last executing test programs:

4.955071552s ago: executing program 3 (id=179):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
writev(r0, &(0x7f0000000180), 0x100000000000003c)

4.838982755s ago: executing program 3 (id=183):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x0)
write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x2, {0x1, 0x2}}, 0x5)

4.683102235s ago: executing program 3 (id=187):
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

4.661128117s ago: executing program 3 (id=189):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_mrelease(r1, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x801c2, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000001c0)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = fanotify_init(0x0, 0x0)
r6 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
r7 = dup(r6)
fanotify_mark(r5, 0x1, 0x1010, r7, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x20, 0x1402, 0x1, 0x1, 0x8000000, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f000001fb00), 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
preadv(r9, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0)
ioctl$EVIOCGLED(r9, 0x80404519, &(0x7f0000000200)=""/61)
truncate(&(0x7f0000000280)='./file1\x00', 0x1)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc})
r10 = socket$inet(0x2, 0x2, 0x73)
setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES32=r6, @ANYBLOB="800100001000130700000000fe8000200000000000000000000000aae0000002000000000000000000000e000000000000000000000000001f0000003ea7d7b5f988b216aff0a62dde1c923a739edf6463a9b72aacfba25297d7085368c1275d96c62e"], 0x180}}, 0x0)
sendto$inet(r10, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)

3.5470324s ago: executing program 3 (id=204):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
writev(r0, &(0x7f0000000180), 0x100000000000003c)

3.026237584s ago: executing program 3 (id=210):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f000081e000/0x7000)=nil, &(0x7f00009fa000/0x1000)=nil, 0x7000})

1.685161099s ago: executing program 4 (id=243):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r1, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000f00)='%pS    \x00'}, 0x19)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000240)={[{@check_relaxed}, {@check_relaxed}, {@check_relaxed}, {@cruft}, {@overriderock}, {@map_acorn}, {@check_strict}, {@dmode={'dmode', 0x3d, 0x8}}, {@block={'block', 0x3d, 0x800}}, {@mode={'mode', 0x3d, 0x2}}, {@unhide}, {@cruft}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000100)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @empty, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xfe80}}]}]}}}}}}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x2, 0xae2fc0160cfa195d, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, 0x20, 0x700, 0x9, 0x9}})
r7 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$smackfs_ipv6host(r7, &(0x7f0000000100)=@l2={{0x3, 0x3a, 0xac, 0x3a, 0xffffffffffffff98, 0x3a, 0x1, 0x3a, 0x1, 0x3a, 0x3, 0x3a, 0x7, 0x3a, 0x9}, 0x2f, 0x6, 0x20, '\xbb\xbb\xbb\xbb\xbb\xbb'}, 0xb4)
bind(r1, &(0x7f0000000f40)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r5, 0x0)
socket$inet6(0xa, 0x1, 0xc)
fchdir(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18270000", @ANYRES32=r1, @ANYBLOB="00000000078a06777915f500001c0687"], &(0x7f0000000100)='syzkaller\x00', 0x100, 0x0, &(0x7f0000000140), 0x41100, 0x14, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000001c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[r4, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x1, 0x8, 0x2}, {0x4, 0x2, 0x0, 0x8}, {0x3, 0x1, 0x8, 0x6}, {0x6, 0x1}], 0x10, 0x0, @void, @value}, 0x94)
ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000fc0))
syz_emit_ethernet(0xb5, &(0x7f0000000dc0)={@local, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@generic={0x6, "88d50363a8b3050f4bbb28f2a639a3a9051fdf5994b8b6f1302a5367285b86d5acd046dddf7f99316d223db45373d36731dcc7883e0ef32536a91358c1a5dc94b8283665b1631d257d89b8bcf028abef5e3454a2c03fb551ac1353877317fa1d3a8371a839bb068738ddbedf86badd48527806c4e62c6ab4462acbcf8baf77b19479c1e567a68da161448b1ea8a3241abe60597c3616c22538a4596f19834aabf57d9f"}}}, &(0x7f0000000340)={0x0, 0x2, [0x41c, 0xbf0, 0x56d, 0x2ba]})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000001000))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
connect$unix(r1, 0x0, 0x0)

1.347125148s ago: executing program 4 (id=251):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1.304140579s ago: executing program 1 (id=253):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x80047455, &(0x7f0000000100)=0x40005)

1.262949012s ago: executing program 4 (id=255):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)

1.153681952s ago: executing program 1 (id=258):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695f83d, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.09910035s ago: executing program 4 (id=259):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x41b, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
dup(0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)

1.037701938s ago: executing program 1 (id=262):
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0xd, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7d, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0xfffffffc, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8)
ioctl$EVIOCGKEY(r0, 0x80404518, 0x0)

972.017905ms ago: executing program 4 (id=263):
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/254, 0xfe}], 0x1}}], 0x1, 0x58ca02a0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "fdffffffffffffff"})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d820000ff01000000000000fffeff00"})
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5)

888.673406ms ago: executing program 4 (id=265):
r0 = socket$inet(0x2, 0xa, 0x7e)
recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/110, 0x6e}, {&(0x7f0000000480)=""/161, 0xa1}], 0x6, &(0x7f00000008c0)=""/195, 0xc3}, 0x320)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x61]}}, 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
madvise(&(0x7f0000cb3000/0x3000)=nil, 0x3000, 0x65)
timer_create(0x7, &(0x7f00000005c0)={0x0, 0x6, 0x2}, &(0x7f0000000600)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000640)={<r2=>0x0, <r3=>0x0})
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000680), 0x410a00, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
ioctl$FITRIM(r4, 0x80106f05, &(0x7f0000000400)={0x0, 0x8000000000000001, 0x86ff})
timer_settime(r1, 0x0, &(0x7f0000000800)={{}, {r2, r3+10000000}}, &(0x7f0000000840))
capget(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x86, 0x86, 0x3, [@union={0x0, 0x3, 0x0, 0x5, 0x0, 0xb, [{0xc, 0x2, 0x3}, {0x4, 0x3, 0xfffffeff}, {0x4, 0x5, 0x3}]}, @datasec={0x2, 0x5, 0x0, 0xf, 0x2, [{0x1, 0x3}, {0x4, 0x4, 0x80000001}, {0x4, 0x5, 0xb}, {0x1, 0xffff3fe9, 0x5}, {0x4, 0x9, 0x7ff}], "a35a"}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000700)=""/118, 0xa3, 0x76, 0x0, 0x9, 0x0, @void, @value}, 0x28)

852.176707ms ago: executing program 0 (id=266):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

802.041607ms ago: executing program 1 (id=267):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
socket$kcm(0x11, 0xa, 0x300)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "020093", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @opaque="17b7deea995c97d9ab"}}}}}}, 0x0)

728.508121ms ago: executing program 0 (id=268):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x5)

659.093471ms ago: executing program 2 (id=269):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xe0100, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x80047455, &(0x7f0000000100)=0x40005)

644.416416ms ago: executing program 1 (id=270):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x3, {0x2, 0x5, 0x40, 0x1}}, 0x7)

627.374236ms ago: executing program 0 (id=271):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x3, {0x2, 0x5, 0x40, 0x1}}, 0x7)

575.12547ms ago: executing program 2 (id=272):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x58, 0x30, 0x871a15abc695f83d, 0x0, 0x25dfdbfc, {}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

561.058315ms ago: executing program 2 (id=273):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5a00c43f78bf9e6b, 0xeb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff80, 0x0, 0x0, 0x74, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0xfffffffd, 0x10100, 0xfffffffc, 0x33a}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x800)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1000, &(0x7f0000000080)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@uuid_on}, {@redirect_dir_nofollow}, {@verity_off}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x5c})

424.58824ms ago: executing program 0 (id=274):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x41b, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
dup(0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)

393.378184ms ago: executing program 1 (id=275):
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "fdffffffffffffff"})
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d820000ff01000000000000fffeff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x5)

315.897321ms ago: executing program 2 (id=276):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
writev(r0, &(0x7f0000000180), 0x100000000000003c)

273.355876ms ago: executing program 0 (id=277):
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0xd, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7d, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0xfffffffc, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8)
ioctl$EVIOCGKEY(r0, 0x80404518, 0x0)

156.409596ms ago: executing program 2 (id=278):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

73.47376ms ago: executing program 0 (id=279):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x2, {0x1, 0x2}}, 0x5)

0s ago: executing program 2 (id=280):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
socket$kcm(0x11, 0xa, 0x300)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "020093", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @opaque="17b7deea995c97d9ab"}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts.
[   33.804536][ T6477] cgroup: Unknown subsys name 'net'
[   34.034433][ T6477] cgroup: Unknown subsys name 'cpuset'
[   34.037978][ T6477] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   34.375649][ T6477] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   35.902665][ T6496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   35.907308][ T6500] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   35.909814][ T6499] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   35.910088][ T6499] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   35.910327][ T6499] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   35.910638][ T6500] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   35.912777][ T6499] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   35.919887][ T6499] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   35.922855][ T6502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   35.923611][ T6502] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   35.924165][ T6502] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   35.924478][ T6502] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   35.925127][ T6502] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   35.925739][ T6500] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   35.941337][ T6492] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   35.943794][ T6492] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   35.946589][ T6492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   35.946650][ T6500] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   35.950911][ T6500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   35.954566][ T6492] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   35.957137][ T6500] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   35.957232][ T6492] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   35.962323][ T6058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   35.964554][ T6500] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   35.967063][ T6058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   36.261542][ T6490] chnl_net:caif_netlink_parms(): no params data found
[   36.315814][ T6491] chnl_net:caif_netlink_parms(): no params data found
[   36.352700][ T6489] chnl_net:caif_netlink_parms(): no params data found
[   36.448532][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.448683][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.448816][ T6490] bridge_slave_0: entered allmulticast mode
[   36.449747][ T6490] bridge_slave_0: entered promiscuous mode
[   36.487048][ T6501] chnl_net:caif_netlink_parms(): no params data found
[   36.495649][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.495721][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.495856][ T6490] bridge_slave_1: entered allmulticast mode
[   36.496814][ T6490] bridge_slave_1: entered promiscuous mode
[   36.577511][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.585274][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.585635][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.585771][ T6491] bridge_slave_0: entered allmulticast mode
[   36.586577][ T6491] bridge_slave_0: entered promiscuous mode
[   36.589667][ T6497] chnl_net:caif_netlink_parms(): no params data found
[   36.594416][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.594463][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.594563][ T6489] bridge_slave_0: entered allmulticast mode
[   36.595478][ T6489] bridge_slave_0: entered promiscuous mode
[   36.597010][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.597054][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.597151][ T6489] bridge_slave_1: entered allmulticast mode
[   36.597971][ T6489] bridge_slave_1: entered promiscuous mode
[   36.599704][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.624158][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.626209][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.628257][ T6491] bridge_slave_1: entered allmulticast mode
[   36.630039][ T6491] bridge_slave_1: entered promiscuous mode
[   36.682793][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.684323][ T6490] team0: Port device team_slave_0 added
[   36.686100][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.709055][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.713075][ T6490] team0: Port device team_slave_1 added
[   36.724357][ T6489] team0: Port device team_slave_0 added
[   36.745602][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.763206][ T6489] team0: Port device team_slave_1 added
[   36.769928][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.770034][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.770162][ T6501] bridge_slave_0: entered allmulticast mode
[   36.771053][ T6501] bridge_slave_0: entered promiscuous mode
[   36.772598][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.772645][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.772797][ T6501] bridge_slave_1: entered allmulticast mode
[   36.773628][ T6501] bridge_slave_1: entered promiscuous mode
[   36.797223][ T6491] team0: Port device team_slave_0 added
[   36.817050][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.817112][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.817139][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.835144][ T6491] team0: Port device team_slave_1 added
[   36.837292][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.837345][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.837372][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.838403][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.838427][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.838452][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.845831][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.845859][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.845885][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.869114][ T6501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.901947][ T6501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.916177][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.916278][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.916384][ T6497] bridge_slave_0: entered allmulticast mode
[   36.917253][ T6497] bridge_slave_0: entered promiscuous mode
[   36.918330][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.918355][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.918381][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.919540][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.919563][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.919589][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.927063][ T6489] hsr_slave_0: entered promiscuous mode
[   36.927576][ T6489] hsr_slave_1: entered promiscuous mode
[   36.965273][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.965349][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.965794][ T6497] bridge_slave_1: entered allmulticast mode
[   36.966594][ T6497] bridge_slave_1: entered promiscuous mode
[   36.983696][ T6501] team0: Port device team_slave_0 added
[   37.009255][ T6491] hsr_slave_0: entered promiscuous mode
[   37.011341][ T6491] hsr_slave_1: entered promiscuous mode
[   37.013612][ T6491] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.016033][ T6491] Cannot create hsr debugfs directory
[   37.019065][ T6501] team0: Port device team_slave_1 added
[   37.028143][ T6490] hsr_slave_0: entered promiscuous mode
[   37.030165][ T6490] hsr_slave_1: entered promiscuous mode
[   37.032213][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.032242][ T6490] Cannot create hsr debugfs directory
[   37.064305][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.066335][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.073912][ T6501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.077200][ T6497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.078953][ T6497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.094466][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.094519][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.094546][ T6501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.145050][ T6497] team0: Port device team_slave_0 added
[   37.166464][ T6497] team0: Port device team_slave_1 added
[   37.237170][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.237226][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.237254][ T6497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.240421][ T6501] hsr_slave_0: entered promiscuous mode
[   37.241015][ T6501] hsr_slave_1: entered promiscuous mode
[   37.241346][ T6501] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.241374][ T6501] Cannot create hsr debugfs directory
[   37.263307][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.263362][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.263564][ T6497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.406977][ T6489] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.412668][ T6489] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.420683][ T6489] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.427974][ T6497] hsr_slave_0: entered promiscuous mode
[   37.430096][ T6497] hsr_slave_1: entered promiscuous mode
[   37.432092][ T6497] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.434206][ T6497] Cannot create hsr debugfs directory
[   37.443810][ T6489] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.560427][ T6491] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.579784][ T6491] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.584267][ T6491] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.596849][ T6491] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.633887][ T6490] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.640886][ T6490] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.644839][ T6490] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.661247][ T6490] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.717094][ T6501] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.720860][ T6501] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.740633][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.741234][ T6501] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.745642][ T6501] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.787517][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.794286][ T6497] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.798133][ T6497] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.809445][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.817777][ T6489] 8021q: adding VLAN 0 to HW filter on device team0
[   37.820795][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.820942][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.827832][ T6497] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.831578][ T6497] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.840246][ T6490] 8021q: adding VLAN 0 to HW filter on device team0
[   37.852885][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.852979][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.854281][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.854327][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.863911][ T6491] 8021q: adding VLAN 0 to HW filter on device team0
[   37.874880][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.874972][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.875860][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.875904][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.876697][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.876737][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.928772][ T6490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.928868][ T6490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.011954][ T6496] Bluetooth: hci2: command tx timeout
[   38.012116][ T6496] Bluetooth: hci0: command tx timeout
[   38.012204][ T6058] Bluetooth: hci3: command tx timeout
[   38.012230][ T6496] Bluetooth: hci1: command tx timeout
[   38.012357][ T6058] Bluetooth: hci4: command tx timeout
[   38.050357][ T6501] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.094212][ T6497] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.103934][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.117277][ T6497] 8021q: adding VLAN 0 to HW filter on device team0
[   38.126155][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.126230][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.135344][ T6501] 8021q: adding VLAN 0 to HW filter on device team0
[   38.146333][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.150540][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.150612][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.171266][  T684] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.171346][  T684] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.185130][  T267] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.185202][  T267] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.213302][ T6490] veth0_vlan: entered promiscuous mode
[   38.234764][ T6490] veth1_vlan: entered promiscuous mode
[   38.238095][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.291311][ T6489] veth0_vlan: entered promiscuous mode
[   38.300707][ T6490] veth0_macvtap: entered promiscuous mode
[   38.306330][ T6490] veth1_macvtap: entered promiscuous mode
[   38.341588][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.355543][ T6489] veth1_vlan: entered promiscuous mode
[   38.373966][ T6489] veth0_macvtap: entered promiscuous mode
[   38.375144][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.376651][ T6490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.376725][ T6490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.376754][ T6490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.376782][ T6490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.420065][ T6489] veth1_macvtap: entered promiscuous mode
[   38.434222][ T6491] veth0_vlan: entered promiscuous mode
[   38.449039][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.449138][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.450172][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.451483][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.451511][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.453490][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.454945][ T6489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.454982][ T6489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.455011][ T6489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.455039][ T6489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.475995][ T6497] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.504012][ T6491] veth1_vlan: entered promiscuous mode
[   38.515911][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.590080][ T6501] veth0_vlan: entered promiscuous mode
[   38.595331][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.595414][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.609305][ T6491] veth0_macvtap: entered promiscuous mode
[   38.624830][ T6501] veth1_vlan: entered promiscuous mode
[   38.643274][  T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.643338][  T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.668239][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.668296][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.676545][ T6491] veth1_macvtap: entered promiscuous mode
[   38.689968][ T6501] veth0_macvtap: entered promiscuous mode
[   38.704269][  T582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.704330][  T582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.710623][ T6497] veth0_vlan: entered promiscuous mode
[   38.714021][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.716873][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.719535][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.723954][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.727462][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.737178][ T6501] veth1_macvtap: entered promiscuous mode
[   38.748500][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.748565][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.748940][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.749142][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.749906][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.756435][ T6491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.756475][ T6491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.756504][ T6491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.756532][ T6491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.784483][ T6497] veth1_vlan: entered promiscuous mode
[   38.808328][ T6497] veth0_macvtap: entered promiscuous mode
[   38.812262][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.812324][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.812344][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.812363][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.812382][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.812401][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.813083][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.814398][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.814426][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.814444][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.814463][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.814480][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.814499][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.815045][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.816439][ T6501] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.816477][ T6501] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.816505][ T6501] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.816533][ T6501] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.860185][ T6489] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.874406][ T6497] veth1_macvtap: entered promiscuous mode
[   38.908830][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.908895][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.068387][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.068460][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.068480][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.068499][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.068518][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.068538][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.068556][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.068575][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.069328][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.079438][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.079472][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.079490][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.079510][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.079528][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.079547][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.079566][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.079585][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.080149][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.084412][ T6497] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.084453][ T6497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.084500][ T6497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.084533][ T6497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.088250][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.088279][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.163131][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.163186][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.213128][  T582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.213193][  T582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.299174][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.301443][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.330923][  T684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.330986][  T684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.161798][   T55] Bluetooth: hci1: command tx timeout
[   40.162746][   T55] Bluetooth: hci0: command tx timeout
[   40.163006][   T55] Bluetooth: hci2: command tx timeout
[   40.163310][   T55] Bluetooth: hci4: command tx timeout
[   40.163883][   T55] Bluetooth: hci3: command tx timeout
[   40.260436][ T6588] loop2: detected capacity change from 0 to 32768
[   40.270372][ T6588] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6 (6588)
[   40.298453][ T6588] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   40.298596][ T6588] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm
[   40.298633][ T6588] BTRFS info (device loop2): disk space caching is enabled
[   40.298703][ T6588] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   40.436270][ T6615] loop0: detected capacity change from 0 to 128
[   40.437266][ T6615] ufs: You didn't specify the type of your ufs filesystem
[   40.437266][ T6615] 
[   40.437266][ T6615] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[   40.437266][ T6615] 
[   40.437266][ T6615] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[   40.437365][ T6615] ufs: ufstype=old is supported read-only
[   40.449632][ T6615] ufs: ufs_fill_super(): bad magic number
[   40.475735][ T6613] loop1: detected capacity change from 0 to 1024
[   40.476271][ T6613] EXT4-fs: Ignoring removed orlov option
[   40.512138][ T6588] BTRFS info (device loop2): rebuilding free space tree
[   40.544332][ T6588] BTRFS info (device loop2): disabling free space tree
[   40.549239][ T6588] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   40.554948][ T6615] loop0: detected capacity change from 0 to 256
[   40.558543][ T6588] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   40.615495][ T6615] Zero length message leads to an empty skb
[   40.693092][ T6490] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   40.780357][ T6613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.832332][ T6613] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   40.929856][ T6643] FAULT_INJECTION: forcing a failure.
[   40.929856][ T6643] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   40.929934][ T6643] CPU: 1 UID: 0 PID: 6643 Comm: syz.2.13 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT 
[   40.929947][ T6643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   40.929954][ T6643] Call trace:
[   40.929958][ T6643]  show_stack+0x2c/0x3c (C)
[   40.929975][ T6643]  __dump_stack+0x30/0x40
[   40.929986][ T6643]  dump_stack_lvl+0xd8/0x12c
[   40.929996][ T6643]  dump_stack+0x1c/0x28
[   40.930005][ T6643]  should_fail_ex+0x41c/0x594
[   40.930016][ T6643]  should_fail+0x14/0x24
[   40.930026][ T6643]  should_fail_usercopy+0x20/0x30
[   40.930036][ T6643]  _inline_copy_from_user+0x3c/0x1e4
[   40.930048][ T6643]  copy_clone_args_from_user+0x1b4/0x5a0
[   40.930058][ T6643]  __arm64_sys_clone3+0x114/0x348
[   40.930072][ T6643]  invoke_syscall+0x98/0x2b8
[   40.930081][ T6643]  el0_svc_common+0x130/0x23c
[   40.930091][ T6643]  do_el0_svc+0x48/0x58
[   40.930100][ T6643]  el0_svc+0x58/0x150
[   40.930112][ T6643]  el0t_64_sync_handler+0x78/0x108
[   40.930123][ T6643]  el0t_64_sync+0x198/0x19c
[   40.983757][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.996092][ T6646] loop3: detected capacity change from 0 to 1024
[   41.000160][ T6646] =======================================================
[   41.000160][ T6646] WARNING: The mand mount option has been deprecated and
[   41.000160][ T6646]          and is ignored by this kernel. Remove the mand
[   41.000160][ T6646]          option from the mount to silence this warning.
[   41.000160][ T6646] =======================================================
[   41.095546][ T6631] loop4: detected capacity change from 0 to 32768
[   41.096077][ T6631] btrfs: Deprecated parameter 'usebackuproot'
[   41.096107][ T6631] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   41.136186][ T6631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.11 (6631)
[   41.150238][ T6646] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.150332][ T6646] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.150628][ T6646] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.150650][ T6646] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.160538][ T6646] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.160629][ T6646] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.164859][ T6631] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   41.164955][ T6631] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm
[   41.164992][ T6631] BTRFS info (device loop4): using free-space-tree
[   41.202711][ T6656] loop1: detected capacity change from 0 to 256
[   41.224245][  T761] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[   41.224869][ T6631] BTRFS warning (device loop4): couldn't read tree root
[   41.224902][ T6631] BTRFS warning (device loop4): try to load backup roots slot 1
[   41.226780][  T761] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[   41.226838][ T6631] BTRFS warning (device loop4): couldn't read tree root
[   41.226862][ T6631] BTRFS warning (device loop4): try to load backup roots slot 2
[   41.227111][  T761] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   41.227172][ T6631] BTRFS warning (device loop4): couldn't read tree root
[   41.227195][ T6631] BTRFS warning (device loop4): try to load backup roots slot 3
[   41.243216][ T6656] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   41.292357][ T6631] BTRFS info (device loop4): rebuilding free space tree
[   41.310249][ T6638] loop0: detected capacity change from 0 to 32768
[   41.313392][ T6631] BTRFS info (device loop4): checking UUID tree
[   41.315355][ T6638] BTRFS: device /dev/loop0 (7:0) using temp-fsid d6ea1a75-71fb-44bf-9065-f08fa3ffb83e
[   41.318304][ T6638] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.14 (6638)
[   41.353109][ T6638] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   41.355903][ T6638] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm
[   41.358744][ T6638] BTRFS info (device loop0): using free-space-tree
[   41.449396][ T6685] loop1: detected capacity change from 0 to 1024
[   41.512623][ T6685] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.512700][ T6685] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.523445][ T6685] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.523512][ T6685] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.541613][ T6685] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.541830][ T6685] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.658778][  T684] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.658871][  T684] hfsplus: request for non-existent node 16777216 in B*Tree
[   41.669275][ T6670] loop2: detected capacity change from 0 to 32768
[   41.674486][ T6491] BTRFS info (device loop0): last unmount of filesystem d6ea1a75-71fb-44bf-9065-f08fa3ffb83e
[   41.852858][ T6702] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   42.026045][ T6631] bpf: Bad value for 'uid'
[   42.037301][ T6713] afs: Unknown parameter 'd'
[   42.242184][   T55] Bluetooth: hci3: command tx timeout
[   42.242283][   T55] Bluetooth: hci4: command tx timeout
[   42.242332][   T55] Bluetooth: hci2: command tx timeout
[   42.242370][   T55] Bluetooth: hci0: command tx timeout
[   42.242409][   T55] Bluetooth: hci1: command tx timeout
[   42.358644][ T6700] loop1: detected capacity change from 0 to 32768
[   42.404585][ T6497] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   42.462398][ T6700] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   42.559761][ T6489] ocfs2: Unmounting device (7,1) on (node local)
[   42.599430][ T6715] loop0: detected capacity change from 0 to 32768
[   42.629647][ T6715] syz.0.29: attempt to access beyond end of device
[   42.629647][ T6715] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[   42.629786][ T6715] lbmIODone: I/O error in JFS log
[   42.629873][ T6715] *** Log Format Error ! ***
[   42.630038][ T6715] lmLogInit: exit(-22)
[   42.630075][ T6715] lmLogOpen: exit(-22)
[   42.665852][ T6715] jfs_dirty_inode called on read-only volume
[   42.665947][ T6715] Is remount racy?
[   42.668189][ T6715] jfs_dirty_inode called on read-only volume
[   42.668219][ T6715] Is remount racy?
[   42.668239][ T6715] jfs_dirty_inode called on read-only volume
[   42.668289][ T6715] Is remount racy?
[   42.674479][ T6736] xt_hashlimit: size too large, truncated to 1048576
[   42.889991][ T6058] Bluetooth: hci2: SCO packet for unknown connection handle 0
[   43.004249][ T6758] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   43.004577][ T6758] capability: warning: `syz.0.40' uses 32-bit capabilities (legacy support in use)
[   43.048356][ T6760] FAULT_INJECTION: forcing a failure.
[   43.048356][ T6760] name failslab, interval 1, probability 0, space 0, times 1
[   43.048431][ T6760] CPU: 1 UID: 0 PID: 6760 Comm: syz.4.41 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT 
[   43.048446][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   43.048453][ T6760] Call trace:
[   43.048457][ T6760]  show_stack+0x2c/0x3c (C)
[   43.048474][ T6760]  __dump_stack+0x30/0x40
[   43.048485][ T6760]  dump_stack_lvl+0xd8/0x12c
[   43.048495][ T6760]  dump_stack+0x1c/0x28
[   43.048504][ T6760]  should_fail_ex+0x41c/0x594
[   43.048516][ T6760]  should_failslab+0xc0/0x128
[   43.048528][ T6760]  kmem_cache_alloc_noprof+0x80/0x3e8
[   43.048542][ T6760]  prepare_creds+0x30/0x6cc
[   43.048553][ T6760]  copy_creds+0xdc/0x9a0
[   43.048563][ T6760]  copy_process+0x994/0x318c
[   43.048576][ T6760]  kernel_clone+0x1d8/0x7a0
[   43.048589][ T6760]  __arm64_sys_clone3+0x308/0x348
[   43.048602][ T6760]  invoke_syscall+0x98/0x2b8
[   43.048612][ T6760]  el0_svc_common+0x130/0x23c
[   43.048622][ T6760]  do_el0_svc+0x48/0x58
[   43.048631][ T6760]  el0_svc+0x58/0x150
[   43.048643][ T6760]  el0t_64_sync_handler+0x78/0x108
[   43.048654][ T6760]  el0t_64_sync+0x198/0x19c
[   43.142669][ T6764] loop1: detected capacity change from 0 to 512
[   43.157451][ T6764] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   43.187959][ T6764] EXT4-fs (loop1): invalid journal inode
[   43.188069][ T6764] EXT4-fs (loop1): can't get journal size
[   43.211931][ T6764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[   43.214528][ T6764] System zones: 1-12, 13-13
[   43.222815][ T6764] EXT4-fs (loop1): 1 truncate cleaned up
[   43.223784][ T6764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.322767][ T6058] Bluetooth: hci1: command tx timeout
[   44.325153][ T6058] Bluetooth: hci0: command tx timeout
[   44.327182][ T6058] Bluetooth: hci2: command tx timeout
[   44.329021][ T6058] Bluetooth: hci4: command tx timeout
[   44.330784][ T6058] Bluetooth: hci3: command tx timeout
[   44.462415][ T6807] loop3: detected capacity change from 0 to 512
[   44.516700][ T6807] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #15: comm syz.3.49: iget: bad extended attribute block 1
[   44.517334][ T6807] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.49: couldn't read orphan inode 15 (err -117)
[   44.552689][ T6807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.558026][ T6826] loop4: detected capacity change from 0 to 1024
[   44.638590][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.657375][ T6782] loop0: detected capacity change from 0 to 32768
[   44.661658][ T6782] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.45 (6782)
[   44.678047][ T6782] BTRFS info (device loop0): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[   44.678141][ T6782] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   44.678177][ T6782] BTRFS info (device loop0): using free-space-tree
[   44.693960][ T6826] hfsplus: request for non-existent node 16777216 in B*Tree
[   44.694017][ T6826] hfsplus: request for non-existent node 16777216 in B*Tree
[   44.694210][ T6826] hfsplus: request for non-existent node 16777216 in B*Tree
[   44.694238][ T6826] hfsplus: request for non-existent node 16777216 in B*Tree
[   44.696556][ T6807] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[   44.715089][ T6826] hfsplus: request for non-existent node 16777216 in B*Tree
[   44.715143][ T6826] hfsplus: request for non-existent node 16777216 in B*Tree
[   44.762020][ T6501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.769966][ T6853] xt_hashlimit: size too large, truncated to 1048576
[   44.835793][   T44] hfsplus: request for non-existent node 16777216 in B*Tree
[   44.835856][   T44] hfsplus: request for non-existent node 16777216 in B*Tree
[   44.946191][ T6860] x_tables: duplicate entry at hook 2
[   45.303070][ T6753] delete_channel: no stack
[   45.316368][ T6782] netlink: 'syz.0.45': attribute type 21 has an invalid length.
[   45.456256][ T6866] FAULT_INJECTION: forcing a failure.
[   45.456256][ T6866] name failslab, interval 1, probability 0, space 0, times 0
[   45.459952][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.3.54 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT 
[   45.459967][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   45.459974][ T6866] Call trace:
[   45.459978][ T6866]  show_stack+0x2c/0x3c (C)
[   45.459994][ T6866]  __dump_stack+0x30/0x40
[   45.460005][ T6866]  dump_stack_lvl+0xd8/0x12c
[   45.460015][ T6866]  dump_stack+0x1c/0x28
[   45.460025][ T6866]  should_fail_ex+0x41c/0x594
[   45.460036][ T6866]  should_failslab+0xc0/0x128
[   45.460048][ T6866]  __kmalloc_noprof+0xf4/0x4c8
[   45.460061][ T6866]  security_prepare_creds+0x60/0x384
[   45.460073][ T6866]  prepare_creds+0x448/0x6cc
[   45.460084][ T6866]  copy_creds+0xdc/0x9a0
[   45.460094][ T6866]  copy_process+0x994/0x318c
[   45.460107][ T6866]  kernel_clone+0x1d8/0x7a0
[   45.460120][ T6866]  __arm64_sys_clone3+0x308/0x348
[   45.460133][ T6866]  invoke_syscall+0x98/0x2b8
[   45.460143][ T6866]  el0_svc_common+0x130/0x23c
[   45.460153][ T6866]  do_el0_svc+0x48/0x58
[   45.460162][ T6866]  el0_svc+0x58/0x150
[   45.460174][ T6866]  el0t_64_sync_handler+0x78/0x108
[   45.460185][ T6866]  el0t_64_sync+0x198/0x19c
[   45.758828][ T6877] loop1: detected capacity change from 0 to 256
[   45.788390][ T6877] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[   45.979202][ T6881] loop1: detected capacity change from 0 to 1024
[   45.999971][ T6875] loop4: detected capacity change from 0 to 32768
[   46.002699][ T6881] EXT4-fs: inline encryption not supported
[   46.004924][ T6875] XFS: noikeep mount option is deprecated.
[   46.055682][ T6881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.066500][ T6875] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[   46.070346][ T6875] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   46.165222][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.181516][ T6875] XFS (loop4): Ending clean mount
[   46.189282][ T6875] XFS (loop4): Quotacheck needed: Please wait.
[   46.232062][ T6875] XFS (loop4): Quotacheck: Done.
[   46.316804][ T6491] BTRFS info (device loop0): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[   46.406270][ T6872] loop3: detected capacity change from 0 to 32768
[   46.411021][ T6497] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   46.437030][ T6872] XFS: ikeep mount option is deprecated.
[   46.502309][ T6872] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   46.616761][ T6906] loop1: detected capacity change from 0 to 32768
[   46.673960][ T6872] XFS (loop3): Ending clean mount
[   46.683797][ T6906] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   46.685223][ T6872] XFS (loop3): Quotacheck needed: Please wait.
[   46.701642][ T6933] FAULT_INJECTION: forcing a failure.
[   46.701642][ T6933] name failslab, interval 1, probability 0, space 0, times 0
[   46.722312][ T6933] CPU: 0 UID: 0 PID: 6933 Comm: syz.4.67 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT 
[   46.722338][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   46.722348][ T6933] Call trace:
[   46.722353][ T6933]  show_stack+0x2c/0x3c (C)
[   46.722369][ T6933]  __dump_stack+0x30/0x40
[   46.722381][ T6933]  dump_stack_lvl+0xd8/0x12c
[   46.722391][ T6933]  dump_stack+0x1c/0x28
[   46.722400][ T6933]  should_fail_ex+0x41c/0x594
[   46.722411][ T6933]  should_failslab+0xc0/0x128
[   46.722424][ T6933]  __kmalloc_node_noprof+0xf8/0x4d4
[   46.722437][ T6933]  __vmalloc_node_range_noprof+0x478/0xe58
[   46.722450][ T6933]  __vmalloc_node_noprof+0xf8/0x158
[   46.722461][ T6933]  dup_task_struct+0x444/0x7a0
[   46.722474][ T6933]  copy_process+0x478/0x318c
[   46.722487][ T6933]  kernel_clone+0x1d8/0x7a0
[   46.722500][ T6933]  __arm64_sys_clone3+0x308/0x348
[   46.722513][ T6933]  invoke_syscall+0x98/0x2b8
[   46.722523][ T6933]  el0_svc_common+0x130/0x23c
[   46.722533][ T6933]  do_el0_svc+0x48/0x58
[   46.722542][ T6933]  el0_svc+0x58/0x150
[   46.722554][ T6933]  el0t_64_sync_handler+0x78/0x108
[   46.722565][ T6933]  el0t_64_sync+0x198/0x19c
[   46.754331][ T6872] XFS (loop3): Quotacheck: Done.
[   46.756613][ T6933] syz.4.67: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   46.756835][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.4.67 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT 
[   46.756851][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   46.756859][ T6933] Call trace:
[   46.756863][ T6933]  show_stack+0x2c/0x3c (C)
[   46.756878][ T6933]  __dump_stack+0x30/0x40
[   46.756889][ T6933]  dump_stack_lvl+0xd8/0x12c
[   46.756899][ T6933]  dump_stack+0x1c/0x28
[   46.756909][ T6933]  warn_alloc+0x1f8/0x30c
[   46.756921][ T6933]  __vmalloc_node_range_noprof+0x59c/0xe58
[   46.756934][ T6933]  __vmalloc_node_noprof+0xf8/0x158
[   46.756945][ T6933]  dup_task_struct+0x444/0x7a0
[   46.756960][ T6933]  copy_process+0x478/0x318c
[   46.756972][ T6933]  kernel_clone+0x1d8/0x7a0
[   46.756985][ T6933]  __arm64_sys_clone3+0x308/0x348
[   46.756999][ T6933]  invoke_syscall+0x98/0x2b8
[   46.757009][ T6933]  el0_svc_common+0x130/0x23c
[   46.757019][ T6933]  do_el0_svc+0x48/0x58
[   46.757029][ T6933]  el0_svc+0x58/0x150
[   46.757041][ T6933]  el0t_64_sync_handler+0x78/0x108
[   46.757052][ T6933]  el0t_64_sync+0x198/0x19c
[   46.757171][ T6933] Mem-Info:
[   46.757195][ T6933] active_anon:732 inactive_anon:12227 isolated_anon:0
[   46.757195][ T6933]  active_file:2193 inactive_file:4128 isolated_file:0
[   46.757195][ T6933]  unevictable:768 dirty:1886 writeback:0
[   46.757195][ T6933]  slab_reclaimable:9598 slab_unreclaimable:90345
[   46.757195][ T6933]  mapped:28636 shmem:9229 pagetables:756
[   46.757195][ T6933]  sec_pagetables:0 bounce:0
[   46.757195][ T6933]  kernel_misc_reclaimable:0
[   46.757195][ T6933]  free:1442615 free_pcp:2909 free_cma:7360
[   46.757244][ T6933] Node 0 active_anon:2928kB inactive_anon:48908kB active_file:8772kB inactive_file:16512kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:114544kB dirty:7544kB writeback:0kB shmem:36916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9332kB pagetables:3024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   46.757292][ T6933] Node 0 DMA free:3076864kB boost:0kB min:20840kB low:26048kB high:31256kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:29440kB
[   46.757351][ T6933] lowmem_reserve[]: 0 0 3498 3498 3498
[   46.757460][ T6933] Node 0 Normal free:2693596kB boost:0kB min:24212kB low:30264kB high:36316kB reserved_highatomic:0KB active_anon:2928kB inactive_anon:48908kB active_file:8772kB inactive_file:16512kB unevictable:3072kB writepending:7544kB present:5242880kB managed:3582968kB mlocked:0kB bounce:0kB free_pcp:11628kB local_pcp:1604kB free_cma:0kB
[   46.757520][ T6933] lowmem_reserve[]: 0 0 0 0 0
[   46.757648][ T6933] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB
[   46.757924][ T6933] Node 0 Normal: 124*4kB (UM) 461*8kB (UME) 581*16kB (UME) 91*32kB (UME) 26*64kB (UME) 64*128kB (UME) 5*256kB (UME) 5*512kB (ME) 11*1024kB (ME) 1*2048kB (E) 647*4096kB (UM) = 2693512kB
[   46.758244][ T6933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   46.758265][ T6933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[   46.758286][ T6933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   46.758307][ T6933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[   46.758328][ T6933] 15523 total pagecache pages
[   46.758344][ T6933] 1 pages in swap cache
[   46.758360][ T6933] Free swap  = 124996kB
[   46.758377][ T6933] Total swap = 124996kB
[   46.758393][ T6933] 2097152 pages RAM
[   46.758409][ T6933] 0 pages HighMem/MovableOnly
[   46.758425][ T6933] 431362 pages reserved
[   46.758441][ T6933] 8192 pages cma reserved
[   46.758457][ T6933] 0 pages hwpoisoned
[   46.888264][ T6938] overlay: ./file0 is not a directory
[   46.924718][ T6906] XFS (loop1): Ending clean mount
[   46.925851][   T31] audit: type=1326 audit(46.680:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.4.71" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa095b728 code=0x0
[   46.942078][ T6942] netlink: 160 bytes leftover after parsing attributes in process `syz.2.70'.
[   47.003744][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.71'.
[   47.013691][ T6501] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   47.038147][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'.
[   47.159796][ T6489] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   47.175845][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.72'.
[   47.514604][ T6953] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   47.514964][ T6953] overlayfs: missing 'lowerdir'
[   47.988975][ T6956] loop4: detected capacity change from 0 to 1024
[   48.003401][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'.
[   48.069399][ T6971] Bluetooth: MGMT ver 1.23
[   48.070759][ T6956] hfsplus: request for non-existent node 16777216 in B*Tree
[   48.070805][ T6956] hfsplus: request for non-existent node 16777216 in B*Tree
[   48.071016][ T6956] hfsplus: request for non-existent node 16777216 in B*Tree
[   48.071037][ T6956] hfsplus: request for non-existent node 16777216 in B*Tree
[   48.093641][ T6956] hfsplus: request for non-existent node 16777216 in B*Tree
[   48.093710][ T6956] hfsplus: request for non-existent node 16777216 in B*Tree
[   48.236986][ T6819] hfsplus: request for non-existent node 16777216 in B*Tree
[   48.237049][ T6819] hfsplus: request for non-existent node 16777216 in B*Tree
[   48.358409][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.372866][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.397651][ T6971] loop0: detected capacity change from 0 to 40427
[   48.549693][ T6971] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   48.658434][ T6973] loop1: detected capacity change from 0 to 32768
[   48.662899][ T6973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.80 (6973)
[   48.682955][ T6973] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   48.683909][ T6973] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   48.683954][ T6973] BTRFS info (device loop1): using free-space-tree
[   48.714538][ T6491] syz-executor: attempt to access beyond end of device
[   48.714538][ T6491] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   48.714908][ T6491] CPU: 1 UID: 0 PID: 6491 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT 
[   48.714932][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   48.714941][ T6491] Call trace:
[   48.714945][ T6491]  show_stack+0x2c/0x3c (C)
[   48.714960][ T6491]  __dump_stack+0x30/0x40
[   48.714972][ T6491]  dump_stack_lvl+0xd8/0x12c
[   48.714981][ T6491]  dump_stack+0x1c/0x28
[   48.714991][ T6491]  f2fs_handle_critical_error+0x34c/0x4b8
[   48.715005][ T6491]  f2fs_stop_checkpoint+0x58/0x6c
[   48.715016][ T6491]  f2fs_write_end_io+0x794/0xadc
[   48.715029][ T6491]  bio_endio+0x81c/0x858
[   48.715041][ T6491]  submit_bio_noacct+0x158/0x176c
[   48.715054][ T6491]  submit_bio+0x354/0x4d4
[   48.715067][ T6491]  f2fs_submit_write_bio+0x13c/0x324
[   48.715079][ T6491]  __submit_merged_bio+0x254/0x704
[   48.715091][ T6491]  __submit_merged_write_cond+0x23c/0x4ac
[   48.715103][ T6491]  f2fs_write_data_pages+0x1e9c/0x27ac
[   48.715115][ T6491]  do_writepages+0x2c0/0x6a8
[   48.715129][ T6491]  filemap_fdatawrite+0x144/0x1e8
[   48.715142][ T6491]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   48.715153][ T6491]  f2fs_write_checkpoint+0x684/0x1694
[   48.715164][ T6491]  kill_f2fs_super+0x21c/0x584
[   48.715177][ T6491]  deactivate_locked_super+0xc4/0x12c
[   48.715188][ T6491]  deactivate_super+0xe0/0x100
[   48.715199][ T6491]  cleanup_mnt+0x31c/0x3ac
[   48.715210][ T6491]  __cleanup_mnt+0x20/0x30
[   48.715221][ T6491]  task_work_run+0x1dc/0x260
[   48.715232][ T6491]  do_notify_resume+0x178/0x1f8
[   48.715245][ T6491]  el0_svc+0xb0/0x150
[   48.715256][ T6491]  el0t_64_sync_handler+0x78/0x108
[   48.715267][ T6491]  el0t_64_sync+0x198/0x19c
[   48.715460][ T6491] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   48.930237][ T7008] warning: `syz.2.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.050327][ T6973] netlink: 'syz.1.80': attribute type 29 has an invalid length.
[   49.051053][ T6973] netlink: 'syz.1.80': attribute type 29 has an invalid length.
[   49.058083][ T6973] netlink: 'syz.1.80': attribute type 29 has an invalid length.
[   49.125490][ T6489] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   49.320776][ T7025] loop0: detected capacity change from 0 to 1024
[   49.381100][ T7025] hfsplus: request for non-existent node 16777216 in B*Tree
[   49.381174][ T7025] hfsplus: request for non-existent node 16777216 in B*Tree
[   49.381395][ T7025] hfsplus: request for non-existent node 16777216 in B*Tree
[   49.381416][ T7025] hfsplus: request for non-existent node 16777216 in B*Tree
[   49.407657][ T7025] hfsplus: request for non-existent node 16777216 in B*Tree
[   49.407758][ T7025] hfsplus: request for non-existent node 16777216 in B*Tree
[   49.468174][ T7010] loop4: detected capacity change from 0 to 40427
[   49.507037][ T7010] F2FS-fs (loop4): invalid crc value
[   49.507484][   T14] hfsplus: request for non-existent node 16777216 in B*Tree
[   49.507507][   T14] hfsplus: request for non-existent node 16777216 in B*Tree
[   49.613179][ T7035] loop0: detected capacity change from 0 to 64
[   49.640235][ T7010] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   49.651802][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   49.697040][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.88'.
[   49.742478][ T7010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.762531][ T7010] bond_slave_0: entered promiscuous mode
[   49.762666][ T7010] bond_slave_1: entered promiscuous mode
[   49.762790][ T7010] vlan2: entered promiscuous mode
[   49.762812][ T7010] bond0: entered promiscuous mode
[   49.779095][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   49.948966][ T7052] loop0: detected capacity change from 0 to 2048
[   49.965481][ T7052] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   49.977574][ T7052] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002]
[   49.977687][ T7052] System zones: 0-4
[   49.982661][ T7052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.025241][ T6497] syz-executor: attempt to access beyond end of device
[   50.025241][ T6497] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   50.025330][ T6497] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT 
[   50.025347][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   50.025354][ T6497] Call trace:
[   50.025358][ T6497]  show_stack+0x2c/0x3c (C)
[   50.025375][ T6497]  __dump_stack+0x30/0x40
[   50.025387][ T6497]  dump_stack_lvl+0xd8/0x12c
[   50.025397][ T6497]  dump_stack+0x1c/0x28
[   50.025406][ T6497]  f2fs_handle_critical_error+0x34c/0x4b8
[   50.025420][ T6497]  f2fs_stop_checkpoint+0x58/0x6c
[   50.025431][ T6497]  f2fs_write_end_io+0x794/0xadc
[   50.025445][ T6497]  bio_endio+0x81c/0x858
[   50.025457][ T6497]  submit_bio_noacct+0x158/0x176c
[   50.025471][ T6497]  submit_bio+0x354/0x4d4
[   50.025483][ T6497]  f2fs_submit_write_bio+0x13c/0x324
[   50.025495][ T6497]  __submit_merged_bio+0x254/0x704
[   50.025507][ T6497]  __submit_merged_write_cond+0x23c/0x4ac
[   50.025519][ T6497]  f2fs_write_data_pages+0x1e9c/0x27ac
[   50.025532][ T6497]  do_writepages+0x2c0/0x6a8
[   50.025546][ T6497]  filemap_fdatawrite+0x144/0x1e8
[   50.025559][ T6497]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   50.025570][ T6497]  f2fs_write_checkpoint+0x684/0x1694
[   50.025581][ T6497]  kill_f2fs_super+0x21c/0x584
[   50.025594][ T6497]  deactivate_locked_super+0xc4/0x12c
[   50.025605][ T6497]  deactivate_super+0xe0/0x100
[   50.025616][ T6497]  cleanup_mnt+0x31c/0x3ac
[   50.025627][ T6497]  __cleanup_mnt+0x20/0x30
[   50.025638][ T6497]  task_work_run+0x1dc/0x260
[   50.025650][ T6497]  do_notify_resume+0x178/0x1f8
[   50.025662][ T6497]  el0_svc+0xb0/0x150
[   50.025684][ T6497]  el0t_64_sync_handler+0x78/0x108
[   50.025695][ T6497]  el0t_64_sync+0x198/0x19c
[   50.025891][ T6497] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   50.025936][ T6497] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT 
[   50.025951][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   50.025957][ T6497] Call trace:
[   50.025960][ T6497]  show_stack+0x2c/0x3c (C)
[   50.025971][ T6497]  __dump_stack+0x30/0x40
[   50.025980][ T6497]  dump_stack_lvl+0xd8/0x12c
[   50.025990][ T6497]  dump_stack+0x1c/0x28
[   50.026000][ T6497]  f2fs_handle_critical_error+0x34c/0x4b8
[   50.026012][ T6497]  f2fs_stop_checkpoint+0x58/0x6c
[   50.026022][ T6497]  f2fs_write_end_io+0x794/0xadc
[   50.026035][ T6497]  bio_endio+0x81c/0x858
[   50.026046][ T6497]  submit_bio_noacct+0x158/0x176c
[   50.026059][ T6497]  submit_bio+0x354/0x4d4
[   50.026072][ T6497]  f2fs_submit_write_bio+0x13c/0x324
[   50.026084][ T6497]  __submit_merged_bio+0x254/0x704
[   50.026096][ T6497]  __submit_merged_write_cond+0x23c/0x4ac
[   50.026108][ T6497]  f2fs_write_data_pages+0x1e9c/0x27ac
[   50.026121][ T6497]  do_writepages+0x2c0/0x6a8
[   50.026133][ T6497]  filemap_fdatawrite+0x144/0x1e8
[   50.026146][ T6497]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   50.026157][ T6497]  f2fs_write_checkpoint+0x684/0x1694
[   50.026168][ T6497]  kill_f2fs_super+0x21c/0x584
[   50.026180][ T6497]  deactivate_locked_super+0xc4/0x12c
[   50.026191][ T6497]  deactivate_super+0xe0/0x100
[   50.026201][ T6497]  cleanup_mnt+0x31c/0x3ac
[   50.026212][ T6497]  __cleanup_mnt+0x20/0x30
[   50.026223][ T6497]  task_work_run+0x1dc/0x260
[   50.026233][ T6497]  do_notify_resume+0x178/0x1f8
[   50.026245][ T6497]  el0_svc+0xb0/0x150
[   50.026255][ T6497]  el0t_64_sync_handler+0x78/0x108
[   50.026266][ T6497]  el0t_64_sync+0x198/0x19c
[   50.026432][ T6497] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   50.037867][ T7052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.98'.
[   50.084438][ T6496] Bluetooth: hci0: command 0x0c1a tx timeout
[   50.091895][ T6058] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   50.157360][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.449296][ T7062] loop3: detected capacity change from 0 to 32768
[   50.483628][ T7062] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   50.526022][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.528622][ T7062] XFS (loop3): Ending clean mount
[   50.529880][ T7062] XFS (loop3): Quotacheck needed: Please wait.
[   50.572648][ T7062] XFS (loop3): Quotacheck: Done.
[   50.648864][ T6501] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   50.686034][ T7087] loop4: detected capacity change from 0 to 1024
[   50.742738][ T7066] loop0: detected capacity change from 0 to 32768
[   50.762119][ T7066] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.101 (7066)
[   50.776512][ T7066] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   50.779564][ T7066] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   50.782261][ T7066] BTRFS info (device loop0): disk space caching is enabled
[   50.784342][ T7066] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   50.835285][ T7029] loop1: detected capacity change from 0 to 65536
[   50.842967][ T7029] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   50.932006][ T7029] XFS (loop1): Ending clean mount
[   50.936316][ T7066] BTRFS info (device loop0): rebuilding free space tree
[   50.948183][ T7029] XFS (loop1): Quotacheck needed: Please wait.
[   50.973390][ T7029] XFS (loop1): Quotacheck: Done.
[   50.977717][ T7066] BTRFS info (device loop0): disabling free space tree
[   50.977828][ T7066] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   50.977862][ T7066] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   50.998817][ T7120] loop3: detected capacity change from 0 to 512
[   51.145728][ T7120] EXT4-fs (loop3): mounted filesystem 0000004b-0845-4100-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.153446][ T6489] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   51.195302][ T7134] xt_hashlimit: size too large, truncated to 1048576
[   51.219243][ T7120] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.104: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   51.891874][ T6491] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   52.017269][ T7143] loop1: detected capacity change from 0 to 1024
[   52.121050][ T7143] hfsplus: request for non-existent node 16777216 in B*Tree
[   52.134618][ T7143] hfsplus: request for non-existent node 16777216 in B*Tree
[   52.136916][ T7143] hfsplus: request for non-existent node 16777216 in B*Tree
[   52.139236][ T7143] hfsplus: request for non-existent node 16777216 in B*Tree
[   52.171242][ T7143] hfsplus: request for non-existent node 16777216 in B*Tree
[   52.171294][ T7143] hfsplus: request for non-existent node 16777216 in B*Tree
[   52.335822][  T582] hfsplus: request for non-existent node 16777216 in B*Tree
[   52.335876][  T582] hfsplus: request for non-existent node 16777216 in B*Tree
[   52.506629][ T7138] loop4: detected capacity change from 0 to 131072
[   52.511853][ T7138] F2FS-fs (loop4): inline_xattr_size option should be set with inline_xattr option
[   52.798231][ T7170] netlink: 32 bytes leftover after parsing attributes in process `syz.2.111'.
[   52.852479][ T7174] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   52.852479][ T7174] The task syz.2.111 (7174) triggered the difference, watch for misbehavior.
[   52.945046][ T7175] loop0: detected capacity change from 0 to 256
[   53.050986][ T7184] loop1: detected capacity change from 0 to 512
[   53.105665][ T7184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   53.349646][ T7192] overlay: ./file2 is not a directory
[   53.716922][ T7196] loop4: detected capacity change from 0 to 1024
[   53.804794][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree
[   53.811082][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree
[   53.819789][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree
[   53.851821][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree
[   53.934449][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   54.027246][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'.
[   54.046667][ T7120] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 18: comm syz.3.104: lblock 23 mapped to illegal pblock 18 (length 1)
[   54.057744][ T7120] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.104: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   54.067657][ T7120] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 18: comm syz.3.104: lblock 23 mapped to illegal pblock 18 (length 1)
[   54.090178][ T7120] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 18: comm syz.3.104: lblock 23 mapped to illegal pblock 18 (length 1)
[   54.098905][ T7120] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 18: comm syz.3.104: lblock 23 mapped to illegal pblock 18 (length 1)
[   54.212103][ T7210] loop0: detected capacity change from 0 to 512
[   54.271907][ T7210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.278977][ T6501] EXT4-fs (loop3): unmounting filesystem 0000004b-0845-4100-0000-000000000000.
[   54.409865][ T7210] batadv_slave_1: entered promiscuous mode
[   54.467797][ T7225] loop3: detected capacity change from 0 to 1024
[   54.537416][ T7225] hfsplus: request for non-existent node 16777216 in B*Tree
[   54.537488][ T7225] hfsplus: request for non-existent node 16777216 in B*Tree
[   54.537699][ T7225] hfsplus: request for non-existent node 16777216 in B*Tree
[   54.537722][ T7225] hfsplus: request for non-existent node 16777216 in B*Tree
[   54.592467][ T7225] hfsplus: request for non-existent node 16777216 in B*Tree
[   54.592530][ T7225] hfsplus: request for non-existent node 16777216 in B*Tree
[   54.680319][ T6819] hfsplus: request for non-existent node 16777216 in B*Tree
[   54.680387][ T6819] hfsplus: request for non-existent node 16777216 in B*Tree
[   54.688642][ T7209] batadv_slave_1: left promiscuous mode
[   54.794419][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.797223][ T7244] xt_hashlimit: size too large, truncated to 1048576
[   54.879286][ T7207] loop1: detected capacity change from 0 to 32768
[   54.951366][ T7207] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   54.993577][ T7196] overlay: filesystem on ./bus not supported
[   55.055849][ T7207] XFS (loop1): Ending clean mount
[   55.060962][ T7207] XFS (loop1): Quotacheck needed: Please wait.
[   55.066946][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.069222][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.176986][ T7207] XFS (loop1): Quotacheck: Done.
[   55.203612][ T7277] input: syz0 as /devices/virtual/input/input3
[   55.295015][ T7283] loop3: detected capacity change from 0 to 1024
[   55.391295][ T6489] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   55.391870][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.391911][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.392094][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.392114][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.402057][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.402090][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.414758][ T6825] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.414812][ T6825] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.460326][ T6819] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.460423][ T6819] hfsplus: request for non-existent node 16777216 in B*Tree
[   55.588762][ T7285] netlink: 96 bytes leftover after parsing attributes in process `syz.2.132'.
[   56.177539][ T7287] loop4: detected capacity change from 0 to 4096
[   56.225157][ T7295] xt_hashlimit: size too large, truncated to 1048576
[   56.252917][ T7290] loop3: detected capacity change from 0 to 2048
[   56.259820][ T7296] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   56.275539][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'.
[   56.316324][ T7290] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   56.412663][ T7307] 8021q: VLANs not supported on lo
[   56.650212][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'.
[   56.676500][ T7317] loop3: detected capacity change from 0 to 2048
[   56.711484][ T7317] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   56.981892][ T7328] loop4: detected capacity change from 0 to 1024
[   57.094391][ T7320] loop0: detected capacity change from 0 to 32768
[   57.094892][ T7320] XFS: ikeep mount option is deprecated.
[   57.116688][ T7320] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   57.216931][ T7320] XFS (loop0): Ending clean mount
[   57.219403][   T45] hfsplus: b-tree write err: -5, ino 4
[   57.222609][ T7320] XFS (loop0): Quotacheck needed: Please wait.
[   57.272066][ T7320] XFS (loop0): Quotacheck: Done.
[   57.322583][ T6491] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   57.375448][ T7352] geneve2: entered promiscuous mode
[   57.381370][ T7352] geneve2: entered allmulticast mode
[   57.427490][ T7332] loop3: detected capacity change from 0 to 32768
[   57.433551][ T7332] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.146 (7332)
[   57.440937][ T7349] loop4: detected capacity change from 0 to 1024
[   57.490905][ T7332] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   57.491011][ T7332] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[   57.491045][ T7332] BTRFS info (device loop3): disk space caching is enabled
[   57.491068][ T7332] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   57.500784][ T7357] xt_hashlimit: size too large, truncated to 1048576
[   57.514269][ T7353] geneve2: entered promiscuous mode
[   57.516217][ T7353] geneve2: entered allmulticast mode
[   57.568726][ T7332] BTRFS info (device loop3): rebuilding free space tree
[   57.637237][ T7378] loop4: detected capacity change from 0 to 256
[   57.655216][ T7378] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   57.655275][ T7378] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   57.672178][ T7378] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   57.679697][ T7332] BTRFS info (device loop3): disabling free space tree
[   57.681607][ T7332] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   57.689535][ T7332] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   57.758166][ T7332] BTRFS info (device loop3): balance: start -ssoft,usage=172,vrange=0..18446744073709551615,limit=0,stripes=0..4294967295
[   57.758534][ T7332] BTRFS info (device loop3): balance: ended with status: 0
[   57.832904][ T6501] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   57.935865][ T7392] loop4: detected capacity change from 0 to 2048
[   57.959306][ T7392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.265205][ T6497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.806030][ T7402] loop4: detected capacity change from 0 to 32768
[   58.807722][ T7402] XFS: ikeep mount option is deprecated.
[   58.807761][ T7402] XFS: attr2 mount option is deprecated.
[   58.818803][ T7402] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   58.959756][ T6541] IPVS: starting estimator thread 0...
[   59.061657][ T7434] xt_hashlimit: size too large, truncated to 1048576
[   59.109030][ T7431] IPVS: using max 34 ests per chain, 81600 per kthread
[   59.117454][ T7402] XFS (loop4): Ending clean mount
[   59.120176][ T7402] XFS (loop4): Quotacheck needed: Please wait.
[   59.148477][ T7402] XFS (loop4): Quotacheck: Done.
[   59.240132][ T7438] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   59.301565][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'.
[   59.309047][ T7438] netlink: 180 bytes leftover after parsing attributes in process `syz.0.165'.
[   59.313362][ T7438] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   60.066550][ T7440] capability: warning: `syz.4.159' uses deprecated v2 capabilities in a way that may be insecure
[   60.494175][ T6497] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   64.727926][ T2394] ieee802154 phy0 wpan0: encryption failed: -22
[   64.728078][ T2394] ieee802154 phy1 wpan1: encryption failed: -22
[   65.739037][ T7450] loop4: detected capacity change from 0 to 4096
[   65.770994][ T7458] loop3: detected capacity change from 0 to 64
[   65.783318][ T7450] ntfs3(loop4): ino=4, mi_enum_attr
[   65.783523][ T7450] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[   65.797659][ T7450] ntfs3(loop4): Failed to load $AttrDef (-22)
[   65.805485][ T7461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.176'.
[   65.809243][ T7461] netlink: 9 bytes leftover after parsing attributes in process `syz.2.176'.
[   65.809372][ T7461] netlink: 9 bytes leftover after parsing attributes in process `syz.2.176'.
[   65.810866][ T7461] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   65.925037][ T7447] loop0: detected capacity change from 0 to 32768
[   66.054937][ T7450] loop4: detected capacity change from 0 to 40427
[   66.059068][ T7450] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   66.059142][ T7450] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   66.067965][ T7450] F2FS-fs (loop4): invalid crc value
[   66.116117][ T7450] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   66.116191][ T7450] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   66.732629][ T7521] No such timeout policy "syz1"
[   66.746481][ T7523] loop0: detected capacity change from 0 to 2048
[   66.746988][ T7523] udf: Unknown parameter '.'
[   66.773402][ T7524] overlayfs: failed to resolve './bus': -2
[   66.871934][ T7531] loop0: detected capacity change from 0 to 1024
[   66.929032][ T7531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.198'.
[   66.973767][ T7535] loop1: detected capacity change from 0 to 1024
[   66.996784][ T7533] loop4: detected capacity change from 0 to 1024
[   67.054924][ T7535] hfsplus: request for non-existent node 16777216 in B*Tree
[   67.057321][ T7535] hfsplus: request for non-existent node 16777216 in B*Tree
[   67.059858][ T7535] hfsplus: request for non-existent node 16777216 in B*Tree
[   67.061997][ T7535] hfsplus: request for non-existent node 16777216 in B*Tree
[   67.067435][ T7535] hfsplus: request for non-existent node 16777216 in B*Tree
[   67.067494][ T7535] hfsplus: request for non-existent node 16777216 in B*Tree
[   67.172410][  T684] hfsplus: request for non-existent node 16777216 in B*Tree
[   67.172473][  T684] hfsplus: request for non-existent node 16777216 in B*Tree
[   67.278951][ T7505] loop3: detected capacity change from 0 to 32768
[   67.279955][ T7505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.189 (7505)
[   67.290209][ T7505] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   67.290311][ T7505] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm
[   67.290346][ T7505] BTRFS info (device loop3): using free-space-tree
[   67.584787][ T6501] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.135526][ T7641] xt_hashlimit: size too large, truncated to 1048576
[   69.508331][ T7667] loop4: detected capacity change from 0 to 1764
[   69.550520][ T7667] iso9660: Corrupted directory entry in block 2 of inode 1920
[   69.855259][ T1770] cfg80211: failed to load regulatory.db
[   70.192216][ T7713] syz.2.264 uses obsolete (PF_INET,SOCK_PACKET)
[   70.270028][ T7717] Soft offlining pfn 0x1a9a47 at process virtual address 0x20cb3000
[   70.282535][ T7717] Memory failure: 0x1a9a47: unhandlable page.
[   70.967597][ T7717] loop4: detected capacity change from 0 to 32768
[   70.991050][ T7717] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   71.107714][ T7717] 
[   71.108314][ T7717] ======================================================
[   71.110147][ T7717] WARNING: possible circular locking dependency detected
[   71.111913][ T7717] 6.15.0-rc2-syzkaller-gc72692105976 #0 Not tainted
[   71.113547][ T7717] ------------------------------------------------------
[   71.115367][ T7717] syz.4.265/7717 is trying to acquire lock:
[   71.116886][ T7717] ffff0000cd33e610 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_write_begin_nolock+0x8e4/0x3864
[   71.119522][ T7717] 
[   71.119522][ T7717] but task is already holding lock:
[   71.121449][ T7717] ffff0000f1a2ea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_write_begin+0x190/0x30c
[   71.124303][ T7717] 
[   71.124303][ T7717] which lock already depends on the new lock.
[   71.124303][ T7717] 
[   71.127023][ T7717] 
[   71.127023][ T7717] the existing dependency chain (in reverse order) is:
[   71.129329][ T7717] 
[   71.129329][ T7717] -> #4 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[   71.131590][ T7717]        down_write+0x50/0xc0
[   71.132851][ T7717]        ocfs2_try_remove_refcount_tree+0xb4/0x2d8
[   71.134501][ T7717]        ocfs2_xattr_set+0x460/0xe9c
[   71.135956][ T7717]        ocfs2_set_acl+0x574/0x628
[   71.137242][ T7717]        ocfs2_iop_set_acl+0x190/0x25c
[   71.138556][ T7717]        vfs_set_acl+0x70c/0x974
[   71.139847][ T7717]        do_set_acl+0xc8/0x1a8
[   71.141107][ T7717]        filename_setxattr+0x268/0x4f8
[   71.142508][ T7717]        path_setxattrat+0x294/0x314
[   71.143867][ T7717]        __arm64_sys_setxattr+0xc0/0xdc
[   71.145288][ T7717]        invoke_syscall+0x98/0x2b8
[   71.146631][ T7717]        el0_svc_common+0x130/0x23c
[   71.147856][ T7717]        do_el0_svc+0x48/0x58
[   71.148933][ T7717]        el0_svc+0x58/0x150
[   71.150028][ T7717]        el0t_64_sync_handler+0x78/0x108
[   71.151410][ T7717]        el0t_64_sync+0x198/0x19c
[   71.152618][ T7717] 
[   71.152618][ T7717] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[   71.154716][ T7717]        down_read+0x58/0x2f8
[   71.155908][ T7717]        ocfs2_init_acl+0x258/0x5f0
[   71.157367][ T7717]        ocfs2_mknod+0x1028/0x1cf0
[   71.158587][ T7717]        ocfs2_create+0x190/0x474
[   71.159853][ T7717]        path_openat+0x12d8/0x2c40
[   71.161091][ T7717]        do_filp_open+0x18c/0x36c
[   71.162429][ T7717]        do_sys_openat2+0x11c/0x1b4
[   71.163712][ T7717]        __arm64_sys_openat+0x120/0x158
[   71.165180][ T7717]        invoke_syscall+0x98/0x2b8
[   71.166517][ T7717]        el0_svc_common+0x130/0x23c
[   71.167932][ T7717]        do_el0_svc+0x48/0x58
[   71.169091][ T7717]        el0_svc+0x58/0x150
[   71.170242][ T7717]        el0t_64_sync_handler+0x78/0x108
[   71.171730][ T7717]        el0t_64_sync+0x198/0x19c
[   71.173119][ T7717] 
[   71.173119][ T7717] -> #2 (jbd2_handle){++++}-{0:0}:
[   71.175070][ T7717]        start_this_handle+0xe74/0x10dc
[   71.176503][ T7717]        jbd2__journal_start+0x288/0x51c
[   71.178051][ T7717]        jbd2_journal_start+0x3c/0x4c
[   71.179415][ T7717]        ocfs2_start_trans+0x368/0x6ac
[   71.180760][ T7717]        ocfs2_shutdown_local_alloc+0x1ac/0x7e4
[   71.182377][ T7717]        ocfs2_dismount_volume+0x1e4/0x8c4
[   71.183936][ T7717]        ocfs2_put_super+0xec/0x320
[   71.185416][ T7717]        generic_shutdown_super+0x12c/0x2b8
[   71.187073][ T7717]        kill_block_super+0x44/0x90
[   71.188408][ T7717]        deactivate_locked_super+0xc4/0x12c
[   71.189997][ T7717]        deactivate_super+0xe0/0x100
[   71.191349][ T7717]        cleanup_mnt+0x31c/0x3ac
[   71.192600][ T7717]        __cleanup_mnt+0x20/0x30
[   71.193918][ T7717]        task_work_run+0x1dc/0x260
[   71.195181][ T7717]        do_notify_resume+0x178/0x1f8
[   71.196601][ T7717]        el0_svc+0xb0/0x150
[   71.197730][ T7717]        el0t_64_sync_handler+0x78/0x108
[   71.199156][ T7717]        el0t_64_sync+0x198/0x19c
[   71.200474][ T7717] 
[   71.200474][ T7717] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[   71.202607][ T7717]        down_read+0x58/0x2f8
[   71.203826][ T7717]        ocfs2_start_trans+0x35c/0x6ac
[   71.205247][ T7717]        ocfs2_shutdown_local_alloc+0x1ac/0x7e4
[   71.206870][ T7717]        ocfs2_dismount_volume+0x1e4/0x8c4
[   71.208319][ T7717]        ocfs2_put_super+0xec/0x320
[   71.209669][ T7717]        generic_shutdown_super+0x12c/0x2b8
[   71.211190][ T7717]        kill_block_super+0x44/0x90
[   71.212556][ T7717]        deactivate_locked_super+0xc4/0x12c
[   71.214097][ T7717]        deactivate_super+0xe0/0x100
[   71.215448][ T7717]        cleanup_mnt+0x31c/0x3ac
[   71.216755][ T7717]        __cleanup_mnt+0x20/0x30
[   71.217997][ T7717]        task_work_run+0x1dc/0x260
[   71.219324][ T7717]        do_notify_resume+0x178/0x1f8
[   71.220642][ T7717]        el0_svc+0xb0/0x150
[   71.221819][ T7717]        el0t_64_sync_handler+0x78/0x108
[   71.223258][ T7717]        el0t_64_sync+0x198/0x19c
[   71.224634][ T7717] 
[   71.224634][ T7717] -> #0 (sb_internal#3){.+.+}-{0:0}:
[   71.226562][ T7717]        __lock_acquire+0x1728/0x3058
[   71.227908][ T7717]        lock_acquire+0x14c/0x2e0
[   71.229294][ T7717]        ocfs2_start_trans+0x1f4/0x6ac
[   71.230710][ T7717]        ocfs2_write_begin_nolock+0x8e4/0x3864
[   71.232275][ T7717]        ocfs2_write_begin+0x1b4/0x30c
[   71.233652][ T7717]        generic_perform_write+0x23c/0x79c
[   71.235106][ T7717]        __generic_file_write_iter+0xfc/0x204
[   71.236659][ T7717]        ocfs2_file_write_iter+0x1328/0x1b84
[   71.238198][ T7717]        vfs_write+0x62c/0x97c
[   71.239483][ T7717]        ksys_write+0x120/0x210
[   71.240641][ T7717]        __arm64_sys_write+0x7c/0x90
[   71.241985][ T7717]        invoke_syscall+0x98/0x2b8
[   71.243256][ T7717]        el0_svc_common+0x130/0x23c
[   71.244552][ T7717]        do_el0_svc+0x48/0x58
[   71.245721][ T7717]        el0_svc+0x58/0x150
[   71.246858][ T7717]        el0t_64_sync_handler+0x78/0x108
[   71.248370][ T7717]        el0t_64_sync+0x198/0x19c
[   71.249616][ T7717] 
[   71.249616][ T7717] other info that might help us debug this:
[   71.249616][ T7717] 
[   71.252083][ T7717] Chain exists of:
[   71.252083][ T7717]   sb_internal#3 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[   71.252083][ T7717] 
[   71.255436][ T7717]  Possible unsafe locking scenario:
[   71.255436][ T7717] 
[   71.257351][ T7717]        CPU0                    CPU1
[   71.258698][ T7717]        ----                    ----
[   71.260082][ T7717]   lock(&ocfs2_file_ip_alloc_sem_key);
[   71.261499][ T7717]                                lock(&oi->ip_xattr_sem);
[   71.263319][ T7717]                                lock(&ocfs2_file_ip_alloc_sem_key);
[   71.265424][ T7717]   rlock(sb_internal#3);
[   71.266536][ T7717] 
[   71.266536][ T7717]  *** DEADLOCK ***
[   71.266536][ T7717] 
[   71.268695][ T7717] 4 locks held by syz.4.265/7717:
[   71.270079][ T7717]  #0: ffff0000d51deef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x1fc/0x2a0
[   71.272436][ T7717]  #1: ffff0000cd33e420 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x244/0x97c
[   71.274870][ T7717]  #2: ffff0000f1a2ed80 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}, at: ocfs2_file_write_iter+0x3a0/0x1b84
[   71.277866][ T7717]  #3: ffff0000f1a2ea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_write_begin+0x190/0x30c
[   71.280650][ T7717] 
[   71.280650][ T7717] stack backtrace:
[   71.282155][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: syz.4.265 Not tainted 6.15.0-rc2-syzkaller-gc72692105976 #0 PREEMPT 
[   71.284974][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   71.287582][ T7717] Call trace:
[   71.288424][ T7717]  show_stack+0x2c/0x3c (C)
[   71.289591][ T7717]  __dump_stack+0x30/0x40
[   71.290678][ T7717]  dump_stack_lvl+0xd8/0x12c
[   71.291908][ T7717]  dump_stack+0x1c/0x28
[   71.292973][ T7717]  print_circular_bug+0x324/0x32c
[   71.294268][ T7717]  check_noncircular+0x154/0x174
[   71.295516][ T7717]  __lock_acquire+0x1728/0x3058
[   71.296795][ T7717]  lock_acquire+0x14c/0x2e0
[   71.297976][ T7717]  ocfs2_start_trans+0x1f4/0x6ac
[   71.299239][ T7717]  ocfs2_write_begin_nolock+0x8e4/0x3864
[   71.300706][ T7717]  ocfs2_write_begin+0x1b4/0x30c
[   71.301941][ T7717]  generic_perform_write+0x23c/0x79c
[   71.303326][ T7717]  __generic_file_write_iter+0xfc/0x204
[   71.304757][ T7717]  ocfs2_file_write_iter+0x1328/0x1b84
[   71.306151][ T7717]  vfs_write+0x62c/0x97c
[   71.307270][ T7717]  ksys_write+0x120/0x210
[   71.308443][ T7717]  __arm64_sys_write+0x7c/0x90
[   71.309758][ T7717]  invoke_syscall+0x98/0x2b8
[   71.310966][ T7717]  el0_svc_common+0x130/0x23c
[   71.312203][ T7717]  do_el0_svc+0x48/0x58
[   71.313329][ T7717]  el0_svc+0x58/0x150
[   71.314342][ T7717]  el0t_64_sync_handler+0x78/0x108
[   71.315651][ T7717]  el0t_64_sync+0x198/0x19c
[   71.317006][    C0] vkms_vblank_simulate: vblank timer overrun
[   71.457594][ T6497] ocfs2: Unmounting device (7,4) on (node local)