last executing test programs:

44.052664018s ago: executing program 3 (id=286):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x2, 0x5, 0x1}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0)

43.488007549s ago: executing program 3 (id=289):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc)

42.39072228s ago: executing program 3 (id=292):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="c3f83e"], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

41.521425032s ago: executing program 3 (id=295):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

40.836431564s ago: executing program 3 (id=298):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f00000003c0)={0x40, 0x7, 0x3, "fdc1e1"}, 0x0, 0x0, 0x0, 0x0, 0x0})

36.371150532s ago: executing program 3 (id=311):
r0 = gettid()
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$eJzs3UFrJFkdAPB/dbrHSSazyaoHXXB3dFcyg053snF3g4fdFURPC+p6H2PSCSGddEh3didh0Qx+AEFEBU/qwYvgBxBkwYtHEQb0rKgoojN68KBTUt2VTCbTne4ZetKZ9O8HlXrvVVX/3+tQ1fWqHlUBjKwrEfFmRNxL0/RaREzl5YV8iv32lK139857S9mURJq+/Y8kkrzs4LOSfH4p3+xiRHzlixFfTx6O29jdW1+s1arbeb7S3NiqNHb3rq9tLK5WV6ub8/Nzry68tvDKwuxA2nk5Il7//F++9+2ffuH1X3763T/e+NvVb2TVmsyXH23HIyqetLDd9FLruzi6wfZjBjuLiq0W5sY7rTH2UMmtJ1wnAAA6y87xPxgRn4iIazEVYyefzgIAAABPofSNyfhvEpF2dqFLOQAAAPAUKbTGwCaFcj4WYDIKhXK5PYb3wzFRqNUbzU+t1Hc2l9tjZaejVFhZq1Vn87HC01FKsvxcK30///Kx/HxEPBsR350ab+XLS/Xa8rAvfgAAAMCIuHSs///vqXb/HwAAADhnpoddAQAAAOCJ0/8HAACA80//HwAAAM61L731Vja9ERGt918vv7O7s15/5/pytbFe3thZKi/Vt7fKq/X6auuZfRu9Pq9Wr299JjZ3blaa1Uaz0tjdu7FR39ls3lh74BXYAAAAwCl69oX3f59ExP5nx1tT5kJ/m/a5GnBWFQ9TST7vsFv/4Zn2/M+nVCngVIwNuwLA0BSHXQFgaErDrgAwdEmP5V0H7/wmn398sPUBAAAGb+aj3e//F07ccv/kxcCZZyeG0eX+P4yu1v3/fkfyOlmAc6XkDABGXo/7/92HCeb3/3uPI0rT9vyFI0F7jToAAAAGabI1JYVyfnlvMgqFcjnicuu1AKVkZa1WnY2IZyLid1OlD2T5udaWSc8xwwAAAAAAAAAAAAAAAAAAAAAAAABAW5omkQIAAADnWkThr8mv2s/yn5l6afL49YELyX+mIn9F6Ls/fPv7Nxebze25rPyfh+XNH+TlLw/jCgYAAACMhEd6gf9BP/2gHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg3T3zntLB9Npxv375yJiulP8YlxszS9GKSIm/pVE8ch2SUSMDSD+ePbnI53iJ1m1DkN2ij8+gPj7t06MH9P5t3A8/sRPIi4NID6Msvez48+bnfa/QlxpzTvvf8WIB/KPq/vxLw6Pf2Ndjj+X+4zx3O2fV7rGvxXxXLHz8ecgftIl/ot9xv/aV/f2ui1LfxQx0/H3J3kgVqW5sVVp7O5dX9tYXK2uVjfn5+deXXht4ZWF2crKWq2a/+0Y4zsf+8W9k9o/0SX+dI/2v9Rn+/93++adD7WTpU7xr77YIf6vf5yv8XD8Qv7b98k8nS2fOUjvt9NHPf+z3z5/UvuXu7S/1///ap/tv/blb/2pz1UBgFPQ2N1bX6zVqtvnNpH10s9ANSTOYOKbg/vA7IQ8TdNsn6pVr8R0PNbnJHEWvpZWYthHJgAAYNDun/QPuyYAAAAAAAAAAAAAAAAAAAAwuk7jcWLHY+4fppJBPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAg/h8AAP//quXTJw==")
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usb_connect$uac2(0x0, 0xaa, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0xc, 0xa0, 0xf8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffff, 0x7, 0x1e, 0x4}, [@effect_unit={0x9, 0x24, 0x7, 0xa, 0x1, 0x5, [0x0]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x1ff, 0x2f, 0x3, 0xa, 0x8, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x600, 0x5, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd77, 0x0, 0xff, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0xcd, 0x9, {0x8, 0x25, 0x1, 0x2, 0x3, 0x8, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb4, 0x0, 0x7, {0x8, 0x25, 0x1, 0x80, 0x30, 0xf, 0x5}}}}}}}}]}}, 0x0)

35.784297347s ago: executing program 32 (id=311):
r0 = gettid()
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$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")
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usb_connect$uac2(0x0, 0xaa, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0xc, 0xa0, 0xf8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffff, 0x7, 0x1e, 0x4}, [@effect_unit={0x9, 0x24, 0x7, 0xa, 0x1, 0x5, [0x0]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x1ff, 0x2f, 0x3, 0xa, 0x8, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x600, 0x5, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd77, 0x0, 0xff, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0xcd, 0x9, {0x8, 0x25, 0x1, 0x2, 0x3, 0x8, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb4, 0x0, 0x7, {0x8, 0x25, 0x1, 0x80, 0x30, 0xf, 0x5}}}}}}}}]}}, 0x0)

9.840736633s ago: executing program 4 (id=408):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
ioctl$TIOCPKT(r0, 0x5420, 0x0)
readv(r0, 0x0, 0x0)

9.632510845s ago: executing program 4 (id=410):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9.335548703s ago: executing program 4 (id=412):
r0 = eventfd2(0x2, 0x801)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x16c08, 0x1e, 0x0, 0x12)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="6effef930c53dea1", 0x8}], 0x1)

8.948105569s ago: executing program 4 (id=413):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000001f80)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x39, 0x14, 0x66, 0x0, 0x4, 0x11, 0x0, @loopback, @loopback}, {0x4e21, 0x4e22, 0x8}}}}}, 0x0)

8.153474208s ago: executing program 1 (id=417):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000006140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f666c7573685f6d657267652c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c696e6c696e655f78617474725f73697a653d3078303030303030303030303030303030632c00e863cd59e1f6a329db71886ce3bac8c29075314f1d7afec0cd24ffcf74aa2b1c809f629d1ba3849699bffbda66cb78b431a5ddcd3c1086269413aa903a605e639fefe8d3b54bb838f236b49a869657fb097235d5fc303322a330a2890bcca6ca"], 0x1, 0x105ab, &(0x7f000003f380)="$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")
mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0xd1)

6.657704991s ago: executing program 1 (id=420):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
r3 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c)

6.026287984s ago: executing program 2 (id=422):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000400000007"], 0x31)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
write$cgroup_int(r1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5.788389886s ago: executing program 2 (id=423):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, &(0x7f0000000500)=0x84)

5.486080462s ago: executing program 2 (id=424):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x66, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000100), 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x20001, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

5.064277478s ago: executing program 2 (id=426):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb6010203010902", @ANYRESHEX], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000000)={[{@errors_remount}]}, 0x80, 0x64a, &(0x7f00000001c0)="$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")

4.926582163s ago: executing program 0 (id=427):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000520001002bbd70"], 0x1c}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0xf}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

4.768803141s ago: executing program 0 (id=428):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x80, 0x5e}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x100, 0x40000e6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@multicast2, 0x3502, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf9, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

4.567110612s ago: executing program 0 (id=429):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d090000080003"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, 0x240448c0}, 0x0)

3.073692339s ago: executing program 0 (id=430):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000016d0cffbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000003704000000ffffffdd4005000000000034000000016d00007b13"], 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8e"], 0x650)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

3.059768384s ago: executing program 4 (id=431):
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r0 = gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = getpgid(r0)
rt_tgsigqueueinfo(r1, r0, 0x21, &(0x7f0000000200)={0x1f, 0x37c, 0x25})
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
read$FUSE(r2, &(0x7f0000002bc0)={0x2020}, 0x2020)

2.988000631s ago: executing program 1 (id=432):
r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34a}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000))
rt_sigprocmask(0x0, &(0x7f0000000000)={[0x100000000]}, 0x0, 0x8)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
io_uring_enter(r0, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8)

2.75983449s ago: executing program 2 (id=433):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r1 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2})

2.466008773s ago: executing program 1 (id=434):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

2.125369027s ago: executing program 0 (id=435):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)

1.812638689s ago: executing program 1 (id=436):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000040)="05", 0x1, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x5, r1, 0x0, &(0x7f0000adf000/0x3000)=nil, 0x3000, 0x40000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x3, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0xffffffff7fffffff})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x5, r1, 0x0, &(0x7f0000000400)='{', 0x1, 0x40})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000000140)="0e", 0x1, 0x9})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x14c0, 0x80000000})

1.394763052s ago: executing program 0 (id=437):
r0 = socket$kcm(0x23, 0x5, 0x0)
listen(r0, 0x800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
accept4(r0, 0x0, 0x0, 0x80000)

1.271632052s ago: executing program 1 (id=438):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1ff, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xbacce000)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20)

504.666913ms ago: executing program 2 (id=439):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
accept$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
ioctl$KDGETKEYCODE(r0, 0x4b4c, 0xffffffffffffffff)

0s ago: executing program 4 (id=440):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x4}, &(0x7f00000000c0)=0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts.
[   81.216240][ T5595] cgroup: Unknown subsys name 'net'
[   81.459100][ T5595] cgroup: Unknown subsys name 'cpuset'
[   81.510810][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.458101][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.146539][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.150716][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.165061][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.195902][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.198017][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.198745][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.211592][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.213147][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.219407][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.252131][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.253522][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.262792][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.274338][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.274465][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.289096][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.310799][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.313602][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.313771][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.363528][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.366964][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.390729][ T4924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.425091][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.428730][ T4924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.432791][ T4924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.455701][ T4924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.471967][   T61] Bluetooth: hci1: command tx timeout
[   89.481873][   T61] Bluetooth: hci0: command tx timeout
[   89.481895][ T5613] Bluetooth: hci4: command tx timeout
[   89.553048][ T5613] Bluetooth: hci2: command tx timeout
[   89.553162][ T5613] Bluetooth: hci3: command tx timeout
[   90.179851][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.180445][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.182025][ T5608] bridge_slave_0: entered allmulticast mode
[   90.191915][ T5608] bridge_slave_0: entered promiscuous mode
[   90.266896][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.267202][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.267444][ T5608] bridge_slave_1: entered allmulticast mode
[   90.270331][ T5608] bridge_slave_1: entered promiscuous mode
[   90.389700][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.392428][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.393099][ T5607] bridge_slave_0: entered allmulticast mode
[   90.402649][ T5607] bridge_slave_0: entered promiscuous mode
[   90.423740][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.424051][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.424333][ T5611] bridge_slave_0: entered allmulticast mode
[   90.427208][ T5611] bridge_slave_0: entered promiscuous mode
[   90.489631][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.489894][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.491698][ T5610] bridge_slave_0: entered allmulticast mode
[   90.505209][ T5610] bridge_slave_0: entered promiscuous mode
[   90.519704][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.521270][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.521914][ T5607] bridge_slave_1: entered allmulticast mode
[   90.531819][ T5607] bridge_slave_1: entered promiscuous mode
[   90.546506][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.547462][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.548344][ T5611] bridge_slave_1: entered allmulticast mode
[   90.561530][ T5611] bridge_slave_1: entered promiscuous mode
[   90.602442][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.602862][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.603187][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.604103][ T5610] bridge_slave_1: entered allmulticast mode
[   90.606498][ T5610] bridge_slave_1: entered promiscuous mode
[   90.671411][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.671645][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.671829][ T5609] bridge_slave_0: entered allmulticast mode
[   90.674234][ T5609] bridge_slave_0: entered promiscuous mode
[   90.695785][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.761825][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.762117][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.762362][ T5609] bridge_slave_1: entered allmulticast mode
[   90.767884][ T5609] bridge_slave_1: entered promiscuous mode
[   90.829523][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.843268][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.888948][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.901674][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.905988][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.948882][ T5608] team0: Port device team_slave_0 added
[   90.961844][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.009445][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.022874][ T5608] team0: Port device team_slave_1 added
[   91.085749][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.134369][ T5607] team0: Port device team_slave_0 added
[   91.146055][ T5611] team0: Port device team_slave_0 added
[   91.189249][ T5610] team0: Port device team_slave_0 added
[   91.197720][ T5607] team0: Port device team_slave_1 added
[   91.203706][ T5611] team0: Port device team_slave_1 added
[   91.229621][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.229633][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.229652][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.252199][ T5610] team0: Port device team_slave_1 added
[   91.318818][ T5609] team0: Port device team_slave_0 added
[   91.321759][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.321846][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.321925][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.413498][ T5609] team0: Port device team_slave_1 added
[   91.447752][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.447766][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.447785][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.456264][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.456324][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.456413][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.546811][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.546823][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.546842][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.549104][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.549114][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.549131][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.550267][   T61] Bluetooth: hci0: command tx timeout
[   91.550296][   T61] Bluetooth: hci4: command tx timeout
[   91.550318][   T61] Bluetooth: hci1: command tx timeout
[   91.568546][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.568584][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.568651][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.630115][ T5613] Bluetooth: hci3: command tx timeout
[   91.630149][ T5613] Bluetooth: hci2: command tx timeout
[   91.879585][   T10] cfg80211: failed to load regulatory.db
[   92.120365][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.120384][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.120413][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.183235][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.183246][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.183264][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.249836][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.249848][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.249865][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.343835][ T5608] hsr_slave_0: entered promiscuous mode
[   92.345560][ T5608] hsr_slave_1: entered promiscuous mode
[   92.472896][ T5607] hsr_slave_0: entered promiscuous mode
[   92.474434][ T5607] hsr_slave_1: entered promiscuous mode
[   92.475738][ T5607] debugfs: 'hsr0' already exists in 'hsr'
[   92.475837][ T5607] Cannot create hsr debugfs directory
[   92.496772][ T5611] hsr_slave_0: entered promiscuous mode
[   92.503924][ T5611] hsr_slave_1: entered promiscuous mode
[   92.508305][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   92.508378][ T5611] Cannot create hsr debugfs directory
[   92.566897][ T5610] hsr_slave_0: entered promiscuous mode
[   92.568846][ T5610] hsr_slave_1: entered promiscuous mode
[   92.571871][ T5610] debugfs: 'hsr0' already exists in 'hsr'
[   92.571922][ T5610] Cannot create hsr debugfs directory
[   92.742301][ T5609] hsr_slave_0: entered promiscuous mode
[   92.743911][ T5609] hsr_slave_1: entered promiscuous mode
[   92.745335][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   92.745375][ T5609] Cannot create hsr debugfs directory
[   93.630876][   T61] Bluetooth: hci1: command tx timeout
[   93.630909][   T61] Bluetooth: hci4: command tx timeout
[   93.630932][   T61] Bluetooth: hci0: command tx timeout
[   93.667221][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.714445][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.720367][ T5613] Bluetooth: hci2: command tx timeout
[   93.720396][ T5613] Bluetooth: hci3: command tx timeout
[   93.739711][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.768003][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.778819][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.835765][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.865100][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.884985][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.999029][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.028959][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   94.040613][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.083673][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   94.086498][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.127402][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   94.164276][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.194901][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   94.333531][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.376952][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   94.391210][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.426138][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   94.439103][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.477698][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   94.513721][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.545501][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   94.732513][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   94.764771][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   94.786535][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   94.816535][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   94.829557][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   94.864371][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   94.905083][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   94.942324][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   95.034592][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.107170][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.144375][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   95.165859][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.205024][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   95.218363][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.245079][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   95.273236][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.315437][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   95.366365][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   95.404983][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.442929][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.443089][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.534067][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.534225][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.613263][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[   95.675853][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.676027][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.720377][   T61] Bluetooth: hci0: command tx timeout
[   95.720391][ T5613] Bluetooth: hci4: command tx timeout
[   95.720421][   T61] Bluetooth: hci1: command tx timeout
[   95.754086][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.786273][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.786420][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.801397][ T5621] Bluetooth: hci3: command tx timeout
[   95.801411][   T61] Bluetooth: hci2: command tx timeout
[   95.922378][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   96.002767][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.016693][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.016938][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.103942][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.104154][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.271437][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   96.342278][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.352880][  T167] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.356709][  T167] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.448279][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.448481][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.566439][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   96.645149][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.645336][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.779253][  T167] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.779422][  T167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.406758][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.892062][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.013040][ T5608] veth0_vlan: entered promiscuous mode
[   98.133809][ T5608] veth1_vlan: entered promiscuous mode
[   98.244992][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.272405][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.482366][ T5607] veth0_vlan: entered promiscuous mode
[   98.557236][ T5608] veth0_macvtap: entered promiscuous mode
[   98.629327][ T5607] veth1_vlan: entered promiscuous mode
[   98.646955][ T5608] veth1_macvtap: entered promiscuous mode
[   98.773567][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.872720][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.874559][ T5609] veth0_vlan: entered promiscuous mode
[   98.924453][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.972103][ T5609] veth1_vlan: entered promiscuous mode
[   98.999312][ T1194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.024011][ T5607] veth0_macvtap: entered promiscuous mode
[   99.038036][ T1194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.069323][ T1194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.091769][ T1194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.098760][ T5607] veth1_macvtap: entered promiscuous mode
[   99.361296][ T5610] veth0_vlan: entered promiscuous mode
[   99.486071][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.536482][ T5611] veth0_vlan: entered promiscuous mode
[   99.653058][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.671614][ T5609] veth0_macvtap: entered promiscuous mode
[   99.724282][ T5610] veth1_vlan: entered promiscuous mode
[   99.798225][ T5611] veth1_vlan: entered promiscuous mode
[   99.814775][ T5609] veth1_macvtap: entered promiscuous mode
[   99.835398][ T1037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.846281][ T1037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.861737][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.862630][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.915405][ T1037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.936540][ T1037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.147343][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.147361][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.173119][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.309368][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.457408][ T5610] veth0_macvtap: entered promiscuous mode
[  100.467303][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.505944][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.520899][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.553087][ T5611] veth0_macvtap: entered promiscuous mode
[  100.567743][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.582445][ T5610] veth1_macvtap: entered promiscuous mode
[  100.602396][  T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.602415][  T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.641005][ T5611] veth1_macvtap: entered promiscuous mode
[  101.044766][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.137424][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.137445][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.221522][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.242906][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.309267][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.309356][ T1176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.361246][ T1176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.389429][ T1176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.410647][ T1176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.447960][ T1176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.450249][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.450267][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.474350][ T1176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.505756][ T1176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.523564][ T1176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.294482][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.294501][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.829577][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.829595][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.861560][ T5817] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  103.106062][ T1546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.106084][ T1546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.347108][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.347127][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.783638][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.783658][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.912630][ T5826] sctp: [Deprecated]: syz.0.11 (pid 5826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.912630][ T5826] Use struct sctp_sack_info instead
[  104.269385][ T5830] mmap: syz.3.12 (5830) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  104.685844][ T5837] loop1: detected capacity change from 0 to 128
[  104.815311][ T5833] loop0: detected capacity change from 0 to 4096
[  105.277789][ T5842] loop2: detected capacity change from 0 to 256
[  105.388675][ T5833] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  105.446615][ T5843] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  105.446644][ T5843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  105.530799][ T5843] vhci_hcd vhci_hcd.0: Device attached
[  105.656057][ T5847] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6)
[  105.656085][ T5847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  105.684950][ T5837] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  105.732419][ T5849] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5)
[  105.732445][ T5849] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  105.757047][ T5847] vhci_hcd vhci_hcd.0: Device attached
[  105.776630][ T5849] vhci_hcd vhci_hcd.0: Device attached
[  105.793918][ T5837] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  105.866630][ T5843] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11)
[  105.866656][ T5843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  105.901564][ T5843] vhci_hcd vhci_hcd.0: Device attached
[  105.906853][ T5850] vhci_hcd: connection closed
[  105.928925][ T5851] vhci_hcd: connection closed
[  106.008649][ T1037] vhci_hcd vhci_hcd.4: stop threads
[  106.025022][ T1037] vhci_hcd vhci_hcd.4: release socket
[  106.058683][ T1037] vhci_hcd vhci_hcd.4: disconnect device
[  106.072274][ T1037] vhci_hcd vhci_hcd.4: stop threads
[  106.072299][ T1037] vhci_hcd vhci_hcd.4: release socket
[  106.072362][ T1037] vhci_hcd vhci_hcd.4: disconnect device
[  106.072935][ T5841] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  106.110718][ T5855] vhci_hcd: connection closed
[  106.111333][ T5848] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  106.117658][ T5842] FAT-fs (loop2): Directory bread(block 1285) failed
[  106.117696][ T5842] FAT-fs (loop2): Directory bread(block 1286) failed
[  106.117730][ T5842] FAT-fs (loop2): Directory bread(block 1287) failed
[  106.165545][ T1176] vhci_hcd vhci_hcd.4: stop threads
[  106.165571][ T1176] vhci_hcd vhci_hcd.4: release socket
[  106.165644][ T1176] vhci_hcd vhci_hcd.4: disconnect device
[  106.169896][ T5846] vhci_hcd: connection closed
[  106.207575][ T5842] FAT-fs (loop2): Directory bread(block 1288) failed
[  106.239409][ T1176] vhci_hcd vhci_hcd.4: stop threads
[  106.239428][ T1176] vhci_hcd vhci_hcd.4: release socket
[  106.259481][ T1176] vhci_hcd vhci_hcd.4: disconnect device
[  106.397282][ T5842] FAT-fs (loop2): FAT read failed (blocknr 1281)
[  106.960837][ T5833] ntfs3(loop0): ino=19, mi_enum_attr
[  106.962189][ T5833] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  107.096148][ T5608] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.260238][ T5857] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  107.581140][ T5861] loop2: detected capacity change from 0 to 128
[  107.708251][ T5608] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  108.320361][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  108.708279][ T5880] tipc: Started in network mode
[  108.708316][ T5880] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  108.709045][ T5880] tipc: Enabled bearer <eth:vlan0>, priority 16
[  108.748705][ T5880] netlink: 48 bytes leftover after parsing attributes in process `syz.0.21'.
[  108.829116][ T5880] tipc: Resetting bearer <eth:vlan0>
[  109.001506][ T5804] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  109.032768][ T5885] loop2: detected capacity change from 0 to 2048
[  109.055040][ T5882] loop4: detected capacity change from 0 to 2048
[  109.077945][ T5888] Bluetooth: MGMT ver 1.23
[  109.121575][ T5885] =======================================================
[  109.121575][ T5885] WARNING: The mand mount option has been deprecated and
[  109.121575][ T5885]          and is ignored by this kernel. Remove the mand
[  109.121575][ T5885]          option from the mount to silence this warning.
[  109.121575][ T5885] =======================================================
[  109.277876][ T5882] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  109.281906][ T5882] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  109.356879][ T5885] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  109.411637][ T5885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.491004][ T5882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.757926][  T969] tipc: Node number set to 10005162
[  109.924991][   T37] audit: type=1800 audit(1778223832.371:2): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name=".log" dev="loop2" ino=1367 res=0 errno=0
[  110.894758][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  110.949256][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  111.260578][ T5841] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  111.473389][ T5917] loop2: detected capacity change from 0 to 1024
[  111.500992][ T5917] EXT4-fs: Ignoring removed orlov option
[  111.587612][ T5915] loop0: detected capacity change from 0 to 32768
[  111.695957][ T5915] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  111.695980][ T5915] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  111.955386][ T5917] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  111.955901][ T5917] System zones: 0-1, 3-12
[  112.059829][ T5915] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  112.184966][ T5746] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  112.184988][ T5746] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  112.186788][ T5917] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.386425][ T5933] loop4: detected capacity change from 0 to 256
[  112.704847][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  112.855945][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  112.930681][ T5941] loop1: detected capacity change from 0 to 512
[  112.937633][ T5933] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010076, chksum : 0x23d3c8ff, utbl_chksum : 0xe619d30d)
[  113.099497][ T5746] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 914ms
[  113.198924][ T5746] gfs2: fsid=syz:syz.0: jid=0: Done
[  113.206393][ T5915] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  113.401698][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.401869][ T5941] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.508557][ T5915] gfs2: fsid=syz:syz.0: found 1 quota changes
[  113.569191][ T5950] input: syz0 as /devices/virtual/input/input6
[  113.709304][ T5804] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  114.442991][ T5958] loop4: detected capacity change from 0 to 256
[  114.637863][ T5609] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[  114.637910][ T5609] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  114.637940][ T5609] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5609 [syz-executor] gfs2_quota_sync+0x370/0x470
[  114.637995][ T5609] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  114.638041][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  114.638083][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  114.638103][ T5609] Call Trace:
[  114.638111][ T5609]  <TASK>
[  114.638120][ T5609]  dump_stack_lvl+0xe8/0x150
[  114.638148][ T5609]  gfs2_withdraw+0xc3/0x1b0
[  114.638172][ T5609]  inode_go_instantiate+0xe69/0x12a0
[  114.638202][ T5609]  ? __pfx_inode_go_instantiate+0x10/0x10
[  114.638220][ T5609]  ? rt_spin_unlock+0x160/0x200
[  114.638262][ T5609]  gfs2_instantiate+0x168/0x220
[  114.638286][ T5609]  gfs2_glock_wait+0x1d7/0x2a0
[  114.638312][ T5609]  do_sync+0x49a/0xcb0
[  114.638341][ T5609]  ? gfs2_quota_sync+0x370/0x470
[  114.638378][ T5609]  ? __pfx_do_sync+0x10/0x10
[  114.638404][ T5609]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  114.638445][ T5609]  ? gfs2_quota_sync+0x370/0x470
[  114.638475][ T5609]  ? __rcu_read_unlock+0x83/0xe0
[  114.638508][ T5609]  ? rt_spin_unlock+0x160/0x200
[  114.638543][ T5609]  gfs2_quota_sync+0x370/0x470
[  114.638582][ T5609]  gfs2_sync_fs+0x4c/0xb0
[  114.638610][ T5609]  sync_filesystem+0xed/0x250
[  114.638644][ T5609]  generic_shutdown_super+0x77/0x2d0
[  114.638676][ T5609]  kill_block_super+0x44/0x90
[  114.638707][ T5609]  deactivate_locked_super+0xbc/0x130
[  114.638755][ T5609]  cleanup_mnt+0x437/0x4d0
[  114.638787][ T5609]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.638815][ T5609]  task_work_run+0x1d9/0x270
[  114.638845][ T5609]  ? __pfx_task_work_run+0x10/0x10
[  114.638882][ T5609]  exit_to_user_mode_loop+0xf3/0x4d0
[  114.638903][ T5609]  ? rcu_is_watching+0x15/0xb0
[  114.638929][ T5609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.638959][ T5609]  do_syscall_64+0x33e/0xf80
[  114.638984][ T5609]  ? trace_irq_disable+0x3b/0x140
[  114.639017][ T5609]  ? clear_bhb_loop+0x40/0x90
[  114.639044][ T5609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.639066][ T5609] RIP: 0033:0x7f8cb6f8e017
[  114.639092][ T5609] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  114.639110][ T5609] RSP: 002b:00007ffc752056f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  114.639132][ T5609] RAX: 0000000000000000 RBX: 00007f8cb7022120 RCX: 00007f8cb6f8e017
[  114.639145][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc752057b0
[  114.639158][ T5609] RBP: 00007ffc752057b0 R08: 00007ffc752067b0 R09: 00000000ffffffff
[  114.639174][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc75206840
[  114.639187][ T5609] R13: 00007f8cb7022120 R14: 000000000001bad9 R15: 00007ffc75206880
[  114.639221][ T5609]  </TASK>
[  114.639230][ T5609] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  114.822265][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.186507][ T5958] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  115.234102][ T5608] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  115.585811][ T5968] loop3: detected capacity change from 0 to 512
[  115.609568][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  115.645480][ T5968] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  115.645502][ T5968] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  115.722508][ T5746] hid-generic 00F2:0004:0009.0001: unknown main item tag 0x0
[  115.722550][ T5746] hid-generic 00F2:0004:0009.0001: unknown main item tag 0x0
[  115.722574][ T5746] hid-generic 00F2:0004:0009.0001: unknown main item tag 0x0
[  115.722598][ T5746] hid-generic 00F2:0004:0009.0001: unknown main item tag 0x0
[  115.722623][ T5746] hid-generic 00F2:0004:0009.0001: unknown main item tag 0x0
[  115.722646][ T5746] hid-generic 00F2:0004:0009.0001: unknown main item tag 0x0
[  115.722670][ T5746] hid-generic 00F2:0004:0009.0001: unknown main item tag 0x0
[  115.722694][ T5746] hid-generic 00F2:0004:0009.0001: unknown main item tag 0x0
[  115.722718][ T5746] hid-generic 00F2:0004:0009.0001: unknown main item tag 0x0
[  115.722742][ T5746] hid-generic 00F2:0004:0009.0001: unknown main item tag 0x0
[  115.852452][ T5971] loop4: detected capacity change from 0 to 512
[  115.991355][ T5971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.991498][ T5971] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.067713][ T5971] EXT4-fs (loop4): shut down requested (0)
[  116.079267][ T5968] EXT4-fs (loop3): 1 truncate cleaned up
[  116.102083][ T5968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.107484][ T5746] hid-generic 00F2:0004:0009.0001: hidraw0: <UNKNOWN> HID v0.04 Device [syz1] on syz0
[  116.371714][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.427214][ T5607] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0)
[  116.482309][ T5976] fido_id[5976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  116.611306][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.693808][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  116.821164][ T5984] loop2: detected capacity change from 0 to 64
[  117.560208][ T5986] hfs: request for non-existent node 65538 in B*Tree
[  117.560255][ T5986] hfs: request for non-existent node 65538 in B*Tree
[  117.560268][ T5986] hfs: fail to find leaf node: node ID 65538
[  117.879633][ T5982] loop4: detected capacity change from 0 to 32768
[  118.001982][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  118.220524][ T5979] loop3: detected capacity change from 0 to 32768
[  119.145921][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  119.277120][ T5990] loop2: detected capacity change from 0 to 32768
[  119.389537][ T5990] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.60 (5990)
[  119.638261][ T5607] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0)
[  119.951463][ T5990] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.951523][ T5990] BTRFS info (device loop2): using sha256 checksum algorithm
[  120.047852][ T5609] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566
[  120.047899][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  120.047926][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  120.047939][ T5609] Call Trace:
[  120.047948][ T5609]  <TASK>
[  120.047957][ T5609]  dump_stack_lvl+0xe8/0x150
[  120.047993][ T5609]  gfs2_assert_warn_i+0x194/0x2c0
[  120.048028][ T5609]  gfs2_make_fs_ro+0x30d/0x320
[  120.048061][ T5609]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  120.048090][ T5609]  ? __pfx_autoremove_wake_function+0x10/0x10
[  120.048137][ T5609]  ? flush_work+0xd/0x30
[  120.048164][ T5609]  gfs2_put_super+0x235/0x870
[  120.048201][ T5609]  ? __pfx_gfs2_put_super+0x10/0x10
[  120.048242][ T5609]  generic_shutdown_super+0x13d/0x2d0
[  120.048276][ T5609]  kill_block_super+0x44/0x90
[  120.048309][ T5609]  deactivate_locked_super+0xbc/0x130
[  120.048338][ T5609]  cleanup_mnt+0x437/0x4d0
[  120.048368][ T5609]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.048395][ T5609]  task_work_run+0x1d9/0x270
[  120.048423][ T5609]  ? __pfx_task_work_run+0x10/0x10
[  120.048459][ T5609]  exit_to_user_mode_loop+0xf3/0x4d0
[  120.048479][ T5609]  ? rcu_is_watching+0x15/0xb0
[  120.048513][ T5609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.048538][ T5609]  do_syscall_64+0x33e/0xf80
[  120.048564][ T5609]  ? trace_irq_disable+0x3b/0x140
[  120.048597][ T5609]  ? clear_bhb_loop+0x40/0x90
[  120.048625][ T5609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.048646][ T5609] RIP: 0033:0x7f8cb6f8e017
[  120.048678][ T5609] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  120.048695][ T5609] RSP: 002b:00007ffc752056f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  120.048726][ T5609] RAX: 0000000000000000 RBX: 00007f8cb7022120 RCX: 00007f8cb6f8e017
[  120.048741][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc752057b0
[  120.048754][ T5609] RBP: 00007ffc752057b0 R08: 00007ffc752067b0 R09: 00000000ffffffff
[  120.048770][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc75206840
[  120.048784][ T5609] R13: 00007f8cb7022120 R14: 000000000001bad9 R15: 00007ffc75206880
[  120.048818][ T5609]  </TASK>
[  120.708281][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.70'.
[  120.708397][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.70'.
[  120.778491][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  121.120554][ T6032] usb usb8: usbfs: process 6032 (syz.1.72) did not claim interface 0 before use
[  121.328896][ T5990] BTRFS info (device loop2): rebuilding free space tree
[  121.553658][ T6044] netlink: 64 bytes leftover after parsing attributes in process `syz.3.74'.
[  121.645399][ T6047] input: syz0 as /devices/virtual/input/input7
[  121.645540][ T6047] input: failed to attach handler leds to device input7, error: -6
[  122.391067][ T5990] BTRFS warning (device loop2): discard failed for extent [5328896, 5345279]: errno=-512 unknown
[  122.456975][ T5990] BTRFS info (device loop2): disabling free space tree
[  122.457210][ T5990] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  122.457240][ T5990] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  122.541931][ T6057] Zero length message leads to an empty skb
[  122.711823][ T5990] BTRFS warning (device loop2): discard failed for extent [5345280, 5353471]: errno=-512 unknown
[  122.797808][ T5990] BTRFS warning (device loop2): discard failed for extent [6881280, 6885375]: errno=-512 unknown
[  122.798973][ T5990] BTRFS info (device loop2): setting nodatasum
[  122.798990][ T5990] BTRFS info (device loop2): setting nodatacow
[  122.799002][ T5990] BTRFS info (device loop2): turning off barriers
[  122.799016][ T5990] BTRFS info (device loop2): turning on sync discard
[  122.799028][ T5990] BTRFS info (device loop2): force clearing of disk cache
[  123.040240][ T6065] input: syz1 as /devices/virtual/input/input8
[  123.040277][ T6065] input: failed to attach handler leds to device input8, error: -6
[  123.541102][ T5611] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  123.630874][ T6078] sctp: [Deprecated]: syz.3.88 (pid 6078) Use of int in max_burst socket option deprecated.
[  123.630874][ T6078] Use struct sctp_assoc_value instead
[  124.641309][ T6085] loop5: detected capacity change from 0 to 7
[  124.700543][ T6085] Dev loop5: unable to read RDB block 7
[  124.700592][ T6085]  loop5: unable to read partition table
[  124.700821][ T6085] loop5: partition table beyond EOD, truncated
[  124.700855][ T6085] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  124.912211][ T5804] __loop_clr_fd(loop5) clearing lo_backing_file (refcnt=0x0)
[  125.070792][ T6081] loop4: detected capacity change from 0 to 131072
[  125.133315][ T6081] F2FS-fs (loop4): invalid crc value
[  125.348178][ T6081] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  125.384397][ T6081] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  125.745062][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  126.369336][ T6094] loop2: detected capacity change from 0 to 512
[  126.402985][ T6094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  126.725999][ T6094] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.86: invalid indirect mapped block 4294967295 (level 1)
[  126.733700][ T6094] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  126.747729][    C0] EXT4-fs (loop2): initial error at time 1778223849: ext4_free_branches:1023: inode 11
[  126.747770][    C0] EXT4-fs (loop2): last error at time 1778223849: ext4_free_branches:1023: inode 11
[  126.872253][ T6094] EXT4-fs (loop2): Remounting filesystem read-only
[  126.873493][ T6094] EXT4-fs (loop2): 2 truncates cleaned up
[  126.905220][ T6094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.945346][ T6094] EXT4-fs (loop2): shut down requested (2)
[  126.945649][ T6094] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  127.380625][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.460452][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  127.834908][ T6101] loop3: detected capacity change from 0 to 128
[  127.923278][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  128.123886][ T6101] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  129.010485][ T5607] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0)
[  129.043653][ T6108] loop2: detected capacity change from 0 to 512
[  129.063516][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'.
[  129.093864][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'.
[  129.253059][ T6108] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.98: corrupted inode contents
[  129.253096][ T6108] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  129.260198][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  129.260222][    C1] EXT4-fs (loop2): initial error at time 1778223851: ext4_do_update_inode:5690: inode 16
[  129.260255][    C1] EXT4-fs (loop2): last error at time 1778223851: ext4_do_update_inode:5690: inode 16
[  129.338150][ T6108] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.98: mark_inode_dirty error
[  129.338186][ T6108] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  129.353846][ T6108] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.98: corrupted inode contents
[  129.353878][ T6108] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  129.399332][ T6108] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.98: mark_inode_dirty error
[  129.399357][ T6108] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  129.484134][ T6108] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.98: corrupted inode contents
[  129.484169][ T6108] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  129.546595][ T6108] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  129.546805][ T6108] loop2: lost filesystem error report for type 5 error -117
[  129.547834][ T6108] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.98: corrupted inode contents
[  129.547865][ T6108] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  129.610690][ T6108] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.98: mark_inode_dirty error
[  129.610726][ T6108] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  129.733130][ T6108] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  129.733160][ T6108] loop2: lost filesystem error report for type 5 error -117
[  129.887684][ T6108] EXT4-fs (loop2): 1 truncate cleaned up
[  129.947575][ T6108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.947742][ T6108] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.209939][ T6119] loop0: detected capacity change from 0 to 32768
[  130.211250][ T6119] btrfs: Deprecated parameter 'usebackuproot'
[  130.211272][ T6119] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  130.222672][ T6119] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.101 (6119)
[  131.209901][ T6119] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.209939][ T6119] BTRFS info (device loop0): using crc32c checksum algorithm
[  131.554001][ T6125] loop3: detected capacity change from 0 to 131072
[  131.710821][ T1546] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  131.711733][ T6119] BTRFS error (device loop0): failed to load root extent
[  131.712955][ T6119] BTRFS warning (device loop0): try to load backup roots slot 1
[  131.717892][   T44] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  131.718030][ T6119] BTRFS warning (device loop0): couldn't read tree root
[  131.718051][ T6119] BTRFS warning (device loop0): try to load backup roots slot 2
[  131.718706][   T44] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  131.718829][ T6119] BTRFS warning (device loop0): couldn't read tree root
[  131.718850][ T6119] BTRFS warning (device loop0): try to load backup roots slot 3
[  131.799021][ T6125] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  131.849487][ T6119] BTRFS info (device loop0): rebuilding free space tree
[  132.043074][ T6119] BTRFS info (device loop0): checking UUID tree
[  132.050788][ T6119] BTRFS info (device loop0): enabling ssd optimizations
[  132.050816][ T6119] BTRFS info (device loop0): turning on async discard
[  132.050833][ T6119] BTRFS info (device loop0): enabling free space tree
[  132.050850][ T6119] BTRFS info (device loop0): force clearing of disk cache
[  132.050867][ T6119] BTRFS info (device loop0): enabling auto defrag
[  132.050883][ T6119] BTRFS info (device loop0): trying to use backup root at mount time
[  132.050913][ T6119] BTRFS info (device loop0): use zstd compression, level 3
[  132.062923][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.117746][   T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  132.117772][   T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  132.117799][   T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  132.117814][   T61] Workqueue: hci3 hci_rx_work
[  132.117845][   T61] Call Trace:
[  132.117854][   T61]  <TASK>
[  132.117864][   T61]  dump_stack_lvl+0xe8/0x150
[  132.117899][   T61]  sysfs_create_dir_ns+0x271/0x2a0
[  132.117929][   T61]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  132.117967][   T61]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  132.118001][   T61]  ? rt_spin_unlock+0x160/0x200
[  132.118048][   T61]  kobject_add_internal+0x631/0xd10
[  132.118092][   T61]  kobject_add+0x163/0x240
[  132.118131][   T61]  ? __pfx_kobject_add+0x10/0x10
[  132.118171][   T61]  ? get_device_parent+0x370/0x3a0
[  132.118226][   T61]  device_add+0x408/0xb90
[  132.118263][   T61]  hci_conn_add_sysfs+0xd5/0x210
[  132.118292][   T61]  le_conn_complete_evt+0x10e6/0x16b0
[  132.118341][   T61]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  132.118375][   T61]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  132.118401][   T61]  ? lockdep_hardirqs_on+0x7a/0x110
[  132.118430][   T61]  ? skb_pull_data+0xfb/0x200
[  132.118463][   T61]  hci_le_conn_complete_evt+0x187/0x470
[  132.118503][   T61]  hci_event_packet+0x659/0xef0
[  132.118537][   T61]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  132.118568][   T61]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  132.118598][   T61]  ? __pfx_hci_event_packet+0x10/0x10
[  132.118623][   T61]  ? rt_spin_unlock+0x14f/0x200
[  132.118666][   T61]  ? hci_send_to_monitor+0xe2/0x590
[  132.118703][   T61]  hci_rx_work+0x3ee/0x1040
[  132.118755][   T61]  ? process_one_work+0x8be/0x1630
[  132.118785][   T61]  process_one_work+0x98b/0x1630
[  132.118838][   T61]  ? __pfx_process_one_work+0x10/0x10
[  132.118867][   T61]  ? do_raw_spin_lock+0x12b/0x2f0
[  132.118918][   T61]  worker_thread+0xb49/0x1140
[  132.118978][   T61]  kthread+0x388/0x470
[  132.119002][   T61]  ? __pfx_worker_thread+0x10/0x10
[  132.119033][   T61]  ? __pfx_kthread+0x10/0x10
[  132.119058][   T61]  ret_from_fork+0x514/0xb70
[  132.119088][   T61]  ? __pfx_ret_from_fork+0x10/0x10
[  132.119116][   T61]  ? __switch_to+0xc79/0x1410
[  132.119141][   T61]  ? __pfx_kthread+0x10/0x10
[  132.119166][   T61]  ret_from_fork_asm+0x1a/0x30
[  132.119215][   T61]  </TASK>
[  132.119247][   T61] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  132.119289][   T61] Bluetooth: hci3: failed to register connection device
[  132.496020][ T5624] hid_parser_main: 17 callbacks suppressed
[  132.496045][ T5624] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  132.540147][ T5624] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  132.577974][ T6125] XFS (loop3): Starting recovery (logdev: internal)
[  132.680390][ T6125] XFS (loop3): Ending recovery (logdev: internal)
[  132.826011][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  132.865581][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  132.865714][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  133.156446][ T6166] loop4: detected capacity change from 0 to 256
[  133.291299][ T6166] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.611714][ T5607] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  133.773863][   T37] audit: type=1800 audit(1778223856.281:3): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.109" name="file1" dev="loop4" ino=1048606 res=0 errno=0
[  133.782434][ T6171] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048)
[  133.782462][ T6171] FAT-fs (loop4): Filesystem has been set read-only
[  133.991023][ T5609] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.267808][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  134.724106][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  134.769779][ T6177] loop4: detected capacity change from 0 to 32768
[  134.966823][ T6177] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  135.026308][ T6177] JBD2: Ignoring recovery information on journal
[  135.141547][ T5607] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0)
[  135.227027][ T6177] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  135.331256][   T37] audit: type=1800 audit(1778223857.831:4): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.112" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  136.726550][ T5610] ocfs2: Unmounting device (7,4) on (node local)
[  136.818344][ T6210] loop3: detected capacity change from 0 to 256
[  136.900231][ T6210] FAT-fs (loop3): Directory bread(block 64) failed
[  136.900266][ T6210] FAT-fs (loop3): Directory bread(block 65) failed
[  136.900382][ T6210] FAT-fs (loop3): Directory bread(block 66) failed
[  136.900406][ T6210] FAT-fs (loop3): Directory bread(block 67) failed
[  136.900515][ T6210] FAT-fs (loop3): Directory bread(block 68) failed
[  136.900538][ T6210] FAT-fs (loop3): Directory bread(block 69) failed
[  136.900637][ T6210] FAT-fs (loop3): Directory bread(block 70) failed
[  136.900661][ T6210] FAT-fs (loop3): Directory bread(block 71) failed
[  136.900763][ T6210] FAT-fs (loop3): Directory bread(block 72) failed
[  136.900786][ T6210] FAT-fs (loop3): Directory bread(block 73) failed
[  137.357718][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  137.604851][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'.
[  137.605077][ T6220] netlink: 'syz.1.127': attribute type 5 has an invalid length.
[  137.605112][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.127'.
[  137.691386][ T6220] geneve2: entered promiscuous mode
[  137.691411][ T6220] geneve2: entered allmulticast mode
[  137.713309][   T43] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  137.713533][   T43] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  137.713571][   T43] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  137.713601][   T43] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  137.842965][ T5607] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0)
[  138.450135][ T5747] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  138.722139][ T5747] usb 5-1: Using ep0 maxpacket: 16
[  138.788564][ T5747] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  138.788596][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.163620][ T5747] usb 5-1: config 0 descriptor??
[  139.409039][ T6257] input: syz1 as /devices/virtual/input/input9
[  139.654141][ T5747] gspca_main: sonixj-2.14.0 probing 0471:0327
[  140.369282][ T6275] loop0: detected capacity change from 0 to 512
[  140.389785][ T6275] EXT4-fs: inline encryption not supported
[  140.483840][ T6275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  140.483858][ T6275] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  140.516836][ T5747] gspca_sonixj: reg_w1 err -71
[  140.539364][ T5747] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  140.762004][ T5747] usb 5-1: USB disconnect, device number 2
[  140.835149][ T6275] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 1
[  140.839932][ T6275] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[  140.878291][ T6275] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.145: Failed to acquire dquot type 1
[  140.878313][ T6275] loop0: lost filesystem error report for type 5 error -5
[  140.880156][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  140.880211][    C0] EXT4-fs (loop0): initial error at time 1778223863: ext4_acquire_dquot:7034
[  140.880291][    C0] EXT4-fs (loop0): last error at time 1778223863: ext4_acquire_dquot:7034
[  140.930062][ T6275] EXT4-fs (loop0): Remounting filesystem read-only
[  140.930210][ T6275] EXT4-fs (loop0): 1 truncate cleaned up
[  141.090801][ T6275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.096792][ T6275] EXT4-fs (loop0): shut down requested (0)
[  141.286388][ T6291] loop2: detected capacity change from 0 to 256
[  141.534426][ T6291] FAT-fs (loop2): Directory bread(block 64) failed
[  141.534461][ T6291] FAT-fs (loop2): Directory bread(block 65) failed
[  141.534560][ T6291] FAT-fs (loop2): Directory bread(block 66) failed
[  141.534582][ T6291] FAT-fs (loop2): Directory bread(block 67) failed
[  141.534699][ T6291] FAT-fs (loop2): Directory bread(block 68) failed
[  141.534720][ T6291] FAT-fs (loop2): Directory bread(block 69) failed
[  141.534811][ T6291] FAT-fs (loop2): Directory bread(block 70) failed
[  141.534831][ T6291] FAT-fs (loop2): Directory bread(block 71) failed
[  141.534921][ T6291] FAT-fs (loop2): Directory bread(block 72) failed
[  141.534944][ T6291] FAT-fs (loop2): Directory bread(block 73) failed
[  141.841174][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  142.232614][ T6306] capability: warning: `syz.4.157' uses deprecated v2 capabilities in a way that may be insecure
[  142.335896][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.524280][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  142.695162][ T6319] loop0: detected capacity change from 0 to 128
[  142.908639][ T6319] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  142.920947][ T6319] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  143.251135][ T5609] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.349784][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  143.810466][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'.
[  143.810501][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'.
[  143.850656][ T5745] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  144.029940][ T6343] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  144.041065][ T5745] usb 3-1: Using ep0 maxpacket: 32
[  144.068280][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'.
[  144.081476][ T5745] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  144.099593][ T5745] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  144.099623][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  144.099645][ T5745] usb 3-1: Product: syz
[  144.099661][ T5745] usb 3-1: Manufacturer: syz
[  144.099676][ T5745] usb 3-1: SerialNumber: syz
[  144.225593][ T6350] tls_set_device_offload: netdev not found
[  144.244064][ T5745] usb 3-1: config 0 descriptor??
[  144.251467][ T6334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  145.022492][ T6345] loop1: detected capacity change from 0 to 32768
[  145.232819][ T6345] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  145.488851][ T5745] usb 3-1: USB disconnect, device number 2
[  146.406320][ T6378] loop8: detected capacity change from 0 to 8
[  146.493679][ T6378] Dev loop8: unable to read RDB block 8
[  146.493723][ T6378]  loop8: unable to read partition table
[  146.493913][ T6378] loop8: partition table beyond EOD, truncated
[  146.494311][ T6378] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  146.513337][ T5746] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  146.621248][ T5804] __loop_clr_fd(loop8) clearing lo_backing_file (refcnt=0x0)
[  146.762540][ T5746] usb 4-1: Using ep0 maxpacket: 8
[  146.777577][ T5746] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  146.777637][ T5746] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  146.777653][ T5746] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  146.777671][ T5746] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  146.777687][ T5746] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  146.777720][ T5746] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  146.777736][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.987221][ T6382] bridge_slave_0: left allmulticast mode
[  146.987254][ T6382] bridge_slave_0: left promiscuous mode
[  147.104307][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.313807][ T5746] usb 4-1: usb_control_msg returned -32
[  147.313844][ T5746] usbtmc 4-1:16.0: can't read capabilities
[  147.524101][ T5608] ocfs2: Unmounting device (7,1) on (node local)
[  147.573453][ T5608] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  147.655992][ T6382] bridge_slave_1: left allmulticast mode
[  147.656018][ T6382] bridge_slave_1: left promiscuous mode
[  147.656207][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.910586][ T6391] trusted_key: syz.1.183 sent an empty control message without MSG_MORE.
[  148.015138][ T6382] bond0: (slave bond_slave_0): Releasing backup interface
[  148.237738][ T6382] bond0: (slave bond_slave_1): Releasing backup interface
[  148.423968][ T6382] team0: Port device team_slave_0 removed
[  148.502766][ T6382] team0: Port device team_slave_1 removed
[  148.503708][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.503727][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.563066][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.563095][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.616567][ T6382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  149.046054][ T6413] loop4: detected capacity change from 0 to 128
[  149.264356][ T6413] affs: No valid root block on device loop4
[  149.265079][ T6413] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  149.345172][ T5624] usb 4-1: USB disconnect, device number 2
[  149.546253][ T6415] macvlan2: entered promiscuous mode
[  149.546680][ T6415] macvlan2: entered allmulticast mode
[  149.546697][ T6415] gretap0: entered allmulticast mode
[  149.626425][ T6421] netlink: 36 bytes leftover after parsing attributes in process `syz.3.197'.
[  150.308438][ T6435] loop3: detected capacity change from 0 to 2048
[  150.419075][ T6435]  loop3: p3 < > p4 < >
[  150.419108][ T6435] loop3: partition table partially beyond EOD, truncated
[  150.419348][ T6435] loop3: p3 start 4284289 is beyond EOD, truncated
[  150.910110][ T6449] loop0: detected capacity change from 0 to 512
[  150.911416][ T6449] EXT4-fs: Ignoring removed orlov option
[  150.911441][ T6449] EXT4-fs: Ignoring removed mblk_io_submit option
[  150.911459][ T6449] EXT4-fs: Ignoring removed mblk_io_submit option
[  150.995626][ T6449] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.210: corrupted in-inode xattr: e_value size too large
[  150.995661][ T6449] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  151.000131][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  151.000164][    C1] EXT4-fs (loop0): initial error at time 1778223873: ext4_iget_extra_inode:5128: inode 15
[  151.000198][    C1] EXT4-fs (loop0): last error at time 1778223873: ext4_iget_extra_inode:5128: inode 15
[  151.050325][ T6449] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.210: couldn't read orphan inode 15 (err -117)
[  151.050363][ T6449] loop0: lost filesystem error report for type 5 error -117
[  151.124106][ T6449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.214553][ T5804] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0)
[  151.262907][ T6436] loop4: detected capacity change from 0 to 32768
[  151.403655][ T6458] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 12: comm syz.0.210: lblock 3 mapped to illegal pblock 12 (length 1)
[  151.469219][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'.
[  151.675902][ T6436] JBD2: Ignoring recovery information on journal
[  151.746691][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.849119][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  152.142308][ T6436] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  152.779588][ T6474] syz.4.204 (6474) used greatest stack depth: 17912 bytes left
[  153.275491][ T5610] ocfs2: Unmounting device (7,4) on (node local)
[  153.410159][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  153.930340][ T6509] loop3: detected capacity change from 0 to 512
[  154.016956][ T6509] EXT4-fs (loop3): 1 truncate cleaned up
[  154.036197][ T6509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.370374][ T6514] loop4: detected capacity change from 0 to 32768
[  154.371600][ T6514] btrfs: Deprecated parameter 'usebackuproot'
[  154.371621][ T6514] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  154.372697][ T6514] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.223 (6514)
[  154.423567][ T6514] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.423600][ T6514] BTRFS info (device loop4): using crc32c checksum algorithm
[  154.766953][   T13] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  154.767099][ T6514] BTRFS error (device loop4): failed to load root extent
[  154.767145][ T6514] BTRFS warning (device loop4): try to load backup roots slot 1
[  154.786488][   T13] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  154.820217][ T6514] BTRFS warning (device loop4): couldn't read tree root
[  154.820239][ T6514] BTRFS warning (device loop4): try to load backup roots slot 2
[  154.840862][ T1194] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  154.840975][ T6514] BTRFS warning (device loop4): couldn't read tree root
[  154.840996][ T6514] BTRFS warning (device loop4): try to load backup roots slot 3
[  154.891455][ T6514] BTRFS info (device loop4): rebuilding free space tree
[  154.942373][ T6514] BTRFS info (device loop4): checking UUID tree
[  154.944420][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.967096][ T6514] BTRFS info (device loop4): enabling ssd optimizations
[  154.967123][ T6514] BTRFS info (device loop4): turning on async discard
[  154.967140][ T6514] BTRFS info (device loop4): enabling free space tree
[  154.967157][ T6514] BTRFS info (device loop4): force clearing of disk cache
[  154.967174][ T6514] BTRFS info (device loop4): enabling auto defrag
[  154.967190][ T6514] BTRFS info (device loop4): trying to use backup root at mount time
[  154.967209][ T6514] BTRFS info (device loop4): use lzo compression, level 1
[  155.150576][ T5607] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0)
[  156.075428][ T5610] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.217523][ T6519] loop0: detected capacity change from 0 to 32768
[  156.254417][ T6552] loop1: detected capacity change from 0 to 32768
[  156.255646][ T6552] btrfs: Deprecated parameter 'usebackuproot'
[  156.255667][ T6552] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  156.257287][ T6519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.234 (6519)
[  156.311942][ T6552] BTRFS info: device /dev/loop1 (7:1) using temp-fsid e0ad367d-8466-4b0e-8e58-4b0f123f3ced
[  156.312011][ T6552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.243 (6552)
[  156.412756][ T6552] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.412793][ T6552] BTRFS info (device loop1): using crc32c checksum algorithm
[  156.572146][ T6519] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.572181][ T6519] BTRFS info (device loop0): using sha256 checksum algorithm
[  156.931591][ T6566] loop3: detected capacity change from 0 to 32768
[  156.985230][   T43] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  156.986428][ T6552] BTRFS error (device loop1): failed to load root extent
[  156.986475][ T6552] BTRFS warning (device loop1): try to load backup roots slot 1
[  156.995519][  T182] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  156.995630][ T6552] BTRFS warning (device loop1): couldn't read tree root
[  156.995651][ T6552] BTRFS warning (device loop1): try to load backup roots slot 2
[  156.996939][  T182] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  156.997039][ T6552] BTRFS warning (device loop1): couldn't read tree root
[  156.997058][ T6552] BTRFS warning (device loop1): try to load backup roots slot 3
[  157.005811][ T6545] loop2: detected capacity change from 0 to 32768
[  157.122204][ T6566] JBD2: Ignoring recovery information on journal
[  157.196353][ T6566] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  157.255821][ T6552] BTRFS info (device loop1): rebuilding free space tree
[  157.314822][ T6519] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  157.376518][ T6519] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  157.404229][ T6552] BTRFS info (device loop1): checking UUID tree
[  157.437000][ T6552] BTRFS info (device loop1): enabling ssd optimizations
[  157.437027][ T6552] BTRFS info (device loop1): disabling tree log
[  157.437044][ T6552] BTRFS info (device loop1): turning on async discard
[  157.437061][ T6552] BTRFS info (device loop1): enabling free space tree
[  157.437076][ T6552] BTRFS info (device loop1): force clearing of disk cache
[  157.437091][ T6552] BTRFS info (device loop1): enabling auto defrag
[  157.437106][ T6552] BTRFS info (device loop1): trying to use backup root at mount time
[  157.437124][ T6552] BTRFS info (device loop1): force zlib compression, level 3
[  157.439236][ T6519] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  157.439598][ T6519] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  157.480148][ T6519] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  157.561190][ T6519] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  157.561554][ T6519] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  157.692006][ T6519] BTRFS error (device loop0): open_ctree failed: -12
[  158.025194][ T6545] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.199666][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  158.314352][ T5608] BTRFS info (device loop1): last unmount of filesystem e0ad367d-8466-4b0e-8e58-4b0f123f3ced
[  158.386771][ T5607] ocfs2: Unmounting device (7,3) on (node local)
[  158.465802][ T5607] __loop_clr_fd(loop3) clearing lo_backing_file (refcnt=0x0)
[  158.478188][ T6545] XFS (loop2): Ending clean mount
[  158.671887][ T5857] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  158.843950][ T5611] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.560387][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  159.739249][ T5804] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  159.909421][ T6617] loop4: detected capacity change from 0 to 128
[  159.921797][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.251'.
[  159.921928][ T6616] netlink: 'syz.1.251': attribute type 3 has an invalid length.
[  159.921943][ T6616] netlink: 'syz.1.251': attribute type 2 has an invalid length.
[  159.921956][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'.
[  160.212819][ T6617] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  160.245101][ T6617] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  160.757020][ T6634] loop1: detected capacity change from 0 to 32768
[  160.964487][   T37] audit: type=1800 audit(1778223883.471:5): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.256" name="file1" dev="loop1" ino=4 res=0 errno=0
[  161.314319][ T5610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  161.501180][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  162.057444][ T6659] loop2: detected capacity change from 0 to 32768
[  162.067289][ T6659] btrfs: Deprecated parameter 'usebackuproot'
[  162.067310][ T6659] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  162.068641][ T6659] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.262 (6659)
[  162.123659][ T6659] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.123692][ T6659] BTRFS info (device loop2): using crc32c checksum algorithm
[  162.247710][ T5746] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  162.247971][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  162.257306][ T6663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.264'.
[  162.404348][ T5804] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  162.431070][ T5746] usb 5-1: device descriptor read/64, error -32
[  162.431145][ T6646] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  162.431333][ T6659] BTRFS error (device loop2): failed to load root extent
[  162.431374][ T6659] BTRFS warning (device loop2): try to load backup roots slot 1
[  162.478298][ T6641] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  162.478749][ T6659] BTRFS warning (device loop2): couldn't read tree root
[  162.478810][ T6659] BTRFS warning (device loop2): try to load backup roots slot 2
[  162.482607][ T6646] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  162.482931][ T6659] BTRFS warning (device loop2): couldn't read tree root
[  162.482979][ T6659] BTRFS warning (device loop2): try to load backup roots slot 3
[  162.606944][ T6659] BTRFS info (device loop2): rebuilding free space tree
[  162.814314][ T5746] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  162.888322][ T6659] BTRFS info (device loop2): checking UUID tree
[  162.905908][ T6659] BTRFS info (device loop2): enabling ssd optimizations
[  162.905935][ T6659] BTRFS info (device loop2): turning on async discard
[  162.905952][ T6659] BTRFS info (device loop2): enabling free space tree
[  162.905967][ T6659] BTRFS info (device loop2): force clearing of disk cache
[  162.905983][ T6659] BTRFS info (device loop2): enabling auto defrag
[  162.905999][ T6659] BTRFS info (device loop2): trying to use backup root at mount time
[  162.906017][ T6659] BTRFS info (device loop2): use lzo compression, level 1
[  162.979476][ T5746] usb 5-1: unable to get BOS descriptor or descriptor too short
[  162.989584][ T5746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.989612][ T5746] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  162.989661][ T5746] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  162.989701][ T5746] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  162.989745][ T5746] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  162.989774][ T5746] usb 5-1: config 1 interface 1 has no altsetting 0
[  163.008567][ T5746] usb 5-1: string descriptor 0 read error: -22
[  163.008717][ T5746] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  163.008744][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.323575][ T6685] bond1: entered allmulticast mode
[  163.386720][ T6685] 8021q: adding VLAN 0 to HW filter on device bond1
[  163.419504][ T6686] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  163.419534][ T6686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.169889][ T5611] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.391723][ T5746] usb 5-1: 2:0: failed to get current value for ch 1 (-32)
[  165.008978][ T6707] loop0: detected capacity change from 0 to 1024
[  165.202954][ T5746] usb 5-1: USB disconnect, device number 4
[  165.300274][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  165.345283][ T6707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  165.345414][ T6707] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.999632][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  166.141224][ T5745] kernel write not supported for file bpf-prog (pid: 5745 comm: kworker/0:4)
[  166.187320][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  166.577832][ T6731] loop1: detected capacity change from 0 to 1024
[  166.831170][ T6731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  166.831335][ T6731] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.896899][ T6730] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.279: lblock 0 mapped to illegal pblock 0 (length 1)
[  166.933051][ T6730] EXT4-fs (loop1): Remounting filesystem read-only
[  167.251060][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  167.357460][ T5608] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  168.318645][ T6755] loop0: detected capacity change from 0 to 32768
[  168.319909][ T6755] btrfs: Deprecated parameter 'usebackuproot'
[  168.319931][ T6755] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  168.320800][ T6755] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.288 (6755)
[  168.415889][ T6755] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.415923][ T6755] BTRFS info (device loop0): using crc32c checksum algorithm
[  168.698854][ T1546] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  168.702180][ T6755] BTRFS error (device loop0): failed to load root extent
[  168.702222][ T6755] BTRFS warning (device loop0): try to load backup roots slot 1
[  168.727409][ T6641] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  168.727589][ T6755] BTRFS warning (device loop0): couldn't read tree root
[  168.727611][ T6755] BTRFS warning (device loop0): try to load backup roots slot 2
[  168.754735][ T6642] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  168.754856][ T6755] BTRFS warning (device loop0): couldn't read tree root
[  168.754876][ T6755] BTRFS warning (device loop0): try to load backup roots slot 3
[  168.844058][ T6755] BTRFS info (device loop0): rebuilding free space tree
[  169.125121][ T6755] BTRFS info (device loop0): checking UUID tree
[  169.125509][ T6755] BTRFS info (device loop0): enabling ssd optimizations
[  169.125531][ T6755] BTRFS info (device loop0): turning on async discard
[  169.125547][ T6755] BTRFS info (device loop0): enabling free space tree
[  169.125563][ T6755] BTRFS info (device loop0): force clearing of disk cache
[  169.125580][ T6755] BTRFS info (device loop0): enabling auto defrag
[  169.125596][ T6755] BTRFS info (device loop0): trying to use backup root at mount time
[  169.125633][ T6755] BTRFS info (device loop0): use zstd compression, level 3
[  169.903917][ T5609] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.827444][ T5804] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  170.887789][ T6796] loop1: detected capacity change from 0 to 32768
[  170.896254][ T6796] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.297 (6796)
[  170.954621][ T6796] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.954656][ T6796] BTRFS info (device loop1): using sha256 checksum algorithm
[  171.217202][ T6796] BTRFS info (device loop1): enabling ssd optimizations
[  171.217230][ T6796] BTRFS info (device loop1): turning on async discard
[  171.217248][ T6796] BTRFS info (device loop1): enabling free space tree
[  171.324596][ T6811] process 'syz.0.299' launched '/dev/fd/6' with NULL argv: empty string added
[  172.100350][ T5746] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  172.263702][ T5746] usb 3-1: Using ep0 maxpacket: 32
[  172.266290][ T5746] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  172.266317][ T5746] usb 3-1: config 0 has no interface number 0
[  172.266366][ T5746] usb 3-1: config 0 interface 12 has no altsetting 0
[  172.269404][ T5746] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  172.269433][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.269453][ T5746] usb 3-1: Product: syz
[  172.269469][ T5746] usb 3-1: Manufacturer: syz
[  172.269484][ T5746] usb 3-1: SerialNumber: syz
[  172.417839][ T5746] usb 3-1: config 0 descriptor??
[  172.604196][ T5608] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  173.932151][ T5746] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[  173.932222][ T5746] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  173.932240][ T5746] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  173.932330][ T5746] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  173.988892][ T6595] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  174.074248][ T5746] usb 3-1: USB disconnect, device number 3
[  174.601264][ T6830] tipc: Enabled bearer <udp:syz2>, priority 10
[  174.790463][ T6834] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  176.094874][ T6858] loop4: detected capacity change from 0 to 2048
[  176.991311][ T6854] loop0: detected capacity change from 0 to 131072
[  177.009283][ T6854] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  177.009310][ T6854] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  177.095043][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.169171][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.188893][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.189180][ T6854] F2FS-fs (loop0): invalid crc value
[  177.229308][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.268044][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.373996][ T6854] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  177.419348][ T6854] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  177.419383][ T6854] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  177.575937][ T5867] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.632797][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.106916][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.367881][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  179.401947][   T61] Bluetooth: hci0: command tx timeout
[  179.719844][ T5867] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.994090][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  180.142610][ T6894] loop2: detected capacity change from 0 to 128
[  180.143876][ T6894] EXT4-fs: Ignoring removed nomblk_io_submit option
[  180.180256][ T6894] EXT4-fs (loop2): Test dummy encryption mode enabled
[  180.214041][ T6894] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.217478][ T6894] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  180.267005][ T6894] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  180.574800][ T5867] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.625948][ T6894] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.885576][ T5611] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.990742][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  181.179815][ T6904] batadv_slave_1: entered promiscuous mode
[  181.181025][ T6906] syz_tun: entered promiscuous mode
[  181.275841][ T6898] loop4: detected capacity change from 0 to 32768
[  181.312137][ T6898] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  181.472995][   T61] Bluetooth: hci0: command tx timeout
[  181.498761][ T6898] XFS (loop4): Ending clean mount
[  181.642846][   T37] audit: type=1326 audit(1778223904.121:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.0.319" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cb6f8cdd9 code=0x0
[  181.728901][ T5867] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.791530][ T6903] syz_tun: left promiscuous mode
[  181.791788][ T6903] batadv_slave_1: left promiscuous mode
[  182.443491][ T6923] loop2: detected capacity change from 0 to 32768
[  182.493230][   T37] audit: type=1800 audit(1778223905.001:7): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.328" name="file2" dev="loop4" ino=6151 res=0 errno=0
[  182.569572][ T6923] JBD2: Ignoring recovery information on journal
[  182.787189][ T6923] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  183.147966][ T5610] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  183.552016][   T61] Bluetooth: hci0: command tx timeout
[  183.714946][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  183.903852][ T6937] netlink: 'syz.1.339': attribute type 29 has an invalid length.
[  183.904352][ T6938] netlink: 'syz.1.339': attribute type 29 has an invalid length.
[  183.907601][ T6937] netlink: 500 bytes leftover after parsing attributes in process `syz.1.339'.
[  184.307486][ T5611] ocfs2: Unmounting device (7,2) on (node local)
[  184.347130][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  185.129474][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'.
[  185.630403][   T61] Bluetooth: hci0: command tx timeout
[  185.812869][ T5867] bridge_slave_1: left allmulticast mode
[  185.813119][ T5867] bridge_slave_1: left promiscuous mode
[  185.919857][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.286391][ T6979] loop1: detected capacity change from 0 to 128
[  186.375419][ T5867] bridge_slave_0: left allmulticast mode
[  186.375453][ T5867] bridge_slave_0: left promiscuous mode
[  186.399724][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.432828][ T6979] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  186.433020][ T6979] hpfs: filesystem error: improperly stopped
[  186.433038][ T6979] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  186.433054][ T6979] hpfs: You really don't want any checks? You are crazy...
[  186.435385][ T6979] hpfs: hpfs_map_sector(): read error
[  186.435402][ T6979] hpfs: code page support is disabled
[  186.436467][ T6979] hpfs: hpfs_map_4sectors(): unaligned read
[  186.436854][ T6979] hpfs: hpfs_map_4sectors(): unaligned read
[  186.436870][ T6979] hpfs: filesystem error: unable to find root dir
[  186.540701][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'.
[  186.540749][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'.
[  187.298033][ T5608] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  187.377932][ T6993] loop1: detected capacity change from 0 to 128
[  187.429477][ T6993] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  187.442706][ T6993] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  187.590226][  T969] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  187.741478][  T969] usb 5-1: Using ep0 maxpacket: 32
[  187.748774][  T969] usb 5-1: config index 0 descriptor too short (expected 3659, got 75)
[  187.748803][  T969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.777976][  T969] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  187.778011][  T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.778026][  T969] usb 5-1: Product: syz
[  187.778036][  T969] usb 5-1: Manufacturer: syz
[  187.778047][  T969] usb 5-1: SerialNumber: syz
[  187.835167][  T969] usb 5-1: config 0 descriptor??
[  187.869687][  T969] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  187.970172][ T5624] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  188.159301][ T5624] usb 3-1: Using ep0 maxpacket: 8
[  188.176446][ T5624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  188.176591][ T5624] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  188.176612][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.251018][ T5624] usb 3-1: config 0 descriptor??
[  188.319706][ T5608] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.481935][ T5624] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  188.530670][ T5608] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  188.900076][ T5624] usb 3-1: USB disconnect, device number 4
[  188.900190][    C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  189.281081][  T969] gspca_sunplus: reg_w_1 err -71
[  189.281166][  T969] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  189.334527][  T969] usb 5-1: USB disconnect, device number 5
[  189.792889][ T7009] loop2: detected capacity change from 0 to 512
[  190.023962][ T7009] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.356: corrupted inode contents
[  190.023998][ T7009] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  190.036207][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  190.036235][    C1] EXT4-fs (loop2): initial error at time 1778223912: ext4_do_update_inode:5690: inode 15
[  190.036270][    C1] EXT4-fs (loop2): last error at time 1778223912: ext4_do_update_inode:5690: inode 15
[  190.190516][ T7009] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  190.190541][ T7009] loop2: lost filesystem error report for type 5 error -117
[  190.212946][ T7009] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.356: corrupted inode contents
[  190.213037][ T7009] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  190.214394][ T7009] EXT4-fs error (device loop2): ext4_evict_inode:315: inode #15: comm syz.2.356: mark_inode_dirty error
[  190.214474][ T7009] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  190.216691][ T7009] EXT4-fs (loop2): 1 orphan inode deleted
[  190.287350][ T7009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.337370][ T7009] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.425024][ T7009] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  190.732653][ T7018] loop1: detected capacity change from 0 to 2048
[  190.999801][ T7018]  loop1: p3 p4 < >
[  191.000653][ T7018] loop1: p3 start 33554432 is beyond EOD, truncated
[  191.225246][ T4974]  loop1: p3 p4 < >
[  191.225494][ T4974] loop1: p3 start 33554432 is beyond EOD, truncated
[  191.229395][ T5608] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  191.251313][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.334669][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.375626][ T5867] bond0 (unregistering): Released all slaves
[  191.418038][ T5867] bond1 (unregistering): Released all slaves
[  191.462190][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  191.859622][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1
[  191.879469][ T5626] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  191.903032][ T5626] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  191.937367][ T7038] netlink: 'syz.0.366': attribute type 10 has an invalid length.
[  192.063328][ T5624] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  192.281332][ T5624] usb 2-1: config 0 has no interfaces?
[  192.292014][ T5624] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  192.292060][ T5624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  192.292082][ T5624] usb 2-1: SerialNumber: syz
[  192.536385][ T5624] usb 2-1: config 0 descriptor??
[  193.045374][ T7038] syz_tun: entered promiscuous mode
[  193.098636][ T7038] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  193.495588][ T7064] loop4: detected capacity change from 0 to 1024
[  193.507722][ T7064] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  193.507755][ T7064] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  193.507872][ T7064] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  193.531841][ T7064] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #5: comm syz.4.373: unexpected bad inode w/o EXT4_IGET_BAD
[  193.531963][ T7064] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[  193.537160][ T7064] EXT4-fs (loop4): no journal found
[  193.537181][ T7064] EXT4-fs (loop4): can't get journal size
[  193.540183][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  193.540245][    C1] EXT4-fs (loop4): initial error at time 1778223916: ext4_get_journal_inode:5896: inode 5
[  193.548605][    C1] EXT4-fs (loop4): last error at time 1778223916: ext4_get_journal_inode:5896: inode 5
[  193.685027][ T7064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  194.065171][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.153006][ T5610] __loop_clr_fd(loop4) clearing lo_backing_file (refcnt=0x0)
[  194.273196][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  194.273306][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  194.816163][ T5624] usb 2-1: USB disconnect, device number 2
[  195.284862][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.285199][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.285667][ T6859] bridge_slave_0: entered allmulticast mode
[  195.360262][ T6859] bridge_slave_0: entered promiscuous mode
[  195.438140][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.438489][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.438828][ T6859] bridge_slave_1: entered allmulticast mode
[  195.498083][ T6859] bridge_slave_1: entered promiscuous mode
[  196.143985][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.331070][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.705972][ T7099] loop0: detected capacity change from 0 to 1024
[  196.727970][ T7099] EXT4-fs: Ignoring removed orlov option
[  196.838483][ T7099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.162005][ T7099] EXT4-fs error (device loop0): __ext4_new_inode:1285: comm syz.0.385: failed to insert inode 14: doubly allocated?
[  197.771134][ T6859] team0: Port device team_slave_0 added
[  197.807126][ T6859] team0: Port device team_slave_1 added
[  198.138528][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.372536][ T7123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'.
[  198.413469][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  198.691381][ T7126] binder: 7125:7126 ioctl 4018620d 0 returned -22
[  198.692148][ T7126] binder: 7125:7126 ioctl c0306201 0 returned -14
[  198.966736][ T5867] hsr_slave_0: left promiscuous mode
[  199.031111][ T5867] hsr_slave_1: left promiscuous mode
[  199.048583][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.048726][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.086490][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.086522][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.437378][ T5867] veth1_macvtap: left promiscuous mode
[  199.490423][ T5867] veth0_macvtap: left promiscuous mode
[  199.490775][ T5867] veth1_vlan: left promiscuous mode
[  199.491160][ T5867] veth0_vlan: left promiscuous mode
[  202.587120][ T7181] loop0: detected capacity change from 0 to 32768
[  203.110567][ T7181] JBD2: Ignoring recovery information on journal
[  203.451207][ T7181] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  204.155722][ T7208] loop1: detected capacity change from 0 to 131072
[  204.179612][ T7208] F2FS-fs (loop1): Test dummy encryption mode enabled
[  204.194707][ T7208] F2FS-fs (loop1): invalid crc value
[  204.351416][ T7208] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  204.379278][ T7208] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  204.642938][ T5609] ocfs2: Unmounting device (7,0) on (node local)
[  204.826157][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  205.308678][ T7219] loop0: detected capacity change from 0 to 512
[  205.320626][ T7219] EXT4-fs: Ignoring removed orlov option
[  205.322418][ T7219] EXT4-fs (loop0): Test dummy encryption mode enabled
[  205.322438][ T7219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  205.387958][ T7222] Driver unsupported XDP return value 0 on prog  (id 24) dev N/A, expect packet loss!
[  205.478258][ T7219] EXT4-fs (loop0): 1 truncate cleaned up
[  205.521789][ T7219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.565817][ T5867] team0 (unregistering): Port device team_slave_1 removed
[  205.800892][ T5867] team0 (unregistering): Port device team_slave_0 removed
[  205.945361][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.016927][ T5609] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0)
[  206.523385][ T5608] __loop_clr_fd(loop1) clearing lo_backing_file (refcnt=0x0)
[  206.650200][   T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  206.802096][   T46] usb 3-1: config index 0 descriptor too short (expected 30768, got 18)
[  206.802122][   T46] usb 3-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[  206.802142][   T46] usb 3-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  206.802160][   T46] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[  206.805043][   T46] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  206.805074][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.805095][   T46] usb 3-1: Product: syz
[  206.805110][   T46] usb 3-1: Manufacturer: syz
[  206.805125][   T46] usb 3-1: SerialNumber: syz
[  206.882123][ T7241] netlink: 48 bytes leftover after parsing attributes in process `syz.0.429'.
[  206.936713][ T7242] netlink: 48 bytes leftover after parsing attributes in process `syz.0.429'.
[  207.243823][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.243843][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.243874][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.247126][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2
[  207.351330][ T7196] bridge0: port 1(syz_tun) entered blocking state
[  207.359021][ T7196] bridge0: port 1(syz_tun) entered disabled state
[  207.442054][ T7235] loop2: detected capacity change from 0 to 1024
[  207.536372][ T7196] syz_tun: entered allmulticast mode
[  207.544954][ T7235] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  207.549656][ T7235] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  207.612539][ T7235] EXT4-fs (loop2): orphan cleanup on readonly fs
[  207.619652][ T7235] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.426: Freeing blocks not in datazone - block = 0, count = 4096
[  207.619692][ T7235] loop2: lost filesystem error report for type 5 error -117
[  207.623127][    C0] EXT4-fs (loop2): initial error at time 1778223930: ext4_free_blocks:6718
[  207.623161][    C0] EXT4-fs (loop2): last error at time 1778223930: ext4_free_blocks:6718
[  207.687502][ T7235] EXT4-fs (loop2): Remounting filesystem read-only
[  207.687625][ T7235] EXT4-fs (loop2): 1 orphan inode deleted
[  207.754550][ T7196] syz_tun: entered promiscuous mode
[  207.759725][ T7196] bridge0: port 1(syz_tun) entered blocking state
[  207.776784][ T7235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  207.860412][ T7196] bridge0: port 1(syz_tun) entered forwarding state
[  207.959213][   T46] usb 3-1: USB disconnect, device number 5
[  208.052318][ T7241] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  208.057437][ T7242] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  208.083689][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.083704][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.083724][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.617664][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.652743][ T5611] __loop_clr_fd(loop2) clearing lo_backing_file (refcnt=0x0)
[  208.676796][ T6859] hsr_slave_0: entered promiscuous mode
[  208.777022][ T6859] hsr_slave_1: entered promiscuous mode
[  208.796246][ T6859] debugfs: 'hsr0' already exists in 'hsr'
[  208.796268][ T6859] Cannot create hsr debugfs directory
[  210.183452][ T7279] netlink: 'syz.0.437': attribute type 2 has an invalid length.
[  211.315179][    C0] 
[  211.315192][    C0] ======================================================
[  211.315202][    C0] WARNING: possible circular locking dependency detected
[  211.315220][    C0] syzkaller #0 Tainted: G             L     
[  211.315233][    C0] ------------------------------------------------------
[  211.315242][    C0] syz.0.437/7277 is trying to acquire lock:
[  211.315256][    C0] ffff888031af48a0 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0
[  211.315329][    C0] 
[  211.315329][    C0] but task is already holding lock:
[  211.315337][    C0] ffff8880633462e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0
[  211.315396][    C0] 
[  211.315396][    C0] which lock already depends on the new lock.
[  211.315396][    C0] 
[  211.315404][    C0] 
[  211.315404][    C0] the existing dependency chain (in reverse order) is:
[  211.315413][    C0] 
[  211.315413][    C0] -> #1 (slock-AF_PHONET){+...}-{3:3}:
[  211.315444][    C0]        rt_spin_lock+0x83/0x400
[  211.315477][    C0]        __sk_receive_skb+0x1f1/0x9e0
[  211.315508][    C0]        phonet_rcv+0x781/0xc40
[  211.315529][    C0]        process_backlog+0x5e1/0xc60
[  211.315560][    C0]        __napi_poll+0xab/0x550
[  211.315600][    C0]        net_rx_action+0x696/0xe00
[  211.315630][    C0]        handle_softirqs+0x1de/0x6d0
[  211.315661][    C0]        __local_bh_enable_ip+0x170/0x2b0
[  211.315692][    C0]        netif_rx+0xb9/0xf0
[  211.315714][    C0]        pn_send+0x62a/0x8e0
[  211.315732][    C0]        pn_skb_send+0x218/0x530
[  211.315750][    C0]        pipe_snd_status+0x1f1/0x320
[  211.315771][    C0]        pipe_do_rcv+0xf15/0x16a0
[  211.315793][    C0]        __sk_receive_skb+0x962/0x9e0
[  211.315824][    C0]        pep_do_rcv+0x685/0xaa0
[  211.315845][    C0]        __release_sock+0x2a9/0x3d0
[  211.315870][    C0]        release_sock+0x1be/0x290
[  211.315900][    C0]        pep_sock_accept+0xd47/0x11e0
[  211.315922][    C0]        pn_socket_accept+0xc1/0x310
[  211.315951][    C0]        do_accept+0x6ca/0x930
[  211.315981][    C0]        __sys_accept4+0x139/0x230
[  211.316012][    C0]        __x64_sys_accept4+0x9a/0xb0
[  211.316044][    C0]        do_syscall_64+0x15f/0xf80
[  211.316069][    C0]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.316095][    C0] 
[  211.316095][    C0] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}:
[  211.316130][    C0]        __lock_acquire+0x15a5/0x2d10
[  211.316163][    C0]        lock_acquire+0x106/0x350
[  211.316183][    C0]        rt_spin_lock_nested+0x81/0x3f0
[  211.316214][    C0]        __sk_receive_skb+0x1bf/0x9e0
[  211.316242][    C0]        pep_do_rcv+0x685/0xaa0
[  211.316263][    C0]        __sk_receive_skb+0x962/0x9e0
[  211.316291][    C0]        phonet_rcv+0x781/0xc40
[  211.316308][    C0]        process_backlog+0x5e1/0xc60
[  211.316338][    C0]        __napi_poll+0xab/0x550
[  211.316365][    C0]        net_rx_action+0x696/0xe00
[  211.316393][    C0]        handle_softirqs+0x1de/0x6d0
[  211.316424][    C0]        __local_bh_enable_ip+0x170/0x2b0
[  211.316453][    C0]        netif_rx+0xb9/0xf0
[  211.316475][    C0]        pn_send+0x62a/0x8e0
[  211.316493][    C0]        pn_skb_send+0x218/0x530
[  211.316511][    C0]        pep_sock_close+0x2c1/0x5b0
[  211.316531][    C0]        pn_socket_release+0x9b/0xc0
[  211.316560][    C0]        __sock_release+0xb9/0x250
[  211.316595][    C0]        sock_close+0x1c/0x30
[  211.316620][    C0]        __fput+0x461/0xa70
[  211.316645][    C0]        task_work_run+0x1d9/0x270
[  211.316669][    C0]        exit_to_user_mode_loop+0xf3/0x4d0
[  211.316688][    C0]        do_syscall_64+0x33e/0xf80
[  211.316712][    C0]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.316733][    C0] 
[  211.316733][    C0] other info that might help us debug this:
[  211.316733][    C0] 
[  211.316741][    C0]  Possible unsafe locking scenario:
[  211.316741][    C0] 
[  211.316747][    C0]        CPU0                    CPU1
[  211.316754][    C0]        ----                    ----
[  211.316761][    C0]   lock(slock-AF_PHONET);
[  211.316776][    C0]                                lock(slock-AF_PHONET/1);
[  211.316797][    C0]                                lock(slock-AF_PHONET);
[  211.316813][    C0]   lock(slock-AF_PHONET/1);
[  211.316832][    C0] 
[  211.316832][    C0]  *** DEADLOCK ***
[  211.316832][    C0] 
[  211.316839][    C0] 7 locks held by syz.0.437/7277:
[  211.316852][    C0]  #0: ffff8880404cf578 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250
[  211.316919][    C0]  #1: ffff888031af5218 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0
[  211.316974][    C0]  #2: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  211.317037][    C0]  #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[  211.317106][    C0]  #4: ffff8880633462e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0
[  211.317170][    C0]  #5: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  211.317233][    C0]  #6: ffff888063346398 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40
[  211.317283][    C0] 
[  211.317283][    C0] stack backtrace:
[  211.317300][    C0] CPU: 0 UID: 0 PID: 7277 Comm: syz.0.437 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  211.317333][    C0] Tainted: [L]=SOFTLOCKUP
[  211.317341][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  211.317355][    C0] Call Trace:
[  211.317363][    C0]  <TASK>
[  211.317372][    C0]  dump_stack_lvl+0xe8/0x150
[  211.317402][    C0]  print_circular_bug+0x2e1/0x300
[  211.317434][    C0]  check_noncircular+0x12e/0x150
[  211.317466][    C0]  __lock_acquire+0x15a5/0x2d10
[  211.317490][    C0]  ? try_to_take_rt_mutex+0x840/0xb00
[  211.317521][    C0]  ? __sk_receive_skb+0x1bf/0x9e0
[  211.317551][    C0]  lock_acquire+0x106/0x350
[  211.317579][    C0]  ? __sk_receive_skb+0x1bf/0x9e0
[  211.317612][    C0]  ? sk_filter_trim_cap+0x8f1/0xce0
[  211.317643][    C0]  rt_spin_lock_nested+0x81/0x3f0
[  211.317675][    C0]  ? __sk_receive_skb+0x1bf/0x9e0
[  211.317705][    C0]  ? __pfx_sk_filter_trim_cap+0x10/0x10
[  211.317729][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  211.317750][    C0]  ? __pfx_rt_spin_lock_nested+0x10/0x10
[  211.317785][    C0]  ? rt_spin_lock+0x1e0/0x400
[  211.317820][    C0]  __sk_receive_skb+0x1bf/0x9e0
[  211.317857][    C0]  pep_do_rcv+0x685/0xaa0
[  211.317882][    C0]  ? __pfx_pep_do_rcv+0x10/0x10
[  211.317910][    C0]  ? __pfx_pep_do_rcv+0x10/0x10
[  211.317933][    C0]  ? phonet_rcv+0x781/0xc40
[  211.317952][    C0]  __sk_receive_skb+0x962/0x9e0
[  211.317988][    C0]  phonet_rcv+0x781/0xc40
[  211.318007][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  211.318041][    C0]  ? __pfx_phonet_rcv+0x10/0x10
[  211.318065][    C0]  ? process_backlog+0x271/0xc60
[  211.318097][    C0]  ? process_backlog+0x271/0xc60
[  211.318128][    C0]  ? __pfx_phonet_rcv+0x10/0x10
[  211.318150][    C0]  process_backlog+0x5e1/0xc60
[  211.318192][    C0]  __napi_poll+0xab/0x550
[  211.318224][    C0]  net_rx_action+0x696/0xe00
[  211.318264][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  211.318296][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  211.318326][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  211.318355][    C0]  ? enqueue_to_backlog+0x340/0xcb0
[  211.318390][    C0]  handle_softirqs+0x1de/0x6d0
[  211.318429][    C0]  __local_bh_enable_ip+0x170/0x2b0
[  211.318462][    C0]  netif_rx+0xb9/0xf0
[  211.318488][    C0]  pn_send+0x62a/0x8e0
[  211.318513][    C0]  pn_skb_send+0x218/0x530
[  211.318537][    C0]  pep_sock_close+0x2c1/0x5b0
[  211.318563][    C0]  pn_socket_release+0x9b/0xc0
[  211.318604][    C0]  __sock_release+0xb9/0x250
[  211.318632][    C0]  ? __pfx_sock_close+0x10/0x10
[  211.318659][    C0]  sock_close+0x1c/0x30
[  211.318684][    C0]  __fput+0x461/0xa70
[  211.318717][    C0]  task_work_run+0x1d9/0x270
[  211.318744][    C0]  ? __pfx_task_work_run+0x10/0x10
[  211.318775][    C0]  exit_to_user_mode_loop+0xf3/0x4d0
[  211.318795][    C0]  ? rcu_is_watching+0x15/0xb0
[  211.318822][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.318845][    C0]  do_syscall_64+0x33e/0xf80
[  211.318870][    C0]  ? trace_irq_disable+0x3b/0x140
[  211.318905][    C0]  ? clear_bhb_loop+0x40/0x90
[  211.318931][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.318954][    C0] RIP: 0033:0x7f8cb6f8cdd9
[  211.318977][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.318997][    C0] RSP: 002b:00007ffc752065e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  211.319022][    C0] RAX: 0000000000000000 RBX: 00007f8cb7207da0 RCX: 00007f8cb6f8cdd9
[  211.319039][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  211.319053][    C0] RBP: 00007f8cb7207da0 R08: 0000000000000006 R09: 0000000000000000
[  211.319068][    C0] R10: 00007f8cb7207cb0 R11: 0000000000000246 R12: 0000000000033619
[  211.319084][    C0] R13: 00007f8cb720609c R14: 0000000000033473 R15: 00007ffc752066f0
[  211.319109][    C0]  </TASK>
[  211.481410][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3
[  211.790213][ T5621] Bluetooth: hci2: command 0x0406 tx timeout
[  211.790293][ T5621] Bluetooth: hci1: command 0x0406 tx timeout
[  211.790372][ T5621] Bluetooth: hci3: command 0x0406 tx timeout
[  211.790432][ T5621] Bluetooth: hci4: command 0x0406 tx timeout
[  212.265967][ T6859] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  212.319240][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  212.327923][ T6859] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  212.363021][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  212.364186][ T6859] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  212.403593][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  212.404610][ T6859] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  212.444022][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  212.563124][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.593522][ T6859] 8021q: adding VLAN 0 to HW filter on device team0
[  212.608997][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.609080][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.636154][  T167] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.636223][  T167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.020939][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4
[  213.131943][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.357948][ T6859] veth0_vlan: entered promiscuous mode
[  213.370654][ T6859] veth1_vlan: entered promiscuous mode
[  213.408314][ T6859] veth0_macvtap: entered promiscuous mode
[  213.419165][ T6859] veth1_macvtap: entered promiscuous mode
[  213.445053][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.459463][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.481802][ T6642] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.482426][ T6642] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.483679][ T6642] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.483833][ T6642] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.653498][ T6859] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[  213.682387][ T1546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.682409][ T1546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.701723][ T6859] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'
[  213.733333][ T6642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.733354][ T6642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50