 6-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice= 0.40
[  269.307598][ T7864] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12)
[  269.347759][ T5491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.378435][ T7842] BTRFS info (device loop2): use lzo compression, level 0
[  269.390480][ T5491] usb 6-1: Product: syz
[  269.410847][ T5491] usb 6-1: Manufacturer: syz
[  269.431275][ T5491] usb 6-1: SerialNumber: syz
[  269.478709][ T7842] BTRFS info (device loop2): turning on flush-on-commit
[  269.607815][ T7842] BTRFS info (device loop2): enabling auto defrag
[  269.672727][ T7842] BTRFS info (device loop2): max_inline at 4096
[  269.796906][ T5491] usb 6-1: USB disconnect, device number 11
[  269.803450][ T7842] BTRFS info (device loop2): using free space tree
[  270.800817][ T5709] udevd[5709]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.36/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  270.943515][ T7842] BTRFS error (device loop2): open_ctree failed: -12
[  271.807544][ T7928] tipc: Failed to remove unknown binding: 66,0,0/0:447594933/447594934
[  271.842776][ T7928] tipc: Failed to remove unknown binding: 66,0,0/0:447594933/447594934
[  272.199938][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'.
[  272.460837][ T7947] netlink: 36 bytes leftover after parsing attributes in process `syz.6.868'.
[  272.562511][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.871'.
[  272.633748][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.871'.
[  273.664075][ T7983] fuse: Bad value for 'fd'
[  275.714147][ T7998] overlayfs: failed to clone lowerpath
[  275.788868][ T7998] overlayfs: failed to clone upperpath
[  275.838874][ T7998] overlayfs: failed to clone lowerpath
[  278.533086][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.6.898'.
[  280.112796][ T4274] Bluetooth: hci0: command 0x2016 tx timeout
[  280.759369][ T8061] loop1: detected capacity change from 0 to 128
[  281.887074][ T5469] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  282.258309][ T5469] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.277045][ T5469] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  282.289038][ T5469] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  282.303981][ T5469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  282.312202][ T5469] usb 3-1: SerialNumber: syz
[  283.400977][ T5469] usb 3-1: 0:2 : does not exist
[  283.420294][ T8094] binder: BINDER_SET_CONTEXT_MGR already set
[  283.428027][ T8094] binder: 8093:8094 ioctl 4018620d 200000000040 returned -16
[  283.505299][ T5469] usb 3-1: USB disconnect, device number 7
[  283.632886][ T4280] Bluetooth: hci4: command 0x0406 tx timeout
[  283.767649][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  284.732641][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'.
[  286.782061][ T8163] infiniband syz1: set down
[  286.807715][ T8163] infiniband syz1: added ipvlan0
[  286.906716][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.943'.
[  287.135021][ T8163] RDS/IB: syz1: added
[  287.140640][ T8163] smc: adding ib device syz1 with port count 1
[  287.169933][ T8163] smc:    ib device syz1 port 1 has pnetid 
[  295.387007][ T8275] netlink: 'syz.6.976': attribute type 4 has an invalid length.
[  295.519195][ T8281] netlink: 'syz.6.976': attribute type 4 has an invalid length.
[  296.052344][ T8293] loop5: detected capacity change from 0 to 512
[  296.165145][ T8293] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.982: inode has both inline data and extents flags
[  296.183110][ T8293] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.982: couldn't read orphan inode 15 (err -117)
[  296.222996][ T8293] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  297.256434][ T4433] EXT4-fs (loop5): unmounting filesystem.
[  298.423175][ T8321] loop2: detected capacity change from 0 to 512
[  298.497507][ T8321] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.990: inode has both inline data and extents flags
[  298.540171][ T8321] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.990: couldn't read orphan inode 15 (err -117)
[  298.602516][ T8321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  299.486130][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  299.768168][ T8349] overlayfs: failed to clone upperpath
[  300.702631][ T5470] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  301.713104][ T5470] usb 2-1: Using ep0 maxpacket: 32
[  301.743345][ T5470] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  301.751765][ T5470] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  302.571941][ T5470] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  302.586751][ T8379] device syzkaller0 entered promiscuous mode
[  302.612097][ T5470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  302.668005][ T5470] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  302.701981][ T5470] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  302.730030][ T8381] syz.3.1010 (8381) used greatest stack depth: 18096 bytes left
[  302.737939][ T5470] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  302.747515][ T5470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.785881][ T5470] usb 2-1: config 0 descriptor??
[  303.006379][ T5470] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  303.988720][ T5470] usb 2-1: USB disconnect, device number 16
[  304.206846][ T5470] usblp0: removed
[  306.007864][ T8420] unsupported nlmsg_type 40
[  307.385174][ T8426] loop2: detected capacity change from 0 to 32768
[  307.569658][ T8426] JBD2: Ignoring recovery information on journal
[  307.749867][ T8429] netlink: 'syz.5.1025': attribute type 1 has an invalid length.
[  307.798692][ T8426] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  308.016305][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1025'.
[  308.469148][ T4282] ocfs2: Unmounting device (7,2) on (node local)
[  310.204548][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  310.214750][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:3 Not tainted syzkaller #0
[  310.222343][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  310.232541][ T4280] Workqueue: hci1 hci_rx_work
[  310.237295][ T4280] Call Trace:
[  310.240796][ T4280]  <TASK>
[  310.243781][ T4280]  dump_stack_lvl+0x188/0x24e
[  310.248529][ T4280]  ? show_regs_print_info+0x12/0x12
[  310.254667][ T4280]  ? load_image+0x400/0x400
[  310.259245][ T4280]  sysfs_create_dir_ns+0x26a/0x290
[  310.264427][ T4280]  ? sysfs_warn_dup+0xa0/0xa0
[  310.269266][ T4280]  ? do_raw_spin_unlock+0x11d/0x230
[  310.274634][ T4280]  kobject_add_internal+0x61c/0xcc0
[  310.279898][ T4280]  kobject_add+0x160/0x230
[  310.284373][ T4280]  ? kobject_init+0x1d0/0x1d0
[  310.289111][ T4280]  ? klist_children_get+0x50/0x50
[  310.294194][ T4280]  ? get_device_parent+0x121/0x3f0
[  310.299379][ T4280]  device_add+0x483/0xfb0
[  310.303781][ T4280]  ? kmem_cache_free+0xf7/0x290
[  310.308693][ T4280]  hci_conn_add_sysfs+0xd1/0x1e0
[  310.313701][ T4280]  le_conn_complete_evt+0x105f/0x1670
[  310.319150][ T4280]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  310.325455][ T4280]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  310.331163][ T4280]  ? skb_pull_data+0xf7/0x200
[  310.335915][ T4280]  hci_le_conn_complete_evt+0x183/0x440
[  310.341512][ T4280]  ? hci_remote_host_features_evt+0x270/0x270
[  310.347610][ T4280]  hci_event_packet+0x7b6/0x1280
[  310.352601][ T4280]  ? bis_list+0x280/0x280
[  310.356986][ T4280]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  310.362905][ T4280]  ? kcov_remote_start+0x4c7/0x7e0
[  310.368169][ T4280]  ? spurious_interrupt+0x80/0xd0
[  310.373233][ T4280]  ? hci_send_to_monitor+0x9c/0x4a0
[  310.378528][ T4280]  hci_rx_work+0x3eb/0xd40
[  310.383033][ T4280]  ? _raw_spin_unlock+0x40/0x40
[  310.387922][ T4280]  ? process_one_work+0x7b0/0x1160
[  310.393068][ T4280]  process_one_work+0x8a2/0x1160
[  310.398059][ T4280]  ? worker_detach_from_pool+0x240/0x240
[  310.403714][ T4280]  ? _raw_spin_lock_irq+0xb7/0xf0
[  310.408767][ T4280]  ? _raw_spin_lock_irqsave+0x100/0x100
[  310.414328][ T4280]  ? kthread_data+0x4b/0xc0
[  310.418945][ T4280]  worker_thread+0xaa2/0x1270
[  310.423690][ T4280]  kthread+0x29d/0x330
[  310.427892][ T4280]  ? worker_clr_flags+0x1a0/0x1a0
[  310.432938][ T4280]  ? kthread_blkcg+0xd0/0xd0
[  310.437541][ T4280]  ret_from_fork+0x1f/0x30
[  310.442013][ T4280]  </TASK>
[  310.447886][ T4280] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  310.461731][ T4280] Bluetooth: hci1: failed to register connection device
[  310.496884][ T8447] loop2: detected capacity change from 0 to 1024
[  310.545416][ T8447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[  310.562774][ T8447] System zones: 0-1, 3-36
[  310.596252][ T8447] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1027: bad orphan inode 134217728
[  310.649385][ T8447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  311.946075][ T8469] sch_tbf: burst 4095 is lower than device lo mtu (65550) !
[  312.690781][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  312.817006][ T8480] device syzkaller0 entered promiscuous mode
[  317.165849][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  317.172633][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  317.757661][ T8537] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  318.279926][ T8551] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1057'.
[  319.024630][ T8558] loop1: detected capacity change from 0 to 64
[  319.073583][ T8559] device syzkaller0 entered promiscuous mode
[  319.209899][ T8562] overlayfs: statfs failed on './file0'
[  323.972797][ T5495] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  324.182952][ T5495] usb 6-1: Using ep0 maxpacket: 32
[  324.452715][ T5476] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  324.528586][ T5495] usb 6-1: unable to get BOS descriptor or descriptor too short
[  324.547458][ T5495] usb 6-1: unable to read config index 0 descriptor/start: -71
[  324.562885][ T5495] usb 6-1: can't read configurations, error -71
[  324.627204][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'.
[  324.659074][ T5476] usb 2-1: unable to get BOS descriptor or descriptor too short
[  324.674015][ T5476] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[  324.693302][ T5476] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  324.713686][ T5476] usb 2-1: config 63 has no interface number 0
[  324.720069][ T5476] usb 2-1: config 63 interface 66 has no altsetting 0
[  324.737417][ T5476] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  324.752068][ T5476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.770110][ T5476] usb 2-1: Product: syz
[  324.776705][ T5476] usb 2-1: Manufacturer: syz
[  324.781362][ T5476] usb 2-1: SerialNumber: syz
[  325.072112][ T5476] usb 2-1: USB disconnect, device number 17
[  325.264291][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  325.274475][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:3 Not tainted syzkaller #0
[  325.282037][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  325.292115][ T4280] Workqueue: hci2 hci_rx_work
[  325.296827][ T4280] Call Trace:
[  325.300151][ T4280]  <TASK>
[  325.303134][ T4280]  dump_stack_lvl+0x188/0x24e
[  325.307878][ T4280]  ? show_regs_print_info+0x12/0x12
[  325.313108][ T4280]  ? load_image+0x400/0x400
[  325.317649][ T4280]  sysfs_create_dir_ns+0x26a/0x290
[  325.322794][ T4280]  ? sysfs_warn_dup+0xa0/0xa0
[  325.327606][ T4280]  ? do_raw_spin_unlock+0x11d/0x230
[  325.332834][ T4280]  kobject_add_internal+0x61c/0xcc0
[  325.333101][ T5489] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  325.338070][ T4280]  kobject_add+0x160/0x230
[  325.350043][ T4280]  ? kobject_init+0x1d0/0x1d0
[  325.354756][ T4280]  ? klist_children_get+0x50/0x50
[  325.359805][ T4280]  ? get_device_parent+0x121/0x3f0
[  325.365053][ T4280]  device_add+0x483/0xfb0
[  325.369420][ T4280]  ? kmem_cache_free+0xf7/0x290
[  325.374304][ T4280]  hci_conn_add_sysfs+0xd1/0x1e0
[  325.379271][ T4280]  le_conn_complete_evt+0x105f/0x1670
[  325.384756][ T4280]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  325.391047][ T4280]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  325.396802][ T4280]  ? skb_pull_data+0xf7/0x200
[  325.401517][ T4280]  hci_le_conn_complete_evt+0x183/0x440
[  325.407094][ T4280]  ? hci_remote_host_features_evt+0x270/0x270
[  325.413298][ T4280]  hci_event_packet+0x7b6/0x1280
[  325.418373][ T4280]  ? bis_list+0x280/0x280
[  325.422740][ T4280]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  325.428682][ T4280]  ? kcov_remote_start+0x4c7/0x7e0
[  325.433907][ T4280]  ? spurious_interrupt+0x80/0xd0
[  325.438953][ T4280]  ? hci_send_to_monitor+0x9c/0x4a0
[  325.444195][ T4280]  hci_rx_work+0x3eb/0xd40
[  325.448750][ T4280]  ? _raw_spin_unlock+0x40/0x40
[  325.453714][ T4280]  ? process_one_work+0x7b0/0x1160
[  325.458843][ T4280]  process_one_work+0x8a2/0x1160
[  325.463809][ T4280]  ? worker_detach_from_pool+0x240/0x240
[  325.469481][ T4280]  ? _raw_spin_lock_irq+0xb7/0xf0
[  325.474562][ T4280]  ? _raw_spin_lock_irqsave+0x100/0x100
[  325.480261][ T4280]  ? kthread_data+0x4b/0xc0
[  325.484828][ T4280]  worker_thread+0xaa2/0x1270
[  325.489547][ T4280]  kthread+0x29d/0x330
[  325.493630][ T4280]  ? worker_clr_flags+0x1a0/0x1a0
[  325.498674][ T4280]  ? kthread_blkcg+0xd0/0xd0
[  325.503381][ T4280]  ret_from_fork+0x1f/0x30
[  325.507861][ T4280]  </TASK>
[  325.514830][ T4280] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  325.528125][ T4280] Bluetooth: hci2: failed to register connection device
[  325.873042][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  325.883915][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  325.893680][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  325.903721][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  325.913437][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  325.923261][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  325.932972][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  325.942706][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  325.952391][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  325.962143][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  326.153948][ T5489] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  326.532696][ T5489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.550410][ T5489] usb 3-1: config 0 descriptor??
[  326.562498][ T5489] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  326.977507][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1105'.
[  328.650518][ T5489] usb 3-1: USB disconnect, device number 8
[  329.513473][ T8693] futex_wake_op: syz.1.1099 tries to shift op by -1; fix this program
[  329.832638][ T5476] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  330.032956][ T5476] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  330.041635][ T5476] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  330.565060][ T5476] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  330.663128][ T5476] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  330.771020][ T5476] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  330.889887][ T5476] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  330.919960][ T5476] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  331.063581][ T5476] usb 3-1: Product: syz
[  331.067823][ T5476] usb 3-1: Manufacturer: syz
[  331.099948][ T5476] cdc_wdm 3-1:1.0: skipping garbage
[  331.119726][ T5476] cdc_wdm 3-1:1.0: skipping garbage
[  331.136991][ T5476] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  331.169540][ T5476] cdc_wdm 3-1:1.0: Unknown control protocol
[  331.710681][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  331.717947][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  331.727222][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  331.733893][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  331.740769][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  331.747415][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  331.762369][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  331.769161][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  331.779889][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  331.786561][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  331.795099][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  331.801785][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  331.812036][ T5476] usb 3-1: USB disconnect, device number 9
[  331.825231][ T8710] cdc_wdm 3-1:1.0: Tx URB error: -19
[  332.209276][ T8714] device syzkaller0 entered promiscuous mode
[  336.305321][ T8738] sched: RT throttling activated
[  336.990002][ T8747] overlayfs: failed to clone upperpath
[  338.816527][ T8772] loop1: detected capacity change from 0 to 1024
[  338.879988][ T8772] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  341.373422][ T6994] EXT4-fs (loop1): unmounting filesystem.
[  341.672715][ T8812] loop2: detected capacity change from 0 to 512
[  342.723590][ T8812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  342.734362][ T8812] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  343.325066][ T8812] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.1132: corrupted inode contents
[  343.344632][ T8812] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #2: comm syz.2.1132: mark_inode_dirty error
[  343.362007][ T8812] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.1132: corrupted inode contents
[  343.387503][ T8812] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1132: mark_inode_dirty error
[  343.899428][ T8825] loop1: detected capacity change from 0 to 512
[  344.733565][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  344.774657][ T8825] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  344.785634][ T8825] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  345.204827][ T8825] device syzkaller0 entered promiscuous mode
[  345.392778][ T4280] Bluetooth: hci0: command 0x0406 tx timeout
[  346.345457][ T6994] EXT4-fs (loop1): unmounting filesystem.
[  352.797265][ T8898] sctp: [Deprecated]: syz.5.1159 (pid 8898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  352.797265][ T8898] Use struct sctp_sack_info instead
[  354.906278][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'.
[  355.729409][ T8935] loop2: detected capacity change from 0 to 32768
[  355.738866][ T8935] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1173 (8935)
[  355.759268][ T8935] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  355.769583][ T8935] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  355.778354][ T8935] BTRFS info (device loop2): setting nodatacow, compression disabled
[  355.786580][ T8935] BTRFS info (device loop2): force clearing of disk cache
[  355.793875][ T8935] BTRFS info (device loop2): turning off barriers
[  355.800329][ T8935] BTRFS info (device loop2): use no compression
[  355.806701][ T8935] BTRFS info (device loop2): disabling free space tree
[  355.813671][ T8935] BTRFS info (device loop2): enabling ssd optimizations
[  355.820661][ T8935] BTRFS info (device loop2): using spread ssd allocation scheme
[  355.828432][ T8935] BTRFS info (device loop2): not using ssd optimizations
[  355.835560][ T8935] BTRFS info (device loop2): not using spread ssd allocation scheme
[  356.923588][ T8935] BTRFS info (device loop2): rebuilding free space tree
[  356.939903][ T8960] loop1: detected capacity change from 0 to 256
[  356.950214][ T8935] BTRFS info (device loop2): disabling free space tree
[  356.957244][ T8935] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  356.966997][ T8935] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  356.983381][ T8935] BTRFS info (device loop2): checking UUID tree
[  357.022476][ T8960] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  357.172635][   T26] audit: type=1326 audit(1773126159.619:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.1.1175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff15479c799 code=0x0
[  357.257196][ T8966] xt_NFQUEUE: number of total queues is 0
[  357.305285][ T8965] BTRFS info (device loop2): space_info DATA+METADATA (sub-group id 0) has 16384 free, is not full
[  357.317037][ T8965] BTRFS info (device loop2): space_info total=3276800, used=49152, pinned=16384, reserved=0, may_use=3194880, readonly=0 zone_unusable=0
[  357.331284][ T8965] BTRFS info (device loop2): global_block_rsv: size 1048576 reserved 1048576
[  357.340985][ T8965] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[  357.348669][ T8965] BTRFS info (device loop2): chunk_block_rsv: size 98304 reserved 98304
[  357.357051][ T8965] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[  357.365004][ T8965] BTRFS info (device loop2): delayed_refs_rsv: size 65536 reserved 65536
[  359.770091][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1182'.
[  359.922875][ T8989] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  360.129491][ T4282] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  360.553243][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  360.657359][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  360.694545][ T9004] overlayfs: failed to clone upperpath
[  360.852189][ T9006] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  360.896988][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  360.994685][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  361.616953][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  361.723480][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  361.771553][ T9006] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  362.004656][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  363.170683][ T9015] syz.2.1178 (9015): drop_caches: 2
[  365.660710][ T9033] device syzkaller0 entered promiscuous mode
[  369.826973][ T9065] loop1: detected capacity change from 0 to 256
[  369.906931][ T9065] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  371.178796][ T5491] Process accounting resumed
[  371.194250][ T5491] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264)
[  371.211075][ T5491] FAT-fs (loop1): Filesystem has been set read-only
[  371.374184][ T9075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1210'.
[  372.242172][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1210'.
[  378.157027][ T9128] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  379.301399][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  379.308652][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  379.595145][ T9142] device syzkaller0 entered promiscuous mode
[  382.243962][ T9163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.373260][ T9163] device syzkaller0 entered promiscuous mode
[  384.042231][ T9180] tipc: Resetting bearer <eth:syzkaller0>
[  384.100188][ T9160] tipc: Resetting bearer <eth:syzkaller0>
[  384.208828][ T9160] tipc: Disabling bearer <eth:syzkaller0>
[  384.240222][ T9188] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  386.178618][ T9224] netlink: 'syz.3.1246': attribute type 1 has an invalid length.
[  386.321856][ T9224] device bond2 entered promiscuous mode
[  386.608735][ T9224] 8021q: adding VLAN 0 to HW filter on device bond2
[  387.157833][ T9240] bond2: (slave bridge1): making interface the new active one
[  387.214625][ T9240] device bridge1 entered promiscuous mode
[  387.243938][ T9240] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  387.264769][ T7324] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  387.698004][ T9257] vivid-000: disconnect
[  388.587049][ T9250] vivid-000: reconnect
[  388.873752][ T9261] loop5: detected capacity change from 0 to 32768
[  389.156174][ T9261] JBD2: Ignoring recovery information on journal
[  389.185748][ T9261] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  389.587062][ T4433] ocfs2: Unmounting device (7,5) on (node local)
[  391.486002][ T9301] loop5: detected capacity change from 0 to 128
[  391.764770][ T9307] netlink: 'syz.6.1257': attribute type 3 has an invalid length.
[  392.507490][ T9312] loop2: detected capacity change from 0 to 512
[  392.584508][ T9312] EXT4-fs: Ignoring removed orlov option
[  392.602103][ T9312] EXT4-fs: Ignoring removed mblk_io_submit option
[  392.646565][ T9312] EXT4-fs error (device loop2): ext4_iget_extra_inode:4756: inode #15: comm syz.2.1268: corrupted in-inode xattr
[  392.672902][ T9312] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1268: couldn't read orphan inode 15 (err -117)
[  392.728911][ T9312] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  394.701853][ T9345] xt_CT: You must specify a L4 protocol and not use inversions on it
[  396.075098][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'.
[  396.106332][ T9356] device bridge0 entered promiscuous mode
[  396.135028][ T9356] device macvtap1 entered promiscuous mode
[  397.169941][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  399.127102][ T9379] kvm: pic: non byte write
[  404.733307][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  404.769384][ T9420] binder: BINDER_SET_CONTEXT_MGR already set
[  404.805878][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  404.813563][ T9420] binder: 9418:9420 ioctl 4018620d 200000000040 returned -16
[  404.834056][ T9422] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  404.934421][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  405.996245][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  406.004138][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  406.015688][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  406.253625][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  406.302439][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  406.405911][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  406.470891][ T9442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1297'.
[  410.315511][ T9470] device syzkaller0 entered promiscuous mode
[  410.903640][ T9497] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1312'.
[  419.070650][   T26] audit: type=1326 audit(1773126221.539:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15479c799 code=0x7ffc0000
[  419.092863][    C0] vkms_vblank_simulate: vblank timer overrun
[  419.166384][   T26] audit: type=1326 audit(1773126221.589:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15479c799 code=0x7ffc0000
[  419.941979][   T26] audit: type=1326 audit(1773126221.679:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff15475cfce code=0x7ffc0000
[  420.159627][ T9597] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  420.892421][   T26] audit: type=1326 audit(1773126221.679:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15479c799 code=0x7ffc0000
[  421.075666][   T26] audit: type=1326 audit(1773126221.679:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15479c799 code=0x7ffc0000
[  421.106948][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1339'.
[  421.189622][   T26] audit: type=1326 audit(1773126221.689:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff15479c799 code=0x7ffc0000
[  421.350200][   T26] audit: type=1326 audit(1773126221.689:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15479c799 code=0x7ffc0000
[  421.454536][   T26] audit: type=1326 audit(1773126221.689:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15479c799 code=0x7ffc0000
[  423.618711][ T9624] device syzkaller0 entered promiscuous mode
[  426.051390][ T9642] netlink: 'syz.3.1347': attribute type 10 has an invalid length.
[  426.327423][ T9651] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1348'.
[  427.518331][ T9659] loop2: detected capacity change from 0 to 512
[  427.889411][ T9637] loop5: detected capacity change from 0 to 32768
[  427.921176][ T9637] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1346 (9637)
[  429.042286][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1357'.
[  430.546143][ T9688] device syzkaller0 entered promiscuous mode
[  434.803947][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1365'.
[  434.924115][ T9721] Bluetooth: MGMT ver 1.22
[  440.705730][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  440.729501][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  442.532061][ T9777] vivid-000: disconnect
[  443.216162][ T9772] vivid-000: reconnect
[  443.663589][ T9787] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1371'.
[  448.853960][   T26] audit: type=1326 audit(1773126251.329:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.2.1391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff78f99c799 code=0x0
[  448.875792][    C1] vkms_vblank_simulate: vblank timer overrun
[  448.962737][ T9847] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  449.443139][   T26] audit: type=1804 audit(1773126251.909:30): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1393" name="/newroot/244/file1" dev="fuse" ino=1 res=1 errno=0
[  449.529419][   T26] audit: type=1804 audit(1773126251.959:31): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1393" name="/newroot/244/file1" dev="fuse" ino=1 res=1 errno=0
[  452.044405][    C1] dccp_check_seqno: Step 6 failed for CLOSE packet, (LSWL(126551254985528) <= P.seqno(126551254985527) <= S.SWH(126551254985602)) and (P.ackno exists or LAWL(57756284286788) <= P.ackno(57756284286788) <= S.AWH(57756284286788), sending SYNC...
[  452.439945][ T9888] loop5: detected capacity change from 0 to 1024
[  459.243802][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1415'.
[  459.880869][ T9966] loop2: detected capacity change from 0 to 4096
[  459.939173][ T9966] EXT4-fs (loop2): DAX unsupported by block device.
[  460.095234][ T9963] device syzkaller0 entered promiscuous mode
[  462.332732][ T5472] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  462.343625][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1427'.
[  462.548384][ T5472] usb 3-1: config 0 has no interfaces?
[  464.207280][ T5472] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  464.257979][ T5472] usb 3-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0
[  464.278309][ T5472] usb 3-1: Manufacturer: syz
[  464.298629][T10017] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  464.314565][ T5472] usb 3-1: config 0 descriptor??
[  466.032954][T10045] (syz.5.1434,10045,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  466.042398][T10045] (syz.5.1434,10045,1):ocfs2_fill_super:1176 ERROR: status = -22
[  466.900345][ T5487] usb 3-1: USB disconnect, device number 10
[  469.898658][ T5487] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  470.398458][ T5487] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  470.449327][ T5487] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config
[  470.632685][ T5487] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  470.690239][ T5487] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  470.784564][ T5487] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  470.812628][ T5487] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  470.830962][ T5487] usb 3-1: Product: syz
[  470.836943][ T5487] usb 3-1: Manufacturer: syz
[  470.873706][ T5487] cdc_wdm 3-1:1.0: skipping garbage
[  471.009533][ T5487] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  474.697845][ T5470] usb 3-1: USB disconnect, device number 11
[  475.110898][T10111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  475.154764][T10111] device syzkaller0 entered promiscuous mode
[  475.712542][T10100] batman_adv: batadv0: Adding interface: gretap1
[  475.718981][T10100] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.744325][    C1] vkms_vblank_simulate: vblank timer overrun
[  475.750433][T10100] batman_adv: batadv0: Interface activated: gretap1
[  476.310820][T10124] tipc: Resetting bearer <eth:syzkaller0>
[  477.529918][T10109] tipc: Resetting bearer <eth:syzkaller0>
[  477.696510][T10109] tipc: Disabling bearer <eth:syzkaller0>
[  486.876215][T10178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  486.885213][T10178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  486.892919][T10178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  486.910865][T10178] device macvtap1 left promiscuous mode
[  490.065251][T10201] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  496.429342][T10258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  496.439857][T10258] device syzkaller0 entered promiscuous mode
[  496.708120][T10263] tipc: Resetting bearer <eth:syzkaller0>
[  496.813619][T10257] tipc: Resetting bearer <eth:syzkaller0>
[  496.855636][T10257] tipc: Disabling bearer <eth:syzkaller0>
[  501.588966][T10299] loop2: detected capacity change from 0 to 64
[  501.753510][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  501.759960][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  501.816112][T10297] minix_free_block (loop2:21): bit already cleared
[  501.823804][T10297] Trying to free block not in datazone
[  501.907263][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1499'.
[  507.560035][T10343] loop2: detected capacity change from 0 to 64
[  507.609783][T10343] hfs: unable to locate alternate MDB
[  507.792419][T10343] hfs: continuing without an alternate MDB
[  509.826067][T10364] mmap: syz.2.1517 (10364) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  512.191815][   T26] audit: type=1326 audit(1773126314.429:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779b9c799 code=0x7ffc0000
[  513.585832][   T26] audit: type=1326 audit(1773126314.429:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fa779b9c799 code=0x7ffc0000
[  513.613426][   T26] audit: type=1326 audit(1773126314.429:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779b9c799 code=0x7ffc0000
[  513.643309][   T26] audit: type=1326 audit(1773126314.429:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa779b9c799 code=0x7ffc0000
[  513.719470][   T26] audit: type=1326 audit(1773126314.429:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779b9c799 code=0x7ffc0000
[  513.752228][   T26] audit: type=1326 audit(1773126314.439:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa779b9c799 code=0x7ffc0000
[  513.867161][   T26] audit: type=1326 audit(1773126314.439:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779b9c799 code=0x7ffc0000
[  513.930750][   T26] audit: type=1326 audit(1773126314.439:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa779b9c799 code=0x7ffc0000
[  515.060297][T10407] loop5: detected capacity change from 0 to 8
[  515.853705][T10409] binder: 10406:10409 ioctl 4018620d 0 returned -22
[  516.849298][   T26] audit: type=1326 audit(1773126314.439:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779b9c799 code=0x7ffc0000
[  516.992567][   T26] audit: type=1326 audit(1773126314.439:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.6.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa779b9c799 code=0x7ffc0000
[  525.176370][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'.
[  525.432109][T10477] loop5: detected capacity change from 0 to 2048
[  525.924799][T10478] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  527.047833][T10477] NILFS (loop5): unrecognized mount option "˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰"
[  527.559540][ T4280] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  527.570322][ T4280] Bluetooth: hci2: Injecting HCI hardware error event
[  527.580254][ T4280] Bluetooth: hci2: hardware error 0x00
[  529.716127][ T4280] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  530.618261][T10509] loop2: detected capacity change from 0 to 32768
[  530.655453][T10509] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  530.665747][T10509] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  530.674675][T10509] BTRFS info (device loop2): enabling disk space caching
[  530.681750][T10509] BTRFS info (device loop2): force clearing of disk cache
[  530.689026][T10509] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  530.698525][T10509] BTRFS info (device loop2): use zstd compression, level 3
[  530.705990][T10509] BTRFS info (device loop2): disk space caching is enabled
[  531.165148][T10509] BTRFS info (device loop2): enabling ssd optimizations
[  531.177020][T10509] BTRFS info (device loop2): rebuilding free space tree
[  531.206411][T10509] BTRFS info (device loop2): disabling free space tree
[  531.213441][T10509] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  531.223216][T10509] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  532.937114][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  532.937134][   T26] audit: type=1804 audit(1773126335.179:46): pid=10547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1557" name="/newroot/296/file1/bus" dev="loop2" ino=263 res=1 errno=0
[  533.073458][ T4282] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  535.515952][T10581] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526
[  541.362936][T10609] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  541.519070][T10614] loop5: detected capacity change from 0 to 512
[  541.612741][T10614] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1578: bg 0: block 5: invalid block bitmap
[  541.669898][T10614] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6179: Corrupt filesystem
[  541.679881][T10614] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1578: invalid indirect mapped block 3 (level 2)
[  541.694930][T10614] EXT4-fs (loop5): 1 orphan inode deleted
[  541.700730][T10614] EXT4-fs (loop5): 1 truncate cleaned up
[  541.706668][T10614] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  544.026447][T10625] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  545.524178][T10643] kAFS: No cell specified
[  545.937393][ T4433] EXT4-fs (loop5): unmounting filesystem.
[  545.971077][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'.
[  546.034414][T10655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1585'.
[  551.812981][T10689] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  559.589162][T10733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1603'.
[  559.632207][T10733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1603'.
[  559.681170][T10733] device bridge0 entered promiscuous mode
[  559.757101][T10733] device ip6gretap0 entered promiscuous mode
[  559.791294][T10733] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  559.826634][T10733] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  559.998983][T10741] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1605'.
[  560.017131][   T26] audit: type=1800 audit(1773126362.489:47): pid=10722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1592" name="bus" dev="ramfs" ino=57674 res=0 errno=0
[  561.080104][ T5046] ------------[ cut here ]------------
[  561.086723][ T5046] WARNING: CPU: 0 PID: 5046 at io_uring/io_uring.c:2890 io_ring_exit_work+0x336/0x763
[  561.096438][ T5046] Modules linked in:
[  561.100386][ T5046] CPU: 0 PID: 5046 Comm: kworker/u4:14 Not tainted syzkaller #0
[  561.108127][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  561.118346][ T5046] Workqueue: events_unbound io_ring_exit_work
[  561.124504][ T5046] RIP: 0010:io_ring_exit_work+0x336/0x763
[  561.130356][ T5046] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 1b 2d 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 1c d5 5d f7 e9 16 fe ff ff e8 12 d5 5d f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1
[  561.150329][ T5046] RSP: 0018:ffffc9000534fac0 EFLAGS: 00010293
[  561.156491][ T5046] RAX: ffffffff8a249d9e RBX: ffff888077bc6018 RCX: ffff888062dad940
[  561.165012][ T5046] RDX: 0000000000000000 RSI: ffffffffffffffcc RDI: 0000000000000000
[  561.173090][ T5046] RBP: ffffc9000534fc30 R08: ffffc9000534fa47 R09: 1ffff92000a69f48
[  561.181106][ T5046] R10: dffffc0000000000 R11: fffff52000a69f49 R12: dffffc0000000000
[  561.189154][ T5046] R13: ffff888077bc6000 R14: 0000000100006514 R15: 0000000100006548
[  561.197315][ T5046] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  561.206378][ T5046] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  561.213040][ T5046] CR2: 00007ff78dbd4ff8 CR3: 000000005b813000 CR4: 00000000003506f0
[  561.221056][ T5046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000ffea
[  561.229717][ T5046] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  561.237854][ T5046] Call Trace:
[  561.241261][ T5046]  <TASK>
[  561.244271][ T5046]  ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6
[  561.250147][ T5046]  ? _raw_spin_unlock+0x40/0x40
[  561.255114][ T5046]  ? _raw_spin_unlock_irq+0x1f/0x40
[  561.260362][ T5046]  ? process_one_work+0x7b0/0x1160
[  561.266014][ T5046]  process_one_work+0x8a2/0x1160
[  561.271020][ T5046]  ? worker_detach_from_pool+0x240/0x240
[  561.276930][ T5046]  ? _raw_spin_lock_irq+0xb7/0xf0
[  561.281997][ T5046]  ? _raw_spin_lock_irqsave+0x100/0x100
[  561.287647][ T5046]  ? kthread_data+0x4b/0xc0
[  561.292318][ T5046]  worker_thread+0xaa2/0x1270
[  561.297117][ T5046]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  561.303095][ T5046]  ? __kthread_parkme+0x162/0x1c0
[  561.308176][ T5046]  kthread+0x29d/0x330
[  561.312283][ T5046]  ? worker_clr_flags+0x1a0/0x1a0
[  561.317411][ T5046]  ? kthread_blkcg+0xd0/0xd0
[  561.322049][ T5046]  ret_from_fork+0x1f/0x30
[  561.326556][ T5046]  </TASK>
[  561.329641][ T5046] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  561.336945][ T5046] CPU: 0 PID: 5046 Comm: kworker/u4:14 Not tainted syzkaller #0
[  561.344636][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  561.354728][ T5046] Workqueue: events_unbound io_ring_exit_work
[  561.360849][ T5046] Call Trace:
[  561.364164][ T5046]  <TASK>
[  561.367138][ T5046]  dump_stack_lvl+0x188/0x24e
[  561.371875][ T5046]  ? memcpy+0x3c/0x60
[  561.375905][ T5046]  ? show_regs_print_info+0x12/0x12
[  561.381164][ T5046]  ? load_image+0x400/0x400
[  561.385738][ T5046]  panic+0x2e5/0x730
[  561.389693][ T5046]  ? bpf_jit_dump+0xd0/0xd0
[  561.394244][ T5046]  ? ret_from_fork+0x1f/0x30
[  561.398887][ T5046]  __warn+0x2f8/0x4f0
[  561.402913][ T5046]  ? io_ring_exit_work+0x336/0x763
[  561.408086][ T5046]  ? io_ring_exit_work+0x336/0x763
[  561.413248][ T5046]  report_bug+0x2ba/0x4f0
[  561.417640][ T5046]  ? io_ring_exit_work+0x336/0x763
[  561.422805][ T5046]  handle_bug+0x3a/0x70
[  561.427023][ T5046]  exc_invalid_op+0x16/0x40
[  561.431597][ T5046]  asm_exc_invalid_op+0x16/0x20
[  561.436503][ T5046] RIP: 0010:io_ring_exit_work+0x336/0x763
[  561.442273][ T5046] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 1b 2d 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 1c d5 5d f7 e9 16 fe ff ff e8 12 d5 5d f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1
[  561.461924][ T5046] RSP: 0018:ffffc9000534fac0 EFLAGS: 00010293
[  561.468035][ T5046] RAX: ffffffff8a249d9e RBX: ffff888077bc6018 RCX: ffff888062dad940
[  561.476047][ T5046] RDX: 0000000000000000 RSI: ffffffffffffffcc RDI: 0000000000000000
[  561.484134][ T5046] RBP: ffffc9000534fc30 R08: ffffc9000534fa47 R09: 1ffff92000a69f48
[  561.492133][ T5046] R10: dffffc0000000000 R11: fffff52000a69f49 R12: dffffc0000000000
[  561.500132][ T5046] R13: ffff888077bc6000 R14: 0000000100006514 R15: 0000000100006548
[  561.508225][ T5046]  ? io_ring_exit_work+0x336/0x763
[  561.513381][ T5046]  ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6
[  561.519224][ T5046]  ? _raw_spin_unlock+0x40/0x40
[  561.524110][ T5046]  ? _raw_spin_unlock_irq+0x1f/0x40
[  561.529430][ T5046]  ? process_one_work+0x7b0/0x1160
[  561.534580][ T5046]  process_one_work+0x8a2/0x1160
[  561.539654][ T5046]  ? worker_detach_from_pool+0x240/0x240
[  561.545434][ T5046]  ? _raw_spin_lock_irq+0xb7/0xf0
[  561.550661][ T5046]  ? _raw_spin_lock_irqsave+0x100/0x100
[  561.556235][ T5046]  ? kthread_data+0x4b/0xc0
[  561.560783][ T5046]  worker_thread+0xaa2/0x1270
[  561.565499][ T5046]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  561.571426][ T5046]  ? __kthread_parkme+0x162/0x1c0
[  561.576493][ T5046]  kthread+0x29d/0x330
[  561.580671][ T5046]  ? worker_clr_flags+0x1a0/0x1a0
[  561.585722][ T5046]  ? kthread_blkcg+0xd0/0xd0
[  561.590335][ T5046]  ret_from_fork+0x1f/0x30
[  561.594792][ T5046]  </TASK>
[  561.598409][ T5046] Kernel Offset: disabled
[  561.602923][ T5046] Rebooting in 86400 seconds..