last executing test programs:

37.149450667s ago: executing program 2 (id=80):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x805, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x7)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000000140)=""/129, 0x81, 0x40000002, 0x0, 0x0)
shutdown(r2, 0x0)

36.369117999s ago: executing program 2 (id=82):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

36.045625439s ago: executing program 2 (id=86):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r5}, 0x4)

34.867600941s ago: executing program 2 (id=90):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000c80)={[{@errors_remount}, {@mblk_io_submit}, {@barrier}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100))
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
syz_open_dev$loop(0x0, 0xf, 0x183043)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x200, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}})

34.474367723s ago: executing program 2 (id=92):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x406, r0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000440)={0x7, "8bd4788e1499c2512cb784958ba0b8367938d4d0e3e60b504aa2c6b8fd60f7ac297e60b0a459e38f977d8927ce5d11a101784c6d87dbe2287a6f921189a98f383cb1c92e9727497ea29705043de8b06e4f59f9f271e2c5875e1c67812937b7e3de18a03cb8e0d54033358615a798cdbee7b7e73eae973d485fc726d42bf002f68e0591114b7016c8ca938f2ee24f041fa59a6acaef26008ad52243654385197f6dbd067bdf1f1cc5f6b919a755f7fd336a8b9ccb9a4b976fe4ab2edd30614442982ab9c1fe42794f0413eb7077c634d5bcefb700aee890dede98680b78aff02c5164417bcd1a0debf6ad2cbaf742de81507a723f432542cfaf47a4e92810bb19"})

32.277119033s ago: executing program 2 (id=103):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000800}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

31.879382481s ago: executing program 32 (id=103):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000800}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.071722421s ago: executing program 3 (id=277):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
read(r0, &(0x7f0000000000)=""/31, 0x1f)

9.195476303s ago: executing program 3 (id=283):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33)
keyctl$clear(0x7, r4)
syz_genetlink_get_family_id$ethtool(0x0, r0)

6.018026606s ago: executing program 3 (id=301):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket(0xf, 0x3, 0x2)
write(r3, &(0x7f0000000380)="02", 0x33fe0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)

5.66445503s ago: executing program 0 (id=306):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x231, &(0x7f0000000240)="$eJzsmb9rFEEUx78zu7e5i6JYaGFzTcAIZm93TyWNaOwDQiJqeZg1RDc5uRySBCyCjY1/gP+IRSoLsbGzsLJQQbAwpaCIjsyv3bkfq3fedXkfyOQ77+a9e2/m9i3sgiCII8unj98+PLu+uHoBwHHMYcbYv3h2hQ/urH//3KsY+WrrxOOD/ngMgBDF3C/5XrskAPBy6SQAHVYI1xuYMzFXwZWW3ATHeaNvgSG0ub7+lXunYLhjzPcd3a7hhxJZyu62s7V7G1kaySGWQyKHZpGdzv9wn2ENQNXk59a0vbv3oJUBHS2y1IqKiVFYRhQc/ZaSLSzyW+K4YvdVCCHP6/bTJ/tyHhp75OxfDI7Y6CYYVoxexAzCMKybaRo79Z/1i/iePjZ4ef2j1lYdZ/Hk4tTCpHGujlegvXp6P/otsvS7mHqBQc9PcPKA8jL7X3eZh7HItEb04vXcK/8oGLBMXTAjrgFQglkh15w5PHgz6PW5x/Juuewr2Ci125NTlmMY3ITpCtW4hh3u29ksWx7qddqIWt5ohkW2dZT+JHT/YD5wzulPvnNXaHQ3Hza2d/cWNjZb6+l6upUkzcvRxSi6lDRUb9bjX/pfVfWnWSd+pWRtwALstLrdTrwDdDtxPk/06HTclRftr8qHq/7HMf9TaMw9K79R9sHMH1f/5dnOe6XJEwRBEARBEARBEARBEARB/BP9hk4/kqyDwTyrVC/jKuapaC9+cgOPasCfAAAA///ei1Cr")
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000e37cd04de60c2d0933a862000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001180)=@mangle={'mangle\x00', 0x64, 0x6, 0x530, 0x0, 0xd0, 0x0, 0x378, 0x460, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0xffffff00], [0xff], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0x0, 0xffffffff, 0xffffff00], 0x4e22, 0x4e24, 0x4e20, 0x4e22, 0x3a8, 0xe2d7, 0xffffff53, 0x3, 0x5}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
sendmsg$nl_route(r1, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x2000000)

5.517117044s ago: executing program 4 (id=309):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
getsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, &(0x7f0000000000))
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)={0x10, 0x21, 0x100, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20, 0x2}, 0x40)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=alwa'])
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d, 0x0, 0x1, 0x4}, {0x2}, {0x6}]})

4.583342554s ago: executing program 3 (id=312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33)
keyctl$clear(0x7, r5)
syz_genetlink_get_family_id$ethtool(0x0, r1)

4.089662799s ago: executing program 1 (id=314):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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")
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xbd40}}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@bh}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x71fc, 0x0, 0x4, 0x18e}, 0x0, 0x0)

3.732737903s ago: executing program 0 (id=316):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x7fd, 0x0, 0x2, 0x5, 0x3, 0x2}, 0x20)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

3.610733094s ago: executing program 5 (id=317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250b000000200001801400020076657468305f746f5f7465616d000000080003"], 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x4008004)

3.529218911s ago: executing program 5 (id=318):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
readv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x18}], 0x1)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

3.528921884s ago: executing program 5 (id=319):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4)
bind$inet6(r0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000280)={[{@map_acorn}, {@block={'block', 0x3d, 0x400}, 0x0}, {@check_relaxed}, {@overriderock}, {@map_normal}, {@showassoc, 0x41}, {@session={'session', 0x3d, 0x42}}, {@uid}, {@cruft}, {@block={'block', 0x3d, 0x400}}, {@map_off}, {@mode={'mode', 0x3d, 0x4}}, {@map_off}]}, 0x2, 0x6d2, &(0x7f0000000f40)="$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")

3.032801961s ago: executing program 1 (id=320):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000002900)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x1, 0x6dc, &(0x7f00000002c0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.93095764s ago: executing program 1 (id=321):
r0 = syz_open_dev$I2C(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f00000001c0)='gadgetfs\x00', 0x1)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0)
mremap(&(0x7f0000aff000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004e6000/0x4000)=nil)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @sack_perm, @window={0x3, 0x8, 0xfff8}, @timestamp], 0x6)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000000006110180005000000d405000010000000950000000000000074800566d5a2f7f313fa196341ed4fe42174299601c02f52723e3df194274fe1bf618f5372fdf847304777a341808c3a178673b31e6d"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x703, 0x0)

2.525049251s ago: executing program 5 (id=322):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000039000000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

2.522085126s ago: executing program 4 (id=332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042cbd7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000600ab000802000005007400010000000c0081000500010006000000200013008b6c128cb66c0c026c24861b84cc25c80618b0021885008403e0008c050019000100000008001400", @ANYRES32=r2], 0x74}, 0x1, 0x0, 0x0, 0x40880}, 0x8008)

2.477116294s ago: executing program 5 (id=323):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f00000024c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@time_offset={'time_offset', 0x3d, 0x584}}, {@shortname_mixed}, {@utf8no}, {@utf8no}, {@utf8}]}, 0x0, 0x2aa, &(0x7f0000000580)="$eJzs3c9rE0EUwPHXpD/SlDY5FEFBfOhFL0sb/4IgLYgBpTaiHoSp3WjImi3ZGImI6c2rf0fx6ElB/Qd68eZdvBRB8NKDGOlm16Zt0KY2bnS/Hyg7nZm3O9PZhrcLu9m6+fxBpeRZJVOXREolIbIu2yLZnVJgJNgm/PK4dFuXC1NfP5y+fuv2lXyhsLCkuphfvphT1Zkzbx49eXH2XX3qxsuZ1xOymb2z9SX3cfPE5smt78vh3l0RoyuuWzcrjq2rZa9iqV5zbOPZWq56dq2uXe0lx11ba6qprk6n12q256mpNrViN7Xuar3WVHPPlKtqWZZOpyVukn1HFDeWlkx+IINBFCZ7VdZqeZPs2Vjc+BuDAgAAwyWq/P9+2dOyp1V3T35/MP9PSB/5v0is8//+9ZX/Twx4MBiQnfw/Hfz/7kX+DwAAAAAAAAAAAAAAAAAAAADAv2C73c602+1MuA1/JkQkJSLh71GPE4PB+sdb14N7KRHnWaPYKHa2nfZ8ScriiC1zYyLf/PMh0CkvXi4szKkvK2+dVhDfahST/gNjfnwo2zt+vhOv3fEtGZN09/FzkpHZ3vG5HvGN4ricP9cOn1mzxZKMvL8rrjiy6p/Xu/FP51UvXS3si5/0+wEAAAAA8D+w9KcD1+9+u6Xha0P2tXcqd+8PSOY39wf2XV+PyqnR6OYNAAAAAECceM3HFeM4di0GhfD7D45lh9H/6VIV47SCKf2y86iIBDWvhmUtDlNI7EzsiOHJP1vlzyKyp2Y28uU+jsKnh8HpcojOUX0iAQAAABiUMOkfiXogAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADE2GFfHhb2P8q7x7oOl4xmlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBw+BEAAP//OysUmw==")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4001, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

2.45694968s ago: executing program 4 (id=324):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r0 = getpid()
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg$inet(r4, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="823bf1a2", 0x4}], 0x1}}], 0x1, 0x40800)

2.059616869s ago: executing program 1 (id=325):
socket(0x10, 0x803, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xb00, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x18, 0xa01, 0x0, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0)

1.944938561s ago: executing program 1 (id=326):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x231, &(0x7f0000000240)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000e37cd04de60c2d0933a862000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001180)=@mangle={'mangle\x00', 0x64, 0x6, 0x530, 0x0, 0xd0, 0x0, 0x378, 0x460, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0xffffff00], [0xff], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0x0, 0xffffffff, 0xffffff00], 0x4e22, 0x4e24, 0x4e20, 0x4e22, 0x3a8, 0xe2d7, 0xffffff53, 0x3, 0x5}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
sendmsg$nl_route(r1, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42)
syz_create_resource$binfmt(0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x2000000)

1.92914715s ago: executing program 0 (id=327):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101)
sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10)
shutdown(r1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0x8, 0x4)

1.899608236s ago: executing program 0 (id=328):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioprio_set$pid(0x1, 0x0, 0x0)

1.841154182s ago: executing program 0 (id=329):
syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00')
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
epoll_create1(0x80000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

1.11606549s ago: executing program 4 (id=330):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000002c0)={0x8, 0x0, 0x27f})

1.114060504s ago: executing program 3 (id=331):
openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7)

1.063207171s ago: executing program 5 (id=333):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

1.06228721s ago: executing program 0 (id=334):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
getsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, &(0x7f0000000000))
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)={0x10, 0x21, 0x100, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20, 0x2}, 0x40)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=alwa'])
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d, 0x0, 0x1, 0x4}, {0x2}, {0x6}]})

937.307513ms ago: executing program 4 (id=335):
bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

623.580081ms ago: executing program 1 (id=336):
r0 = syz_open_dev$I2C(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f00000001c0)='gadgetfs\x00', 0x1)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0)
mremap(&(0x7f0000aff000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004e6000/0x4000)=nil)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @sack_perm, @window={0x3, 0x8, 0xfff8}, @window={0x3, 0xfffe, 0x8}], 0x6)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000000006110180005000000d405000010000000950000000000000074800566d5a2f7f313fa196341ed4fe42174299601c02f52723e3df194274fe1bf618f5372fdf847304777a341808c3a178673b31e6d"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x703, 0x0)

610.233427ms ago: executing program 4 (id=337):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7ffc0001}]})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001c00)={0x43180080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
fsmount(0xffffffffffffffff, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78)
syz_read_part_table(0x5bc, &(0x7f0000000000)="$eJzs0r9L42ccB/AnKTZDe40cBzdch8KFm3J3kBvuKMlQ5NsQaI1IKw7OgoMOgoODRKKzP/4BxV8gLuLcjGIEUYiTZBTnguKS6VtqvtLSLhW01fJ6LZ/keT4Pn+fh/Q08aenwaxzHqRBCnPnHhz6//fHzTqXcXx2MfoxCSIWREEL09Zc3O6mkI/6lW/eS/9VkSiVTaK0d9V3t9B6/Pm3mNtLJfiMdwmwIYfx8M/vHwB+++MsNvu3c+aX8H+2WDrJz85PlhenS2Fl55uLD6Nvo1WI0sfxxvVgbelkcTj6sRvpvR1MPMT/X+rR1ElcvV56962m2OoXDpC9/L9N4bP6cf0955mL1Rb1d7/S/2Z56n3/e3q8tJblfyx8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhgu6WD7Nz8ZHlhujR2Vp65+DD6Nnq1GE0sf1wv1oZeFofT3b5GUj974Pm51qetk7h6ufLsXU+z1SkcJn351D0P5lG4zT8Tuvmvvqi3653+N9tT7/PP2/u1pST365v61X98WwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKYi+r3wz8N3gTyGkwkgIoS/du/n7epzp7qeSvr2kVpP1SqbQWjvqu9rpPX592sxtDCTrjXQIsyGE8fPN7L/+GO7stwAAAP//yByH+Q==")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setresuid(0x0, 0xee00, 0xee00)
syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

0s ago: executing program 3 (id=338):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newlink={0xac, 0x10, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x6200, 0x439b8}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}, @IFLA_VTI_LOCAL={0x14, 0x4, @remote}, @IFLA_VTI_REMOTE={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_VTI_REMOTE={0x14, 0x5, @local}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0xfffffff2}], @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_OKEY={0x8, 0x3, 0x4}, @IFLA_VTI_OKEY={0x8, 0x3, 0x800}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}]]}}}]}, 0xac}, 0x1, 0x0, 0x0, 0xc094}, 0x8090)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0xc9})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}, 0x2})
readv(r3, &(0x7f0000001540)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts.
[   29.949760][ T6565] cgroup: Unknown subsys name 'net'
[   30.070850][ T6565] cgroup: Unknown subsys name 'cpuset'
[   30.072841][ T6565] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   30.262625][ T6565] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   32.350592][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   32.350870][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   32.351383][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   32.355131][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   32.357200][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   32.363989][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   32.364555][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   32.364902][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   32.365151][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   32.365990][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   32.366210][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   32.366749][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   32.369455][ T6579] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   32.369653][ T6579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   32.376235][ T6170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   32.376920][ T6170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   32.377249][ T6170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   32.377445][ T6170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   32.377936][ T6170] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   32.380690][ T6170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   32.405182][ T6170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   32.406884][ T6170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   32.408558][ T6170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   32.412165][ T6170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   32.419774][ T6170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   32.549266][ T6578] chnl_net:caif_netlink_parms(): no params data found
[   32.606085][ T6577] chnl_net:caif_netlink_parms(): no params data found
[   32.625950][ T6581] chnl_net:caif_netlink_parms(): no params data found
[   32.649790][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.650072][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.650146][ T6578] bridge_slave_0: entered allmulticast mode
[   32.650604][ T6578] bridge_slave_0: entered promiscuous mode
[   32.653401][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.653419][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.653467][ T6578] bridge_slave_1: entered allmulticast mode
[   32.653882][ T6578] bridge_slave_1: entered promiscuous mode
[   32.654517][ T6585] chnl_net:caif_netlink_parms(): no params data found
[   32.700832][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.701777][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.717169][ T6587] chnl_net:caif_netlink_parms(): no params data found
[   32.728611][ T6578] team0: Port device team_slave_0 added
[   32.738019][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.738698][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.738788][ T6577] bridge_slave_0: entered allmulticast mode
[   32.739210][ T6577] bridge_slave_0: entered promiscuous mode
[   32.753840][ T6578] team0: Port device team_slave_1 added
[   32.754880][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.756284][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.757648][ T6581] bridge_slave_0: entered allmulticast mode
[   32.758988][ T6581] bridge_slave_0: entered promiscuous mode
[   32.759834][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.759879][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.759925][ T6577] bridge_slave_1: entered allmulticast mode
[   32.760320][ T6577] bridge_slave_1: entered promiscuous mode
[   32.761019][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.761037][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.761103][ T6581] bridge_slave_1: entered allmulticast mode
[   32.761487][ T6581] bridge_slave_1: entered promiscuous mode
[   32.784662][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.785939][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.788399][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.798060][ T6581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.803518][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.803540][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.803554][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.804656][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.815487][ T6581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.820366][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.820438][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.820512][ T6585] bridge_slave_0: entered allmulticast mode
[   32.820966][ T6585] bridge_slave_0: entered promiscuous mode
[   32.823175][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.832449][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.832505][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.832565][ T6585] bridge_slave_1: entered allmulticast mode
[   32.832987][ T6585] bridge_slave_1: entered promiscuous mode
[   32.836308][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.836375][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.836422][ T6587] bridge_slave_0: entered allmulticast mode
[   32.836833][ T6587] bridge_slave_0: entered promiscuous mode
[   32.839799][ T6578] hsr_slave_0: entered promiscuous mode
[   32.840113][ T6578] hsr_slave_1: entered promiscuous mode
[   32.840781][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.840802][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.840874][ T6587] bridge_slave_1: entered allmulticast mode
[   32.841266][ T6587] bridge_slave_1: entered promiscuous mode
[   32.855462][ T6587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.860682][ T6581] team0: Port device team_slave_0 added
[   32.862422][ T6577] team0: Port device team_slave_0 added
[   32.864172][ T6587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.866164][ T6585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.867389][ T6581] team0: Port device team_slave_1 added
[   32.874511][ T6577] team0: Port device team_slave_1 added
[   32.876484][ T6585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.884846][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.884868][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.884882][ T6581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.885392][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.885398][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.885410][ T6581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.897412][ T6581] hsr_slave_0: entered promiscuous mode
[   32.897703][ T6581] hsr_slave_1: entered promiscuous mode
[   32.897903][ T6581] debugfs: 'hsr0' already exists in 'hsr'
[   32.897945][ T6581] Cannot create hsr debugfs directory
[   32.901819][ T6587] team0: Port device team_slave_0 added
[   32.902513][ T6587] team0: Port device team_slave_1 added
[   32.924565][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.924591][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.924604][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.925518][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.925527][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.925545][ T6587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.929137][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.929144][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.929159][ T6587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.933020][ T6585] team0: Port device team_slave_0 added
[   32.935930][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.935941][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.935951][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.943535][ T6585] team0: Port device team_slave_1 added
[   32.974393][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.975541][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.978675][ T6585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.981183][ T6587] hsr_slave_0: entered promiscuous mode
[   32.981503][ T6587] hsr_slave_1: entered promiscuous mode
[   32.981749][ T6587] debugfs: 'hsr0' already exists in 'hsr'
[   32.981760][ T6587] Cannot create hsr debugfs directory
[   32.990396][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.990418][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.990432][ T6585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.010904][ T6577] hsr_slave_0: entered promiscuous mode
[   33.011263][ T6577] hsr_slave_1: entered promiscuous mode
[   33.011483][ T6577] debugfs: 'hsr0' already exists in 'hsr'
[   33.011493][ T6577] Cannot create hsr debugfs directory
[   33.042127][ T6585] hsr_slave_0: entered promiscuous mode
[   33.042496][ T6585] hsr_slave_1: entered promiscuous mode
[   33.042704][ T6585] debugfs: 'hsr0' already exists in 'hsr'
[   33.042713][ T6585] Cannot create hsr debugfs directory
[   33.102447][ T6578] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   33.114419][ T6578] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   33.125607][ T6578] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   33.133413][ T6578] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   33.159120][ T6581] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   33.161472][ T6581] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   33.166142][ T6581] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   33.172084][ T6581] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   33.185043][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.185092][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.185262][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.185285][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.196226][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.196267][ T6581] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.196346][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.196373][ T6581] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.201811][ T6587] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   33.205102][ T6587] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   33.208286][ T6587] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   33.217697][ T6587] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   33.246639][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.251371][ T6577] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   33.253901][ T6577] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   33.260771][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.260807][ T6587] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.260872][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.260911][ T6587] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.263216][ T6577] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   33.265262][ T6577] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   33.278124][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.279705][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.282444][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.283959][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.286142][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.287846][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.301277][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.306306][ T6578] 8021q: adding VLAN 0 to HW filter on device team0
[   33.317894][ T6581] 8021q: adding VLAN 0 to HW filter on device team0
[   33.329359][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.329406][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.329870][ T6585] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   33.334753][ T6585] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   33.341801][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.341844][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.342359][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.342414][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.342720][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.342737][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.344059][ T6585] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   33.352514][ T6585] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   33.430253][ T6587] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.453537][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.461322][ T6585] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.475905][ T6585] 8021q: adding VLAN 0 to HW filter on device team0
[   33.479519][ T6587] 8021q: adding VLAN 0 to HW filter on device team0
[   33.482177][ T6577] 8021q: adding VLAN 0 to HW filter on device team0
[   33.485978][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.486021][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.490880][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.490921][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.493554][ T2181] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.493600][ T2181] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.504199][ T2181] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.504248][ T2181] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.504903][ T2181] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.504917][ T2181] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.505353][ T2181] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.505366][ T2181] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.539934][ T6587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   33.539970][ T6587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.544741][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.560063][ T6581] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.615376][ T6578] veth0_vlan: entered promiscuous mode
[   33.616955][ T6578] veth1_vlan: entered promiscuous mode
[   33.623620][ T6581] veth0_vlan: entered promiscuous mode
[   33.625738][ T6581] veth1_vlan: entered promiscuous mode
[   33.660463][ T6581] veth0_macvtap: entered promiscuous mode
[   33.662707][ T6578] veth0_macvtap: entered promiscuous mode
[   33.665358][ T6578] veth1_macvtap: entered promiscuous mode
[   33.669859][ T6587] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.674439][ T6581] veth1_macvtap: entered promiscuous mode
[   33.686944][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.693368][ T6585] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.696291][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.698255][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.702039][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.703027][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.713355][ T6587] veth0_vlan: entered promiscuous mode
[   33.716165][ T6587] veth1_vlan: entered promiscuous mode
[   33.720499][ T3889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.720543][ T3889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.720562][ T3889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.720574][ T3889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.734980][ T5162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.735214][ T5162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.735230][ T5162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.735243][ T5162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.786842][ T6587] veth0_macvtap: entered promiscuous mode
[   33.792907][ T6587] veth1_macvtap: entered promiscuous mode
[   33.813700][ T6577] veth0_vlan: entered promiscuous mode
[   33.816879][ T6577] veth1_vlan: entered promiscuous mode
[   33.819728][  T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.819915][  T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.822916][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.823881][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.832862][  T201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.836009][  T201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.842483][  T201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.844415][  T201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.870231][ T2181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.870260][ T2181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.877984][ T6585] veth0_vlan: entered promiscuous mode
[   33.882692][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.882728][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.887939][ T6585] veth1_vlan: entered promiscuous mode
[   33.892389][ T6577] veth0_macvtap: entered promiscuous mode
[   33.903537][ T6577] veth1_macvtap: entered promiscuous mode
[   33.906452][  T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.906486][  T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.943902][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.951843][ T6581] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.952695][ T6585] veth0_macvtap: entered promiscuous mode
[   33.957698][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.961122][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.961156][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.965958][ T6585] veth1_macvtap: entered promiscuous mode
[   33.977481][ T2181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.977540][ T2181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.977575][ T2181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.977594][ T2181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.004744][ T6691] loop0: detected capacity change from 0 to 512
[   34.006515][ T6691] EXT4-fs: Ignoring removed orlov option
[   34.009952][ T6691] EXT4-fs (loop0): Test dummy encryption mode enabled
[   34.011206][ T6691] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   34.013389][ T6691] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   34.024558][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.027934][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.074341][ T3889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.074372][ T3889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.079035][ T6691] EXT4-fs (loop0): 1 truncate cleaned up
[   34.080618][ T6691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.091969][ T2181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.092014][ T2181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.092030][ T2181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.092045][ T2181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.126785][  T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.126813][  T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.189528][ T2181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.190980][ T2181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.316536][ T6700] tmpfs: Bad value for 'huge'
[   34.329875][   T31] audit: type=1326 audit(34.300:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6690 comm="syz.0.1" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x0
[   34.455379][ T6701] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   34.494938][ T6170] Bluetooth: hci0: command tx timeout
[   34.496290][ T6170] Bluetooth: hci3: command tx timeout
[   34.496482][ T6170] Bluetooth: hci2: command tx timeout
[   34.496662][ T6170] Bluetooth: hci1: command tx timeout
[   34.499679][ T6170] Bluetooth: hci4: command tx timeout
[   35.078704][  T836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.080132][  T836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.200505][ T6581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.457835][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.459630][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.524461][ T6710] binder: 6708:6710 ioctl 4018620d 0 returned -22
[   35.529551][   T31] audit: type=1326 audit(35.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80f78fa8 code=0x7ffc0000
[   35.531234][   T31] audit: type=1326 audit(35.510:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffff80f78fa8 code=0x7ffc0000
[   35.531321][   T31] audit: type=1326 audit(35.510:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80f78fa8 code=0x7ffc0000
[   35.533438][   T31] audit: type=1326 audit(35.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=82 compat=0 ip=0xffff80f78fa8 code=0x7ffc0000
[   35.533527][   T31] audit: type=1326 audit(35.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80f78fa8 code=0x7ffc0000
[   35.534430][   T31] audit: type=1326 audit(35.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff80f78fa8 code=0x7ffc0000
[   35.539583][   T31] audit: type=1326 audit(35.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80f78fa8 code=0x7ffc0000
[   35.540893][   T31] audit: type=1326 audit(35.520:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80f78fa8 code=0x7ffc0000
[   35.541081][   T31] audit: type=1326 audit(35.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff80f78fa8 code=0x7ffc0000
[   36.324362][ T6722] loop2: detected capacity change from 0 to 256
[   36.424252][ T6722] loop2: detected capacity change from 0 to 4096
[   36.437319][ T6724] can0: slcan on ttyS3.
[   36.475032][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9'.
[   36.504048][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9'.
[   36.505891][ T6730] loop0: detected capacity change from 0 to 128
[   36.508584][ T6584] Bluetooth: hci1: command tx timeout
[   36.508610][ T6170] Bluetooth: hci2: command tx timeout
[   36.508630][ T6584] Bluetooth: hci3: command tx timeout
[   36.508640][ T6170] Bluetooth: hci0: command tx timeout
[   36.658470][   T53] Bluetooth: hci4: command tx timeout
[   37.110962][ T6724] can0 (unregistered): slcan off ttyS3.
[   37.227939][ T6745] Zero length message leads to an empty skb
[   38.627087][ T6584] Bluetooth: hci3: command tx timeout
[   38.627210][ T6584] Bluetooth: hci1: command tx timeout
[   38.627268][ T6584] Bluetooth: hci2: command tx timeout
[   38.627377][   T53] Bluetooth: hci0: command tx timeout
[   38.751421][ T6802] input: syz1 as /devices/virtual/input/input2
[   38.755364][ T6170] Bluetooth: hci4: command tx timeout
[   39.259883][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24'.
[   39.263292][ T6807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24'.
[   39.359512][ T6811] loop1: detected capacity change from 0 to 256
[   39.374976][ T6811] loop1: detected capacity change from 0 to 4096
[   39.471017][ T6814] loop0: detected capacity change from 0 to 128
[   40.253611][ T6824] binder: 6823:6824 ioctl 4018620d 0 returned -22
[   40.256864][   T31] kauditd_printk_skb: 13 callbacks suppressed
[   40.259766][   T31] audit: type=1326 audit(40.230:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   40.263894][   T31] audit: type=1326 audit(40.230:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   40.267380][   T31] audit: type=1326 audit(40.230:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   40.271022][   T31] audit: type=1326 audit(40.230:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   40.271056][   T31] audit: type=1326 audit(40.230:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=82 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   40.271073][   T31] audit: type=1326 audit(40.230:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   40.271087][   T31] audit: type=1326 audit(40.230:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   40.271099][   T31] audit: type=1326 audit(40.240:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   40.271111][   T31] audit: type=1326 audit(40.240:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   40.271123][   T31] audit: type=1326 audit(40.240:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   40.282786][ T6828] loop2: detected capacity change from 0 to 512
[   40.312215][ T6828] overlay: ./file0 is not a directory
[   40.660022][ T6583] Bluetooth: hci3: command tx timeout
[   40.660177][ T6584] Bluetooth: hci1: command tx timeout
[   40.662201][ T6170] Bluetooth: hci2: command tx timeout
[   40.663106][   T53] Bluetooth: hci0: command tx timeout
[   40.818709][   T53] Bluetooth: hci4: command tx timeout
[   41.394434][ T6856] loop4: detected capacity change from 0 to 256
[   41.415908][ T6856] loop4: detected capacity change from 0 to 4096
[   41.492987][ T6860] loop0: detected capacity change from 0 to 128
[   41.924469][ T6870] loop3: detected capacity change from 0 to 256
[   41.924899][ T6870] exfat: Deprecated parameter 'namecase'
[   41.924929][ T6870] exfat: Deprecated parameter 'namecase'
[   42.146843][ T6870] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d)
[   42.957139][   T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   43.089352][ T6885] binder: 6884:6885 ioctl 4018620d 0 returned -22
[   43.607042][   T26] usb 1-1: config index 0 descriptor too short (expected 12336, got 18)
[   43.607072][   T26] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[   43.608084][   T26] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[   43.608117][   T26] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[   43.608147][   T26] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   43.608161][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.854696][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[   43.854929][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[   43.855173][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[   43.855906][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[   43.855954][   T26] usb 1-1: string descriptor 0 read error: -32
[   43.907455][   T26] usb 1-1: USB disconnect, device number 2
[   43.931794][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.934715][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.535168][ T6906] loop1: detected capacity change from 0 to 512
[   44.586900][ T6906] EXT4-fs (loop1): orphan cleanup on readonly fs
[   44.586926][ T6906] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[   44.587796][ T6906] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   44.590429][ T6906] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.57: attempt to clear invalid blocks 2 len 1
[   44.591060][ T6906] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.57: invalid indirect mapped block 1819239214 (level 0)
[   44.591211][ T6906] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.57: invalid indirect mapped block 1819239214 (level 1)
[   44.591482][ T6906] EXT4-fs (loop1): 1 truncate cleaned up
[   44.592024][ T6906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   44.609294][ T6906] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   44.610421][ T6906] EXT4-fs error (device loop1): __ext4_remount:6789: comm syz.1.57: Abort forced by user
[   44.610604][ T6906] EXT4-fs (loop1): Remounting filesystem read-only
[   44.610612][ T6906] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   44.617831][ T6578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.638163][ T6909] process 'syz.2.56' launched './file1' with NULL argv: empty string added
[   44.689128][ T6911] loop1: detected capacity change from 0 to 128
[   44.890005][ T6914] loop3: detected capacity change from 0 to 256
[   44.904527][ T6914] loop3: detected capacity change from 0 to 4096
[   44.974057][ T6917] loop4: detected capacity change from 0 to 1024
[   44.974819][ T6917] EXT4-fs: Ignoring removed i_version option
[   44.974838][ T6917] EXT4-fs: inline encryption not supported
[   44.976607][ T6917] EXT4-fs (loop4): Test dummy encryption mode enabled
[   44.990216][ T6917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.520164][   T31] kauditd_printk_skb: 78 callbacks suppressed
[   45.520312][   T31] audit: type=1326 audit(45.500:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   45.526533][   T31] audit: type=1326 audit(45.500:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   45.537180][   T31] audit: type=1326 audit(45.510:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   45.537221][   T31] audit: type=1326 audit(45.510:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   45.537238][   T31] audit: type=1326 audit(45.510:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   45.537253][   T31] audit: type=1326 audit(45.510:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   45.537266][   T31] audit: type=1326 audit(45.510:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   45.537277][   T31] audit: type=1326 audit(45.510:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   45.537289][   T31] audit: type=1326 audit(45.510:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   45.537300][   T31] audit: type=1326 audit(45.510:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6922 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   46.539828][ T6927] binder: 6925:6927 ioctl 4018620d 0 returned -22
[   46.563479][ T6933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.126652][ T6585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.003820][ T6961] loop1: detected capacity change from 0 to 128
[   48.312716][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.312894][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.317876][ T6965] loop3: detected capacity change from 0 to 256
[   48.342449][ T6965] loop3: detected capacity change from 0 to 4096
[   49.615375][ T6984] xt_socket: unknown flags 0xc
[   49.616817][ T6984] binder: 6977:6984 tried to acquire reference to desc 0, got 1 instead
[   49.617418][ T6984] binder: release 6977:6984 transaction 5 out, still active
[   49.668603][ T6984] binder: undelivered TRANSACTION_COMPLETE
[   50.154095][ T6993] binder: 6990:6993 ioctl 4018620d 0 returned -22
[   50.180372][ T6696] binder: send failed reply for transaction 5, target dead
[   50.985125][   T31] kauditd_printk_skb: 68 callbacks suppressed
[   51.008525][   T31] audit: type=1326 audit(50.960:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   51.012007][   T31] audit: type=1326 audit(50.960:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90778fa8 code=0x7ffc0000
[   51.391745][ T7013] loop3: detected capacity change from 0 to 256
[   51.408888][ T7013] loop3: detected capacity change from 0 to 4096
[   51.495587][ T7017] loop2: detected capacity change from 0 to 512
[   51.497658][ T7017] EXT4-fs: Ignoring removed mblk_io_submit option
[   51.500064][ T7017] EXT4-fs: Ignoring removed mblk_io_submit option
[   51.502256][ T7017] EXT4-fs (loop2): Test dummy encryption mode enabled
[   51.503476][ T7017] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   51.513322][ T7017] EXT4-fs (loop2): 1 truncate cleaned up
[   51.515431][ T7017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.792309][ T7017] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   51.851672][ T7024] loop4: detected capacity change from 0 to 256
[   51.866162][ T6587] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[   51.869142][ T6587] EXT4-fs (loop2): Remounting filesystem read-only
[   52.006604][ T7033] loop0: detected capacity change from 0 to 128
[   52.016386][ T7033] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   52.027340][ T7033] capability: warning: `syz.0.96' uses 32-bit capabilities (legacy support in use)
[   52.782974][ T6581] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   52.946612][ T7044] binder: 7043:7044 ioctl 4018620d 0 returned -22
[   52.946991][   T31] audit: type=1326 audit(52.920:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   52.947173][   T31] audit: type=1326 audit(52.920:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   52.947275][   T31] audit: type=1326 audit(52.920:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   52.947463][   T31] audit: type=1326 audit(52.920:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   52.947586][   T31] audit: type=1326 audit(52.920:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=82 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   52.947650][   T31] audit: type=1326 audit(52.920:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   52.947771][   T31] audit: type=1326 audit(52.920:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   52.947939][   T31] audit: type=1326 audit(52.920:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   53.631805][ T7047] loop1: detected capacity change from 0 to 40427
[   53.695445][ T7047] F2FS-fs (loop1): invalid crc value
[   53.759015][ T7047] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   53.763012][ T7047] F2FS-fs (loop1): Start checkpoint disabled!
[   53.769399][ T7047] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   53.771311][ T7047] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   53.782652][ T7047] syz.1.99: attempt to access beyond end of device
[   53.782652][ T7047] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   54.005175][ T6587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.681826][ T7062] netlink: 'syz.0.102': attribute type 2 has an invalid length.
[   54.889354][ T7067] loop4: detected capacity change from 0 to 2048
[   54.943546][ T5316] kworker/u8:23: attempt to access beyond end of device
[   54.943546][ T5316] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   54.946247][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT 
[   54.946263][ T5316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   54.946269][ T5316] Workqueue: writeback wb_workfn (flush-7:1)
[   54.946289][ T5316] Call trace:
[   54.946292][ T5316]  show_stack+0x2c/0x3c (C)
[   54.946305][ T5316]  __dump_stack+0x30/0x40
[   54.946311][ T5316]  dump_stack_lvl+0xd8/0x12c
[   54.946316][ T5316]  dump_stack+0x1c/0x28
[   54.946321][ T5316]  f2fs_handle_critical_error+0x34c/0x4b8
[   54.946330][ T5316]  f2fs_stop_checkpoint+0x5c/0x70
[   54.946336][ T5316]  f2fs_write_end_io+0x770/0xa78
[   54.946342][ T5316]  bio_endio+0x8d4/0x910
[   54.946349][ T5316]  submit_bio_noacct+0xd44/0x186c
[   54.946354][ T5316]  submit_bio+0x3b4/0x550
[   54.946359][ T5316]  f2fs_submit_write_bio+0x124/0x324
[   54.946364][ T5316]  __submit_merged_bio+0x224/0x6d4
[   54.946369][ T5316]  __submit_merged_write_cond+0x250/0x4ac
[   54.946373][ T5316]  f2fs_write_data_pages+0x1dd4/0x2878
[   54.946379][ T5316]  do_writepages+0x270/0x468
[   54.946386][ T5316]  __writeback_single_inode+0x144/0x16b8
[   54.946392][ T5316]  writeback_sb_inodes+0x73c/0x16b4
[   54.946397][ T5316]  wb_writeback+0x3b4/0xd70
[   54.946403][ T5316]  wb_workfn+0x320/0xdc0
[   54.946408][ T5316]  process_one_work+0x7c0/0x1558
[   54.946415][ T5316]  worker_thread+0x958/0xed8
[   54.946420][ T5316]  kthread+0x5fc/0x75c
[   54.946426][ T5316]  ret_from_fork+0x10/0x20
[   54.966556][ T7067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   54.972681][ T5316] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   54.989444][ T6170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   54.995113][ T6170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   54.996682][ T6170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   54.999846][ T6170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   55.001707][ T6170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   55.067526][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.108'.
[   55.211428][ T7076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.108'.
[   55.263704][ T7079] netlink: 'syz.3.110': attribute type 4 has an invalid length.
[   55.263740][ T7079] netlink: 17 bytes leftover after parsing attributes in process `syz.3.110'.
[   55.328737][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.328916][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.404280][  T201] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.458785][  T201] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.474878][ T7093] loop3: detected capacity change from 0 to 512
[   55.476858][ T7093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   55.482859][ T7093] EXT4-fs (loop3): 1 truncate cleaned up
[   55.485541][ T7093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.504676][ T6577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.534582][  T201] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.544338][ T7072] chnl_net:caif_netlink_parms(): no params data found
[   55.579463][  T201] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.611995][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.612069][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.612127][ T7072] bridge_slave_0: entered allmulticast mode
[   55.612637][ T7072] bridge_slave_0: entered promiscuous mode
[   55.614067][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.614097][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.614146][ T7072] bridge_slave_1: entered allmulticast mode
[   55.614656][ T7072] bridge_slave_1: entered promiscuous mode
[   55.627322][ T7072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.629649][ T7072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.638909][ T7072] team0: Port device team_slave_0 added
[   55.640827][ T7072] team0: Port device team_slave_1 added
[   55.648541][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.649867][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.654306][ T7072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.657232][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.658768][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.662975][ T7072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.675988][ T7072] hsr_slave_0: entered promiscuous mode
[   55.677577][ T7072] hsr_slave_1: entered promiscuous mode
[   55.679314][ T7072] debugfs: 'hsr0' already exists in 'hsr'
[   55.680399][ T7072] Cannot create hsr debugfs directory
[   55.753783][ T7106] loop0: detected capacity change from 0 to 512
[   55.764523][  T201] bridge_slave_1: left allmulticast mode
[   55.766363][  T201] bridge_slave_1: left promiscuous mode
[   55.766825][  T201] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.803502][  T201] bridge_slave_0: left allmulticast mode
[   55.803533][  T201] bridge_slave_0: left promiscuous mode
[   55.803811][  T201] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.038601][ T6640] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   56.198590][ T6640] usb 1-1: Using ep0 maxpacket: 32
[   56.208964][ T6640] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   56.210523][ T6640] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   56.210556][ T6640] usb 1-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   56.219371][ T6640] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   56.221520][ T6640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=10
[   56.222888][ T6640] usb 1-1: Product: syz
[   56.223631][ T6640] usb 1-1: Manufacturer: syz
[   56.224554][ T6640] usb 1-1: SerialNumber: syz
[   56.245585][  T201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.270027][  T201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   56.712027][ T7116] loop4: detected capacity change from 0 to 40427
[   56.730366][ T7116] F2FS-fs (loop4): invalid crc value
[   56.795633][ T7116] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   56.799370][ T7116] F2FS-fs (loop4): Start checkpoint disabled!
[   56.806994][ T7116] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[   56.809535][ T7116] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   56.838458][ T7116] syz.4.118: attempt to access beyond end of device
[   56.838458][ T7116] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   56.874061][  T201] bond0 (unregistering): Released all slaves
[   57.094340][ T6640] usb 1-1: 2:0 : UAC_AS_GENERAL descriptor not found
[   57.131269][ T6640] usb 1-1: USB disconnect, device number 3
[   57.236350][ T6591] udevd[6591]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   57.306941][ T6170] Bluetooth: hci4: command tx timeout
[   57.321424][ T2733] kworker/u8:15: attempt to access beyond end of device
[   57.321424][ T2733] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   57.324283][ T2733] CPU: 1 UID: 0 PID: 2733 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT 
[   57.324297][ T2733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   57.324304][ T2733] Workqueue: writeback wb_workfn (flush-7:4)
[   57.324324][ T2733] Call trace:
[   57.324327][ T2733]  show_stack+0x2c/0x3c (C)
[   57.324338][ T2733]  __dump_stack+0x30/0x40
[   57.324346][ T2733]  dump_stack_lvl+0xd8/0x12c
[   57.324351][ T2733]  dump_stack+0x1c/0x28
[   57.324356][ T2733]  f2fs_handle_critical_error+0x34c/0x4b8
[   57.324365][ T2733]  f2fs_stop_checkpoint+0x5c/0x70
[   57.324371][ T2733]  f2fs_write_end_io+0x770/0xa78
[   57.324376][ T2733]  bio_endio+0x8d4/0x910
[   57.324383][ T2733]  submit_bio_noacct+0xd44/0x186c
[   57.324389][ T2733]  submit_bio+0x3b4/0x550
[   57.324394][ T2733]  f2fs_submit_write_bio+0x124/0x324
[   57.324399][ T2733]  __submit_merged_bio+0x224/0x6d4
[   57.324403][ T2733]  __submit_merged_write_cond+0x250/0x4ac
[   57.324408][ T2733]  f2fs_write_data_pages+0x1dd4/0x2878
[   57.324413][ T2733]  do_writepages+0x270/0x468
[   57.324420][ T2733]  __writeback_single_inode+0x144/0x16b8
[   57.324426][ T2733]  writeback_sb_inodes+0x73c/0x16b4
[   57.324432][ T2733]  wb_writeback+0x3b4/0xd70
[   57.324437][ T2733]  wb_workfn+0x320/0xdc0
[   57.324442][ T2733]  process_one_work+0x7c0/0x1558
[   57.324449][ T2733]  worker_thread+0x958/0xed8
[   57.324455][ T2733]  kthread+0x5fc/0x75c
[   57.324460][ T2733]  ret_from_fork+0x10/0x20
[   57.351120][ T2733] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   57.355244][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.357029][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.550378][ T7072] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   57.652658][ T7072] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   57.657892][ T7072] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   57.661415][ T7072] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   57.734690][ T7072] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.817954][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'.
[   57.958648][ T7191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'.
[   58.022842][ T7072] 8021q: adding VLAN 0 to HW filter on device team0
[   58.029941][  T201] hsr_slave_0: left promiscuous mode
[   58.031193][  T201] hsr_slave_1: left promiscuous mode
[   58.034712][  T201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.035987][  T201] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.038223][  T201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.039792][  T201] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.063705][  T201] veth1_macvtap: left promiscuous mode
[   58.064799][  T201] veth0_macvtap: left promiscuous mode
[   58.066084][  T201] veth1_vlan: left promiscuous mode
[   58.067158][  T201] veth0_vlan: left promiscuous mode
[   58.818229][ T7243] loop0: detected capacity change from 0 to 40427
[   58.822267][ T7243] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   58.822298][ T7243] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   58.834565][  T201] team0 (unregistering): Port device team_slave_1 removed
[   58.860592][ T7243] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   58.862471][  T201] team0 (unregistering): Port device team_slave_0 removed
[   58.863337][ T7243] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   58.863357][ T7243] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   59.029101][ T7258] loop0: detected capacity change from 0 to 2048
[   59.049021][ T7259] loop3: detected capacity change from 0 to 164
[   59.060077][ T7258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.677845][ T6170] Bluetooth: hci4: command tx timeout
[   59.750486][ T7095] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   59.814590][ T7263] loop1: detected capacity change from 0 to 40427
[   59.824122][ T7263] F2FS-fs (loop1): invalid crc value
[   59.868713][ T7263] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   59.871082][ T7263] F2FS-fs (loop1): Start checkpoint disabled!
[   59.876094][ T7263] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   59.878284][ T7263] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   59.900243][ T7263] syz.1.132: attempt to access beyond end of device
[   59.900243][ T7263] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   60.076422][ T6581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.103448][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.105275][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.140712][ T7273] syz.4.136 uses obsolete (PF_INET,SOCK_PACKET)
[   60.217340][ T1345] kworker/u8:12: attempt to access beyond end of device
[   60.217340][ T1345] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   60.226376][ T1345] CPU: 0 UID: 0 PID: 1345 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT 
[   60.226406][ T1345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   60.226417][ T1345] Workqueue: writeback wb_workfn (flush-7:1)
[   60.226444][ T1345] Call trace:
[   60.226448][ T1345]  show_stack+0x2c/0x3c (C)
[   60.226465][ T1345]  __dump_stack+0x30/0x40
[   60.226475][ T1345]  dump_stack_lvl+0xd8/0x12c
[   60.226482][ T1345]  dump_stack+0x1c/0x28
[   60.226488][ T1345]  f2fs_handle_critical_error+0x34c/0x4b8
[   60.226496][ T1345]  f2fs_stop_checkpoint+0x5c/0x70
[   60.226503][ T1345]  f2fs_write_end_io+0x770/0xa78
[   60.226508][ T1345]  bio_endio+0x8d4/0x910
[   60.226515][ T1345]  submit_bio_noacct+0xd44/0x186c
[   60.226521][ T1345]  submit_bio+0x3b4/0x550
[   60.226526][ T1345]  f2fs_submit_write_bio+0x124/0x324
[   60.226530][ T1345]  __submit_merged_bio+0x224/0x6d4
[   60.226535][ T1345]  __submit_merged_write_cond+0x250/0x4ac
[   60.226539][ T1345]  f2fs_write_data_pages+0x1dd4/0x2878
[   60.226544][ T1345]  do_writepages+0x270/0x468
[   60.226552][ T1345]  __writeback_single_inode+0x144/0x16b8
[   60.226558][ T1345]  writeback_sb_inodes+0x73c/0x16b4
[   60.226563][ T1345]  wb_writeback+0x3b4/0xd70
[   60.226569][ T1345]  wb_workfn+0x320/0xdc0
[   60.226573][ T1345]  process_one_work+0x7c0/0x1558
[   60.226580][ T1345]  worker_thread+0x958/0xed8
[   60.226586][ T1345]  kthread+0x5fc/0x75c
[   60.226591][ T1345]  ret_from_fork+0x10/0x20
[   60.226619][ T1345] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   60.396209][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.138'.
[   60.532137][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'.
[   60.631591][  T880] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.631638][  T880] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.645523][  T880] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.645575][  T880] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.967455][ T7313] loop0: detected capacity change from 0 to 1024
[   61.109829][ T7072] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.167014][ T7318] loop3: detected capacity change from 0 to 256
[   61.170039][ T7318] =======================================================
[   61.170039][ T7318] WARNING: The mand mount option has been deprecated and
[   61.170039][ T7318]          and is ignored by this kernel. Remove the mand
[   61.170039][ T7318]          option from the mount to silence this warning.
[   61.170039][ T7318] =======================================================
[   61.180136][ T7318] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[   61.320964][ T7072] veth0_vlan: entered promiscuous mode
[   61.328146][ T7337] loop3: detected capacity change from 0 to 512
[   61.330827][ T7337] ext4: Unknown parameter 'pcr'
[   61.333657][ T7072] veth1_vlan: entered promiscuous mode
[   61.352794][ T7072] veth0_macvtap: entered promiscuous mode
[   61.357386][ T7072] veth1_macvtap: entered promiscuous mode
[   61.386224][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.401115][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.421755][ T2733] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.422543][ T2733] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.422565][ T2733] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.422578][ T2733] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.422891][ T7344] loop3: detected capacity change from 0 to 256
[   61.435539][ T7344] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   61.479826][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.479861][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.494678][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.494714][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.548209][ T7352] loop4: detected capacity change from 0 to 128
[   61.562957][ T7352] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   61.634435][ T2733] hfsplus: b-tree write err: -5, ino 4
[   61.666781][ T7359] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[   61.675165][ T7359] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[   61.675407][ T7359] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[   61.675452][ T7359] hfsplus: xattr search failed
[   61.683148][ T7359] hfsplus: b-tree write err: -5, ino 4
[   61.698457][ T6170] Bluetooth: hci4: command tx timeout
[   61.710041][ T7352] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   61.751774][ T7367] set_capacity_and_notify: 1 callbacks suppressed
[   61.756878][ T7367] loop0: detected capacity change from 0 to 256
[   61.788999][ T7368] loop1: detected capacity change from 0 to 1024
[   61.793033][ T7368] hfsplus: invalid file type 0113366 for inode 2
[   61.794870][ T7368] hfsplus: failed to load root directory
[   61.826717][ T7367] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   61.828648][ T7367] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   61.831778][ T7367] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   61.833997][ T7367] exFAT-fs (loop0): failed to load alloc-bitmap
[   61.835082][ T7367] exFAT-fs (loop0): failed to recognize exfat type
[   62.667056][ T6649] kernel write not supported for file bpf-prog (pid: 6649 comm: kworker/0:7)
[   62.715159][ T7401] capability: warning: `syz.4.166' uses deprecated v2 capabilities in a way that may be insecure
[   63.778386][ T6170] Bluetooth: hci4: command tx timeout
[   63.818118][   T31] kauditd_printk_skb: 21 callbacks suppressed
[   63.818154][   T31] audit: type=1326 audit(63.750:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   63.818184][   T31] audit: type=1326 audit(63.750:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   63.818205][   T31] audit: type=1326 audit(63.750:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   63.818223][   T31] audit: type=1326 audit(63.750:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   63.818239][   T31] audit: type=1326 audit(63.750:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   63.818255][   T31] audit: type=1326 audit(63.750:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   63.818270][   T31] audit: type=1326 audit(63.750:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   63.818286][   T31] audit: type=1326 audit(63.750:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   63.818303][   T31] audit: type=1326 audit(63.750:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   63.818389][   T31] audit: type=1326 audit(63.750:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=55 compat=0 ip=0xffffb5978fa8 code=0x7ffc0000
[   63.892987][ T7432] loop0: detected capacity change from 0 to 1024
[   63.899926][ T7431] can0: slcan on ttyS3.
[   63.923846][ T7432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.999280][ T7432] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   64.004756][ T7432] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1776 with error 28
[   64.007749][ T7432] EXT4-fs (loop0): This should not happen!! Data will be lost
[   64.007749][ T7432] 
[   64.010742][ T7432] EXT4-fs (loop0): Total free blocks count 0
[   64.012180][ T7432] EXT4-fs (loop0): Free/Dirty block details
[   64.013515][ T7432] EXT4-fs (loop0): free_blocks=68451041280
[   64.015249][ T7432] EXT4-fs (loop0): dirty_blocks=1792
[   64.016602][ T7432] EXT4-fs (loop0): Block reservation details
[   64.018161][ T7432] EXT4-fs (loop0): i_reserved_data_blocks=112
[   64.059628][ T7431] can0 (unregistered): slcan off ttyS3.
[   64.253381][ T7446] loop3: detected capacity change from 0 to 16
[   64.288493][ T2379] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   64.300033][ T7446] erofs (device loop3): mounted with root inode @ nid 36.
[   64.350695][ T7446] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 2639
[   64.351204][ T7446] erofs (device loop3): read error -117 @ 39 of nid 36
[   65.008355][ T7446] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 2639
[   65.008532][ T7446] erofs (device loop3): read error -117 @ 39 of nid 36
[   65.079005][ T2471] ieee802154 phy0 wpan0: encryption failed: -22
[   65.093869][ T2471] ieee802154 phy1 wpan1: encryption failed: -22
[   65.195019][ T6632] kernel read not supported for file /112/personality (pid: 6632 comm: kworker/0:4)
[   65.311034][ T7455] loop3: detected capacity change from 0 to 512
[   65.313564][ T7455] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent
[   65.355325][ T7459] Illegal XDP return value 65535 on prog  (id 21) dev N/A, expect packet loss!
[   65.700348][ T2379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.700373][ T2379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.700393][ T2379] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   65.700408][ T2379] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   65.700416][ T2379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.703102][ T2379] usb 1-1: config 0 descriptor??
[   67.026800][ T2379] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd
[   67.052116][ T2379] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   67.175620][ T7483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.217610][ T7486] loop3: detected capacity change from 0 to 4096
[   67.224766][ T7486] EXT4-fs (loop3): Test dummy encryption mode enabled
[   67.234288][ T7486] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   67.234414][ T7486] System zones: 0-5
[   67.237447][ T7486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.280421][ T6577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.313058][ T2379] usb 1-1: USB disconnect, device number 4
[   68.761100][ T7511] loop3: detected capacity change from 0 to 40427
[   68.775615][ T7511] F2FS-fs (loop3): invalid crc value
[   68.918982][ T7511] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   68.926551][ T7511] F2FS-fs (loop3): Start checkpoint disabled!
[   68.955123][ T7511] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[   68.959238][ T7511] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   68.984310][ T7511] syz.3.203: attempt to access beyond end of device
[   68.984310][ T7511] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   69.193148][ T7520] loop1: detected capacity change from 0 to 256
[   69.196686][ T7520] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[   69.603332][  T836] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28
[   69.603376][  T836] EXT4-fs (loop0): This should not happen!! Data will be lost
[   69.603376][  T836] 
[   69.607220][  T836] EXT4-fs (loop0): Total free blocks count 0
[   69.607468][  T836] EXT4-fs (loop0): Free/Dirty block details
[   69.607692][  T836] EXT4-fs (loop0): free_blocks=68451041280
[   69.607888][  T836] EXT4-fs (loop0): dirty_blocks=32
[   69.608092][  T836] EXT4-fs (loop0): Block reservation details
[   69.608271][  T836] EXT4-fs (loop0): i_reserved_data_blocks=2
[   69.621550][ T6581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.640776][  T880] kworker/u8:9: attempt to access beyond end of device
[   69.640776][  T880] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   69.640840][  T880] CPU: 1 UID: 0 PID: 880 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT 
[   69.640850][  T880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   69.640856][  T880] Workqueue: writeback wb_workfn (flush-7:3)
[   69.640875][  T880] Call trace:
[   69.640878][  T880]  show_stack+0x2c/0x3c (C)
[   69.640890][  T880]  __dump_stack+0x30/0x40
[   69.640896][  T880]  dump_stack_lvl+0xd8/0x12c
[   69.640902][  T880]  dump_stack+0x1c/0x28
[   69.640907][  T880]  f2fs_handle_critical_error+0x34c/0x4b8
[   69.640916][  T880]  f2fs_stop_checkpoint+0x5c/0x70
[   69.640922][  T880]  f2fs_write_end_io+0x770/0xa78
[   69.640927][  T880]  bio_endio+0x8d4/0x910
[   69.640934][  T880]  submit_bio_noacct+0xd44/0x186c
[   69.640939][  T880]  submit_bio+0x3b4/0x550
[   69.640945][  T880]  f2fs_submit_write_bio+0x124/0x324
[   69.640949][  T880]  __submit_merged_bio+0x224/0x6d4
[   69.640954][  T880]  __submit_merged_write_cond+0x250/0x4ac
[   69.640959][  T880]  f2fs_write_data_pages+0x1dd4/0x2878
[   69.640964][  T880]  do_writepages+0x270/0x468
[   69.640971][  T880]  __writeback_single_inode+0x144/0x16b8
[   69.640977][  T880]  writeback_sb_inodes+0x73c/0x16b4
[   69.640982][  T880]  wb_writeback+0x3b4/0xd70
[   69.640988][  T880]  wb_workfn+0x320/0xdc0
[   69.640993][  T880]  process_one_work+0x7c0/0x1558
[   69.640999][  T880]  worker_thread+0x958/0xed8
[   69.641005][  T880]  kthread+0x5fc/0x75c
[   69.641010][  T880]  ret_from_fork+0x10/0x20
[   69.641018][  T880] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   69.672632][ T1771] cfg80211: failed to load regulatory.db
[   69.691967][ T7531] Bluetooth: MGMT ver 1.23
[   69.744124][ T7533] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4
[   70.009305][ T7535] loop5: detected capacity change from 0 to 1024
[   70.123463][ T7548] loop0: detected capacity change from 0 to 8
[   70.193769][ T7548] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.353215][ T7570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.353401][ T7570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.413501][ T7565] loop1: detected capacity change from 0 to 2048
[   71.413863][ T7565] udf: Bad value for 'anchor'
[   71.717109][ T7578] usb usb1: usbfs: process 7578 (syz.0.222) did not claim interface 0 before use
[   72.252321][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.311098][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.847205][ T7608] loop1: detected capacity change from 0 to 4096
[   72.852258][ T7608] EXT4-fs (loop1): Test dummy encryption mode enabled
[   72.855483][ T7608] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[   72.856988][ T7608] System zones: 0-5
[   72.861054][ T7608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.889204][ T6578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.470730][ T7627] loop5: detected capacity change from 0 to 1024
[   73.489239][ T7627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.506458][ T7627] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.241: Allocating blocks 449-513 which overlap fs metadata
[   73.594049][ T7637] loop3: detected capacity change from 0 to 128
[   73.597837][ T7637] vfat: Unknown parameter 'shortname%mixed'
[   73.636731][ T7627] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[   73.675529][ T7072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.769075][ T7640] loop3: detected capacity change from 0 to 16
[   73.769730][ T7640] erofs (device loop3): mounted with root inode @ nid 36.
[   73.825924][ T7642] loop5: detected capacity change from 0 to 128
[   74.596902][ T7660] syzkaller0: entered promiscuous mode
[   74.598158][ T7660] syzkaller0: entered allmulticast mode
[   74.664199][ T7672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.666657][ T7672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.721349][ T7676] loop5: detected capacity change from 0 to 1024
[   74.724810][ T7676] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   74.725378][ T7676] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   74.726072][ T7676] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #32: comm syz.5.255: iget: special inode unallocated
[   74.727051][ T7676] EXT4-fs (loop5): Remounting filesystem read-only
[   74.727115][ T7676] EXT4-fs (loop5): no journal found
[   74.727125][ T7676] EXT4-fs (loop5): can't get journal size
[   74.740448][ T7676] EXT4-fs (loop5): filesystem is read-only
[   74.740925][ T7676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   74.753235][ T7072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.854164][ T7694] loop0: detected capacity change from 0 to 512
[   74.856828][ T7694] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[   75.247077][ T7716] loop3: detected capacity change from 0 to 128
[   75.297310][ T7721] loop5: detected capacity change from 0 to 8
[   75.304808][ T7721] SQUASHFS error: Failed to read block 0x4de: -5
[   75.306564][ T7721] SQUASHFS error: Failed to read block 0x4de: -5
[   76.166471][ T7731] binder: 7730:7731 ioctl c0306201 0 returned -14
[   76.168153][ T7731] binder_alloc: binder_alloc_mmap_handler: 7730 20ffe000-21000000 already mapped failed -16
[   76.295731][ T7752] loop1: detected capacity change from 0 to 512
[   76.296111][ T7752] vfat: Unknown parameter 'shortnutf8'
[   76.305836][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.306019][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.758511][ T1771] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   76.939687][ T1771] usb 1-1: Using ep0 maxpacket: 32
[   77.086556][ T1771] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.089017][ T1771] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   77.089041][ T1771] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   77.089237][ T1771] usb 1-1: Product: syz
[   77.089249][ T1771] usb 1-1: Manufacturer: syz
[   77.089255][ T1771] usb 1-1: SerialNumber: syz
[   77.092772][ T1771] usb 1-1: config 0 descriptor??
[   77.095995][ T1771] hub 1-1:0.0: bad descriptor, ignoring hub
[   77.096861][ T1771] hub 1-1:0.0: probe with driver hub failed with error -5
[   77.507159][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.507344][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.590537][ T7810] EXT4-fs: Ignoring removed orlov option
[   77.592022][ T7810] EXT4-fs (loop5): Test dummy encryption mode enabled
[   77.593583][ T7810] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   77.612196][ T7810] EXT4-fs (loop5): 1 truncate cleaned up
[   77.613856][ T7810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.671659][ T7814] fuse: Bad value for 'fd'
[   77.786850][ T7821] tmpfs: Bad value for 'huge'
[   77.788896][   T31] kauditd_printk_skb: 21 callbacks suppressed
[   77.788906][   T31] audit: type=1326 audit(77.770:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7809 comm="syz.5.289" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d378fa8 code=0x0
[   78.267376][ T1771] usb 1-1: reset high-speed USB device number 5 using dummy_hcd
[   78.485285][ T7825] set_capacity_and_notify: 2 callbacks suppressed
[   78.486850][ T7825] loop1: detected capacity change from 0 to 8
[   78.515209][ T7825] SQUASHFS error: Failed to read block 0x4de: -5
[   78.523987][ T7825] SQUASHFS error: Failed to read block 0x4de: -5
[   78.526367][ T7825] SQUASHFS error: Failed to read block 0x4de: -5
[   78.526998][ T1771] usb 1-1: device firmware changed
[   78.528739][ T7825] SQUASHFS error: Failed to read block 0x4de: -5
[   78.530500][ T1771] usb 1-1: USB disconnect, device number 5
[   78.569943][ T7825] SQUASHFS error: Failed to read block 0x4de: -5
[   78.570016][ T7825] SQUASHFS error: Failed to read block 0x4de: -5
[   78.570668][ T7825] SQUASHFS error: Failed to read block 0x4de: -5
[   78.570727][ T7825] SQUASHFS error: Failed to read block 0x4de: -5
[   78.707609][ T7829] loop1: detected capacity change from 0 to 128
[   79.037353][ T7833] loop1: detected capacity change from 0 to 8
[   79.109772][ T1771] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   79.489909][ T7072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.528565][ T7841] loop0: detected capacity change from 0 to 512
[   79.552572][ T7841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.968834][ T1771] usb 1-1: device not accepting address 6, error -71
[   80.373370][ T6581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.038727][ T7878] loop0: detected capacity change from 0 to 16
[   81.759193][ T7878] erofs (device loop0): mounted with root inode @ nid 36.
[   81.762667][ T7878] erofs (device loop0): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 2639
[   81.762681][ T7878] erofs (device loop0): read error -117 @ 39 of nid 36
[   82.184505][ T7877] erofs (device loop0): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 2639
[   82.184523][ T7877] erofs (device loop0): read error -117 @ 39 of nid 36
[   82.271460][ T7888] loop5: detected capacity change from 0 to 128
[   82.273636][ T7888] FAT-fs (loop5): Directory bread(block 414) failed
[   82.273687][ T7888] FAT-fs (loop5): Directory bread(block 415) failed
[   82.273951][ T7888] FAT-fs (loop5): Directory bread(block 416) failed
[   82.273982][ T7888] FAT-fs (loop5): Directory bread(block 417) failed
[   82.273997][ T7888] FAT-fs (loop5): Directory bread(block 418) failed
[   82.274008][ T7888] FAT-fs (loop5): Directory bread(block 419) failed
[   82.274018][ T7888] FAT-fs (loop5): Directory bread(block 420) failed
[   82.274027][ T7888] FAT-fs (loop5): Directory bread(block 421) failed
[   82.541455][   T31] audit: type=1326 audit(82.510:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.4.309" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f78fa8 code=0x0
[   82.770830][ T7887] loop1: detected capacity change from 0 to 2048
[   82.792932][ T7887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.011311][ T7908] loop5: detected capacity change from 0 to 164
[   83.220025][ T7908] ISOFS: Bad logical zone size 2816
[   83.227484][ T7906] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.314: bg 0: block 234: padding at end of block bitmap is not set
[   83.232974][ T7906] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 386 with error 28
[   83.233126][ T7906] EXT4-fs (loop1): This should not happen!! Data will be lost
[   83.233126][ T7906] 
[   83.233819][ T7906] EXT4-fs (loop1): Total free blocks count 0
[   83.233837][ T7906] EXT4-fs (loop1): Free/Dirty block details
[   83.233847][ T7906] EXT4-fs (loop1): free_blocks=0
[   83.233856][ T7906] EXT4-fs (loop1): dirty_blocks=400
[   83.233864][ T7906] EXT4-fs (loop1): Block reservation details
[   83.233869][ T7906] EXT4-fs (loop1): i_reserved_data_blocks=25
[   83.282939][ T1771] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   83.315097][ T6578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.343440][ T7910] loop1: detected capacity change from 0 to 1024
[   83.367119][ T7910] hfsplus: xattr search failed
[   83.484263][ T1771] usb 1-1: config 1 has an invalid descriptor of length 40, skipping remainder of the config
[   83.484297][ T1771] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.491248][ T1771] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   83.491287][ T1771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   83.491313][ T1771] usb 1-1: SerialNumber: syz
[   83.800142][ T1771] usb 1-1: 0:2 : does not exist
[   83.805374][ T1771] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[   83.822863][ T1771] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   83.830976][ T1771] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[   83.834870][ T1771] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[   83.838243][ T7918] loop5: detected capacity change from 0 to 128
[   83.844243][ T1771] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[   83.847128][ T1771] usb 1-1: USB disconnect, device number 8
[   83.877032][ T6591] udevd[6591]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   84.519977][ T7937] loop1: detected capacity change from 0 to 16
[   84.521558][ T7937] erofs (device loop1): mounted with root inode @ nid 36.
[   84.528271][ T7937] erofs (device loop1): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 2639
[   84.528292][ T7937] erofs (device loop1): read error -117 @ 39 of nid 36
[   84.529769][ T7937] erofs (device loop1): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 2639
[   84.529781][ T7937] erofs (device loop1): read error -117 @ 39 of nid 36
[   85.373142][ T7944] loop0: detected capacity change from 0 to 512
[   85.374824][ T7944] EXT4-fs: Ignoring removed orlov option
[   85.376094][ T7944] EXT4-fs (loop0): Test dummy encryption mode enabled
[   85.377211][ T7944] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   85.688156][ T7944] EXT4-fs (loop0): 1 truncate cleaned up
[   85.688783][ T7944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.765024][   T31] audit: type=1326 audit(85.740:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f78fa8 code=0x7ffc0000
[   85.765137][   T31] audit: type=1326 audit(85.740:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f78fa8 code=0x7ffc0000
[   85.770548][   T31] audit: type=1326 audit(85.750:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f78fa8 code=0x7ffc0000
[   85.775629][   T31] audit: type=1326 audit(85.750:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f78fa8 code=0x7ffc0000
[   85.778403][   T31] audit: type=1326 audit(85.750:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffa2f78fa8 code=0x7ffc0000
[   85.778424][   T31] audit: type=1326 audit(85.750:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f78fa8 code=0x7ffc0000
[   85.778440][   T31] audit: type=1326 audit(85.750:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f78fa8 code=0x7ffc0000
[   85.778453][   T31] audit: type=1326 audit(85.750:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f78fa8 code=0x7ffc0000
[   85.778467][   T31] audit: type=1326 audit(85.750:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffa2f78fa8 code=0x7ffc0000
[   85.857567][ T7955] tmpfs: Bad value for 'huge'
[   85.861252][   T31] audit: type=1326 audit(85.840:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7943 comm="syz.0.334" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5978fa8 code=0x0
[   86.487743][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'.
[   86.490141][ T7536] Unable to handle kernel paging request at virtual address ffff8000a0035698
[   86.490156][ T7536] KASAN: probably user-memory-access in range [0x00000005001ab4c0-0x00000005001ab4c7]
[   86.490166][ T7536] Mem abort info:
[   86.490169][ T7536]   ESR = 0x0000000096000007
[   86.490175][ T7536]   EC = 0x25: DABT (current EL), IL = 32 bits
[   86.490182][ T7536]   SET = 0, FnV = 0
[   86.490188][ T7536]   EA = 0, S1PTW = 0
[   86.490193][ T7536]   FSC = 0x07: level 3 translation fault
[   86.490197][ T7536] Data abort info:
[   86.490199][ T7536]   ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000
[   86.490202][ T7536]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[   86.490206][ T7536]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[   86.490211][ T7536] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000206d55000
[   86.490216][ T7536] [ffff8000a0035698] pgd=0000000000000000, p4d=100000020f59c003, pud=100000020f59d003, pmd=100000010c188403, pte=0000000000000000
[   86.490233][ T7536] Internal error: Oops: 0000000096000007 [#1]  SMP
[   86.504828][ T7536] Modules linked in:
[   86.505433][ T7536] CPU: 0 UID: 0 PID: 7536 Comm: khidpd_04580058 Not tainted syzkaller #0 PREEMPT 
[   86.506904][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   86.508436][ T7536] pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[   86.509684][ T7536] pc : __lock_acquire+0x720/0x30a4
[   86.510421][ T7536] lr : __lock_acquire+0x700/0x30a4
[   86.511153][ T7536] sp : ffff80009f1b7820
[   86.511779][ T7536] x29: ffff80009f1b7900 x28: 0000000000000001 x27: ffff0000d3202778
[   86.512949][ T7536] x26: ffff80008afabde8 x25: 0000000000000000 x24: 0000000000000001
[   86.514274][ T7536] x23: 0000000000000000 x22: 0000000000000000 x21: ffff0000d3201c80
[   86.515564][ T7536] x20: ffff8000975d1000 x19: 0000000000000000 x18: 1fffe0003377d090
[   86.516720][ T7536] x17: ffff80008f86e000 x16: ffff800082e5e68c x15: 0000000000000001
[   86.517950][ T7536] x14: 1fffe0003377fb48 x13: 0000000000000000 x12: 0000000000000000
[   86.519160][ T7536] x11: 66666666664e4a87 x10: ffff800093398d48 x9 : 000000000199392a
[   86.520405][ T7536] x8 : 0000000000000000 x7 : ffff80008afabde8 x6 : 0000000000000000
[   86.521666][ T7536] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000
[   86.522878][ T7536] x2 : 0000000000000008 x1 : ffff0000d3202778 x0 : 0000000000000001
[   86.524114][ T7536] Call trace:
[   86.524618][ T7536]  __lock_acquire+0x720/0x30a4 (P)
[   86.525328][ T7536]  lock_acquire+0x140/0x2e0
[   86.526047][ T7536]  _raw_spin_lock_irqsave+0x5c/0x7c
[   86.526883][ T7536]  __mutex_lock_common+0xd24/0x2678
[   86.527648][ T7536]  mutex_lock_nested+0x2c/0x38
[   86.528362][ T7536]  l2cap_unregister_user+0x74/0x190
[   86.529166][ T7536]  hidp_session_thread+0x3d0/0x490
[   86.529956][ T7536]  kthread+0x5fc/0x75c
[   86.530592][ T7536]  ret_from_fork+0x10/0x20
[   86.531300][ T7536] Code: 350000e8 f9400feb 93407d69 d346fd29 (f8697949) 
[   86.532375][ T7536] ---[ end trace 0000000000000000 ]---
[   86.719406][ T7536] Kernel panic - not syncing: Oops: Fatal exception
[   86.720372][ T7536] SMP: stopping secondary CPUs
[   86.721070][ T7536] Kernel Offset: disabled
[   86.721677][ T7536] CPU features: 0x400000,00078001,04e04501,5427fea7
[   86.722725][ T7536] Memory Limit: none
[   86.910359][ T7536] Rebooting in 86400 seconds..