last executing test programs:

12.598876097s ago: executing program 4 (id=565):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000020000000000000000000008530ce45079d53cdf3a77bc59c2f0000000085000000130400009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000f00)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
request_key(0x0, &(0x7f0000000d00)={'syz', 0x0}, &(0x7f0000000d40)='GPL\x00', 0xfffffffffffffffc)
r4 = socket$inet6(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2040cc, &(0x7f0000001280)={[{@fat=@fmask={'fmask', 0x3d, 0x9}}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@uid}, {@fat=@allow_utime}, {@dots}, {@nodots}, {@nodots}, {@fat=@nocase}, {}, {@fat=@errors_remount}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@dots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x400}}, {@nodots}]}, 0xfd, 0x1c6, &(0x7f00000004c0)="$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")
r7 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
getdents(r7, &(0x7f0000000280)=""/4096, 0x9005)

11.70220949s ago: executing program 1 (id=567):
r0 = socket(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x248, &(0x7f0000000000), 0x0, 0x48e, &(0x7f0000000940)="$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")
keyctl$session_to_parent(0x12)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000014003502000000000000000000000000000000000000000000000001ff020000000000000000000000000001000000000000", @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00\f\x00\b\x00\b\x00\b\x00\x00\x00\x00\x00'], 0x5c}}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)=""/41, &(0x7f0000001400)=0x29)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000003c0)={0x0, 0x0, 0xffffffc0, 0x0, 0x0, "836d3c556dec3aba90800124a804cfc27929d9", 0x0, 0x2087})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x3006}, 0x4)
ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)={0x1, 0x101, 0x2})
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000180))
timer_create(0x0, 0x0, &(0x7f0000000100))
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd5, 0x0)
keyctl$session_to_parent(0x12)
ioctl$USBDEVFS_SUBMITURB(r4, 0x550b, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000080)})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x51f402, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)

11.183768342s ago: executing program 1 (id=570):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_setup(0x3fe, &(0x7f0000000100)=<r1=>0x0)
io_setup(0x9, &(0x7f0000000200))
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)=' ', 0x3fffff}])
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup3(r4, r3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000002c0))
write(0xffffffffffffffff, &(0x7f00000002c0)="4420dab63499bd3157967cc32888d5924f2f77949440ec7e12f534aa015a08dd9f9d97d2bf60374fffffffff0000000009911df6554f00264628bbb3890b702dd49df71a1babe1fc705f4c51dd64ab1801a8212273c162701c913d1079dcaeb7e71df2bb7400edac2fab9ac21cdc69be339ddf55edbf5f1df5c053df0bef0d96c704e3fbfd9921f76cfbb8d623551f20144e76f7e79d776b2065cc76519c8e508e88d06343e51eb5a470", 0xaa)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x18a3c85)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)

9.052163365s ago: executing program 0 (id=577):
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0xe, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000880)='./file0\x00', 0x1000400, &(0x7f0000000280), 0x6, 0x5a0, &(0x7f00000002c0)="$eJzs3U1sHFcdAPD/jL3edep8FHooCGgohYCirmOnjapeWi5IUFUgCqceEsveWJHX2ci7LrXxwTkhwRWJSpzgwoUTh0ockHpCXLnBjQPtAamgCFQjoWrQjHfj3c1uvI0/trF/P2k08+br/97Ifm/n7cy+AE6tixGxHRFTEXEjIs5HUqxP2lO8ujvl+310b2tx597WYhJZ9sa/Jttn2Frs7N/xRET8pCv9cXte7lrX3NhcWajXa2vt9Gxr9c5sc2Pz+VurC8u15drt+flrc9euvHT1xflDK+szq7/78Fu3XvvhH37/xff/vP2NH+d5fqW9LS9b165JlmUHD/hK57qUYqa9Ko2I/Mq9dvCzfypMtMszNe6M8Ejyv8fPRMSz7eX7KuPLEwBwtLLsfGTnu9N70siyG+f20smAfQCAx09+zz8TSVpt3//PRJpWq0UfXuWpOJPWG83W5ZuN9dtJp4uvlN68Va9dKfoKI8pRSvL0XERcKKbd9Hxf+mpEPBkRPy9PF+nqYqO+NJZPPADAE33t/3/KeftfHuVQ3xAAwONMSw4Ap8+D7X9pLPkAAI7P/vf/3//7TyeOJSsAwDHpav9H+ub/vuTw8wIAHI9K37v/A2UaewA4SQb2/795dm/56cTNPgCcMJ7/B4BT5Xuvv55P2U6WFL9/vfTWxvpK463nl2rNlerq+mJ1sbF2p7rcaCwXv9mzOuAUd7sT9UbjztwLsf72bKvWbM02NzavrzbWb7euF7/rfb3mxQIAGL8nn3nvr0lEbL88XUzRGcth/wcCgMdcGjE97jwA4+GtPji9JsedAWBs9McD+z3cO/ARoemIeGf4MToW4NPt0ueG9P/3fzbo/T7g40MYHRsYszTigyndAHAqHaz/X+8BPM4e3vB7MQhOsixLjOcPAKfMCHfwHhGEE+6Rvv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU26mmJK01B7ifybStFqNOBsRF6KU3LxVr12JiHMR8ZdyqZyn58adaQDggNJ/JO3xvy6df26mf+tU8t9yMY+IH/3yjV+8vdDqDB14f33rnWJ9a21+YIDy0ZcBAOgy2b+i004X864b+Y/ubS12puPM4Iff3B1cNI+7c29rcW884sl25iuRrzvz76SnMMkhDUy8fTcinu4vf3p/+4X2yKf98fPYZ48sfhQlnOmJ3/sxKi227c7za/HZ6RHjHUKe4aR4L69/Xh30/5fGxWLe/v+b7K1MK/GzByvXR9Cp/3ay3fpvpyt+fv7vnq0Udc2g+u/iqDFe+OO3h267O5F9fjKiE3unq/7ZVSmWBsV/bsT4f/vCl54ddrGyX0VciofF312aba3emW1ubP72O+/+abm2XLs9P39t7tqVl66+OD9b9FHPdnqqH/TPly+fG17+iDND4lf2Kf9XRyz/r/93480vPyT+178yKH4aTz0kft4mfi3WRoq/cObdocN35/GXivLnLUlv+Sd74k/1HJevu9x/siF/kO9/sLk0UkYBgGPR3NhcWajXa2ujLKSxubLQudEc+aiehelHOmrEhRi2KZs4kqClnotQOapyPTFk028+8QlLcURX/ogX7n6CncvjyepE1Dv9Ufvu3N5v+yBBs+wAeb44wj5jqpCAY7P3Tz/unAAAAAAAAAAAAAAAAMM0f9D+yb9Dfimq+2W4cZcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+v/AQAA//+9RsZ3")
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0xa78, &(0x7f0000000fc0)="$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")
ustat(0x1, &(0x7f0000000180))

8.779461537s ago: executing program 4 (id=579):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "d1d6570b947d199e43ae758798"}]}, 0x28}}, 0x0)

7.38835029s ago: executing program 3 (id=580):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0, <r2=>0x0], &(0x7f00000007c0), 0x0, 0x2, 0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)={0xffffffffffffffff, r2, r1})

7.340715124s ago: executing program 4 (id=582):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="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"/353, @ANYRES32, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64], 0x0, 0x0, &(0x7f0000000000))
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ac0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x4000)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)

7.247207992s ago: executing program 3 (id=583):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00020c0000000c0002fb"], 0x0, 0x0, 0x0}, 0x0)

6.968580805s ago: executing program 2 (id=584):
creat(&(0x7f0000000280)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x11, 0x4, 0x0, 0x8, 0x800, 0xffffffffffffffff, 0x2000000}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x800}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000300000d020000000d00000000000000090000000000000000000000000000000000000000000002020000000000a7f18e11faaefbd94c761d7806f01e6456146a1db7ee65682d8bf24215cb5858a2c3e80bc492437a3070e21800bd1f61e9f38797b1bd2586990a077f2d7391"], &(0x7f00000002c0)=""/235, 0x4a, 0xeb, 0x1}, 0x20)
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x446, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES8], 0x0, 0x2f8, &(0x7f0000000880)="$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")

6.959392145s ago: executing program 4 (id=585):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

6.767553791s ago: executing program 4 (id=586):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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")
open(0x0, 0x145142, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000200)=@unlock_all, 0xb)
open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
open(0x0, 0x410200, 0x10)
fcntl$notify(r1, 0x402, 0x8000003d)
fcntl$setsig(r1, 0xa, 0x21)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc080661a, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000", @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0xfd, 0x691, &(0x7f00000002c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000800)='./bus\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mknod$loop(&(0x7f0000000140)='.\x02\x00', 0x0, 0x0)
creat(&(0x7f0000000e00)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

5.863148914s ago: executing program 2 (id=587):
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r0 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0xa3372923f1f06d26})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]})
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0})
userfaultfd(0x80001)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000002c0)=0xcf5)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000018c0)=0x13)
r3 = dup(r2)
ioctl$TCXONC(r3, 0x540a, 0x2)

5.680763069s ago: executing program 0 (id=588):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5.520225392s ago: executing program 0 (id=589):
r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0)
fallocate(r1, 0x0, 0x0, 0x1001f0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8})
fcntl$getownex(r0, 0x10, &(0x7f0000000040))

5.377409913s ago: executing program 1 (id=590):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0)
unlink(0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000240), 0x10)

5.184327489s ago: executing program 0 (id=591):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000088b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000bc0), 0x1, 0xfdfdffffffffffff, &(0x7f0000000800)="01"})
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
epoll_create1(0x0)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)='\n', 0x1}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount$9p_rdma(&(0x7f0000003600), &(0x7f0000003640)='./bus\x00', &(0x7f0000003680), 0x0, &(0x7f00000036c0)=ANY=[@ANYBLOB='trans=rdma,port=0x000'])

4.256733114s ago: executing program 2 (id=592):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x11, 0x3, 0x5)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'erspan0\x00', <r5=>0x0, 0x7800, 0x40, 0x8, 0x7fffffff, {{0x11, 0x4, 0x1, 0xc, 0x44, 0x66, 0x0, 0x0, 0x29, 0x0, @rand_addr, @private, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xf, 0x2, [{0x0, 0x9, "5a1c2231bf2519"}]}, @timestamp={0x44, 0x1c, 0x20, 0x0, 0x8, [0x101, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}}}})
sendmmsg$sock(r4, &(0x7f0000003240)=[{{&(0x7f0000000400)=@generic={0x2b, "0b3c24f4c40d6e917d8de032f12e7463b422e370610e5b30ee33b864cd344154aac879a2f1f901d6ea0cd548a0e2d12ad3eb620da2068b2784f6540e380b85a804cec368bd52c46f8ea9348d4e650067c4c701294d6c929249f0b7dde5494519f5953b9849f2fa9b888686c2438f7c61593ecd830c305063cb66f7173e94"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="88961a997aa234358f4e3d177377b1d691615e2b43eb8015da881881f1f5162011b476e5a9d40ab0d99f4abc83e70340a0adda028638d4d395572822bc3593bf4306ef6612", 0x45}], 0x1}}, {{&(0x7f0000000640)=@ll={0x11, 0x12, r5, 0x1, 0x80, 0x6, @multicast}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000000780)="a7c89f31097521e40de5d7bd026b1e12fe7cfed2e457dcd74fae296211a504a1482113e87e77dc57a9d38d11a796ef984612766b170113802f6b8f91d4ae571419f0dd74fca5764b4978a9b271a94a1f9c2d45bcea9711310d0dc9004e608a89a7341a30294d4434d9c640f4d44faadb33dffde348f7d18a984e0f8a7876819b8ee75af49177c81b9dcb8996fd425d351724b0178afed2a55a05af60509742c4744368836a98055c", 0xa8}, {&(0x7f0000000700)="945d3183b2cf2758c75e17638108c1290862e5b6ea17b5de7b294e011880231521ef474f871d59e792d3a4519ce79f7d46", 0x31}, {0x0}, {&(0x7f0000000880)="4ed1c70012b2126dc73bf78697432d7fe3264ac293ca2f6b002cf7a1da7298228007246e57404ece8dcee875aaa2c90351e3c9488f86f262536c12e65e28d0e5b7f740ed9835e4d64984fb999e487e8d76d346cb9d727db0fb07353efb6c24687bd689dd0011f4b969899557fcef6a317dab83246e6248cf6fdb04ecef9a6cdcb7bff465e174b05480948b59af065c8bf36bb697239a881545923ebfafa9eb5805390e872f60a4aec594210df2d9cb058cde6d1ae1e0967c6c1ed67b33071be2388ec985df33a99aeb3f4e7bed27f94be5c6f1e31cb1044018c067", 0xdb}, {&(0x7f0000000980)="9c83d0e5", 0x4}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002f80)="b917c5fd3f0f811c4b15ea24ffc2790fbf0d11388f4c14723b87c56b83103a71da25f4d8182fffee597847329326413166faa595d8440b2a521a2e3cd5babc58c1eb045fefca34060424f49de3ca01834435c6d1bfdc2cc3f7fc8c2abf219a6148899da69e8636e607613dd75d89e9df2796c15cd306467c79bbcc1ebf699fd5cf80857db6ceb9418b51015b5f0bc7c91cea5f4189bd93592e5efec5a036af88c2ea41eff0950ba4667c41ce54f231b20f4f9ccbe7f14244addfc310fa158bf7957147f9d63284fd3cfcaa2a9f051c3b0143585a3ebde6501f0ac029126d6b", 0xdf}, {&(0x7f0000003080)="c9921187aedfcd5d27ecbb6c593198ec982dacc8e833c3968e60ac182a13965304c182b61172c8479a5bfbe0541734b1ffa9a66616432ac223b33ad16a", 0x3d}], 0xa}}], 0x2, 0x4040000)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000013000100000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000", @ANYRES32=0x0, @ANYBLOB="0000000021c0020032aa5b7bb55ac40e1e83d6"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49)
socket$inet6(0xa, 0x1, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
socket(0x28, 0x800, 0x0)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x50}, {0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18)
syz_emit_ethernet(0x1a0, &(0x7f0000000b80)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @igmp={{0x2e, 0x4, 0x0, 0x0, 0x192, 0x67, 0x0, 0x41, 0x2, 0x0, @private=0xa010101, @multicast2, {[@timestamp_addr={0x44, 0x54, 0x95, 0x1, 0x9, [{@multicast1, 0x2b7a305b}, {@remote, 0xff}, {@multicast2, 0x4}, {@private=0xa010101, 0x7fffffff}, {@rand_addr=0x64010100, 0x5}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x81}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0xf9}]}, @cipso={0x86, 0x11, 0x3, [{0x0, 0x8, "ed1e60455bbf"}, {0x2, 0x3, '+'}]}, @timestamp_addr={0x44, 0x1c, 0x26, 0x1, 0x2, [{@remote, 0x400}, {@multicast2, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @noop, @rr={0x7, 0x7, 0xda, [@rand_addr=0x64010100]}, @generic={0x7, 0xc, "83898a970399a2df6fb0"}, @end, @rr={0x7, 0xb, 0xb3, [@private=0xa010102, @remote]}]}}, {0x16, 0x3f, 0x0, @multicast1, "056c9beff64e7564dd03fe6f4f031630fa920965ad3e298d5d8712625a1cc1869a364b10d0a9fc53ee2f5b5bcb0737420c431b3ddb333f22c8d8274409e8c67893ac18e5a1aa57c9b73482b3d7f324d341b944ed27a32824c81cd334eb763136b7235406b1c0677d83ba30b41044a6738a216f9993e898e2cd19b06dc89e5454fe8f6f44e81792fec949da3d667f4d8d92f029657490db56d16b8da78c493f81a69eae97fadfaf6cc72bc605b72870df4a02f238cc69abb152acca88b4c94a3db74fb597685911635f6b16640cbf029bcf71"}}}}}, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

4.256445494s ago: executing program 3 (id=593):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "d1d6570b947d199e43ae758798"}]}, 0x28}}, 0x0)

4.166069882s ago: executing program 0 (id=594):
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
close(r0)
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)={[{@nodiscard}, {@order_strict}, {@nobarrier}, {@norecovery}, {@discard}, {@discard}, {@nobarrier}, {@nobarrier}, {@nobarrier}]}, 0x1, 0xa88, &(0x7f0000001540)="$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")
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e82, &(0x7f0000000000)={@id={0x2, 0x0, @a}})

4.037955412s ago: executing program 1 (id=595):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0, <r2=>0x0], &(0x7f00000007c0), 0x0, 0x2, 0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)={0xffffffffffffffff, r2, r1})

3.94670259s ago: executing program 3 (id=596):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b)

3.762327834s ago: executing program 1 (id=597):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000140))

3.217328709s ago: executing program 0 (id=598):
creat(&(0x7f0000000280)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x11, 0x4, 0x0, 0x8, 0x800, 0xffffffffffffffff, 0x2000000}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x800}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000300000d020000000d00000000000000090000000000000000000000000000000000000000000002020000000000a7f18e11faaefbd94c761d7806f01e6456146a1db7ee65682d8bf24215cb5858a2c3e80bc492437a3070e21800bd1f61e9f38797b1bd2586990a077f2d7391"], &(0x7f00000002c0)=""/235, 0x4a, 0xeb, 0x1}, 0x20)
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x446, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES8], 0x0, 0x2f8, &(0x7f0000000880)="$eJzs3M9PE1sUwPFDW0pbAmXx8l7eS1640Y1uJlBdK42BxNhEgtT4IzEZYKpNx5Z0GkyNEV25Nf4HblwQluxIlH+AjTvduHHHxsSFLIw1nR+UlqFICx2F7ychc5h7z/RcppAzDTNbt14+LOQsLadXJBRT0icisi0yIiHx9LnbkB1HZbdncn7w64f/b9y+cy2dyUzOKDWVnr2QUkoNj7599CTuTlsfkM2Re1tfUp83/978d+vH7IO8pfKWKpYqSldzpU8Vfc401ELeKmhKTZuGbhkqX7SMsjNecsZzZmlxsar04sJQYrFsWJbSi1VVMKqqUlKVclWF7+v5otI0TQ0lBAfJrszM6OkOk+ePuBgck3I5rYdFJL5nJLsSSEEAACBQrf1/SFTb/v/14fr/1TMblcGba8Nu/78e9ev/L350jtXU/8dExLf/917ft//XD9f/7+2ITpem/j8ccDHozGh0z66+RlgfLKf1hPv7a3t+d3XMDuj/AQAAAAAAAAAAAAAAAAAAAAD4E2zXaslarZb0tt7XgIjERMT73ic1LCKXAygZR6iL848ToHHjXmRYxHyxlF3KOlt3woaImGLImCTlu/1+cNVj784jVTci78xlN395KevcTpbOSd7OH5dkv7Tm12pTVzOT48rRnN8vid35KUnKX/75Kd/8qJw7uytfk6S8n5eSmLJg19HIfzqu1JXrmZb8uD0PAAAAAICTQFM7fK/fNW2/cSd/5/q69fOBcOP6esz3+jwi/0WCXTsAAAAAAKeFVX1c0E3TKLcJ4nLwnM6DyDEd2Vvhr2Z5/8twfCttE3gv3jQUc3c2n4suKxT38bBd1hySTrJG66tR3f7EvI+N9psj0xO9P4N28M+rN9+O7oCX1mIHrLTzINz+DdDfsz9AAAAAAHqm0fR7eyaCLQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFOoF09HC3qNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO/iZwAAAP//514EKA==")

3.141104425s ago: executing program 2 (id=599):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48)
close_range(r3, 0xffffffffffffffff, 0x0)

3.125509406s ago: executing program 3 (id=600):
socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
lseek(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @local}]}, 0x30}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, 0x0, 0x0)
listen(r3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
listen(r5, 0x0)

3.034685503s ago: executing program 4 (id=601):
ftruncate(0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/4096, 0x1000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e)
sendfile(r5, r3, 0x0, 0x10000a007)

228.927721ms ago: executing program 2 (id=602):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000002240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0)

216.950482ms ago: executing program 3 (id=603):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200a8140900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000a0a01020000010000000000000000000500010073"], 0x20}}, 0x0)

92.310692ms ago: executing program 1 (id=604):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=605):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000088b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000bc0), 0x1, 0xfdfdffffffffffff, &(0x7f0000000800)="01"})
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
epoll_create1(0x0)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)='\n', 0x1}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount$9p_rdma(&(0x7f0000003600), &(0x7f0000003640)='./bus\x00', &(0x7f0000003680), 0x0, &(0x7f00000036c0)=ANY=[@ANYBLOB='trans=rdma,port=0x000'])

kernel console output (not intermixed with test programs):

294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.153" name="/newroot/6/file0/bus" dev="loop1" ino=33 res=1 errno=0
[   97.452270][ T4323] loop2: detected capacity change from 4096 to 64
[   97.490916][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   97.512540][ T4326] ntfs3: loop2: failed to read volume at offset 0x45000
[   97.534529][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.550437][   T26] audit: type=1800 audit(1722478245.980:13): pid=4323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="bus" dev="loop2" ino=33 res=0 errno=0
[   97.566374][ T4090] device veth0_macvtap entered promiscuous mode
[   97.577166][ T4326] syz.2.155: attempt to access beyond end of device
[   97.577166][ T4326] loop2: rw=2049, sector=88, nr_sectors = 8 limit=64
[   97.612081][ T4326] Buffer I/O error on dev loop2, logical block 11, lost sync page write
[   97.639563][ T4326] ntfs3: loop2: ntfs3_write_inode r=1e failed, -5.
[   97.687134][ T4090] device veth1_macvtap entered promiscuous mode
[   97.737715][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.806221][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.810981][ T3874] ntfs3: loop2: failed to read volume at offset 0x45000
[   97.825114][ T3648] Bluetooth: hci4: command tx timeout
[   97.826467][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.861743][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.868556][ T3874] ntfs3: loop2: failed to read volume at offset 0x45000
[   97.896351][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.993705][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.013737][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.053738][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.085728][ T4090] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.096209][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.107214][    T9] ntfs3: loop2: failed to read volume at offset 0x45000
[   98.107565][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.125274][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.144823][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.364319][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.496278][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.625284][ T4090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.769581][ T4090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.842720][ T4090] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.888183][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   98.914556][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   98.922684][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   98.961013][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   98.972580][ T4337] Bluetooth: MGMT ver 1.22
[   98.988306][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   99.005663][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   99.125976][ T4090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.238417][ T4090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.503392][ T4344] loop0: detected capacity change from 0 to 256
[   99.527852][ T4090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.643554][ T4344] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xaed0c81c, utbl_chksum : 0xe619d30d)
[   99.656894][ T4090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.093255][ T4249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.187871][ T4249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.214257][ T4043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.222488][ T4043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.326595][ T4249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.371526][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.399890][ T4347] loop0: detected capacity change from 0 to 4096
[  100.409392][ T3995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.418792][ T3995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.461967][ T4249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.525141][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.575486][   T26] audit: type=1800 audit(1722478249.230:14): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.166" name="bus" dev="loop0" ino=33 res=0 errno=0
[  100.684443][   T26] audit: type=1800 audit(1722478249.250:15): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.166" name="bus" dev="loop0" ino=33 res=0 errno=0
[  100.740590][ T3738] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.770644][   T26] audit: type=1804 audit(1722478249.280:16): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.166" name="/newroot/51/file0/bus" dev="loop0" ino=33 res=1 errno=0
[  100.791864][    C0] vkms_vblank_simulate: vblank timer overrun
[  100.822962][ T3647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  100.832321][ T3647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  100.841102][ T3647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  100.861114][ T3647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  100.869138][ T3647] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  100.881049][ T3647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  100.895364][ T3738] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.985215][ T3738] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.023931][ T3647] Bluetooth: hci0: command 0x0c1a tx timeout
[  101.030292][ T3648] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  101.082348][ T3738] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.083856][  T946] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  101.108361][ T4249] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  101.155353][ T4249] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  101.241332][ T4249] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  101.262939][ T4249] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  101.306680][ T4358] loop1: detected capacity change from 0 to 64
[  101.374626][  T946] usb 1-1: Using ep0 maxpacket: 32
[  101.791686][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.820993][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.831806][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.853880][ T4249] 8021q: adding VLAN 0 to HW filter on device team0
[  101.879449][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.890739][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.901692][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.908898][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.943539][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.955447][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.965711][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.976390][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.983580][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.004092][  T946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  102.072466][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.207883][  T946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  102.262432][  T946] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  102.324193][ T4249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  102.334912][  T946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.382406][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.458239][  T946] usb 1-1: config 0 descriptor??
[  102.474227][ T4356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  102.488085][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.506181][  T946] hub 1-1:0.0: USB hub found
[  102.514948][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.534498][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.556202][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.571917][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.580983][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.597030][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.610314][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.621774][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.642129][ T4353] chnl_net:caif_netlink_parms(): no params data found
[  102.714145][  T946] hub 1-1:0.0: 2 ports detected
[  102.788754][ T4376] loop1: detected capacity change from 0 to 512
[  102.812552][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.824558][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.825551][ T4376] EXT4-fs (loop1): Test dummy encryption mode enabled
[  102.944169][ T3648] Bluetooth: hci2: command tx timeout
[  102.984260][ T4376] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.172: inline data xattr refers to an external xattr inode
[  103.016001][ T4376] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.172: couldn't read orphan inode 12 (err -117)
[  103.039909][ T4376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  104.211275][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.223039][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.272492][ T4353] device bridge_slave_0 entered promiscuous mode
[  104.406756][ T3818] EXT4-fs (loop1): unmounting filesystem.
[  104.514739][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.526538][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.555963][ T4353] device bridge_slave_1 entered promiscuous mode
[  104.576295][ T4402] loop1: detected capacity change from 0 to 256
[  104.652472][ T4402] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xaed0c81c, utbl_chksum : 0xe619d30d)
[  104.709710][ T4353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.741391][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.770930][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.781985][ T4353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.969495][ T4404] loop1: detected capacity change from 0 to 2048
[  104.981764][ T4404] hpfs: filesystem error: invalid number of hotfixes: 266, used: 2; already mounted read-only
[  104.988692][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.017620][ T4404] hpfs: filesystem error: improperly stopped
[  105.023910][ T3648] Bluetooth: hci2: command tx timeout
[  105.033876][ T4353] team0: Port device team_slave_0 added
[  105.050870][ T4404] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  105.123109][ T4353] team0: Port device team_slave_1 added
[  105.354244][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.373773][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.405970][ T4353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.412924][ T4353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.443093][ T4353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.474401][ T3713] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  105.525094][ T4353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.534324][ T4353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.565799][ T4353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.591161][ T4249] device veth0_vlan entered promiscuous mode
[  105.644501][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.658022][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.745912][ T3713] usb 2-1: Using ep0 maxpacket: 8
[  105.749001][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.770206][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.779050][ T3681] usb 1-1: USB disconnect, device number 8
[  105.800368][ T4413] loop4: detected capacity change from 0 to 2048
[  105.877379][ T4413] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  105.885919][ T3713] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.906108][ T3713] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  105.937744][ T4353] device hsr_slave_0 entered promiscuous mode
[  105.956348][ T4418] loop0: detected capacity change from 0 to 2048
[  105.959429][ T3713] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1839, setting to 1024
[  105.986998][ T4418] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  106.009762][ T4353] device hsr_slave_1 entered promiscuous mode
[  106.010099][ T3713] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  106.022235][ T4418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.040415][ T4353] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.048718][ T4353] Cannot create hsr debugfs directory
[  106.058763][ T3713] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  106.074486][ T3713] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  106.076463][ T4249] device veth1_vlan entered promiscuous mode
[  106.083585][ T3713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.240018][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  106.250312][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  106.272316][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  106.283189][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  106.312496][ T4249] device veth0_macvtap entered promiscuous mode
[  106.373072][ T4249] device veth1_macvtap entered promiscuous mode
[  106.393858][ T3679] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  106.404038][ T3713] usb 2-1: GET_CAPABILITIES returned 0
[  106.409555][ T3713] usbtmc 2-1:16.0: can't read capabilities
[  106.412396][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.433839][ T3681] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  106.451309][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.461263][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.475095][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.485337][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.496260][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.506289][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.517172][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.527119][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.537736][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.549743][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.567831][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.581006][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.590598][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.619207][ T3738] device hsr_slave_0 left promiscuous mode
[  106.633324][ T3738] device hsr_slave_1 left promiscuous mode
[  106.652707][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.658189][  T946] usb 2-1: USB disconnect, device number 2
[  106.668406][ T3738] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.684970][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.692526][ T3738] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.700850][ T3738] device bridge_slave_1 left promiscuous mode
[  106.707966][ T3738] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.717510][ T3738] device bridge_slave_0 left promiscuous mode
[  106.724632][ T3738] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.739166][ T3738] device hsr_slave_0 left promiscuous mode
[  106.745941][ T3738] device hsr_slave_1 left promiscuous mode
[  106.753397][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.763469][ T3738] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.773618][ T3679] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.788993][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.789531][ T3679] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.799543][ T3738] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.820801][ T3681] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  106.828981][ T3681] usb 1-1: config 0 has no interface number 0
[  106.842869][ T3681] usb 1-1: config 0 interface 1 has no altsetting 0
[  106.849711][ T3681] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  106.867019][ T3681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.881774][ T3738] device bridge_slave_1 left promiscuous mode
[  106.908252][ T3738] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.916514][ T3681] usb 1-1: config 0 descriptor??
[  106.924281][ T3679] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  106.935138][ T3738] device bridge_slave_0 left promiscuous mode
[  106.935240][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  106.951642][ T3738] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.955060][ T3679] usb 5-1: SerialNumber: syz
[  106.960671][ T3681] cp210x 1-1:0.1: cp210x converter detected
[  107.032305][ T3738] device veth1_macvtap left promiscuous mode
[  107.040733][ T3738] device veth0_macvtap left promiscuous mode
[  107.047283][ T3738] device veth1_vlan left promiscuous mode
[  107.053336][ T3738] device veth0_vlan left promiscuous mode
[  107.062074][ T3738] device veth1_macvtap left promiscuous mode
[  107.068441][ T3738] device veth0_macvtap left promiscuous mode
[  107.074968][ T3738] device veth1_vlan left promiscuous mode
[  107.081010][ T3738] device veth0_vlan left promiscuous mode
[  107.104874][ T3647] Bluetooth: hci2: command tx timeout
[  107.266996][ T3679] usb 5-1: 0:2 : does not exist
[  107.314451][ T3679] usb 5-1: USB disconnect, device number 3
[  107.385369][ T3681] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32
[  107.662170][ T3681] usb 1-1: cp210x converter now attached to ttyUSB0
[  107.728414][ T3738] team0 (unregistering): Port device team_slave_1 removed
[  107.759168][ T3738] team0 (unregistering): Port device team_slave_0 removed
[  107.787006][ T3738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.847199][ T3738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.882475][ T3681] usb 1-1: USB disconnect, device number 9
[  107.886624][ T4440] input: syz0 as /devices/virtual/input/input5
[  107.959370][ T3627] udevd[3627]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  107.973614][ T3681] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  107.997207][ T3681] cp210x 1-1:0.1: device disconnected
[  108.037594][ T4442] loop4: detected capacity change from 0 to 64
[  109.002242][ T3738] bond0 (unregistering): Released all slaves
[  109.021234][ T4446] loop0: detected capacity change from 0 to 16
[  109.076323][ T4446] erofs: (device loop0): mounted with root inode @ nid 36.
[  109.183826][ T3647] Bluetooth: hci2: command tx timeout
[  109.476926][ T4451] xt_connbytes: Forcing CT accounting to be enabled
[  109.484198][ T4451] No such timeout policy "syz0"
[  109.682132][ T4451] loop4: detected capacity change from 0 to 4096
[  110.041779][ T4452] loop0: detected capacity change from 0 to 2048
[  110.077779][ T4452] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.082698][ T3826] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  110.333897][ T4456] loop4: detected capacity change from 0 to 164
[  110.482239][ T3738] team0 (unregistering): Port device team_slave_1 removed
[  110.521546][ T3738] team0 (unregistering): Port device team_slave_0 removed
[  110.535960][ T4458] loop4: detected capacity change from 0 to 4096
[  110.579125][ T3738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.624133][   T26] audit: type=1800 audit(1722478259.270:17): pid=4458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.186" name="bus" dev="loop4" ino=33 res=0 errno=0
[  110.656369][ T3738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.683895][ T4458] loop4: detected capacity change from 4096 to 64
[  110.703990][ T4459] syz.4.186: attempt to access beyond end of device
[  110.703990][ T4459] loop4: rw=2049, sector=3072, nr_sectors = 8 limit=64
[  110.891036][ T4090] ntfs3: loop4: failed to read volume at offset 0x45000
[  110.902551][ T4090] ntfs3: loop4: failed to read volume at offset 0x45000
[  110.949948][   T62] ntfs3: loop4: failed to read volume at offset 0x45000
[  110.959201][   T62] ntfs3: loop4: failed to read volume at offset 0x45000
[  110.994471][ T3738] bond0 (unregistering): Released all slaves
[  111.059049][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.069693][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.079888][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.090359][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.100267][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.110851][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.122414][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.139610][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.150854][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.269565][ T4249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.273397][ T4461] loop1: detected capacity change from 0 to 2048
[  111.291477][ T4461] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[  111.310378][ T4249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.345616][ T4249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.358471][ T4249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.584278][ T3712] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  111.772518][ T4471] loop0: detected capacity change from 0 to 512
[  111.834082][ T3992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.842509][ T3992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.896113][ T4471] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.193: casefold flag without casefold feature
[  111.901365][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  111.914311][ T3995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.969562][ T3995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.984219][ T3712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.994772][ T3712] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.004251][ T4471] EXT4-fs error (device loop0): __ext4_iget:5044: inode #12: block 2: comm syz.0.193: invalid block
[  112.029656][ T4471] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.193: error while reading EA inode 12 err=-117
[  112.062312][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  112.083889][ T3712] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  112.088931][ T4471] EXT4-fs (loop0): 1 orphan inode deleted
[  112.102372][ T4471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  112.113326][ T3712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  112.123448][ T3712] usb 2-1: SerialNumber: syz
[  112.229491][   T26] audit: type=1804 audit(1722478260.880:18): pid=4471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.193" name="/newroot/59/file0/file0" dev="loop0" ino=15 res=1 errno=0
[  112.279907][ T3643] EXT4-fs (loop0): unmounting filesystem.
[  112.316461][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.339047][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.347519][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.356345][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.364211][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  112.371466][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.410262][ T4353] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  112.419747][ T3712] usb 2-1: 0:2 : does not exist
[  112.434503][ T3712] usb 2-1: USB disconnect, device number 3
[  112.483617][ T4353] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  112.512849][ T4488] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  112.677127][ T4353] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  112.693533][ T4353] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  112.812610][ T4494] xt_connbytes: Forcing CT accounting to be enabled
[  112.819465][ T4494] No such timeout policy "syz0"
[  113.022146][ T4494] loop0: detected capacity change from 0 to 4096
[  113.046737][ T3627] udevd[3627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.610827][ T4497] loop1: detected capacity change from 0 to 4096
[  113.760831][   T26] audit: type=1800 audit(1722478262.410:19): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.196" name="bus" dev="loop1" ino=33 res=0 errno=0
[  113.893514][ T4353] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.903876][ T4497] loop1: detected capacity change from 4096 to 64
[  113.927751][ T4504] ntfs3: loop1: failed to read volume at offset 0x45000
[  113.967489][ T4504] syz.1.196: attempt to access beyond end of device
[  113.967489][ T4504] loop1: rw=2049, sector=88, nr_sectors = 8 limit=64
[  113.977338][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.020008][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.036379][ T4504] Buffer I/O error on dev loop1, logical block 11, lost sync page write
[  114.060576][ T4353] 8021q: adding VLAN 0 to HW filter on device team0
[  114.093770][ T4504] ntfs3: loop1: ntfs3_write_inode r=1e failed, -5.
[  114.094578][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  114.126078][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.152204][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.159402][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.181327][ T4483] chnl_net:caif_netlink_parms(): no params data found
[  114.211303][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  114.224366][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.244806][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.263527][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.270670][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.282448][ T3818] ntfs3: loop1: failed to read volume at offset 0x45000
[  114.304021][ T3818] ntfs3: loop1: failed to read volume at offset 0x45000
[  114.330763][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  114.366009][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.386138][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.414276][ T3992] ntfs3: loop1: failed to read volume at offset 0x45000
[  114.428913][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.452752][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  114.464092][ T3648] Bluetooth: hci1: command tx timeout
[  114.472272][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  114.501388][ T4353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  114.523835][ T4353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.575139][ T4500] loop0: detected capacity change from 0 to 32768
[  114.689101][ T4500] XFS (loop0): Mounting V5 Filesystem
[  114.733309][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  114.749210][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  114.764455][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  114.777029][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  114.789695][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  114.803289][ T4500] XFS (loop0): Ending clean mount
[  114.831898][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  115.015344][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.022418][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.074507][ T4483] device bridge_slave_0 entered promiscuous mode
[  115.119158][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.153481][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.217654][ T4483] device bridge_slave_1 entered promiscuous mode
[  115.401180][ T4483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.470140][ T4483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.661719][ T4483] team0: Port device team_slave_0 added
[  115.703563][ T4483] team0: Port device team_slave_1 added
[  115.871654][ T4483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.912063][ T4483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.989141][ T4483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.023486][ T4483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.051602][ T4483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.116843][ T4483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.165379][ T3647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  116.216542][ T3647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  116.227150][ T3647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  116.236644][ T3647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  116.245791][ T3647] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  116.253092][ T3647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  116.358763][ T4353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.430040][ T4483] device hsr_slave_0 entered promiscuous mode
[  116.480173][ T4483] device hsr_slave_1 entered promiscuous mode
[  116.511360][ T4483] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.539579][ T4483] Cannot create hsr debugfs directory
[  116.546000][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  116.554059][ T3647] Bluetooth: hci1: command tx timeout
[  116.554526][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.682716][ T4538] loop3: detected capacity change from 0 to 32768
[  116.780497][ T3643] XFS (loop0): Unmounting Filesystem
[  116.917080][ T4538] XFS (loop3): Mounting V5 Filesystem
[  116.985546][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  117.014447][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  117.030536][ T4538] XFS (loop3): Ending clean mount
[  117.052756][ T4353] device veth0_vlan entered promiscuous mode
[  117.106807][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  117.115349][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.162206][ T4353] device veth1_vlan entered promiscuous mode
[  117.228843][ T4483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.298046][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.323151][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.350327][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  117.430943][ T4483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.472539][ T4353] device veth0_macvtap entered promiscuous mode
[  117.493588][ T4353] device veth1_macvtap entered promiscuous mode
[  117.554088][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  117.562883][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.603964][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.677293][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.706127][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.787397][ T4575] No such timeout policy "syz0"
[  117.981815][ T4575] loop0: detected capacity change from 0 to 4096
[  118.041406][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.239061][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.385663][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.396451][ T3648] Bluetooth: hci0: command tx timeout
[  118.417032][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.428582][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.453701][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.475076][ T4353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.484774][ T3627] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  118.552517][ T4483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.567055][ T4249] XFS (loop3): Unmounting Filesystem
[  118.624636][ T3648] Bluetooth: hci1: command tx timeout
[  118.635245][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  118.653013][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  118.673262][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  118.747168][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.777898][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.802205][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.813956][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.824221][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.834951][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.847210][ T4353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.861568][ T4353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.901322][ T4353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.940231][ T4483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.984189][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  118.992970][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  119.022907][ T4353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.068927][ T4353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.122966][ T4353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.143762][ T4353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.212513][ T3738] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.336414][ T3738] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.414064][ T4600] loop3: detected capacity change from 0 to 2048
[  119.437492][ T4542] chnl_net:caif_netlink_parms(): no params data found
[  119.457017][ T4600] UDF-fs: warning (device loop3): udf_fill_super: No fileset found
[  119.496709][ T3738] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.542567][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.564551][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.613256][ T4602] loop0: detected capacity change from 0 to 2048
[  119.658077][ T4602] hpfs: filesystem error: invalid number of hotfixes: 266, used: 2; already mounted read-only
[  119.671639][ T3738] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.686426][ T4602] hpfs: filesystem error: improperly stopped
[  119.693578][ T4602] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  119.707228][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  119.744523][ T4483] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  119.751199][ T3052] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  119.818962][ T4483] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  119.826777][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.846597][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.858664][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.883353][ T4483] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  119.892460][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.900379][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.909999][ T4542] device bridge_slave_0 entered promiscuous mode
[  119.926834][ T4483] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  119.938813][ T4542] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.946996][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.955382][ T4542] device bridge_slave_1 entered promiscuous mode
[  120.074648][ T3681] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  120.100213][ T4542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.133269][ T4542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.153907][ T3052] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.183730][ T3052] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.211199][ T4542] team0: Port device team_slave_0 added
[  120.224729][ T4618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'.
[  120.243088][ T4483] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.264048][ T3052] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  120.288996][ T3052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  120.323798][ T3681] usb 1-1: Using ep0 maxpacket: 8
[  120.333111][ T3052] usb 4-1: SerialNumber: syz
[  120.412562][ T4542] team0: Port device team_slave_1 added
[  120.444392][ T3681] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  120.463989][ T3681] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  120.464735][ T3648] Bluetooth: hci0: command tx timeout
[  120.483751][ T3681] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1839, setting to 1024
[  120.503737][ T3681] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  120.523733][ T3681] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  120.560178][ T3681] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  120.602684][ T3681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.630671][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  120.643015][ T3052] usb 4-1: 0:2 : does not exist
[  120.660165][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.685353][ T3052] usb 4-1: USB disconnect, device number 3
[  120.710333][ T3648] Bluetooth: hci1: command tx timeout
[  120.823554][ T4542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.839013][ T4542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.874652][ T4542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.888036][ T3681] usb 1-1: GET_CAPABILITIES returned 0
[  120.893546][ T3681] usbtmc 1-1:16.0: can't read capabilities
[  120.918031][ T4483] 8021q: adding VLAN 0 to HW filter on device team0
[  120.965636][ T3627] udevd[3627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.037416][ T4542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.055420][ T4542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.105307][ T3681] usb 1-1: USB disconnect, device number 10
[  121.137456][ T4542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.222216][ T4643] sctp: [Deprecated]: syz.2.210 (pid 4643) Use of int in max_burst socket option deprecated.
[  121.222216][ T4643] Use struct sctp_assoc_value instead
[  121.297461][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  121.315533][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.331105][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.338275][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.432017][ T4650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'.
[  121.448774][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'.
[  121.666361][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  121.841139][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  121.892140][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.990150][ T4657] loop0: detected capacity change from 0 to 16
[  121.994644][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.003501][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.024919][ T4657] erofs: (device loop0): mounted with root inode @ nid 36.
[  122.051368][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.068732][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.129150][ T4542] device hsr_slave_0 entered promiscuous mode
[  122.136234][ T4542] device hsr_slave_1 entered promiscuous mode
[  122.142917][ T4542] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  122.150940][ T4542] Cannot create hsr debugfs directory
[  122.158806][ T4659] loop0: detected capacity change from 0 to 164
[  122.255856][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.275199][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.307456][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.468177][ T4666] input: syz1 as /devices/virtual/input/input6
[  122.493330][ T4483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  122.543886][ T3647] Bluetooth: hci0: command tx timeout
[  122.555798][ T4483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.618238][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.628678][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.653343][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.662663][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.672361][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.692626][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.827690][ T4675] sctp: [Deprecated]: syz.0.221 (pid 4675) Use of int in max_burst socket option deprecated.
[  122.827690][ T4675] Use struct sctp_assoc_value instead
[  122.867554][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.159407][ T4685] loop0: detected capacity change from 0 to 16
[  123.260960][ T4685] erofs: (device loop0): mounted with root inode @ nid 36.
[  123.474455][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.504050][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.521118][ T4694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.224'.
[  123.594816][ T4483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.608173][ T4694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'.
[  124.000949][ T4716] input: syz1 as /devices/virtual/input/input7
[  124.290635][ T4724] sctp: [Deprecated]: syz.3.231 (pid 4724) Use of int in max_burst socket option deprecated.
[  124.290635][ T4724] Use struct sctp_assoc_value instead
[  124.443587][ T3738] device hsr_slave_0 left promiscuous mode
[  124.454203][ T4730] loop0: detected capacity change from 0 to 16
[  124.468642][ T3738] device hsr_slave_1 left promiscuous mode
[  124.481741][ T4730] erofs: (device loop0): mounted with root inode @ nid 36.
[  124.482700][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.522537][ T3738] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.547398][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.570835][ T3738] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.607373][ T3738] device bridge_slave_1 left promiscuous mode
[  124.624363][ T3648] Bluetooth: hci0: command tx timeout
[  124.629983][ T3738] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.639986][ T3738] device bridge_slave_0 left promiscuous mode
[  124.647955][ T3738] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.661479][ T3738] device hsr_slave_0 left promiscuous mode
[  124.669531][ T3738] device hsr_slave_1 left promiscuous mode
[  124.677173][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.684976][ T3738] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.699476][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.712352][ T3738] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.720378][ T3738] device bridge_slave_1 left promiscuous mode
[  124.726831][ T3738] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.742516][ T3738] device bridge_slave_0 left promiscuous mode
[  124.755603][ T3738] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.840937][ T3738] device veth1_macvtap left promiscuous mode
[  124.847407][ T3738] device veth0_macvtap left promiscuous mode
[  124.859738][ T3738] device veth1_vlan left promiscuous mode
[  124.869246][ T3738] device veth0_vlan left promiscuous mode
[  124.892306][ T3738] device veth1_macvtap left promiscuous mode
[  124.903100][ T3738] device veth0_macvtap left promiscuous mode
[  124.921669][ T3738] device veth1_vlan left promiscuous mode
[  124.937710][ T3738] device veth0_vlan left promiscuous mode
[  125.709582][ T4765] input: syz1 as /devices/virtual/input/input8
[  125.793955][ T3712] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  125.856228][ T3738] team0 (unregistering): Port device team_slave_1 removed
[  125.898432][ T3738] team0 (unregistering): Port device team_slave_0 removed
[  125.944456][ T3738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.976213][ T3738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.213975][ T3712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  126.231133][ T3712] usb 1-1: New USB device found, idVendor=0586, idProduct=330b, bcdDevice=d9.9c
[  126.240388][ T3712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.251479][ T3712] usb 1-1: config 0 descriptor??
[  126.288897][ T3738] bond0 (unregistering): Released all slaves
[  126.313770][ T3712] cxacru 1-1:0.0: cxacru_bind: interface has incorrect endpoints
[  126.321796][ T3712] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  126.512180][ T3712] usb 1-1: USB disconnect, device number 11
[  126.600754][ T3738] team0 (unregistering): Port device team_slave_1 removed
[  126.632704][ T3738] team0 (unregistering): Port device team_slave_0 removed
[  126.660858][ T3738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.690789][ T3738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.967926][ T3738] bond0 (unregistering): Released all slaves
[  127.070248][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  127.085245][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.144910][ T4542] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  127.191312][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  127.195607][ T4773] loop3: detected capacity change from 0 to 16
[  127.200293][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  127.227285][ T4542] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  127.233043][ T4773] erofs: (device loop3): mounted with root inode @ nid 36.
[  127.255363][ T4542] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  127.281401][ T4483] device veth0_vlan entered promiscuous mode
[  127.291817][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.300744][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.319166][ T4542] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  127.351116][ T4483] device veth1_vlan entered promiscuous mode
[  127.457775][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  127.467605][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  127.489788][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  127.509040][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.533108][ T4483] device veth0_macvtap entered promiscuous mode
[  127.577178][ T4483] device veth1_macvtap entered promiscuous mode
[  127.640666][ T4542] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.662186][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.681169][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.705111][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.740311][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.786591][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.830731][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.885572][ T4483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.902475][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  127.914949][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  127.931536][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  127.954925][ T4789] input: syz1 as /devices/virtual/input/input9
[  127.961964][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  127.985808][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  128.005410][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.017672][ T4542] 8021q: adding VLAN 0 to HW filter on device team0
[  128.028978][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.043269][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.055972][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.067223][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.077666][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.088513][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.109530][ T4483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.129296][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  128.139104][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  128.152698][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.170966][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.187247][ T3712] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.194443][ T3712] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.195181][ T4792] input: syz0 as /devices/virtual/input/input10
[  128.206429][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.244117][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.255199][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.262341][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.280013][ T4483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.305315][ T4483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.323772][ T4483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.333971][ T4483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.360973][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.434766][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.454753][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.468869][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  128.479800][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.489780][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  128.523286][ T4542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.580249][ T4542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.626387][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  128.645156][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.664749][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.684421][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.720707][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.731199][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.742365][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  128.804535][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  128.836192][ T3662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.861483][ T3662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.909033][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  128.940302][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.962431][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.983036][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  129.165155][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  129.191825][    T7] usb 3-1: New USB device found, idVendor=0586, idProduct=330b, bcdDevice=d9.9c
[  129.220180][ T4542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.243718][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.273372][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.283359][    T7] usb 3-1: config 0 descriptor??
[  129.289109][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.310602][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  129.329773][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  129.339782][    T7] cxacru 3-1:0.0: cxacru_bind: interface has incorrect endpoints
[  129.353813][    T7] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  129.397332][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  129.416198][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  129.443546][ T4542] device veth0_vlan entered promiscuous mode
[  129.499827][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  129.518778][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  129.546388][ T4542] device veth1_vlan entered promiscuous mode
[  129.569689][ T3626] usb 3-1: USB disconnect, device number 2
[  129.606420][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  129.618799][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  129.639994][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  129.668876][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  129.693523][ T4542] device veth0_macvtap entered promiscuous mode
[  129.712857][ T4542] device veth1_macvtap entered promiscuous mode
[  129.743295][ T4542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.751740][ T4823] input: syz1 as /devices/virtual/input/input11
[  129.776800][ T4542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.792425][ T4542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.805945][ T4542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.817440][ T4542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.828853][ T4542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.839039][ T4542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.849717][ T4542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.867188][ T4542] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.883577][ T4542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.901462][ T4542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.913591][ T4542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.933201][ T4542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.949225][ T4542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.960205][ T4542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.979179][ T4542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.990675][ T4542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.003317][ T4542] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.027628][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  130.046908][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  130.066787][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  130.097873][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.173831][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  130.296027][ T4830] tmpfs: Cannot retroactively limit size
[  130.823168][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.936319][ T4542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.993762][ T4542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.002556][ T4542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.069167][ T4542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.325193][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.354361][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.415033][ T4849] No such timeout policy "syz1"
[  131.465758][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  131.539836][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.580457][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.597508][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  131.836663][  T946] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  131.881303][ T4862] loop1: detected capacity change from 0 to 512
[  131.919952][ T4862] EXT4-fs (loop1): Test dummy encryption mode enabled
[  132.033388][ T4862] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.201: inline data xattr refers to an external xattr inode
[  132.097197][ T4862] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.201: couldn't read orphan inode 12 (err -117)
[  132.120810][ T4862] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  132.217047][ T4869] tmpfs: Cannot retroactively limit size
[  132.344656][  T946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  132.501025][  T946] usb 1-1: New USB device found, idVendor=0586, idProduct=330b, bcdDevice=d9.9c
[  132.774063][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  132.780404][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  132.806518][  T946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.980598][  T946] usb 1-1: config 0 descriptor??
[  133.017353][ T4872] ALSA: mixer_oss: invalid OSS volume 'Dгn*@\%╬В`.%х╜pАПl├Д/бс▓У╬'
[  133.028032][  T946] cxacru 1-1:0.0: cxacru_bind: interface has incorrect endpoints
[  133.044475][  T946] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  133.746769][    T7] usb 1-1: USB disconnect, device number 12
[  134.009359][ T4542] EXT4-fs (loop1): unmounting filesystem.
[  134.408866][ T4882] loop3: detected capacity change from 0 to 8192
[  134.502297][ T4893] loop0: detected capacity change from 0 to 2048
[  134.538000][ T4882]  loop3: p3 p4 < >
[  134.542323][ T4882] loop3: p3 start 619312 is beyond EOD, truncated
[  134.589980][ T4893] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.759472][ T4896] loop1: detected capacity change from 0 to 4096
[  134.836921][ T4896] NILFS (loop1): invalid segment: Checksum error in segment payload
[  134.880197][ T4896] NILFS (loop1): trying rollback from an earlier position
[  134.948319][ T4896] NILFS (loop1): recovery complete
[  134.989560][ T4901] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.741766][ T4907] xt_connbytes: Forcing CT accounting to be enabled
[  135.748613][ T4907] No such timeout policy "syz0"
[  135.938874][ T4907] loop1: detected capacity change from 0 to 4096
[  136.368927][ T4909] loop2: detected capacity change from 0 to 512
[  136.494594][ T4909] EXT4-fs (loop2): 1 orphan inode deleted
[  136.500377][ T4909] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  136.524739][ T4892] loop3: detected capacity change from 0 to 32768
[  136.583476][ T4898] loop4: detected capacity change from 0 to 32768
[  136.652886][ T4903] loop0: detected capacity change from 0 to 32768
[  136.659152][ T4909] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff)
[  136.822542][ T4903] XFS (loop0): Mounting V5 Filesystem
[  136.916871][ T4898] XFS (loop4): Mounting V5 Filesystem
[  137.258781][   T26] audit: type=1804 audit(1722478285.710:20): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.292" name="/newroot/29/file1/bus" dev="loop2" ino=16 res=1 errno=0
[  137.299447][ T4929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'.
[  137.539717][ T4903] XFS (loop0): Ending clean mount
[  137.543175][   T26] audit: type=1804 audit(1722478285.880:21): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.292" name="/newroot/29/file1/bus" dev="loop2" ino=16 res=1 errno=0
[  137.639589][ T4353] EXT4-fs (loop2): unmounting filesystem.
[  137.775123][ T4940] loop3: detected capacity change from 0 to 512
[  137.887159][ T4940] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.298: inline data xattr refers to an external xattr inode
[  137.922925][ T4940] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.298: couldn't read orphan inode 12 (err -117)
[  137.944497][ T4940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  138.002446][ T4898] XFS (loop4): Ending clean mount
[  138.043437][ T4483] XFS (loop4): Unmounting Filesystem
[  138.072110][ T4944] loop2: detected capacity change from 0 to 512
[  138.105582][ T4944] EXT4-fs: Ignoring removed mblk_io_submit option
[  138.179839][ T4944] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.297: inline data xattr refers to an external xattr inode
[  138.199915][ T4944] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.297: couldn't read orphan inode 12 (err -117)
[  138.212553][ T4944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  138.235632][ T3643] XFS (loop0): Unmounting Filesystem
[  139.053947][ T4249] EXT4-fs (loop3): unmounting filesystem.
[  139.434011][ T4944] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  139.443256][ T4944] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  139.566555][ T4953] loop1: detected capacity change from 0 to 4096
[  139.646054][ T4953] NILFS (loop1): invalid segment: Checksum error in segment payload
[  139.676872][ T4953] NILFS (loop1): trying rollback from an earlier position
[  139.718680][ T4953] NILFS (loop1): recovery complete
[  139.766533][ T4958] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.908906][ T4961] loop4: detected capacity change from 0 to 512
[  139.920584][ T4353] EXT4-fs (loop2): unmounting filesystem.
[  139.971481][ T4961] EXT4-fs (loop4): Test dummy encryption mode enabled
[  140.016109][ T4961] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.299: inline data xattr refers to an external xattr inode
[  140.039272][ T4961] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.299: couldn't read orphan inode 12 (err -117)
[  140.051745][ T4961] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  140.182651][ T3713] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  140.389894][ T4974] No such timeout policy "syz0"
[  140.577262][ T4974] loop1: detected capacity change from 0 to 4096
[  141.516046][ T3713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  141.873950][ T4980] overlayfs: failed to resolve './file2': -2
[  141.914577][ T3713] usb 1-1: New USB device found, idVendor=0586, idProduct=330b, bcdDevice=d9.9c
[  141.938407][ T3713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.957199][ T3713] usb 1-1: config 0 descriptor??
[  141.997606][ T4983] loop1: detected capacity change from 0 to 512
[  142.006796][ T3713] cxacru 1-1:0.0: cxacru_bind: interface has incorrect endpoints
[  142.014834][ T3713] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  142.138090][ T4983] EXT4-fs (loop1): 1 orphan inode deleted
[  142.146987][ T4983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  142.157746][ T4983] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff)
[  142.242628][ T4988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.309'.
[  142.294509][ T3052] usb 1-1: USB disconnect, device number 13
[  142.378785][ T4483] EXT4-fs (loop4): unmounting filesystem.
[  142.684336][   T26] audit: type=1804 audit(1722478291.151:22): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.308" name="/newroot/11/file1/bus" dev="loop1" ino=18 res=1 errno=0
[  143.082183][   T26] audit: type=1804 audit(1722478291.321:23): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.308" name="/newroot/11/file1/bus" dev="loop1" ino=18 res=1 errno=0
[  143.130405][ T4542] EXT4-fs (loop1): unmounting filesystem.
[  143.455378][ T4994] loop4: detected capacity change from 0 to 32768
[  143.550622][ T5005] loop0: detected capacity change from 0 to 512
[  143.678880][ T5005] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.314: inline data xattr refers to an external xattr inode
[  143.703477][ T4994] XFS (loop4): Mounting V5 Filesystem
[  143.710410][ T5005] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.314: couldn't read orphan inode 12 (err -117)
[  143.815607][ T5011] tmpfs: Cannot retroactively limit size
[  144.436797][ T5005] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  144.531088][ T4994] XFS (loop4): Ending clean mount
[  144.759700][ T5016] loop1: detected capacity change from 0 to 512
[  144.766725][ T5016] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.799051][ T5018] loop3: detected capacity change from 0 to 4096
[  144.808367][ T5016] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.316: inline data xattr refers to an external xattr inode
[  145.535983][ T5016] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.316: couldn't read orphan inode 12 (err -117)
[  145.544880][ T3643] EXT4-fs (loop0): unmounting filesystem.
[  145.567104][ T4483] XFS (loop4): Unmounting Filesystem
[  145.567514][ T5018] NILFS (loop3): invalid segment: Checksum error in segment payload
[  145.578722][ T5016] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  145.593896][ T5018] NILFS (loop3): trying rollback from an earlier position
[  145.858882][ T5018] NILFS (loop3): recovery complete
[  145.947544][ T5031] xt_connbytes: Forcing CT accounting to be enabled
[  145.954417][ T5031] No such timeout policy "syz0"
[  146.468271][ T5029] loop2: detected capacity change from 0 to 4096
[  146.475679][ T5035] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.490919][ T5030] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  146.499748][ T5030] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  146.742732][ T5041] loop2: detected capacity change from 0 to 512
[  146.752004][ T4542] EXT4-fs (loop1): unmounting filesystem.
[  146.765646][ T5041] EXT4-fs (loop2): Test dummy encryption mode enabled
[  146.859626][ T5041] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.322: inline data xattr refers to an external xattr inode
[  146.963035][ T5047] loop3: detected capacity change from 0 to 512
[  146.990347][ T5041] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.322: couldn't read orphan inode 12 (err -117)
[  147.058216][ T5047] EXT4-fs (loop3): 1 orphan inode deleted
[  147.071488][ T5041] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  147.107700][ T5047] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  147.116866][ T5047] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff)
[  147.581116][ T5066] tmpfs: Cannot retroactively limit size
[  148.318613][ T5069] loop1: detected capacity change from 0 to 512
[  148.366031][ T5069] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.330: inline data xattr refers to an external xattr inode
[  148.401343][ T5069] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.330: couldn't read orphan inode 12 (err -117)
[  148.489898][ T5069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  148.533409][ T5071] No such timeout policy "syz1"
[  149.013109][   T26] audit: type=1804 audit(1722478297.655:24): pid=5077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.324" name="/newroot/29/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  149.272553][ T4542] EXT4-fs (loop1): unmounting filesystem.
[  149.296165][   T26] audit: type=1804 audit(1722478297.935:25): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.324" name="/newroot/29/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  149.556164][ T5076] loop0: detected capacity change from 0 to 32768
[  149.667026][ T5091] No such timeout policy "syz0"
[  149.855925][ T5091] loop1: detected capacity change from 0 to 4096
[  149.925495][ T5076] XFS (loop0): Mounting V5 Filesystem
[  150.367589][ T5076] XFS (loop0): Ending clean mount
[  150.461773][ T5097] loop4: detected capacity change from 0 to 512
[  150.462405][ T5097] EXT4-fs: Ignoring removed mblk_io_submit option
[  150.566712][ T5097] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.334: inline data xattr refers to an external xattr inode
[  150.566977][ T5097] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.334: couldn't read orphan inode 12 (err -117)
[  150.567174][ T5097] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  151.328254][ T5102] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  151.337201][ T5102] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  151.565141][ T3643] XFS (loop0): Unmounting Filesystem
[  151.592998][ T4483] EXT4-fs (loop4): unmounting filesystem.
[  151.651279][ T5109] ALSA: mixer_oss: invalid OSS volume 'Dгn*@\%╬В`.%х╜pАПl├Д/бс▓У╬'
[  152.313517][ T4353] EXT4-fs (loop2): unmounting filesystem.
[  152.436473][ T4249] EXT4-fs (loop3): unmounting filesystem.
[  152.566927][ T5127] loop3: detected capacity change from 0 to 512
[  152.610785][ T5127] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.344: inline data xattr refers to an external xattr inode
[  152.704267][ T5127] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.344: couldn't read orphan inode 12 (err -117)
[  152.743859][ T5127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  153.029107][ T5134] tmpfs: Cannot retroactively limit size
[  154.701773][ T5131] No such timeout policy "syz1"
[  154.737009][ T4249] EXT4-fs (loop3): unmounting filesystem.
[  154.872443][ T5147] loop4: detected capacity change from 0 to 256
[  155.866237][ T5159] loop4: detected capacity change from 0 to 512
[  155.897155][ T5159] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.354: casefold flag without casefold feature
[  155.920742][ T5159] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.354: missing EA_INODE flag
[  155.932571][ T5159] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.354: error while reading EA inode 2 err=-117
[  155.943749][ T3052] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  155.952640][ T5159] EXT4-fs (loop4): 1 orphan inode deleted
[  155.958708][ T5159] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  156.031222][ T5146] loop0: detected capacity change from 0 to 32768
[  156.045104][ T5146] XFS (loop0): Mounting V5 Filesystem
[  156.063775][ T3679] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  156.096676][ T4483] EXT4-fs (loop4): unmounting filesystem.
[  156.100557][ T5146] XFS (loop0): Ending clean mount
[  156.163962][  T152] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  156.185167][ T3052] usb 3-1: Using ep0 maxpacket: 16
[  156.259547][ T5146] syz.0.349 (5146) used greatest stack depth: 17784 bytes left
[  156.272384][ T3643] XFS (loop0): Unmounting Filesystem
[  156.315035][ T3679] usb 4-1: Using ep0 maxpacket: 32
[  156.413861][  T152] usb 2-1: Using ep0 maxpacket: 16
[  156.420480][ T5173] loop4: detected capacity change from 0 to 32768
[  156.453948][ T3679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  156.455789][ T5173] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.356 (5173)
[  156.473739][ T3679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  156.482755][ T3052] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25
[  156.499153][ T3052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.507364][ T3052] usb 3-1: Product: syz
[  156.507450][ T3679] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  156.511674][ T3052] usb 3-1: Manufacturer: syz
[  156.527559][ T3052] usb 3-1: SerialNumber: syz
[  156.534023][  T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.559115][ T3052] usb 3-1: config 0 descriptor??
[  156.561057][ T3679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.564281][  T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.581434][ T3679] usb 4-1: config 0 descriptor??
[  156.587416][  T152] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  156.597065][  T152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.618197][  T152] usb 2-1: config 0 descriptor??
[  156.663283][ T5157] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  156.765805][ T3679] hub 4-1:0.0: USB hub found
[  156.788463][ T5173] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  156.804663][ T5173] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  156.819006][ T5173] BTRFS info (device loop4): using free space tree
[  156.845302][   T37] usb 3-1: USB disconnect, device number 3
[  156.900863][ T5173] BTRFS info (device loop4): enabling ssd optimizations
[  156.934666][ T3679] hub 4-1:0.0: 2 ports detected
[  157.125091][ T4483] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  157.129212][  T152] lenovo 0003:17EF:6009.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0
[  157.366461][ T5206] loop4: detected capacity change from 0 to 512
[  157.437555][ T5206] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.358: inline data xattr refers to an external xattr inode
[  157.459383][  T152] usb 2-1: USB disconnect, device number 4
[  157.510058][ T5206] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.358: couldn't read orphan inode 12 (err -117)
[  157.626289][ T5206] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  157.788199][ T5214] tmpfs: Cannot retroactively limit size
[  158.689076][ T5212] No such timeout policy "syz1"
[  159.148203][ T5219] loop2: detected capacity change from 0 to 256
[  160.007060][ T4483] EXT4-fs (loop4): unmounting filesystem.
[  160.023665][    C1] raw-gadget.1 gadget.3: ignoring, device is not running
[  160.042644][    T7] usb 4-1: USB disconnect, device number 4
[  160.053743][ T3679] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  160.212721][ T5227] loop1: detected capacity change from 0 to 256
[  161.238983][ T5243] loop1: detected capacity change from 0 to 512
[  161.437636][ T5243] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.369: casefold flag without casefold feature
[  161.505409][ T5243] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.369: missing EA_INODE flag
[  161.537500][ T5243] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.369: error while reading EA inode 2 err=-117
[  161.581256][ T5243] EXT4-fs (loop1): 1 orphan inode deleted
[  161.653873][ T5243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  161.790590][ T5240] loop0: detected capacity change from 0 to 32768
[  161.837901][ T4542] EXT4-fs (loop1): unmounting filesystem.
[  161.856863][ T5240] XFS (loop0): Mounting V5 Filesystem
[  162.002465][ T5240] XFS (loop0): Ending clean mount
[  162.198199][ T5245] loop3: detected capacity change from 0 to 32768
[  162.305729][ T5265] tmpfs: Cannot retroactively limit size
[  162.435828][ T5245] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.370 (5245)
[  162.676977][ T5245] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  162.801323][ T5245] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  162.883484][ T3643] XFS (loop0): Unmounting Filesystem
[  162.928727][ T5245] BTRFS info (device loop3): using free space tree
[  163.073724][  T152] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  163.233723][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  163.288945][ T5245] BTRFS info (device loop3): enabling ssd optimizations
[  163.314194][  T152] usb 5-1: Using ep0 maxpacket: 16
[  163.490173][ T5295] loop1: detected capacity change from 0 to 256
[  164.053797][    T7] usb 3-1: Using ep0 maxpacket: 16
[  164.173991][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.199816][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.216153][    T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  164.233033][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.243148][ T4249] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  164.249291][ T5300] loop1: detected capacity change from 0 to 512
[  164.259997][  T152] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25
[  164.279393][    T7] usb 3-1: config 0 descriptor??
[  164.284863][  T152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.293045][  T152] usb 5-1: Product: syz
[  164.298038][  T152] usb 5-1: Manufacturer: syz
[  164.303198][  T152] usb 5-1: SerialNumber: syz
[  164.319177][  T152] usb 5-1: config 0 descriptor??
[  164.391713][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  164.401375][ T5300] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff)
[  164.515764][   T26] audit: type=1804 audit(1722478313.163:26): pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.379" name="/newroot/30/file0/file1" dev="loop1" ino=15 res=1 errno=0
[  164.592476][  T152] usb 5-1: USB disconnect, device number 4
[  164.632106][   T26] audit: type=1804 audit(1722478313.203:27): pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.379" name="/newroot/30/file0/file1" dev="loop1" ino=15 res=1 errno=0
[  164.665593][ T4542] EXT4-fs (loop1): unmounting filesystem.
[  165.414069][    T7] lenovo 0003:17EF:6009.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.2-1/input0
[  165.491589][    T7] usb 3-1: USB disconnect, device number 4
[  165.550610][ T5319] loop0: detected capacity change from 0 to 512
[  165.645070][ T5319] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.383: casefold flag without casefold feature
[  165.709378][ T5319] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.383: missing EA_INODE flag
[  165.764185][ T5319] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.383: error while reading EA inode 2 err=-117
[  165.785201][ T5319] EXT4-fs (loop0): 1 orphan inode deleted
[  165.800910][ T5319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  166.090785][ T3643] EXT4-fs (loop0): unmounting filesystem.
[  166.295894][ T5338] xt_connbytes: Forcing CT accounting to be enabled
[  166.302690][ T5338] No such timeout policy "syz0"
[  166.504903][ T5338] loop3: detected capacity change from 0 to 4096
[  167.020110][ T5327] loop1: detected capacity change from 0 to 32768
[  167.314022][ T5347] loop0: detected capacity change from 0 to 256
[  167.436596][ T5327] XFS (loop1): Mounting V5 Filesystem
[  167.909804][ T5327] XFS (loop1): Ending clean mount
[  168.991119][ T4542] XFS (loop1): Unmounting Filesystem
[  169.163733][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  169.403893][    T7] usb 4-1: Using ep0 maxpacket: 16
[  169.443774][   T37] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  169.482593][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.493241][ T5350] loop2: detected capacity change from 0 to 32768
[  169.500446][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.508717][ T5350] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.391 (5350)
[  169.509164][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.538865][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.546589][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.557352][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.565118][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.572587][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.580635][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.588382][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.596219][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.603960][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.614808][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.622289][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.630501][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.638405][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.646217][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.654204][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.661725][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.669999][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.678044][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.691203][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.699100][    T7] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25
[  169.713694][   T37] usb 1-1: Using ep0 maxpacket: 16
[  169.713698][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.713726][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.740162][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.748346][    T7] usb 4-1: Product: syz
[  169.752516][    T7] usb 4-1: Manufacturer: syz
[  169.762312][    T7] usb 4-1: SerialNumber: syz
[  169.767903][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.781775][    T7] usb 4-1: config 0 descriptor??
[  169.786975][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.799975][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.801078][ T5381] loop1: detected capacity change from 0 to 32768
[  169.807464][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.807489][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.807508][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.807528][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.847496][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.855263][ T3684] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  169.863907][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.864767][ T3684] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  169.888683][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.903938][ T5381] ialloc: diAlloc returned -5!
[  169.922573][ T5350] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  169.934537][   T37] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  169.953750][ T5350] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  169.970402][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.983150][ T5350] BTRFS info (device loop2): using free space tree
[  170.022663][   T37] usb 1-1: config 0 descriptor??
[  170.062203][ T3684] usb 4-1: USB disconnect, device number 5
[  170.284568][ T5350] BTRFS error (device loop2): open_ctree failed
[  170.623296][   T37] lenovo 0003:17EF:6009.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0
[  171.071836][ T5413] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  171.080839][ T5413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  171.154414][    T7] usb 1-1: USB disconnect, device number 14
[  171.545360][ T5423] input: syz1 as /devices/virtual/input/input12
[  172.449268][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.468236][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.486113][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.503779][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.523874][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.531309][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.539512][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.553215][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.564898][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.584619][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.599656][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.613849][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.629172][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.644494][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.659762][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.675111][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.690579][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.711449][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.732267][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.748745][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.764095][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.779458][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.793764][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.810080][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.825387][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.840657][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.846350][ T5437] loop1: detected capacity change from 0 to 32768
[  172.855976][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.861081][ T5437] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.416 (5437)
[  172.871221][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.893094][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.900799][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.909121][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.916797][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.929366][ T3684] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  172.940896][ T5437] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  172.940961][ T3684] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  172.956803][ T5437] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  172.975917][ T5437] BTRFS info (device loop1): using free space tree
[  173.096959][ T5438] loop3: detected capacity change from 0 to 32768
[  173.195858][ T5438] ialloc: diAlloc returned -5!
[  173.207965][ T5437] BTRFS info (device loop1): enabling ssd optimizations
[  173.383908][ T3684] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  173.410887][ T4542] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  173.656619][ T3684] usb 1-1: Using ep0 maxpacket: 16
[  173.946992][ T3684] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25
[  173.982873][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.002634][ T3684] usb 1-1: Product: syz
[  174.012726][ T3684] usb 1-1: Manufacturer: syz
[  174.574323][ T5486] loop3: detected capacity change from 0 to 256
[  175.223215][ T5488] input: syz1 as /devices/virtual/input/input13
[  175.236305][ T5490] ALSA: mixer_oss: invalid OSS volume 'Dгn*@\%╬В`.%х╜pАПl├Д/бс▓У╬'
[  175.268053][ T3684] usb 1-1: SerialNumber: syz
[  175.291779][ T3684] usb 1-1: config 0 descriptor??
[  175.530489][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.560459][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.602558][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.626323][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.643727][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.661487][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.673732][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.687443][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.702806][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.718193][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.734587][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.749805][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.766955][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.785244][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.800612][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.821532][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.837037][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.853462][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.868905][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.887262][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.902622][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.919204][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.934604][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.949893][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.962479][ T5511] netlink: 52 bytes leftover after parsing attributes in process `syz.4.436'.
[  175.966347][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  175.994438][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  176.010891][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  176.026292][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  176.041601][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  176.058040][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  176.075450][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  176.092720][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  176.108165][ T3626] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  176.122173][ T5503] loop3: detected capacity change from 0 to 32768
[  176.135445][ T3626] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  176.178190][ T3626] usb 1-1: USB disconnect, device number 15
[  176.211175][ T5503] ialloc: diAlloc returned -5!
[  176.235572][ T5515] netlink: 'syz.0.438': attribute type 12 has an invalid length.
[  176.426193][ T5519] input: syz1 as /devices/virtual/input/input14
[  176.498926][ T5508] loop1: detected capacity change from 0 to 32768
[  176.531857][ T5508] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.434 (5508)
[  176.598538][ T5508] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  176.644847][ T5508] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  176.655087][ T5508] BTRFS info (device loop1): using free space tree
[  176.897076][ T5508] BTRFS info (device loop1): enabling ssd optimizations
[  177.696286][ T4542] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  178.292987][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.316955][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.331543][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.349361][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.362125][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.381951][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.399688][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.413723][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.431433][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.450108][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.466631][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.481980][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.497304][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.513907][ T5565] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  178.514246][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.530401][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.539582][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.547386][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.552617][ T5577] loop1: detected capacity change from 0 to 1024
[  178.555491][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.570346][ T5579] input: syz1 as /devices/virtual/input/input15
[  178.579292][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.595670][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.605951][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.613002][ T5577] hfsplus: request for non-existent node 2048 in B*Tree
[  178.613531][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.621024][ T5577] hfsplus: request for non-existent node 2048 in B*Tree
[  178.628586][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.643899][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.646378][ T5577] hfsplus: request for non-existent node 2048 in B*Tree
[  178.651355][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.664330][ T5577] hfsplus: request for non-existent node 2048 in B*Tree
[  178.666545][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.680797][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.688632][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.696463][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.704196][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.711741][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.719534][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.727411][ T3680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  178.737674][ T3680] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  178.764001][ T5565] usb 5-1: Using ep0 maxpacket: 32
[  178.904023][ T5565] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  178.928946][ T5565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.975111][ T5565] usb 5-1: config 0 descriptor??
[  179.022338][ T5589] loop2: detected capacity change from 0 to 512
[  179.035670][ T5565] gspca_main: nw80x-2.14.0 probing 055f:d001
[  179.053191][ T5589] EXT4-fs: Ignoring removed mblk_io_submit option
[  179.074889][ T5589] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  179.333866][ T5594] tmpfs: Cannot retroactively limit size
[  179.975094][ T5597] loop1: detected capacity change from 0 to 256
[  180.342960][ T5589] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[  180.383468][ T5589] System zones: 1-12
[  180.439219][ T5589] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.458: corrupted in-inode xattr
[  180.499703][ T5565] gspca_nw80x: reg_w err -110
[  180.509552][ T5565] nw80x: probe of 5-1:0.0 failed with error -110
[  180.559420][ T5589] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.458: couldn't read orphan inode 15 (err -117)
[  180.715378][ T5589] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  180.863866][ T3647] Bluetooth: hci3: command 0x0406 tx timeout
[  181.170326][ T5608] loop1: detected capacity change from 0 to 8192
[  181.497817][ T5589] EXT4-fs warning (device loop2): dx_probe:832: inode #2: comm syz.2.458: Unrecognised inode hash code 4
[  181.584070][ T5589] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.458: Corrupt directory, running e2fsck is recommended
[  181.643388][ T3626] usb 5-1: USB disconnect, device number 5
[  181.703868][ T5617] EXT4-fs warning (device loop2): dx_probe:832: inode #2: comm syz.2.458: Unrecognised inode hash code 4
[  181.779670][ T5608]  loop1: p3 p4 < >
[  181.786202][ T5617] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.458: Corrupt directory, running e2fsck is recommended
[  181.812418][ T5621] loop3: detected capacity change from 0 to 1024
[  181.819173][ T5617] EXT4-fs warning (device loop2): dx_probe:832: inode #2: comm syz.2.458: Unrecognised inode hash code 4
[  181.831112][ T5608] loop1: p3 start 619312 is beyond EOD, truncated
[  181.844074][ T5617] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.458: Corrupt directory, running e2fsck is recommended
[  181.865527][ T5625] input: syz1 as /devices/virtual/input/input16
[  181.880754][ T5621] hfsplus: request for non-existent node 2048 in B*Tree
[  181.906379][   T26] audit: type=1800 audit(1722478330.563:28): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.458" name="bus" dev="loop2" ino=20 res=0 errno=0
[  181.906510][ T5621] hfsplus: request for non-existent node 2048 in B*Tree
[  182.011198][ T5628] hfsplus: request for non-existent node 2048 in B*Tree
[  182.038177][ T4353] EXT4-fs (loop2): unmounting filesystem.
[  182.054355][ T5628] hfsplus: request for non-existent node 2048 in B*Tree
[  182.421144][ T5636] loop0: detected capacity change from 0 to 4096
[  182.440252][ T5636] ntfs3: Unknown parameter '                0x0000000000000000'
[  182.502949][ T5632] overlayfs: upper fs does not support tmpfile.
[  182.516951][ T5644] netlink: 'syz.2.473': attribute type 12 has an invalid length.
[  182.574224][ T5609] loop1: detected capacity change from 0 to 32768
[  182.673962][ T3680] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  183.013976][ T3680] usb 4-1: Using ep0 maxpacket: 16
[  183.058990][ T5655] loop4: detected capacity change from 0 to 512
[  183.180102][ T5655] EXT4-fs: Ignoring removed mblk_io_submit option
[  183.191968][ T5655] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  183.201753][ T3680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.250714][ T3680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.300806][ T3680] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  183.311085][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.385186][ T3680] usb 4-1: config 0 descriptor??
[  183.404497][ T5655] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[  183.442621][ T5655] System zones: 1-12
[  183.557654][ T5655] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.478: corrupted in-inode xattr
[  183.680782][ T5655] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.478: couldn't read orphan inode 15 (err -117)
[  183.828791][ T5655] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  183.940104][ T5655] EXT4-fs warning (device loop4): dx_probe:832: inode #2: comm syz.4.478: Unrecognised inode hash code 4
[  183.985143][ T5655] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.478: Corrupt directory, running e2fsck is recommended
[  184.017523][ T5665] EXT4-fs warning (device loop4): dx_probe:832: inode #2: comm syz.4.478: Unrecognised inode hash code 4
[  184.032269][ T3680] lenovo 0003:17EF:6009.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0
[  184.047074][ T5665] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.478: Corrupt directory, running e2fsck is recommended
[  184.121580][ T5665] EXT4-fs warning (device loop4): dx_probe:832: inode #2: comm syz.4.478: Unrecognised inode hash code 4
[  184.193967][ T5665] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.478: Corrupt directory, running e2fsck is recommended
[  184.268738][ T4483] EXT4-fs (loop4): unmounting filesystem.
[  184.289435][   T26] audit: type=1800 audit(1722478332.863:29): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.478" name="bus" dev="loop4" ino=20 res=0 errno=0
[  184.315143][ T3680] usb 4-1: USB disconnect, device number 6
[  184.432055][ T5674] No such timeout policy "syz0"
[  184.480315][ T5674] loop1: detected capacity change from 0 to 4096
[  184.680101][ T5680] loop2: detected capacity change from 0 to 4096
[  184.694351][ T5680] ntfs3: Unknown parameter '                0x0000000000000000'
[  184.846629][ T5676] overlayfs: upper fs does not support tmpfile.
[  185.179696][ T5688] loop3: detected capacity change from 0 to 8192
[  185.246979][ T5688]  loop3: p3 p4 < >
[  185.267801][ T5688] loop3: p3 start 619312 is beyond EOD, truncated
[  185.627910][ T5698] netlink: 'syz.0.491': attribute type 12 has an invalid length.
[  186.639508][ T5696] loop1: detected capacity change from 0 to 32768
[  186.692080][ T5696] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.490 (5696)
[  186.933315][ T5696] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  186.953722][ T5696] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  186.963169][ T5696] BTRFS info (device loop1): using free space tree
[  187.057084][ T5693] loop3: detected capacity change from 0 to 32768
[  187.059198][ T5719] loop4: detected capacity change from 0 to 1024
[  187.187751][ T5719] hfsplus: request for non-existent node 2048 in B*Tree
[  187.201887][ T5696] BTRFS info (device loop1): enabling ssd optimizations
[  187.204739][ T5719] hfsplus: request for non-existent node 2048 in B*Tree
[  187.274933][ T5732] hfsplus: request for non-existent node 2048 in B*Tree
[  187.302437][ T5732] hfsplus: request for non-existent node 2048 in B*Tree
[  187.372872][ T4542] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  187.453717][ T5567] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  187.630981][ T5743] loop3: detected capacity change from 0 to 4096
[  187.663098][ T5743] ntfs3: Unknown parameter '                0x0000000000000000'
[  187.713756][ T5567] usb 1-1: Using ep0 maxpacket: 16
[  187.720345][ T5741] overlayfs: upper fs does not support tmpfile.
[  187.844035][ T5567] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.893714][ T5567] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.957334][ T5567] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  187.970332][ T5759] Process accounting resumed
[  188.013765][ T5759] kernel write not supported for file /154/clear_refs (pid: 5759 comm: syz.1.504)
[  188.014228][ T5567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.076248][ T5567] usb 1-1: config 0 descriptor??
[  188.089969][ T5764] netlink: 'syz.3.507': attribute type 12 has an invalid length.
[  189.103482][ T5567] lenovo 0003:17EF:6009.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0
[  189.189905][ T5567] usb 1-1: USB disconnect, device number 16
[  189.432040][ T5778] loop2: detected capacity change from 0 to 256
[  189.472669][ T5782] loop1: detected capacity change from 0 to 1024
[  189.489728][ T5778] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  189.554089][ T5782] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002]
[  189.582699][ T5782] System zones: 0-1, 3-12
[  189.677447][ T5782] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  189.771385][ T5790] loop3: detected capacity change from 0 to 4096
[  189.790201][ T5783] loop4: detected capacity change from 0 to 2048
[  189.790922][ T5782] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  189.821640][ T5790] ntfs3: Unknown parameter '                0x0000000000000000'
[  189.882059][ T5313] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  189.893724][ T3627] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  189.922391][ T4542] EXT4-fs (loop1): unmounting filesystem.
[  189.942091][ T5785] overlayfs: upper fs does not support tmpfile.
[  190.189847][ T5802] Process accounting resumed
[  190.201411][ T5802] kernel write not supported for file /329/clear_refs (pid: 5802 comm: syz.0.518)
[  190.349392][ T5806] loop1: detected capacity change from 0 to 128
[  191.041653][ T5812] loop1: detected capacity change from 0 to 128
[  191.416699][ T5821] loop2: detected capacity change from 0 to 256
[  191.969145][ T5823] loop3: detected capacity change from 0 to 128
[  192.273603][ T5829] loop2: detected capacity change from 0 to 1024
[  192.324105][ T5833] FAT-fs (loop3): error, corrupted directory (invalid i_start)
[  192.335765][ T5829] hfsplus: request for non-existent node 2048 in B*Tree
[  192.351536][ T5829] hfsplus: request for non-existent node 2048 in B*Tree
[  192.360916][ T5833] FAT-fs (loop3): Filesystem has been set read-only
[  192.370856][ T5829] hfsplus: request for non-existent node 2048 in B*Tree
[  192.386778][ T5829] hfsplus: request for non-existent node 2048 in B*Tree
[  192.453856][  T946] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  192.803769][  T946] usb 1-1: Using ep0 maxpacket: 16
[  192.903167][ T5852] loop4: detected capacity change from 0 to 128
[  192.974503][  T946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.207628][  T946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.465013][  T946] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  193.514378][  T946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.588941][  T946] usb 1-1: config 0 descriptor??
[  193.686492][ T5837] loop1: detected capacity change from 0 to 2048
[  193.954674][ T5870] loop3: detected capacity change from 0 to 128
[  193.963369][ T5837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  193.973934][ T5837] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff)
[  194.090364][ T5871] loop4: detected capacity change from 0 to 256
[  194.147696][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  194.159791][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  194.341217][  T946] lenovo 0003:17EF:6009.000F: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0
[  194.632657][  T946] usb 1-1: USB disconnect, device number 17
[  195.059786][ T4542] EXT4-fs (loop1): unmounting filesystem.
[  195.279594][ T5881] loop0: detected capacity change from 0 to 1024
[  195.360093][ T5885] loop1: detected capacity change from 0 to 128
[  195.397774][ T5881] hfsplus: request for non-existent node 2048 in B*Tree
[  195.416946][ T5881] hfsplus: request for non-existent node 2048 in B*Tree
[  195.491430][ T5886] hfsplus: request for non-existent node 2048 in B*Tree
[  195.534518][ T5886] hfsplus: request for non-existent node 2048 in B*Tree
[  195.641171][ T5891] FAT-fs (loop1): error, corrupted directory (invalid i_start)
[  195.676202][ T5891] FAT-fs (loop1): Filesystem has been set read-only
[  195.973447][ T5897] loop1: detected capacity change from 0 to 512
[  196.035342][ T5897] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #11: comm syz.1.548: corrupted in-inode xattr
[  196.115882][ T5897] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.548: couldn't read orphan inode 11 (err -117)
[  196.272435][ T5897] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  196.330420][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'.
[  196.353479][ T5906] loop0: detected capacity change from 0 to 128
[  196.486862][ T5908] loop3: detected capacity change from 0 to 256
[  197.256760][ T4542] EXT4-fs (loop1): unmounting filesystem.
[  197.428192][ T5922] loop1: detected capacity change from 0 to 2048
[  197.442139][ T5922] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  197.490952][ T5922] syz.1.556: attempt to access beyond end of device
[  197.490952][ T5922] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  197.511630][ T5926] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.523895][ T5204] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  197.581859][ T5927] loop0: detected capacity change from 0 to 512
[  197.611105][ T5929] loop2: detected capacity change from 0 to 128
[  197.633235][ T5927] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  197.709329][ T5927] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  197.725851][ T5914] loop4: detected capacity change from 0 to 2048
[  197.732268][ T5927] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  197.783920][ T5204] usb 4-1: Using ep0 maxpacket: 16
[  197.811614][ T5313] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  197.823130][ T5933] FAT-fs (loop2): error, corrupted directory (invalid i_start)
[  197.836582][ T5933] FAT-fs (loop2): Filesystem has been set read-only
[  198.013936][ T5204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.043081][ T5927] loop0: detected capacity change from 0 to 1764
[  198.053757][ T5204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.077612][ T5204] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  199.063526][ T5204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.074548][ T5204] usb 4-1: config 0 descriptor??
[  199.814202][ T5204] lenovo 0003:17EF:6009.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0
[  200.067838][ T5953] loop0: detected capacity change from 0 to 128
[  200.088370][ T5204] usb 4-1: USB disconnect, device number 7
[  200.155646][ T5952] loop4: detected capacity change from 0 to 256
[  200.157734][ T5955] loop1: detected capacity change from 0 to 512
[  200.223581][ T5955] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #11: comm syz.1.567: corrupted in-inode xattr
[  200.263470][ T5955] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.567: couldn't read orphan inode 11 (err -117)
[  200.314434][ T5955] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  200.381609][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'.
[  200.533447][ T4542] EXT4-fs (loop1): unmounting filesystem.
[  200.791565][ T5965] loop0: detected capacity change from 0 to 128
[  201.583524][   T26] audit: type=1326 audit(1722478350.223:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.0.573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25bb1773b9 code=0x0
[  204.400115][ T5996] loop0: detected capacity change from 0 to 512
[  204.414177][ T6001] loop4: detected capacity change from 0 to 128
[  204.524425][ T6004] loop2: detected capacity change from 0 to 2048
[  204.551008][ T6004] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  204.628717][ T6010] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.628963][ T6004] syz.2.581: attempt to access beyond end of device
[  204.628963][ T6004] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  204.640868][ T6009] FAT-fs (loop4): error, corrupted directory (invalid i_start)
[  204.664185][ T6009] FAT-fs (loop4): Filesystem has been set read-only
[  204.812282][ T5995] loop0: detected capacity change from 0 to 1764
[  204.838012][ T3684] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  205.049227][ T5313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  205.084029][ T3684] usb 4-1: Using ep0 maxpacket: 32
[  205.171234][ T6018] loop2: detected capacity change from 0 to 128
[  205.933813][ T3684] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.950376][ T3684] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.963100][   T26] audit: type=1326 audit(1722478354.613:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.2.587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cc35773b9 code=0x0
[  206.003711][ T3684] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  206.012795][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.079907][ T3684] hub 4-1:4.0: USB hub found
[  206.250546][ T6026] loop0: detected capacity change from 0 to 2048
[  206.283861][ T3684] hub 4-1:4.0: 2 ports detected
[  206.289124][ T3684] usb 4-1: selecting invalid altsetting 1
[  206.319829][ T3684] hub 4-1:4.0: Using single TT (err -22)
[  206.331644][ T6026] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  206.432428][   T26] audit: type=1804 audit(1722478355.073:32): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.589" name="/newroot/147/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  206.452195][ T6017] loop4: detected capacity change from 0 to 40427
[  206.493816][ T3684] hub 4-1:4.0: hub_hub_status failed (err = -71)
[  206.509237][ T6017] F2FS-fs (loop4): invalid crc value
[  206.510716][ T3684] hub 4-1:4.0: config failed, can't get hub status (err -71)
[  206.560688][ T3643] EXT4-fs (loop0): unmounting filesystem.
[  206.564559][ T3684] usb 4-1: USB disconnect, device number 8
[  206.601882][ T6017] F2FS-fs (loop4): Found nat_bits in checkpoint
[  206.672935][ T6017] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  206.689695][ T6017] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  207.631388][ T6044] loop0: detected capacity change from 0 to 2048
[  207.734024][ T6044] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  207.793552][ T6044] syz.0.594: attempt to access beyond end of device
[  207.793552][ T6044] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  207.808732][ T6050] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.945282][ T6052] syz.4.586: attempt to access beyond end of device
[  207.945282][ T6052] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  208.471626][   T26] audit: type=1804 audit(1722478357.113:33): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.586" name="/newroot/68/bus/file0" dev="loop4" ino=29 res=1 errno=0
[  208.492924][    C1] vkms_vblank_simulate: vblank timer overrun
[  208.816300][ T5565] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  209.966512][ T6068] loop0: detected capacity change from 0 to 128
[  211.518008][ T5313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  211.643953][ T5565] usb 2-1: device descriptor read/all, error -71
[  211.740841][    C1] 
[  211.743192][    C1] ================================
[  211.748274][    C1] WARNING: inconsistent lock state
[  211.753353][    C1] 6.1.102-syzkaller #0 Not tainted
[  211.758436][    C1] --------------------------------
[  211.763517][    C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage.
[  211.770338][    C1] syz.3.603/6078 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  211.776556][    C1] ffff8880b9935e90 (lock#10){?.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670
[  211.786903][    C1] {HARDIRQ-ON-W} state was registered at:
[  211.792592][    C1]   lock_acquire+0x1f8/0x5a0
[  211.797167][    C1]   __mmap_lock_do_trace_acquire_returned+0x9d/0x670
[  211.803819][    C1]   lock_mm_and_find_vma+0x219/0x2e0
[  211.809082][    C1]   exc_page_fault+0x169/0x620
[  211.813821][    C1]   asm_exc_page_fault+0x22/0x30
[  211.818740][    C1] irq event stamp: 24
[  211.822691][    C1] hardirqs last  enabled at (23): [<ffffffff81e22c34>] kasan_quarantine_put+0xd4/0x220
[  211.832301][    C1] hardirqs last disabled at (24): [<ffffffff8aa4ce2a>] sysvec_call_function_single+0xa/0xb0
[  211.842339][    C1] softirqs last  enabled at (0): [<ffffffff8151ccc1>] copy_process+0x9e1/0x4060
[  211.851341][    C1] softirqs last disabled at (0): [<0000000000000000>] 0x0
[  211.858435][    C1] 
[  211.858435][    C1] other info that might help us debug this:
[  211.866467][    C1]  Possible unsafe locking scenario:
[  211.866467][    C1] 
[  211.873891][    C1]        CPU0
[  211.877154][    C1]        ----
[  211.880409][    C1]   lock(lock#10);
[  211.884114][    C1]   <Interrupt>
[  211.887543][    C1]     lock(lock#10);
[  211.891420][    C1] 
[  211.891420][    C1]  *** DEADLOCK ***
[  211.891420][    C1] 
[  211.899537][    C1] 3 locks held by syz.3.603/6078:
[  211.904535][    C1]  #0: ffffffff8d91a5e8 (tomoyo_ss){....}-{0:0}, at: tomoyo_path_number_perm+0x1f2/0x7f0
[  211.914342][    C1]  #1: ffffffff8d32ad40 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x410
[  211.923715][    C1]  #2: ffff888023e77958 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x232/0x9c0
[  211.934478][    C1] 
[  211.934478][    C1] stack backtrace:
[  211.940347][    C1] CPU: 1 PID: 6078 Comm: syz.3.603 Not tainted 6.1.102-syzkaller #0
[  211.948301][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  211.958332][    C1] Call Trace:
[  211.961594][    C1]  <IRQ>
[  211.964420][    C1]  dump_stack_lvl+0x1e3/0x2cb
[  211.969105][    C1]  ? nf_tcp_handle_invalid+0x642/0x642
[  211.974568][    C1]  ? print_usage_bug+0x5fe/0x880
[  211.979504][    C1]  valid_state+0x136/0x1c0
[  211.983924][    C1]  mark_lock_irq+0xa8/0xba0
[  211.988431][    C1]  ? stack_trace_save+0x113/0x1c0
[  211.993449][    C1]  ? save_trace+0xab0/0xab0
[  211.997942][    C1]  ? stack_trace_snprint+0xe0/0xe0
[  212.003045][    C1]  ? lockdep_lock+0x11f/0x2a0
[  212.007727][    C1]  ? save_trace+0x5a/0xab0
[  212.012142][    C1]  ? virtnet_poll_tx+0x210/0x550
[  212.017077][    C1]  mark_lock+0x21c/0x340
[  212.021317][    C1]  __lock_acquire+0xb40/0x1f80
[  212.026074][    C1]  lock_acquire+0x1f8/0x5a0
[  212.030564][    C1]  ? __mmap_lock_do_trace_acquire_returned+0x84/0x670
[  212.037314][    C1]  ? read_lock_is_recursive+0x10/0x10
[  212.042670][    C1]  ? __kmem_cache_free+0x25c/0x3c0
[  212.047769][    C1]  ? down_read_trylock+0x24a/0x3b0
[  212.052862][    C1]  ? stack_map_get_build_id_offset+0x232/0x9c0
[  212.059000][    C1]  ? __mmap_lock_do_trace_acquire_returned+0x84/0x670
[  212.065740][    C1]  __mmap_lock_do_trace_acquire_returned+0x9d/0x670
[  212.072310][    C1]  ? __mmap_lock_do_trace_acquire_returned+0x84/0x670
[  212.079052][    C1]  stack_map_get_build_id_offset+0x99e/0x9c0
[  212.085014][    C1]  ? __lock_acquire+0x125b/0x1f80
[  212.090023][    C1]  ? __bpf_get_stackid+0x910/0x910
[  212.095132][    C1]  __bpf_get_stack+0x495/0x570
[  212.099995][    C1]  ? stack_map_get_build_id_offset+0x9c0/0x9c0
[  212.106142][    C1]  ? __cant_sleep+0x270/0x270
[  212.110804][    C1]  bpf_get_stack_raw_tp+0x1b2/0x220
[  212.115990][    C1]  bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e
[  212.121439][    C1]  bpf_trace_run2+0x1fd/0x410
[  212.126107][    C1]  ? bpf_trace_run2+0x110/0x410
[  212.130944][    C1]  ? bpf_trace_run1+0x3d0/0x3d0
[  212.135782][    C1]  ? irqtime_account_irq+0x18a/0x1e0
[  212.141047][    C1]  ? flush_tlb_one_user+0x50/0x50
[  212.146057][    C1]  ? handle_softirqs+0x87f/0xa40
[  212.150995][    C1]  trace_tlb_flush+0x151/0x1a0
[  212.155757][    C1]  flush_tlb_func+0x4e3/0x620
[  212.160434][    C1]  ? __irq_exit_rcu+0x157/0x240
[  212.165281][    C1]  ? native_flush_tlb_multi+0xd0/0xd0
[  212.170637][    C1]  ? sched_clock_cpu+0x71/0x2b0
[  212.175476][    C1]  ? irqtime_account_irq+0xd0/0x1e0
[  212.180657][    C1]  ? __sched_clock_gtod_offset+0xe0/0xe0
[  212.186273][    C1]  __flush_smp_call_function_queue+0x2d9/0xd00
[  212.192429][    C1]  ? native_flush_tlb_multi+0xd0/0xd0
[  212.197791][    C1]  __sysvec_call_function_single+0xbb/0x360
[  212.203670][    C1]  sysvec_call_function_single+0x89/0xb0
[  212.209286][    C1]  </IRQ>
[  212.212198][    C1]  <TASK>
[  212.215112][    C1]  asm_sysvec_call_function_single+0x16/0x20
[  212.221343][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x58/0x60
[  212.227484][    C1] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <c3> 0f 1f 80 00 00 00 00 4c 8b 04 24 65 48 8b 15 44 d3 77 7e 65 8b
[  212.247090][    C1] RSP: 0018:ffffc9001655fb98 EFLAGS: 00000293
[  212.253143][    C1] RAX: ffffffff83f30ed5 RBX: 0000000000000005 RCX: ffff88807dc4bb80
[  212.261100][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  212.269051][    C1] RBP: ffff888023042701 R08: ffffffff83f30ec0 R09: ffffed10046d49d7
[  212.277011][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000006
[  212.285050][    C1] R13: dffffc0000000000 R14: ffff8880236a4eb0 R15: ffff8880236a4e90
[  212.293011][    C1]  ? tomoyo_check_acl+0x2e0/0x3e0
[  212.298035][    C1]  ? tomoyo_check_acl+0x2f5/0x3e0
[  212.303049][    C1]  tomoyo_check_acl+0x2f5/0x3e0
[  212.307885][    C1]  ? tomoyo_path_number_perm+0x7f0/0x7f0
[  212.313498][    C1]  tomoyo_path_number_perm+0x430/0x7f0
[  212.318934][    C1]  ? tomoyo_path_number_perm+0x1f2/0x7f0
[  212.324545][    C1]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  212.329988][    C1]  ? __fget_files+0x28/0x4a0
[  212.334565][    C1]  ? __fget_files+0x28/0x4a0
[  212.339131][    C1]  ? __fget_files+0x435/0x4a0
[  212.343784][    C1]  ? __fget_files+0x28/0x4a0
[  212.348355][    C1]  security_file_ioctl+0x6d/0xa0
[  212.353273][    C1]  __se_sys_ioctl+0x47/0x160
[  212.357847][    C1]  do_syscall_64+0x3b/0xb0
[  212.362246][    C1]  ? clear_bhb_loop+0x45/0xa0
[  212.366904][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  212.372776][    C1] RIP: 0033:0x7fa313376fbb
[  212.377173][    C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  212.396757][    C1] RSP: 002b:00007fa314204070 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  212.405151][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa313376fbb
[  212.413102][    C1] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000d8
[  212.421052][    C1] RBP: 00007fa313505f80 R08: 0000000000000000 R09: 00007ffdccc30db7
[  212.429008][    C1] R10: 0000000000000008 R11: 0000000000000246 R12: ffffffffffffffa8
[  212.436959][    C1] R13: 000000000000000b R14: 00007ffdccc30cd0 R15: 00007ffdccc30db8
[  212.444914][    C1]  </TASK>
[  212.447980][    C1] vkms_vblank_simulate: vblank timer overrun
[  212.485518][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'.
[  212.703689][ T3647] Bluetooth: hci4: command 0x0406 tx timeout