last executing test programs:

28m25.165441391s ago: executing program 32 (id=320):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3, 0x2, &(0x7f0000000100)="8183", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0)

23m51.625488506s ago: executing program 4 (id=745):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mknod$loop(&(0x7f0000000200)='./file2\x00', 0x8, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b4b, 0x0)
keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)

23m49.075339965s ago: executing program 4 (id=748):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x88c0}, 0x4004)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
syz_usb_connect(0x2, 0x66, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0xa1, 0x9c, 0x4a, 0x10, 0xd26f, 0xe881, 0xd0cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x80, 0xd0, 0x80, [{{0x9, 0x4, 0x87, 0x7, 0x0, 0x8, 0x6, 0x50}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

23m45.554050639s ago: executing program 4 (id=751):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8)
io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x10, 0xfffffffc, 0x87})
eventfd2(0x0, 0x1803)
sendmsg$nl_route(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040)

23m44.666490621s ago: executing program 4 (id=752):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1)
signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)

23m42.516729656s ago: executing program 4 (id=757):
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
rt_tgsigqueueinfo(0x0, 0x0, 0x3b, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x55df, 0x2456, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000240)={0x2030}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
rmdir(0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14008000}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0)

23m39.134115632s ago: executing program 4 (id=759):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
syz_usb_connect(0x2, 0x66, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0xa1, 0x9c, 0x4a, 0x10, 0xd26f, 0xe881, 0xd0cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x80, 0xd0, 0x80, [{{0x9, 0x4, 0x87, 0x7, 0x0, 0x8, 0x6, 0x50}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

23m22.543222356s ago: executing program 33 (id=759):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
syz_usb_connect(0x2, 0x66, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0xa1, 0x9c, 0x4a, 0x10, 0xd26f, 0xe881, 0xd0cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x80, 0xd0, 0x80, [{{0x9, 0x4, 0x87, 0x7, 0x0, 0x8, 0x6, 0x50}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

18m56.929347264s ago: executing program 3 (id=1094):
pipe(0x0)
io_setup(0x3fb, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept(r0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

18m54.152045255s ago: executing program 3 (id=1099):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8)
io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x10, 0xfffffffc, 0x87})
eventfd2(0x0, 0x1803)
sendmsg$nl_route(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000))

18m49.93317223s ago: executing program 3 (id=1103):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)

18m45.568635064s ago: executing program 3 (id=1108):
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
memfd_create(0x0, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0)

18m42.210637579s ago: executing program 3 (id=1111):
socket(0x1e, 0x802, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)

18m39.552908674s ago: executing program 3 (id=1113):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0x1000, 0x4, 0xff, 0xfb, 0x64, 0xc1, 0x8, 0x0, 0x2e, 0x48}, {0x6000, 0x4000, 0x9, 0x6, 0x40, 0x4, 0x7d, 0x7, 0x5, 0xff, 0x6, 0x3}, {0x1111ffff, 0xeeef0000, 0x0, 0x5, 0x85, 0x7, 0x40, 0x9, 0x7, 0xa7, 0x8, 0x81}, {0x27bf4dc8de03325f, 0x200000, 0xf, 0xc, 0x7f, 0x43, 0xb, 0xff, 0x8, 0xaf, 0xe, 0x11}, {0x4000, 0x10000, 0xb, 0x1, 0x15, 0x7, 0x91, 0x8, 0x7, 0x83, 0x5, 0x1}, {0xffffffff, 0x58000, 0x8, 0x7, 0x4, 0x6, 0x7, 0x2, 0x80, 0x10, 0x1}, {0x3000, 0x2, 0xa, 0x5, 0x7, 0x4, 0x6, 0x2, 0x5, 0x81, 0xff, 0x8}, {0x8080000, 0x1000, 0xf, 0xd, 0x10, 0x7, 0x4, 0x24, 0xda, 0x25, 0xd9, 0x9}, {0x10000, 0x30}, {0xf1e167af5f80ecc8, 0xd}, 0x80000031, 0x0, 0x8080000, 0x2004, 0x7, 0x1003, 0xeeee8000, [0x6800000000000000, 0x2, 0x0, 0x10000000ff]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18m23.911124283s ago: executing program 34 (id=1113):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0x1000, 0x4, 0xff, 0xfb, 0x64, 0xc1, 0x8, 0x0, 0x2e, 0x48}, {0x6000, 0x4000, 0x9, 0x6, 0x40, 0x4, 0x7d, 0x7, 0x5, 0xff, 0x6, 0x3}, {0x1111ffff, 0xeeef0000, 0x0, 0x5, 0x85, 0x7, 0x40, 0x9, 0x7, 0xa7, 0x8, 0x81}, {0x27bf4dc8de03325f, 0x200000, 0xf, 0xc, 0x7f, 0x43, 0xb, 0xff, 0x8, 0xaf, 0xe, 0x11}, {0x4000, 0x10000, 0xb, 0x1, 0x15, 0x7, 0x91, 0x8, 0x7, 0x83, 0x5, 0x1}, {0xffffffff, 0x58000, 0x8, 0x7, 0x4, 0x6, 0x7, 0x2, 0x80, 0x10, 0x1}, {0x3000, 0x2, 0xa, 0x5, 0x7, 0x4, 0x6, 0x2, 0x5, 0x81, 0xff, 0x8}, {0x8080000, 0x1000, 0xf, 0xd, 0x10, 0x7, 0x4, 0x24, 0xda, 0x25, 0xd9, 0x9}, {0x10000, 0x30}, {0xf1e167af5f80ecc8, 0xd}, 0x80000031, 0x0, 0x8080000, 0x2004, 0x7, 0x1003, 0xeeee8000, [0x6800000000000000, 0x2, 0x0, 0x10000000ff]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18m23.889201494s ago: executing program 2 (id=1131):
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600080407000000"], 0x48)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x17)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r1 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001280), 0x0, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$char_usb(r0, 0x0, 0x0)
inotify_init()

18m20.909182777s ago: executing program 2 (id=1136):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

18m17.212737412s ago: executing program 2 (id=1140):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000))
socket$netlink(0x10, 0x3, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00')
syz_open_procfs(0x0, &(0x7f00000004c0)='loginuid\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

18m16.581388578s ago: executing program 2 (id=1141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8)
io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x10, 0xfffffffc, 0x87})
eventfd2(0x0, 0x1803)
sendmsg$nl_route(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000))

18m14.648371091s ago: executing program 5 (id=1142):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1061)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28)

18m9.706904868s ago: executing program 2 (id=1146):
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
rt_tgsigqueueinfo(0x0, 0x0, 0x3b, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x2030}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
rmdir(0x0)
io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

18m9.047015976s ago: executing program 5 (id=1147):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x33, 0x31, 0x33, 0x39, 0x38, 0x65, 0x33], 0x2d, [0x31, 0x35, 0x0, 0x62], 0x2d, [0x31, 0x64, 0xa6, 0x62], 0x2d, [0x33, 0x31, 0x31, 0x33], 0x2d, [0x64, 0x65, 0x62, 0x31, 0x65, 0x38, 0x54, 0x39]}}}, {@fowner_gt={'fowner>', 0xee01}}, {@appraise_type}, {@dont_appraise}, {@euid_gt}, {@context={'context', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_user}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}, 0x4, 0x50f, &(0x7f0000000940)="$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")
creat(&(0x7f0000000000)='./file1\x00', 0x4)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0xb73d)
writev(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x121042, 0x115)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000880)='./file1\x00', 0x16000f57)
write$P9_RVERSION(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="15ec3dbe65ffff060000000800395032"], 0x15)
splice(r5, 0x0, r7, 0x0, 0x50f5d137, 0xd)

18m6.989626736s ago: executing program 2 (id=1149):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
getpgrp(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18m1.536952693s ago: executing program 5 (id=1154):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1061)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28)

17m58.31711602s ago: executing program 5 (id=1158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0xb285f305e6b16ca5)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10)
bind$xdp(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0)

17m56.005090974s ago: executing program 5 (id=1160):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0xfffffffd, {0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x44}}, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "030600", "fcffffff", ["50d59404000100", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']})

17m53.609575613s ago: executing program 5 (id=1163):
pipe2(&(0x7f0000000040), 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = gettid()
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

17m51.049253212s ago: executing program 35 (id=1149):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
getpgrp(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17m36.662622848s ago: executing program 36 (id=1163):
pipe2(&(0x7f0000000040), 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = gettid()
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

16m2.461807921s ago: executing program 0 (id=1233):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

16m1.087085462s ago: executing program 0 (id=1235):
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
rt_tgsigqueueinfo(0x0, 0x0, 0x3b, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x2030}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
rmdir(0x0)
io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

15m59.235890449s ago: executing program 0 (id=1238):
socket(0x1e, 0x802, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)

15m55.112286489s ago: executing program 0 (id=1239):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x2, 0x80805, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

15m54.610439848s ago: executing program 0 (id=1240):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_pts(0xffffffffffffffff, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002480), 0x80, 0x0)
ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f00000024c0)={0x3})

15m52.071261495s ago: executing program 0 (id=1242):
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r0 = socket(0x10, 0x3, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
write(r0, &(0x7f00000000c0)="240000004e0025000307f4f900c504000a04f55f08000100020100020800038005000000", 0x24)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))

15m36.882521178s ago: executing program 37 (id=1242):
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r0 = socket(0x10, 0x3, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
write(r0, &(0x7f00000000c0)="240000004e0025000307f4f900c504000a04f55f08000100020100020800038005000000", 0x24)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))

55.921197848s ago: executing program 8 (id=3343):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040005)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

55.567587858s ago: executing program 8 (id=3344):
socket$inet6(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}})
read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0x2020)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
read$FUSE(r3, &(0x7f0000006300)={0x2020}, 0x402)
r4 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x28555f37dd1d28c3)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, &(0x7f0000000040)=0x121)
socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4040000)

52.61619514s ago: executing program 8 (id=3350):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x20)
fadvise64(r0, 0x54056, 0x0, 0x3)

51.444693898s ago: executing program 8 (id=3352):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x5519, &(0x7f00000079c0)="$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")
openat(0xffffffffffffffff, 0x0, 0x183341, 0x101)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
setuid(0xee01)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)

50.03180458s ago: executing program 8 (id=3357):
io_uring_setup(0x7554, 0xfffffffffffffffc)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil)

46.842855186s ago: executing program 8 (id=3366):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)

44.897368519s ago: executing program 38 (id=3366):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)

15.848901918s ago: executing program 9 (id=3409):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x4)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180))
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0})
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x2, 0x3, 0x20420, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x5}, 0xfffffea7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x3, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x4, 0x5, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x5, 0x0, 0xf439})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000005c0000035c00000008000000030000000a00000604000000050000000400000007000000ff01000001000000090000000900"], &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.pending_reads\x00', 0x1c10c1, 0x9c37611dc13d0d23)
fchown(r4, 0x0, 0xee01)

10.356512188s ago: executing program 9 (id=3415):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x4000, 0x8, 0x5, 0x3, 0xd0, 0x42, 0x7, 0x0, 0x30, 0x19}, {0xd000, 0x2, 0x0, 0x82, 0x43, 0x7, 0x7f, 0x7, 0x5, 0x6, 0x3}, {0xdddd0000, 0x4000, 0x9, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0x8, 0x8, 0x9}, {0x6000, 0x10000, 0x0, 0x6, 0x3, 0x2, 0x6, 0xf8, 0x9, 0x9, 0xe, 0xf1}, {0x4000, 0x2000, 0xb, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x41, 0x83, 0xd8, 0x6}, {0x1000, 0x191bd000, 0xc, 0x77, 0xb5, 0x81, 0x1, 0x7, 0x80, 0x13, 0x5}, {0x6000, 0x1, 0xd, 0x5, 0x0, 0x2, 0x4, 0x3, 0x3, 0x7b, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0x3000, 0x7}, 0x80000031, 0x0, 0x1, 0x2020, 0x400000008, 0x0, 0x3000, [0xa4, 0x1000, 0x6, 0x6]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

9.745012334s ago: executing program 9 (id=3417):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)

9.647150479s ago: executing program 9 (id=3418):
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)

9.571821243s ago: executing program 7 (id=3419):
r0 = socket$inet(0xa, 0x801, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xdbc97000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x9, [@const={0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x1}, @volatile={0xd, 0x0, 0x0, 0x9, 0x5}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x6}}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x54, 0x0, 0x8, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x2e, 0x2e, 0x30, 0x61, 0x2e]}}, &(0x7f0000000100)=""/3, 0x95, 0x3, 0x1, 0xd, 0x10000}, 0x28)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10)
listen(r0, 0x6)

8.712535144s ago: executing program 1 (id=3423):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x4)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180))
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0})
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x2, 0x3, 0x20420, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x5}, 0xfffffea7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x3, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x4, 0x5, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x5, 0x0, 0xf439})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000005c0000035c00000008000000030000000a00000604000000050000000400000007000000ff01000001000000090000000900"], &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.pending_reads\x00', 0x1c10c1, 0x9c37611dc13d0d23)
fchown(r4, 0x0, 0xee01)

8.710814934s ago: executing program 6 (id=3424):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, 0x0, 0x0)

8.276941379s ago: executing program 6 (id=3425):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x4000, 0x8, 0x5, 0x3, 0xd0, 0x42, 0x7, 0x0, 0x30, 0x19}, {0xd000, 0x2, 0x0, 0x82, 0x43, 0x7, 0x7f, 0x7, 0x5, 0x6, 0x3}, {0xdddd0000, 0x4000, 0x9, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0x8, 0x8, 0x9}, {0x6000, 0x10000, 0x0, 0x6, 0x3, 0x2, 0x6, 0xf8, 0x9, 0x9, 0xe, 0xf1}, {0x4000, 0x2000, 0xb, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x41, 0x83, 0xd8, 0x6}, {0x1000, 0x191bd000, 0xc, 0x77, 0xb5, 0x81, 0x1, 0x7, 0x80, 0x13, 0x5}, {0x6000, 0x1, 0xd, 0x5, 0x0, 0x2, 0x4, 0x3, 0x3, 0x7b, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0x3000, 0x7}, 0x80000031, 0x0, 0x1, 0x2020, 0x400000008, 0x0, 0x3000, [0xa4, 0x1000, 0x6, 0x6]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

7.480111025s ago: executing program 7 (id=3426):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1)

7.321025275s ago: executing program 6 (id=3427):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80108c, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r2, 0x4b3a, 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000002c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}})

5.748774986s ago: executing program 6 (id=3428):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x982a, &(0x7f0000009b80)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x31a5ace94771a077)
sendfile(r2, r0, 0x0, 0x1040000201005)
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500200000040"], 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffbffa003e458, 0x700000000000000)
copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x700000000000000)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

5.68832236s ago: executing program 7 (id=3429):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x4)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180))
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x2, 0x3, 0x20420, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x5}, 0xfffffea7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x3, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x4, 0x5, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x5, 0x0, 0xf439})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000005c0000035c00000008000000030000000a00000604000000050000000400000007000000ff01000001000000090000000900"], &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
fchown(0xffffffffffffffff, 0x0, 0xee01)

4.734370235s ago: executing program 1 (id=3430):
io_uring_setup(0x7554, 0xfffffffffffffffc)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0)
unshare(0xa000400)
shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil)

4.484173869s ago: executing program 1 (id=3431):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
r4 = socket(0xa, 0x3, 0x3a)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0xf8, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xb7, 0x7, 0x1, 0x0, "cf0c200892116a6977a6bfabe06a1e2e4a992575e237eae8f8712e2b21f4451ebc920771923f5c91d49263af3f1e52ae5eedca078d183350a8c447654d7825c6754152cec2913969aa63a45a5ca68ea5dbe2b5e45bfdd9b079a54590eeb3af7614212fe5352af2e3e4664d56c79f03f7178f8803021ed7a28a1fab328f1d87a6f47ca15c3c63ce27de8d0c7cb808092832076de7dd9c0536c1319d2a18967a9138f7a668c531fb65505e5ed4eb3bf2d9a40ee7"}, @NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_USERDATA={0x27, 0xc, "88c85939e9cfc6ff71918879297beb01b412cb393d3a49d83009b409216eb3a70dcc35"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x65ce8338}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x234}, 0x1, 0x0, 0x0, 0x2400d050}, 0x88)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0xfffffffd, 0x1, 0x40000001, 0x0, 0x6, 0x2})
syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000b00), 0x1, 0xa47, &(0x7f0000000b40)="$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")

4.426169063s ago: executing program 9 (id=3432):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x40, 0x6, 0x2, "f3ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000004780)={0x44, &(0x7f0000004540)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.199877484s ago: executing program 1 (id=3433):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, 0x0, 0x0)

3.036738904s ago: executing program 1 (id=3434):
r0 = socket$inet(0xa, 0x801, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xdbc97000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x9, [@const={0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x1}, @volatile={0xd, 0x0, 0x0, 0x9, 0x5}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x6}}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x54, 0x0, 0x8, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x2e, 0x2e, 0x30, 0x61, 0x2e]}}, &(0x7f0000000100)=""/3, 0x95, 0x3, 0x1, 0xd, 0x10000}, 0x28)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10)
listen(r0, 0x6)

2.727658042s ago: executing program 7 (id=3435):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x4000, 0x8, 0x5, 0x3, 0xd0, 0x42, 0x7, 0x0, 0x30, 0x19}, {0xd000, 0x2, 0x0, 0x82, 0x43, 0x7, 0x7f, 0x7, 0x5, 0x6, 0x3}, {0xdddd0000, 0x4000, 0x9, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0x8, 0x8, 0x9}, {0x6000, 0x10000, 0x0, 0x6, 0x3, 0x2, 0x6, 0xf8, 0x9, 0x9, 0xe, 0xf1}, {0x4000, 0x2000, 0xb, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x41, 0x83, 0xd8, 0x6}, {0x1000, 0x191bd000, 0xc, 0x77, 0xb5, 0x81, 0x1, 0x7, 0x80, 0x13, 0x5}, {0x6000, 0x1, 0xd, 0x5, 0x0, 0x2, 0x4, 0x3, 0x3, 0x7b, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0x3000, 0x7}, 0x80000031, 0x0, 0x1, 0x2020, 0x400000008, 0x0, 0x3000, [0xa4, 0x1000, 0x6, 0x6]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

2.495336025s ago: executing program 7 (id=3436):
syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@ssd}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x35, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

2.022555933s ago: executing program 6 (id=3437):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000440)={[{@nls={'nls', 0x3d, 'cp1251'}}, {@gid}, {@part={'part', 0x3d, 0xb8}}, {@nobarrier}, {@gid}, {@gid}, {@gid}, {@barrier}]}, 0x44, 0x70c, &(0x7f00000027c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

1.920786229s ago: executing program 1 (id=3438):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x4)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180))
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0})
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x2, 0x3, 0x20420, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x5}, 0xfffffea7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x3, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x4, 0x5, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x5, 0x0, 0xf439})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000005c0000035c00000008000000030000000a00000604000000050000000400000007000000ff01000001000000090000000900"], &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.pending_reads\x00', 0x1c10c1, 0x9c37611dc13d0d23)
fchown(r4, 0x0, 0xee01)

1.228535759s ago: executing program 9 (id=3439):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000380)={'gretap0\x00'})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40)
timer_create(0x0, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})

912.769237ms ago: executing program 6 (id=3440):
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)

0s ago: executing program 7 (id=3441):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
r4 = socket(0xa, 0x3, 0x3a)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0xf8, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xb7, 0x7, 0x1, 0x0, "cf0c200892116a6977a6bfabe06a1e2e4a992575e237eae8f8712e2b21f4451ebc920771923f5c91d49263af3f1e52ae5eedca078d183350a8c447654d7825c6754152cec2913969aa63a45a5ca68ea5dbe2b5e45bfdd9b079a54590eeb3af7614212fe5352af2e3e4664d56c79f03f7178f8803021ed7a28a1fab328f1d87a6f47ca15c3c63ce27de8d0c7cb808092832076de7dd9c0536c1319d2a18967a9138f7a668c531fb65505e5ed4eb3bf2d9a40ee7"}, @NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_USERDATA={0x27, 0xc, "88c85939e9cfc6ff71918879297beb01b412cb393d3a49d83009b409216eb3a70dcc35"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x65ce8338}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x234}, 0x1, 0x0, 0x0, 0x2400d050}, 0x88)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0xfffffffd, 0x1, 0x40000001, 0x0, 0x6, 0x2})
syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000b00), 0x1, 0xa47, &(0x7f0000000b40)="$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")

kernel console output (not intermixed with test programs):

][T15115] BTRFS info (device loop7): enabling auto defrag
[ 1578.189445][T15113] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1578.224460][T15115] BTRFS info (device loop7): use no compression
[ 1578.224761][T15117] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1578.236245][T15113] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[ 1578.258469][T15115] BTRFS info (device loop7): force clearing of disk cache
[ 1578.269871][T15117] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[ 1578.281259][T15113] BTRFS info (device loop9): turning on flush-on-commit
[ 1578.293068][T15115] BTRFS info (device loop7): max_inline at 4096
[ 1578.312537][T15117] BTRFS info (device loop8): using free space tree
[ 1578.316279][T15115] BTRFS info (device loop7): disabling free space tree
[ 1578.327068][T15113] BTRFS info (device loop9): max_inline at 4096
[ 1578.347133][T15113] BTRFS info (device loop9): enabling disk space caching
[ 1578.366692][T15113] BTRFS info (device loop9): turning off barriers
[ 1578.382761][T15113] BTRFS info (device loop9): disabling tree log
[ 1578.418218][T15113] BTRFS info (device loop9): enabling ssd optimizations
[ 1578.467477][T15113] BTRFS info (device loop9): force clearing of disk cache
[ 1578.488566][T15113] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1578.531499][T15113] BTRFS info (device loop9): use zstd compression, level 3
[ 1578.577266][T15113] BTRFS info (device loop9): max_inline at 0
[ 1578.592494][T15115] BTRFS info (device loop7): enabling ssd optimizations
[ 1578.610259][T15113] BTRFS info (device loop9): disk space caching is enabled
[ 1578.618081][T15115] BTRFS info (device loop7): auto enabling async discard
[ 1578.698335][T15115] BTRFS info (device loop7): rebuilding free space tree
[ 1578.719788][T15117] BTRFS info (device loop8): enabling ssd optimizations
[ 1578.726895][T15117] BTRFS info (device loop8): auto enabling async discard
[ 1578.873012][T15115] BTRFS info (device loop7): disabling free space tree
[ 1578.891391][T15113] BTRFS info (device loop9): rebuilding free space tree
[ 1578.895198][T15117] BTRFS warning (device loop8): get dev_stats failed, device not found
[ 1578.908536][T15115] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1578.927828][T15115] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1578.982204][T11141] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1579.019205][T15113] BTRFS info (device loop9): disabling free space tree
[ 1579.038187][T15113] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1579.074865][T15113] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1579.120885][T15113] BTRFS info (device loop9): checking UUID tree
[ 1579.613488][T15177] fuse: Invalid rootmode
[ 1579.642847][T11132] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1579.696185][T11055] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1580.081678][T15183] loop7: detected capacity change from 0 to 128
[ 1580.147785][T15183] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1580.845350][T15197] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2446'.
[ 1580.857620][T15197] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2446'.
[ 1581.832886][T11055] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1584.559815][T15216] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1584.567277][T15216] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1584.699991][T15221] loop8: detected capacity change from 0 to 4096
[ 1584.831810][T15221] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1584.907892][T15221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1585.419222][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1588.256758][T15266] loop7: detected capacity change from 0 to 4096
[ 1588.280806][T15266] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1588.313993][T15266] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1588.818258][T10345] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1
[ 1588.993379][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1589.285634][T15275] fuse: Bad value for 'fd'
[ 1591.324308][T15303] loop8: detected capacity change from 0 to 16
[ 1591.476466][T15303] erofs: (device loop8): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel
[ 1592.137884][T15309] fuse: Bad value for 'fd'
[ 1592.610945][T15322] loop9: detected capacity change from 0 to 128
[ 1592.645892][T15322] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1592.669063][T15328] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1592.941214][T10345] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1592.951908][T10345] Bluetooth: hci0: Injecting HCI hardware error event
[ 1592.972276][T10345] Bluetooth: hci0: hardware error 0x00
[ 1593.411552][T11132] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1593.657350][T15335] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1593.879496][  T995] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1595.081999][T10345] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1595.474797][T15364] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[ 1595.765962][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1597.417251][T15401] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1602.115749][T10736] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1602.322790][T10736] usb 10-1: Using ep0 maxpacket: 16
[ 1602.360059][T10736] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1602.374194][T10736] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1602.375779][T15487] loop7: detected capacity change from 0 to 64
[ 1602.382466][T10736] usb 10-1: Product: syz
[ 1602.393959][T10736] usb 10-1: Manufacturer: syz
[ 1602.398691][T10736] usb 10-1: SerialNumber: syz
[ 1602.413432][T10736] usb 10-1: config 0 descriptor??
[ 1602.425892][T10736] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1602.947216][   T27] audit: type=1800 audit(1602.306:53): pid=15489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2544" name="file1" dev="loop7" ino=21 res=0 errno=0
[ 1603.759011][T10736] ssu100: probe of 10-1:0.0 failed with error -71
[ 1603.787911][T10736] usb 10-1: USB disconnect, device number 12
[ 1606.757201][T15542] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1606.786909][  T995] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1608.600265][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1608.936433][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1622.702998][T15575] loop8: detected capacity change from 0 to 40427
[ 1622.906676][T15575] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x7ffff
[ 1622.920815][T15575] F2FS-fs (loop8): invalid crc value
[ 1622.947040][T15575] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1623.142395][T15575] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1624.313695][T11141] syz-executor: attempt to access beyond end of device
[ 1624.313695][T11141] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[ 1624.361749][T11141] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1624.379529][T11141] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1624.974963][T15604] overlayfs: failed to clone upperpath
[ 1625.239148][T15608] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1625.279705][  T995] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1625.377194][T15602] loop8: detected capacity change from 0 to 32768
[ 1625.434339][T15602] XFS (loop8): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1625.561323][T15602] XFS (loop8): Starting recovery (logdev: internal)
[ 1625.635150][T15602] XFS (loop8): Ending recovery (logdev: internal)
[ 1625.859987][T11141] XFS (loop8): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1627.410130][ T5774] Bluetooth: hci1: command 0x1003 tx timeout
[ 1627.422345][T10345] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1627.566230][T15633] loop8: detected capacity change from 0 to 32768
[ 1627.589742][T15633] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2591 (15633)
[ 1627.617309][T15633] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1627.628951][T15633] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[ 1627.638405][T15633] BTRFS info (device loop8): enabling ssd optimizations
[ 1627.646000][T15633] BTRFS info (device loop8): using spread ssd allocation scheme
[ 1627.653728][T15633] BTRFS info (device loop8): setting nodatacow, compression disabled
[ 1627.662623][T15633] BTRFS info (device loop8): turning off barriers
[ 1627.673109][T15633] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1627.727554][T15633] BTRFS info (device loop8): trying to use backup root at mount time
[ 1627.756152][T15633] BTRFS info (device loop8): metadata ratio 6
[ 1627.762866][T15633] BTRFS info (device loop8): enabling auto defrag
[ 1627.769447][T15633] BTRFS info (device loop8): enabling disk space caching
[ 1627.780311][T15633] BTRFS info (device loop8): max_inline at 0
[ 1627.791389][T15633] BTRFS error (device loop8): cannot disable free space tree
[ 1627.844619][T15633] BTRFS error (device loop8): open_ctree failed: -22
[ 1628.122593][T15589] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by udevd (15589)
[ 1629.120440][T10345] Bluetooth: hci5: command 0x1003 tx timeout
[ 1629.120990][T15332] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1629.192975][T15653] loop8: detected capacity change from 0 to 4096
[ 1629.234038][T15653] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1629.274005][T15653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1629.890798][T15665] hub 8-0:1.0: USB hub found
[ 1629.898219][T15665] hub 8-0:1.0: 1 port detected
[ 1630.904446][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1631.270625][T15671] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1631.323097][   T31] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1633.482199][T10345] Bluetooth: hci1: command 0x1003 tx timeout
[ 1633.493878][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1634.019804][T15686] loop8: detected capacity change from 0 to 4096
[ 1634.048212][T15686] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1634.071148][T15686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1635.900254][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1637.107092][T15703] loop9: detected capacity change from 0 to 131072
[ 1637.140352][T15703] F2FS-fs (loop9): invalid crc value
[ 1637.172325][T15703] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1637.259383][T15703] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1637.311102][T15714] loop8: detected capacity change from 0 to 128
[ 1637.566728][T15714] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1638.603595][T11141] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1638.637606][T15726] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2624'.
[ 1642.060461][T15755] fuse: Unknown parameter '0x0000000000000003'
[ 1646.461358][   T27] audit: type=1326 audit(1642.996:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9e39aeb9 code=0x7ffc0000
[ 1646.528900][   T27] audit: type=1326 audit(1643.006:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9e39aeb9 code=0x7ffc0000
[ 1646.606127][   T27] audit: type=1326 audit(1643.015:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc9e39aeb9 code=0x7ffc0000
[ 1646.804002][T15793] tipc: Started in network mode
[ 1646.809138][T15793] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1646.839391][   T27] audit: type=1326 audit(1643.015:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9e39aeb9 code=0x7ffc0000
[ 1646.863321][   T27] audit: type=1326 audit(1643.015:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc9e39aeb9 code=0x7ffc0000
[ 1646.902317][T15793] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:017b:70bb
[ 1646.915700][   T27] audit: type=1326 audit(1643.015:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9e39aeb9 code=0x7ffc0000
[ 1647.035928][T15793] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1647.069731][   T27] audit: type=1326 audit(1643.015:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9e39aeb9 code=0x7ffc0000
[ 1647.121713][T15783] loop7: detected capacity change from 0 to 32768
[ 1647.132856][   T27] audit: type=1326 audit(1643.024:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc9e39c747 code=0x7ffc0000
[ 1647.205379][   T27] audit: type=1326 audit(1643.024:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efc9e35b78e code=0x7ffc0000
[ 1647.255096][T15783] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1647.297659][T15783] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[ 1647.362455][   T27] audit: type=1326 audit(1643.024:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efc9e35b78e code=0x7ffc0000
[ 1647.385183][T15783] BTRFS info (device loop7): turning off barriers
[ 1647.410146][T15783] BTRFS info (device loop7): setting nodatasum
[ 1647.431814][T15783] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1647.509772][T15783] BTRFS info (device loop7): use zstd compression, level 3
[ 1647.604493][T15783] BTRFS info (device loop7): using free space tree
[ 1649.091663][T10889] tipc: Node number set to 1
[ 1649.155873][T11055] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1652.305190][T15850] loop8: detected capacity change from 0 to 128
[ 1652.363209][T15838] loop9: detected capacity change from 0 to 32768
[ 1652.381806][T15850] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1652.403337][T15838] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.2648 (15838)
[ 1652.449742][T15838] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1652.468859][T15838] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[ 1652.580187][T15838] BTRFS info (device loop9): force clearing of disk cache
[ 1652.600063][T15838] BTRFS info (device loop9): enabling auto defrag
[ 1652.626680][T15838] BTRFS info (device loop9): enabling ssd optimizations
[ 1652.703840][T15838] BTRFS info (device loop9): setting nodatacow, compression disabled
[ 1652.744146][T15838] BTRFS info (device loop9): enabling disk space caching
[ 1652.762889][T15838] BTRFS info (device loop9): disk space caching is enabled
[ 1653.334270][T15838] BTRFS info (device loop9): rebuilding free space tree
[ 1653.437689][T15838] BTRFS info (device loop9): disabling free space tree
[ 1653.452255][T15838] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1653.462465][T15838] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1653.477695][T11141] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1653.523646][T15838] BTRFS info (device loop9): checking UUID tree
[ 1653.969950][T11132] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1654.190100][ T5823] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1654.423338][ T5823] usb 9-1: device descriptor read/64, error -71
[ 1655.419154][ T5823] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1655.590232][ T5823] usb 9-1: device descriptor read/64, error -71
[ 1655.868133][ T5823] usb usb9-port1: attempt power cycle
[ 1656.333016][ T5823] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1656.374559][ T5823] usb 9-1: device descriptor read/8, error -71
[ 1656.681655][ T5823] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1656.736157][ T5823] usb 9-1: device descriptor read/8, error -71
[ 1656.873189][ T5823] usb usb9-port1: unable to enumerate USB device
[ 1658.994015][T15925] loop7: detected capacity change from 0 to 131072
[ 1659.030726][T15925] F2FS-fs (loop7): invalid crc value
[ 1659.758176][T15941] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1659.784810][T15736] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1659.791288][T15925] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1659.829083][T15925] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1660.312534][   T27] kauditd_printk_skb: 41 callbacks suppressed
[ 1660.312548][   T27] audit: type=1800 audit(1655.961:105): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2673" name="file1" dev="loop7" ino=7 res=0 errno=0
[ 1660.340004][   T27] audit: type=1800 audit(1655.998:106): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2673" name="file1" dev="loop7" ino=7 res=0 errno=0
[ 1660.370213][T15952] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1660.516152][T15955] overlayfs: failed to resolve './file1': -2
[ 1662.261900][T10345] Bluetooth: hci1: command 0x1003 tx timeout
[ 1662.378726][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1662.835058][T15977] loop9: detected capacity change from 0 to 131072
[ 1662.938101][T15977] F2FS-fs (loop9): invalid crc value
[ 1663.010361][T15977] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1663.086153][T15977] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1663.594609][T15996] binder: 15995:15996 ioctl 4018620d 0 returned -22
[ 1665.169506][ T5780] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1665.836733][ T5780] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1666.015964][ T5780] usb 8-1: config 0 has no interfaces?
[ 1666.021551][ T5780] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1666.113675][ T5780] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1666.133843][ T5780] usb 8-1: config 0 descriptor??
[ 1666.462751][ T5780] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1666.644336][ T5780] usb 10-1: device descriptor read/64, error -71
[ 1666.943755][ T5780] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1667.129633][ T5780] usb 10-1: device descriptor read/64, error -71
[ 1667.347443][ T5780] usb usb10-port1: attempt power cycle
[ 1667.873738][ T5780] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1668.101813][ T5780] usb 10-1: device descriptor read/8, error -71
[ 1668.114925][T10344] usb 8-1: USB disconnect, device number 2
[ 1669.068907][T16051] fuse: Bad value for 'group_id'
[ 1669.103099][ T5780] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1669.179168][ T5780] usb 10-1: device descriptor read/8, error -71
[ 1669.325083][ T5780] usb usb10-port1: unable to enumerate USB device
[ 1669.370076][T16061] loop8: detected capacity change from 0 to 4096
[ 1669.416583][T16061] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1669.512501][T16061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1670.242491][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1671.143989][T16083] fuse: Bad value for 'group_id'
[ 1671.627003][T16034] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1671.807815][T16102] loop8: detected capacity change from 0 to 4096
[ 1671.871959][T16034] usb 8-1: Using ep0 maxpacket: 8
[ 1671.879109][T16034] usb 8-1: no configurations
[ 1671.894728][T16034] usb 8-1: can't read configurations, error -22
[ 1672.065954][T16034] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1672.342400][T16034] usb 8-1: Using ep0 maxpacket: 8
[ 1672.349783][T16034] usb 8-1: no configurations
[ 1672.564683][T16034] usb 8-1: can't read configurations, error -22
[ 1672.577686][T16034] usb usb8-port1: attempt power cycle
[ 1672.584834][T16102] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1672.621474][T16102] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1672.942458][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1673.058633][T16034] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1673.112886][T16034] usb 8-1: Using ep0 maxpacket: 8
[ 1673.133659][T16034] usb 8-1: no configurations
[ 1673.138312][T16034] usb 8-1: can't read configurations, error -22
[ 1673.379305][T16034] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1673.434154][T16034] usb 8-1: Using ep0 maxpacket: 8
[ 1673.443601][T16034] usb 8-1: no configurations
[ 1673.448277][T16034] usb 8-1: can't read configurations, error -22
[ 1673.483713][T16034] usb usb8-port1: unable to enumerate USB device
[ 1674.624385][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1674.824851][T16118] loop8: detected capacity change from 0 to 131072
[ 1674.834849][T16118] F2FS-fs (loop8): invalid crc value
[ 1674.853089][T16118] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1674.966754][T16118] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[ 1675.047350][T16132] binder: BINDER_SET_CONTEXT_MGR already set
[ 1675.111441][T16132] binder: 16130:16132 ioctl 4018620d 200000004a80 returned -16
[ 1676.243540][T16154] loop7: detected capacity change from 0 to 4096
[ 1676.305227][T16154] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1676.380646][T16154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1676.955755][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1677.089351][T16163] binder: BINDER_SET_CONTEXT_MGR already set
[ 1677.095454][T16163] binder: 16162:16163 ioctl 4018620d 200000004a80 returned -16
[ 1677.987854][ T5842] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1678.203361][ T5842] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1678.258799][ T5842] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1678.291713][ T5842] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1678.341042][ T5842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1678.364922][ T5842] usb 8-1: config 0 descriptor??
[ 1680.047318][ T5780] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1680.264941][ T5780] usb 10-1: Using ep0 maxpacket: 8
[ 1680.271587][ T5780] usb 10-1: no configurations
[ 1680.278066][ T5780] usb 10-1: can't read configurations, error -22
[ 1680.435570][ T5780] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1680.649100][ T5780] usb 10-1: Using ep0 maxpacket: 8
[ 1680.658010][ T5780] usb 10-1: no configurations
[ 1680.673417][ T5780] usb 10-1: can't read configurations, error -22
[ 1680.687199][ T5780] usb usb10-port1: attempt power cycle
[ 1680.957525][T10344] usb 8-1: USB disconnect, device number 7
[ 1681.305409][ T5780] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1681.346118][ T5780] usb 10-1: Using ep0 maxpacket: 8
[ 1682.145738][ T5780] usb 10-1: no configurations
[ 1682.150513][ T5780] usb 10-1: can't read configurations, error -22
[ 1682.266923][T16248] binder: 16247:16248 ioctl c0306201 0 returned -14
[ 1682.316759][ T5780] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1682.362480][ T5780] usb 10-1: Using ep0 maxpacket: 8
[ 1682.389911][ T5780] usb 10-1: no configurations
[ 1682.404029][ T5780] usb 10-1: can't read configurations, error -22
[ 1682.412077][ T5780] usb usb10-port1: unable to enumerate USB device
[ 1685.227533][T16289] binder: 16288:16289 ioctl c0306201 0 returned -14
[ 1687.213273][T16321] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1687.282916][  T995] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1687.351992][T10344] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1687.702684][T10344] usb 8-1: Using ep0 maxpacket: 8
[ 1687.731304][T10344] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.530383][T10344] usb 8-1: config 0 has no interfaces?
[ 1688.539661][T10344] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1688.548955][T10344] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1688.569706][T10344] usb 8-1: Product: syz
[ 1688.581680][T10344] usb 8-1: Manufacturer: syz
[ 1688.586358][T10344] usb 8-1: SerialNumber: syz
[ 1688.615514][T10344] usb 8-1: config 0 descriptor??
[ 1689.879845][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1689.907157][T10345] Bluetooth: hci1: command 0x1003 tx timeout
[ 1691.723711][T10344] usb 8-1: USB disconnect, device number 8
[ 1693.019951][T10185] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1693.445790][T10185] usb 8-1: Using ep0 maxpacket: 8
[ 1693.490637][T10185] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1693.506794][T10185] usb 8-1: config 0 has no interfaces?
[ 1693.540657][T10185] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1693.569620][T10185] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1693.581332][T10185] usb 8-1: Product: syz
[ 1693.591851][T10185] usb 8-1: Manufacturer: syz
[ 1693.599705][T10185] usb 8-1: SerialNumber: syz
[ 1693.613900][T10185] usb 8-1: config 0 descriptor??
[ 1695.900066][T10185] usb 8-1: USB disconnect, device number 9
[ 1696.037842][T16432] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1697.247258][T16442] loop8: detected capacity change from 0 to 131072
[ 1697.332270][T16442] F2FS-fs (loop8): invalid crc value
[ 1697.409034][T16442] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1697.497654][T16442] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[ 1698.165882][   T27] audit: type=1800 audit(1691.366:107): pid=16449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2856" name="file1" dev="loop8" ino=7 res=0 errno=0
[ 1698.384666][   T27] audit: type=1800 audit(1691.422:108): pid=16448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2856" name="file1" dev="loop8" ino=7 res=0 errno=0
[ 1698.741610][   T31] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1699.802146][T16464] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1700.545538][T16490] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1700.886429][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1700.892974][T10345] Bluetooth: hci1: command 0x1003 tx timeout
[ 1701.056106][T16497] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1701.088210][  T796] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1702.344338][T16517] loop7: detected capacity change from 0 to 4096
[ 1702.658439][T16517] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1702.985670][T16517] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1703.184995][T10345] Bluetooth: hci1: command 0x1003 tx timeout
[ 1703.192985][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1703.278012][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1705.698201][T16551] loop7: detected capacity change from 0 to 4096
[ 1706.381912][T16551] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1706.400157][T16551] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1706.636953][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1706.704923][T12718] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1706.950096][T12718] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1706.983041][T12718] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1707.025456][T12718] usb 10-1: config 0 descriptor??
[ 1707.058844][T12718] cp210x 10-1:0.0: cp210x converter detected
[ 1707.252441][T12718] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1707.267554][T12718] cp210x 10-1:0.0: querying part number failed
[ 1707.286253][T12718] usb 10-1: cp210x converter now attached to ttyUSB0
[ 1708.787596][T10736] usb 10-1: USB disconnect, device number 21
[ 1708.819445][T10736] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1708.827945][T10736] cp210x 10-1:0.0: device disconnected
[ 1709.218850][T16584] loop9: detected capacity change from 0 to 4096
[ 1709.916301][T16584] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1709.952552][T16584] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1710.359362][T11132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1710.543611][   T49] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1711.610330][T12718] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1711.814338][T12718] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1711.823917][T12718] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1711.838311][T12718] usb 9-1: config 0 descriptor??
[ 1711.854417][T12718] cp210x 9-1:0.0: cp210x converter detected
[ 1712.081147][T12718] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1712.114070][T12718] cp210x 9-1:0.0: querying part number failed
[ 1712.134903][T12718] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1712.678227][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1713.996028][T16642] loop7: detected capacity change from 0 to 131072
[ 1714.106223][T16642] F2FS-fs (loop7): invalid crc value
[ 1714.154448][T16642] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1714.205333][T16642] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1714.573152][ T5842] usb 9-1: USB disconnect, device number 16
[ 1714.603501][ T5842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1714.632489][ T5842] cp210x 9-1:0.0: device disconnected
[ 1717.461367][T16673] loop9: detected capacity change from 0 to 131072
[ 1717.574838][T16673] F2FS-fs (loop9): invalid crc value
[ 1717.739740][T16673] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1717.816999][T16673] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1719.240863][T16691] TCP: TCP_TX_DELAY enabled
[ 1720.411427][T16691] loop7: detected capacity change from 0 to 32768
[ 1720.431619][T16691] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2937 (16691)
[ 1720.515709][T16691] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1720.537049][T16691] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[ 1720.585413][T16691] BTRFS info (device loop7): using free space tree
[ 1720.745199][T16691] BTRFS info (device loop7): enabling ssd optimizations
[ 1720.799872][T16691] BTRFS info (device loop7): auto enabling async discard
[ 1721.161046][T16726] fuse: Bad value for 'fd'
[ 1721.658292][ T5780] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1721.885644][ T5780] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1721.906113][ T5780] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1721.959908][ T5780] usb 10-1: config 0 descriptor??
[ 1721.989576][ T5780] cp210x 10-1:0.0: cp210x converter detected
[ 1722.204502][ T5780] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1722.233983][ T5780] cp210x 10-1:0.0: querying part number failed
[ 1722.260442][ T5780] usb 10-1: cp210x converter now attached to ttyUSB0
[ 1722.484205][T11055] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1722.653534][T10345] Bluetooth: hci1: command 0x1003 tx timeout
[ 1722.656396][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1724.097932][T16749] loop8: detected capacity change from 0 to 131072
[ 1724.232599][T16749] F2FS-fs (loop8): invalid crc value
[ 1724.297003][T16749] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1724.405838][T16749] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[ 1724.876280][   T27] audit: type=1800 audit(1716.341:109): pid=16760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2951" name="file1" dev="loop8" ino=7 res=0 errno=0
[ 1724.943317][T10344] usb 10-1: USB disconnect, device number 22
[ 1724.961668][   T27] audit: type=1800 audit(1716.341:110): pid=16761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2951" name="file1" dev="loop8" ino=7 res=0 errno=0
[ 1725.015649][T10344] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1725.024167][T10344] cp210x 10-1:0.0: device disconnected
[ 1725.139888][T16765] binder: 16764:16765 ioctl 4018620d 0 returned -22
[ 1725.581845][T16770] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1725.628011][  T796] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1727.912757][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1728.912059][ T7592] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1729.780367][T16792] fuse: Bad value for 'fd'
[ 1729.836597][T10185] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1730.743944][T16794] loop7: detected capacity change from 0 to 131072
[ 1730.789781][T16794] F2FS-fs (loop7): invalid crc value
[ 1730.801277][T10185] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1730.817485][T16794] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1730.849592][T16794] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1730.863367][T10185] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1731.066175][T10345] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1731.284853][T10185] usb 9-1: config 0 descriptor??
[ 1731.324823][T10185] cp210x 9-1:0.0: cp210x converter detected
[ 1731.441165][   T27] audit: type=1800 audit(1722.505:111): pid=16799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2963" name="file1" dev="loop7" ino=7 res=0 errno=0
[ 1731.508354][   T27] audit: type=1800 audit(1722.505:112): pid=16800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2963" name="file1" dev="loop7" ino=7 res=0 errno=0
[ 1731.562563][T10185] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1731.578985][T10185] cp210x 9-1:0.0: querying part number failed
[ 1731.646386][T10185] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1733.354927][T16811] loop9: detected capacity change from 0 to 4096
[ 1733.889124][T16811] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1733.920076][T16811] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1734.091646][T10344] usb 9-1: USB disconnect, device number 17
[ 1734.132636][T10344] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1734.473965][T11132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1735.124495][T10344] cp210x 9-1:0.0: device disconnected
[ 1736.237601][T16827] sctp: failed to load transform for md5: -2
[ 1737.952617][T16830] loop9: detected capacity change from 0 to 32768
[ 1737.996385][T16830] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.2968 (16830)
[ 1738.052777][T16830] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1738.063300][T16830] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[ 1738.072177][T16830] BTRFS info (device loop9): turning off barriers
[ 1738.079247][T16830] BTRFS info (device loop9): setting nodatasum
[ 1738.087678][T16830] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1738.097281][T16830] BTRFS info (device loop9): use zstd compression, level 3
[ 1738.104616][T16830] BTRFS info (device loop9): using free space tree
[ 1738.436809][T16867] loop8: detected capacity change from 0 to 4096
[ 1738.508661][T16867] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1738.564152][T16867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1738.929959][T11132] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1739.107737][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1739.623269][T16881] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1739.763409][T15736] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1740.034221][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1741.842113][ T5774] Bluetooth: hci1: command 0x1003 tx timeout
[ 1741.851196][T10345] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1742.536998][T16902] Bluetooth: hci5: command 0x1003 tx timeout
[ 1742.537096][T15332] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1743.485756][T16912] loop9: detected capacity change from 0 to 4096
[ 1743.621656][T16912] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1744.179672][T16912] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1744.318613][T16909] infiniband syz2: set down
[ 1744.592303][T11132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1744.845273][T16920] overlayfs: failed to resolve './file1': -2
[ 1744.935603][T16923] fuse: Unknown parameter '00000000000000000000'
[ 1745.370741][T16909] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1745.378271][T16909] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1746.283732][T16909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1746.363674][T16909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1746.810539][T16909] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1746.819695][T16909] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1746.831183][T16909] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1746.841392][T16909] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1746.934542][ T5842] lo speed is unknown, defaulting to 1000
[ 1747.035285][T16951] lo speed is unknown, defaulting to 1000
[ 1748.368877][T16954] loop9: detected capacity change from 0 to 131072
[ 1748.445627][T16954] F2FS-fs (loop9): invalid crc value
[ 1748.526875][T16954] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1748.600971][T16954] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1749.805818][   T27] audit: type=1800 audit(1739.679:113): pid=16967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2995" name="file1" dev="loop9" ino=7 res=0 errno=0
[ 1749.863417][   T27] audit: type=1800 audit(1739.717:114): pid=16968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2995" name="file1" dev="loop9" ino=7 res=0 errno=0
[ 1750.348158][T16981] fuse: Unknown parameter '00000000000000000000'
[ 1754.354724][T17008] fuse: Unknown parameter 'user00000000000000000000'
[ 1754.883451][T17015] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1754.943128][  T796] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1755.098452][T15336] Bluetooth: hci1: command 0x1003 tx timeout
[ 1755.099002][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1756.447293][T17026] loop8: detected capacity change from 0 to 131072
[ 1756.549403][T17026] F2FS-fs (loop8): invalid crc value
[ 1756.598395][T17033] fuse: Unknown parameter 'user00000000000000000000'
[ 1756.791885][T17026] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1757.185191][T15332] Bluetooth: hci5: command 0x1003 tx timeout
[ 1757.365534][T16902] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1757.524789][T17026] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[ 1764.298971][T17070] loop9: detected capacity change from 0 to 131072
[ 1764.388009][T17070] F2FS-fs (loop9): invalid crc value
[ 1764.497550][T17070] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1764.551125][T17070] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1765.194199][   T27] audit: type=1800 audit(1754.075:115): pid=17083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3033" name="file1" dev="loop9" ino=7 res=0 errno=0
[ 1766.069915][   T27] audit: type=1800 audit(1754.094:116): pid=17084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3033" name="file1" dev="loop9" ino=7 res=0 errno=0
[ 1768.075194][T17094] loop8: detected capacity change from 0 to 32768
[ 1768.172975][T17094] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1770.130232][T17094] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1770.221380][T17117] loop7: detected capacity change from 0 to 40427
[ 1770.406610][T17117] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x7ffff
[ 1770.423440][T17117] F2FS-fs (loop7): invalid crc value
[ 1770.500798][T17117] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1770.679597][T17117] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1771.201022][T17094] XFS (loop8): Starting recovery (logdev: internal)
[ 1772.053913][T17094] XFS (loop8): Ending recovery (logdev: internal)
[ 1772.137420][T11055] syz-executor: attempt to access beyond end of device
[ 1772.137420][T11055] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[ 1772.194358][T11055] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[ 1772.201332][T11055] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[ 1772.279439][T11141] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1776.479772][T10736] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1776.728045][T10736] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1776.737655][T10736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1776.755839][T10736] usb 9-1: config 0 descriptor??
[ 1776.785555][T10736] cp210x 9-1:0.0: cp210x converter detected
[ 1777.099147][T10736] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1777.691342][T17155] loop7: detected capacity change from 0 to 32768
[ 1777.750564][T17155] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1777.973673][T17155] XFS (loop7): Ending clean mount
[ 1778.012125][T17155] XFS (loop7): Quotacheck needed: Please wait.
[ 1778.596786][T17185] loop9: detected capacity change from 0 to 4096
[ 1778.696216][T17155] XFS (loop7): Quotacheck: Done.
[ 1778.702581][T17185] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1778.747883][T16950] usb 9-1: USB disconnect, device number 18
[ 1778.790747][T17185] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1778.883714][T16950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1779.005085][T16950] cp210x 9-1:0.0: device disconnected
[ 1779.164611][T11132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1779.401346][T11055] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1779.602374][T16950] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1779.826957][T16950] usb 9-1: Using ep0 maxpacket: 16
[ 1779.848811][T16950] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1779.907103][T16950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1779.943767][T16950] usb 9-1: Product: syz
[ 1779.959061][T16950] usb 9-1: Manufacturer: syz
[ 1779.975013][T16950] usb 9-1: SerialNumber: syz
[ 1779.989545][T16950] usb 9-1: config 0 descriptor??
[ 1780.010288][T16950] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1780.032781][T17195] overlayfs: missing 'lowerdir'
[ 1780.365167][T16950] ssu100: probe of 9-1:0.0 failed with error -110
[ 1781.583390][T17212] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1782.958234][T16950] usb 9-1: USB disconnect, device number 19
[ 1783.781262][T16902] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1784.917390][T17237] syz.9.3078: attempt to access beyond end of device
[ 1784.917390][T17237] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1784.931784][T17237] efs: cannot read volume header
[ 1786.128787][T17246] loop8: detected capacity change from 0 to 128
[ 1786.646641][T17252] loop7: detected capacity change from 0 to 4096
[ 1786.725069][T17252] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1787.345364][T17252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1787.649643][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1788.652251][T17257] loop9: detected capacity change from 0 to 131072
[ 1788.667079][T17257] F2FS-fs (loop9): invalid crc value
[ 1788.728231][T16902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1788.742540][T16902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1788.772974][T17257] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1788.774685][T16902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1788.789387][T16902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1788.797378][T16902] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1788.804914][T16902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1788.892571][T17257] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1788.932074][T12661] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1789.790682][T17262] lo speed is unknown, defaulting to 1000
[ 1789.810571][T17271] sctp: failed to load transform for md5: -2
[ 1789.984167][T12661] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1790.222865][T12661] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1790.404869][T17266] loop8: detected capacity change from 0 to 32768
[ 1790.445464][T12661] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1790.471084][T17266] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1790.872845][T17266] XFS (loop8): Ending clean mount
[ 1790.949190][T17266] XFS (loop8): Quotacheck needed: Please wait.
[ 1791.048093][T16902] Bluetooth: hci0: command tx timeout
[ 1791.126012][T17266] XFS (loop8): Quotacheck: Done.
[ 1791.215096][T17281] loop7: detected capacity change from 0 to 16
[ 1791.259281][T17281] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1791.374471][T17281] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1791.388974][T11141] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1791.440605][T17291] erofs: (device loop7): z_erofs_readahead: readahead error at folio 87 @ nid 36
[ 1791.544780][T17291] erofs: (device loop7): z_erofs_readahead: readahead error at folio 86 @ nid 36
[ 1791.545117][T17281] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1791.592294][T17291] syz.7.3090: attempt to access beyond end of device
[ 1791.592294][T17291] loop7: rw=524288, sector=16, nr_sectors = 16 limit=16
[ 1791.606458][T17291] syz.7.3090: attempt to access beyond end of device
[ 1791.606458][T17291] loop7: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[ 1791.621876][T17291] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[3749]
[ 1791.923244][T17262] chnl_net:caif_netlink_parms(): no params data found
[ 1793.069707][   T31] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1793.894936][T15332] Bluetooth: hci0: command tx timeout
[ 1794.096913][T17323] loop9: detected capacity change from 0 to 4096
[ 1794.108804][T17323] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1794.126205][T17323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1794.320463][T17328] fuse: Unknown parameter '0x0000000000000003'
[ 1794.438255][T11132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1794.805183][T17262] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1794.814888][T17262] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1794.823053][T17262] bridge_slave_0: entered allmulticast mode
[ 1794.831343][T17262] bridge_slave_0: entered promiscuous mode
[ 1794.863264][T17262] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1794.874814][T17262] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1794.884103][T17262] bridge_slave_1: entered allmulticast mode
[ 1794.895671][T17262] bridge_slave_1: entered promiscuous mode
[ 1794.955670][T17262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1795.014930][T17262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1795.123345][T17262] team0: Port device team_slave_0 added
[ 1795.133659][T17262] team0: Port device team_slave_1 added
[ 1795.200411][T17262] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1795.207508][T17262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1795.211136][T16902] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1795.241345][T15332] Bluetooth: hci1: command 0x1003 tx timeout
[ 1795.351027][T17262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1795.472741][T17262] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1795.508476][T17262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1795.589795][T17262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1795.910217][T17262] hsr_slave_0: entered promiscuous mode
[ 1795.941027][T17262] hsr_slave_1: entered promiscuous mode
[ 1795.978006][T17262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1795.993793][T17262] Cannot create hsr debugfs directory
[ 1796.064872][T15336] Bluetooth: hci0: command tx timeout
[ 1797.000443][T12661] veth0_to_bond: left allmulticast mode
[ 1797.006212][T12661] veth0_to_bond: left promiscuous mode
[ 1797.027505][T12661] bridge1: port 1(veth0_to_bond) entered disabled state
[ 1797.085279][T12661] hsr_slave_0: left promiscuous mode
[ 1797.117970][T12661] hsr_slave_1: left promiscuous mode
[ 1797.156829][T12661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1797.175197][T12661] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1797.215307][T12661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1797.236712][T12661] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1797.269918][T12661] bridge_slave_1: left allmulticast mode
[ 1797.295930][T12661] bridge_slave_1: left promiscuous mode
[ 1797.326568][T12661] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1797.367159][T12661] bridge_slave_0: left allmulticast mode
[ 1797.374180][T12661] bridge_slave_0: left promiscuous mode
[ 1797.403192][T12661] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1797.563933][T12661] veth1_macvtap: left promiscuous mode
[ 1797.580474][T12661] veth0_macvtap: left promiscuous mode
[ 1797.602271][T12661] veth1_vlan: left promiscuous mode
[ 1797.647102][T12661] veth0_vlan: left promiscuous mode
[ 1798.288398][T15336] Bluetooth: hci0: command tx timeout
[ 1798.314323][T17371] fuse: Unknown parameter '0x0000000000000003'
[ 1798.757769][T17375] loop7: detected capacity change from 0 to 4096
[ 1798.927154][T17375] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1799.455450][T17375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1799.754686][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1801.122631][T17383] loop7: detected capacity change from 0 to 131072
[ 1801.141255][T17383] F2FS-fs (loop7): invalid crc value
[ 1801.156929][T17383] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1801.207986][T17383] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1802.043163][T17388] loop8: detected capacity change from 0 to 32768
[ 1802.143416][T17388] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1802.261829][T12661] team0 (unregistering): Port device team_slave_1 removed
[ 1802.313470][T17388] XFS (loop8): Ending clean mount
[ 1802.344459][T17388] XFS (loop8): Quotacheck needed: Please wait.
[ 1802.468853][T17388] XFS (loop8): Quotacheck: Done.
[ 1802.494091][T12661] team0 (unregistering): Port device team_slave_0 removed
[ 1802.594777][T11141] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1802.783177][T12661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1802.911022][T17403] fuse: Unknown parameter '0x0000000000000003'
[ 1803.014462][T12661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1803.805011][T17405] loop8: detected capacity change from 0 to 16
[ 1803.866589][T17405] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1803.928759][T17405] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1803.959848][T17411] erofs: (device loop8): z_erofs_readahead: readahead error at folio 87 @ nid 36
[ 1803.973376][T17405] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1803.992258][T17411] erofs: (device loop8): z_erofs_readahead: readahead error at folio 86 @ nid 36
[ 1804.027290][T17411] syz.8.3111: attempt to access beyond end of device
[ 1804.027290][T17411] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16
[ 1804.066520][T17411] syz.8.3111: attempt to access beyond end of device
[ 1804.066520][T17411] loop8: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[ 1804.081331][T17411] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[3749]
[ 1804.660932][T17416] loop8: detected capacity change from 0 to 4096
[ 1804.722248][T17416] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1805.001867][T17416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1805.234676][T12661] bond0 (unregistering): Released all slaves
[ 1805.275584][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1805.650197][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1806.245969][ T5842] libceph: connect (1)[c::]:6789 error -101
[ 1806.274592][ T5842] libceph: mon0 (1)[c::]:6789 connect error
[ 1806.324030][T17426] ceph: No mds server is up or the cluster is laggy
[ 1806.438944][ T5842] libceph: connect (1)[c::]:6789 error -101
[ 1806.449907][ T5842] libceph: mon0 (1)[c::]:6789 connect error
[ 1806.970747][T12661] IPVS: stop unused estimator thread 0...
[ 1807.646197][T17262] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1807.709074][T17262] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1808.090079][T17262] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1808.421684][T17460] sctp: failed to load transform for md5: -2
[ 1808.503015][T17262] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1808.798415][T17450] loop9: detected capacity change from 0 to 32768
[ 1809.017889][T17478] loop7: detected capacity change from 0 to 4096
[ 1809.107616][T17478] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1809.176640][T17478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1809.337109][T17450] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1809.371784][T17486] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3121'.
[ 1809.480183][T17262] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1809.607416][T17262] 8021q: adding VLAN 0 to HW filter on device team0
[ 1809.684399][T17450] XFS (loop9): Ending clean mount
[ 1809.704840][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1809.739112][T17450] XFS (loop9): Quotacheck needed: Please wait.
[ 1809.739621][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1809.752680][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1809.862001][T12662] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1809.869285][T12662] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1809.939062][T17450] XFS (loop9): Quotacheck: Done.
[ 1810.078849][T17262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1810.091447][T17262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1810.280295][T11132] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1810.862096][T17509] overlayfs: missing 'lowerdir'
[ 1811.581141][T17262] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1812.574772][T17523] sctp: failed to load transform for md5: -2
[ 1813.451711][T17540] loop8: detected capacity change from 0 to 4096
[ 1814.141833][T17540] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1814.243877][T17540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1814.493409][T17545] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3130'.
[ 1814.611113][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1815.044726][T17262] veth0_vlan: entered promiscuous mode
[ 1815.090789][T17262] veth1_vlan: entered promiscuous mode
[ 1815.249296][T17262] veth0_macvtap: entered promiscuous mode
[ 1815.295746][T17262] veth1_macvtap: entered promiscuous mode
[ 1815.406487][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1815.476627][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1815.519862][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1815.563118][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1815.606330][T17562] overlayfs: missing 'lowerdir'
[ 1815.616485][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1815.663131][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1815.674834][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1815.685907][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1815.698973][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1815.719304][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1815.745724][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1815.775392][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1815.809155][T17262] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1815.859518][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1815.910676][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1815.961070][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1816.001460][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1816.043936][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1816.075646][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1816.120451][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1816.144122][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1816.174088][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1816.238047][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1816.269716][T17553] loop8: detected capacity change from 0 to 32768
[ 1816.287575][T17262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1816.332577][T17262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1816.345368][T17262] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1816.362027][T17553] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1816.463498][T17262] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1816.524032][T17262] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1816.585633][T17262] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1816.637172][T17262] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1816.791024][T17553] XFS (loop8): Ending clean mount
[ 1816.814689][T17553] XFS (loop8): Quotacheck needed: Please wait.
[ 1816.975207][T17553] XFS (loop8): Quotacheck: Done.
[ 1817.017315][T12662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1817.038956][T12662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1817.188683][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1817.197969][T17591] bridge4: entered promiscuous mode
[ 1817.216828][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1817.269494][T17591] bridge4: entered allmulticast mode
[ 1817.317294][T11141] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1818.395849][T17599] loop7: detected capacity change from 0 to 131072
[ 1818.464344][T17599] F2FS-fs (loop7): invalid crc value
[ 1818.531778][T17599] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1818.605838][T17599] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1821.136438][T17625] loop8: detected capacity change from 0 to 16
[ 1821.156617][T17625] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1821.190325][T17625] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1821.223904][T17625] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1821.937633][T17643] overlayfs: missing 'lowerdir'
[ 1822.225015][T17649] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3139'.
[ 1822.642629][T17646] loop8: detected capacity change from 0 to 32768
[ 1822.709520][T17646] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1822.912988][T17646] XFS (loop8): Ending clean mount
[ 1822.927789][T17646] XFS (loop8): Quotacheck needed: Please wait.
[ 1823.023438][T17646] XFS (loop8): Quotacheck: Done.
[ 1823.175962][T11141] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1823.732466][T15336] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1826.062581][T16948] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1826.214914][T17693] loop7: detected capacity change from 0 to 16
[ 1826.244565][T17693] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1826.289386][T16948] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1826.304820][T16948] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1826.337896][T16948] usb 10-1: config 0 descriptor??
[ 1826.365391][T17690] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1826.386185][T16948] cp210x 10-1:0.0: cp210x converter detected
[ 1826.421301][T17690] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1826.621359][T16948] usb 10-1: cp210x converter now attached to ttyUSB0
[ 1826.776489][T17688] loop8: detected capacity change from 0 to 32768
[ 1826.965178][T17688] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1828.229078][T17713] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3155'.
[ 1828.264945][T17688] XFS (loop8): Ending clean mount
[ 1828.285740][T17688] XFS (loop8): Quotacheck needed: Please wait.
[ 1828.430507][T17688] XFS (loop8): Quotacheck: Done.
[ 1828.518648][T11141] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1829.015558][T16917] usb 10-1: USB disconnect, device number 23
[ 1829.074321][T16917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1829.110931][T16917] cp210x 10-1:0.0: device disconnected
[ 1830.596455][T17721] loop7: detected capacity change from 0 to 4096
[ 1830.604103][T17721] ntfs3: Unknown parameter 'diuid'
[ 1830.707287][T17226] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1830.828868][   T12] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1831.711222][T17733] @: renamed from vlan0 (while UP)
[ 1832.098384][T17738] input: syz1 as /devices/virtual/input/input12
[ 1832.926032][T15336] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1833.358267][T17742] loop7: detected capacity change from 0 to 512
[ 1833.613781][T17742] EXT4-fs: Ignoring removed nobh option
[ 1834.667018][T17742] EXT4-fs error (device loop7): ext4_orphan_get:1398: inode #15: comm syz.7.3164: iget: bad i_size value: 38620345925642
[ 1834.755143][T17742] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.3164: couldn't read orphan inode 15 (err -117)
[ 1834.778415][T17746] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3165'.
[ 1834.842013][T17742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1835.853250][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1836.093649][T17756] loop7: detected capacity change from 0 to 128
[ 1836.134652][T17756] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1836.456584][T17759] syzkaller1: entered promiscuous mode
[ 1836.462135][T17759] syzkaller1: entered allmulticast mode
[ 1836.541222][T17763] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1836.571536][T17763] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1836.600821][T17763] xt_nat: multiple ranges no longer supported
[ 1837.807810][T11055] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1837.976177][T17769] loop7: detected capacity change from 0 to 256
[ 1838.052826][T17769] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1839.117463][   T27] audit: type=1326 audit(1823.229:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.7.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f3b9aeb9 code=0x7ffc0000
[ 1839.142299][   T27] audit: type=1326 audit(1823.248:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.7.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f3b9aeb9 code=0x7ffc0000
[ 1839.223750][   T27] audit: type=1326 audit(1823.248:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.7.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52f3b9aeb9 code=0x7ffc0000
[ 1839.272178][T17781] tipc: Started in network mode
[ 1839.279791][T17781] tipc: Node identity 7f000001, cluster identity 4711
[ 1839.335345][   T27] audit: type=1326 audit(1823.248:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.7.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f3b9aeb9 code=0x7ffc0000
[ 1839.399537][T17781] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1839.428206][T17784] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3175'.
[ 1839.449848][   T27] audit: type=1326 audit(1823.295:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.7.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f3b9aeb9 code=0x7ffc0000
[ 1839.594487][   T27] audit: type=1326 audit(1823.295:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.7.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52f3b9aeb9 code=0x7ffc0000
[ 1839.693093][   T27] audit: type=1326 audit(1823.295:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.7.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f3b9aeb9 code=0x7ffc0000
[ 1839.799766][   T27] audit: type=1326 audit(1823.304:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.7.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52f3b9c747 code=0x7ffc0000
[ 1839.876867][   T27] audit: type=1326 audit(1823.304:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.7.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f52f3b5b78e code=0x7ffc0000
[ 1839.960395][   T27] audit: type=1326 audit(1823.304:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17773 comm="syz.7.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f52f3b5b78e code=0x7ffc0000
[ 1840.593650][T16948] tipc: Node number set to 2130706433
[ 1840.630955][T17787] loop6: detected capacity change from 0 to 32768
[ 1840.903605][T17787] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[ 1841.037516][T17787] dlm: no local IP address has been set
[ 1841.553418][T17787] dlm: cannot start dlm midcomms -107
[ 1841.673627][T17787] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[ 1844.480587][T17810] loop8: detected capacity change from 0 to 32768
[ 1844.543587][T17810] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1844.630441][T17810] XFS (loop8): Ending clean mount
[ 1844.682111][   T27] kauditd_printk_skb: 16 callbacks suppressed
[ 1844.682127][   T27] audit: type=1800 audit(1828.421:143): pid=17810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3182" name="file1" dev="loop8" ino=4422 res=0 errno=0
[ 1844.740620][   T27] audit: type=1800 audit(1828.421:144): pid=17810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3182" name="file1" dev="loop8" ino=4422 res=0 errno=0
[ 1845.442625][T11141] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1847.058711][T17841] loop9: detected capacity change from 0 to 131072
[ 1847.116286][T17841] F2FS-fs (loop9): invalid crc value
[ 1847.136762][T17841] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1847.187400][T17841] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1847.702520][T17837] loop8: detected capacity change from 0 to 16
[ 1847.768310][T17837] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1847.818650][T17837] erofs: (device loop8): z_erofs_readahead: readahead error at folio 87 @ nid 36
[ 1847.860812][T17837] erofs: (device loop8): z_erofs_readahead: readahead error at folio 86 @ nid 36
[ 1847.872561][T17837] syz.8.3187: attempt to access beyond end of device
[ 1847.872561][T17837] loop8: rw=524288, sector=8, nr_sectors = 24 limit=16
[ 1847.914701][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3190'.
[ 1847.931338][T17837] syz.8.3187: attempt to access beyond end of device
[ 1847.931338][T17837] loop8: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[ 1848.446839][T17860] loop6: detected capacity change from 0 to 64
[ 1848.496215][T17860] hfs: unable to locate alternate MDB
[ 1848.513524][T17860] hfs: continuing without an alternate MDB
[ 1848.522704][T17862] loop8: detected capacity change from 0 to 512
[ 1848.567298][T17862] EXT4-fs: Ignoring removed nobh option
[ 1848.598837][T17862] EXT4-fs error (device loop8): ext4_orphan_get:1398: inode #15: comm syz.8.3195: iget: bad i_size value: 38620345925642
[ 1848.621121][T17860] hfs: walked past end of dir
[ 1848.653445][T17862] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.3195: couldn't read orphan inode 15 (err -117)
[ 1848.667621][T17862] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1850.083742][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1851.602457][T16948] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1851.795007][T16948] usb 9-1: Using ep0 maxpacket: 16
[ 1851.841318][T16948] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1851.891182][T16948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1851.919721][T16948] usb 9-1: Product: syz
[ 1851.945348][T16948] usb 9-1: Manufacturer: syz
[ 1851.972078][T16948] usb 9-1: SerialNumber: syz
[ 1851.977709][T17888] loop7: detected capacity change from 0 to 16
[ 1852.205576][T17894] loop9: detected capacity change from 0 to 4096
[ 1852.879853][T17894] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1852.915629][T16948] usb 9-1: config 0 descriptor??
[ 1852.921395][T17888] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1852.942612][T17894] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1852.962447][T17888] erofs: (device loop7): z_erofs_readahead: readahead error at folio 87 @ nid 36
[ 1852.974819][T16948] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1853.040857][T17888] erofs: (device loop7): z_erofs_readahead: readahead error at folio 86 @ nid 36
[ 1853.110871][T17888] syz.7.3203: attempt to access beyond end of device
[ 1853.110871][T17888] loop7: rw=524288, sector=8, nr_sectors = 24 limit=16
[ 1853.146048][T17888] syz.7.3203: attempt to access beyond end of device
[ 1853.146048][T17888] loop7: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[ 1853.253999][T11132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1854.056620][T16948] ssu100: probe of 9-1:0.0 failed with error -32
[ 1854.114920][T16948] usb 9-1: USB disconnect, device number 20
[ 1854.343273][T17897] loop9: detected capacity change from 0 to 32768
[ 1854.388710][T17897] (syz.9.3204,17897,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1854.425316][T17897] (syz.9.3204,17897,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1854.440573][T17903] xt_TCPMSS: Only works on TCP SYN packets
[ 1854.547214][T17897] JBD2: Ignoring recovery information on journal
[ 1854.803650][T17897] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 1856.420795][T11132] ocfs2: Unmounting device (7,9) on (node local)
[ 1857.399082][T17916] loop8: detected capacity change from 0 to 32768
[ 1857.414045][T17916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.3209 (17916)
[ 1857.489800][T17916] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1857.540005][T17916] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[ 1857.619415][T17916] BTRFS info (device loop8): using free space tree
[ 1857.869392][T17929] loop6: detected capacity change from 0 to 4096
[ 1857.965272][T17929] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1858.639562][T17929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1858.784611][T17916] BTRFS info (device loop8): enabling ssd optimizations
[ 1858.829350][T17916] BTRFS info (device loop8): auto enabling async discard
[ 1858.906248][T17262] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1859.354444][T11141] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1861.068604][T17945] loop7: detected capacity change from 0 to 16
[ 1861.117694][T17945] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1862.487408][T17973] loop6: detected capacity change from 0 to 4096
[ 1862.525921][T17973] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512).
[ 1862.921993][T17965] loop9: detected capacity change from 0 to 32768
[ 1862.946804][T17965] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 scanned by syz.9.3217 (17965)
[ 1863.025068][T17965] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1863.058266][T17965] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1863.117548][T17965] BTRFS info (device loop9): force zlib compression, level 3
[ 1863.152369][T17965] BTRFS info (device loop9): force clearing of disk cache
[ 1863.169925][T17965] BTRFS info (device loop9): allowing degraded mounts
[ 1863.192214][T17965] BTRFS info (device loop9): enabling auto defrag
[ 1863.224725][T17965] BTRFS info (device loop9): disabling auto defrag
[ 1863.245455][T17965] BTRFS info (device loop9): using free space tree
[ 1864.049730][T17994] loop6: detected capacity change from 0 to 4096
[ 1864.206899][T17965] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[ 1864.211559][T17965] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1864.234469][T17965] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1864.244822][T17994] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1864.263333][T17965] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1864.281875][T17994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1864.358958][T17971] loop8: detected capacity change from 0 to 32768
[ 1864.404167][T17965] BTRFS error (device loop9): open_ctree failed: -12
[ 1864.416666][T17971] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.3219 (17971)
[ 1864.501336][T17971] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1864.555449][T17971] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[ 1864.604543][T17262] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1864.614405][T17971] BTRFS info (device loop8): setting nodatacow, compression disabled
[ 1864.622565][T17971] BTRFS info (device loop8): force clearing of disk cache
[ 1864.679395][T17971] BTRFS info (device loop8): enabling ssd optimizations
[ 1864.686423][T17971] BTRFS info (device loop8): using spread ssd allocation scheme
[ 1864.764012][T17971] BTRFS info (device loop8): enabling disk space caching
[ 1864.771139][T17971] BTRFS info (device loop8): disabling disk space caching
[ 1864.779006][T17971] BTRFS info (device loop8): turning off barriers
[ 1864.800153][T17971] BTRFS info (device loop8): not using ssd optimizations
[ 1864.807850][T17971] BTRFS info (device loop8): not using spread ssd allocation scheme
[ 1865.905736][T17971] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1865.908131][T17971] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1865.919371][T17971] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1865.931802][T17971] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1866.008901][T17971] BTRFS error (device loop8): open_ctree failed: -12
[ 1866.976222][T18034] tipc: Started in network mode
[ 1866.981436][T18034] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1867.030589][T18034] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:017b:70bb
[ 1867.068578][T18034] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1867.347955][T18032] loop8: detected capacity change from 0 to 32768
[ 1867.913129][T18032] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1868.144828][T18032] XFS (loop8): Ending clean mount
[ 1868.158696][T18032] XFS (loop8): Quotacheck needed: Please wait.
[ 1868.258615][    T9] tipc: Node number set to 1
[ 1868.483117][T18032] XFS (loop8): Quotacheck: Done.
[ 1868.753025][T18054] loop9: detected capacity change from 0 to 4096
[ 1869.124635][T18054] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1869.484752][T18054] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1869.775241][T11132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1869.869566][T11141] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1871.333338][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1872.481801][T18069] loop9: detected capacity change from 0 to 40427
[ 1872.538358][T18069] F2FS-fs (loop9): LFS is not compatible with checkpoint=disable
[ 1873.538016][T18086] loop8: detected capacity change from 0 to 4096
[ 1873.613357][T18086] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1874.262890][T18086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1874.567642][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1876.800444][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1877.453537][T18104] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1877.461000][T18104] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1878.197204][T18126] loop7: detected capacity change from 0 to 4096
[ 1878.267896][T18126] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1878.352014][T18126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1878.879650][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1878.929067][T18104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1879.047971][T18104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1880.117459][T18104] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1880.145400][T18104] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1880.176475][T18104] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1880.195280][T18104] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1883.148995][T18161] loop7: detected capacity change from 0 to 4096
[ 1883.201534][T18161] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1883.807145][T18161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1884.256841][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1884.633446][T18167] loop7: detected capacity change from 0 to 512
[ 1884.674515][T18167] EXT4-fs: Ignoring removed nobh option
[ 1884.729261][T18167] EXT4-fs error (device loop7): ext4_orphan_get:1398: inode #15: comm syz.7.3262: iget: bad i_size value: 38620345925642
[ 1884.806941][T18167] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.3262: couldn't read orphan inode 15 (err -117)
[ 1884.848524][T18167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1885.779853][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1885.804540][T18172] loop9: detected capacity change from 0 to 256
[ 1885.811947][T18172] exfat: Unknown parameter 'zero_size_dir'
[ 1885.923394][T17226] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1887.169105][T18179] loop9: detected capacity change from 0 to 131072
[ 1887.241246][T18179] F2FS-fs (loop9): invalid crc value
[ 1887.378201][T18179] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1887.445813][T18179] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1887.662517][T12718] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1887.930153][T12718] usb 8-1: Using ep0 maxpacket: 32
[ 1887.964449][T12718] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 1888.001261][T12718] usb 8-1: config 0 has no interface number 0
[ 1888.025386][T12718] usb 8-1: config 0 interface 184 has no altsetting 0
[ 1888.085420][T12718] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1888.106330][T12718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1888.136124][T12718] usb 8-1: Product: syz
[ 1888.152827][T12718] usb 8-1: Manufacturer: syz
[ 1888.167683][T12718] usb 8-1: SerialNumber: syz
[ 1888.191862][T12718] usb 8-1: config 0 descriptor??
[ 1888.214564][T12718] smsc75xx v1.0.0
[ 1888.916082][T12718] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1888.942336][T12718] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1889.918173][T18202] loop6: detected capacity change from 0 to 512
[ 1889.941482][T18202] EXT4-fs: Ignoring removed nobh option
[ 1889.971636][T18202] EXT4-fs error (device loop6): ext4_orphan_get:1398: inode #15: comm syz.6.3271: iget: bad i_size value: 38620345925642
[ 1890.266845][T18208] loop9: detected capacity change from 0 to 4096
[ 1890.451731][T18208] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1890.802757][T18202] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.3271: couldn't read orphan inode 15 (err -117)
[ 1890.828190][T18202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1890.868269][T18208] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1891.731085][T12718] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71
[ 1891.752835][T11132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1891.826248][T17262] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1891.856217][T12718] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71
[ 1891.917025][T12718] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[ 1891.926551][T12718] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1891.982759][T12718] smsc75xx: probe of 8-1:0.184 failed with error -71
[ 1892.002814][T12718] usb 8-1: USB disconnect, device number 10
[ 1893.632349][T18236] loop8: detected capacity change from 0 to 4096
[ 1894.398266][T18236] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1894.430907][T18236] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1894.791864][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1895.671379][T18244] loop9: detected capacity change from 0 to 512
[ 1895.717748][T18244] EXT4-fs: Ignoring removed nobh option
[ 1895.780689][T18244] EXT4-fs error (device loop9): ext4_orphan_get:1398: inode #15: comm syz.9.3282: iget: bad i_size value: 38620345925642
[ 1895.880064][T18244] EXT4-fs error (device loop9): ext4_orphan_get:1403: comm syz.9.3282: couldn't read orphan inode 15 (err -117)
[ 1896.131187][T18244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1897.948227][T11132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1898.800944][T18270] @: renamed from vlan0
[ 1899.923932][T18272] input: syz1 as /devices/virtual/input/input14
[ 1902.863937][T16918] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1903.032194][T18288] @: renamed from vlan0
[ 1903.142773][T16918] usb 9-1: too many configurations: 17, using maximum allowed: 8
[ 1904.024075][T16918] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1904.223138][T16918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1904.237468][T16918] usb 9-1: Product: syz
[ 1904.241662][T16918] usb 9-1: Manufacturer: syz
[ 1904.246937][T16918] usb 9-1: SerialNumber: syz
[ 1904.258018][T16918] usb 9-1: config 0 descriptor??
[ 1904.285311][T16918] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1904.300423][T16918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1904.312102][T16918] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 1904.328847][T16918] usb 9-1: media controller created
[ 1904.413225][T16918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1904.661085][T16918] DVB: Unable to find symbol mt352_attach()
[ 1904.788539][T16918] DVB: Unable to find symbol nxt6000_attach()
[ 1904.820272][T16918] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 1904.876245][T16918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input16
[ 1904.984667][T16918] dvb-usb: schedule remote query interval to 1000 msecs.
[ 1905.002796][T16918] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 1905.031901][T16918] dvb-usb: bulk message failed: -22 (7/0)
[ 1905.044767][T16918] dvb-usb: bulk message failed: -22 (7/0)
[ 1905.066921][T16918] usb 9-1: USB disconnect, device number 21
[ 1905.987920][T16918] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1908.260976][T18330] loop6: detected capacity change from 0 to 4096
[ 1908.499469][   T12] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1908.541002][T18333] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1908.761165][T18323] loop9: detected capacity change from 0 to 32768
[ 1908.824026][T18336] binder: 18335:18336 ioctl c0306201 0 returned -14
[ 1909.128418][T18323] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1909.245511][T18323] XFS (loop9): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1909.314958][T18323] XFS (loop9): Starting recovery (logdev: internal)
[ 1909.405984][T18323] XFS (loop9): Ending recovery (logdev: internal)
[ 1909.672626][   T27] audit: type=1800 audit(1889.212:145): pid=18323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3304" name="file1" dev="loop9" ino=4422 res=0 errno=0
[ 1910.026729][T16949] usb 10-1: new full-speed USB device number 24 using dummy_hcd
[ 1910.132692][T18345] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1910.140651][T18345] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1910.267366][T16949] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1910.295224][T16949] usb 10-1: no configurations
[ 1910.300008][T16949] usb 10-1: can't read configurations, error -22
[ 1910.412479][T16902] Bluetooth: hci1: command 0x1003 tx timeout
[ 1910.420285][T15336] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1910.679211][T15332] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1911.018541][T11132] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1911.653138][T18356] loop7: detected capacity change from 0 to 16
[ 1911.709266][T18356] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1913.070177][T18356] erofs: (device loop7): z_erofs_readahead: readahead error at folio 87 @ nid 36
[ 1913.243897][T18356] erofs: (device loop7): z_erofs_readahead: readahead error at folio 86 @ nid 36
[ 1913.382845][T18356] syz.7.3313: attempt to access beyond end of device
[ 1913.382845][T18356] loop7: rw=524288, sector=8, nr_sectors = 24 limit=16
[ 1913.396943][T18356] syz.7.3313: attempt to access beyond end of device
[ 1913.396943][T18356] loop7: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[ 1914.686525][T18365] input: syz1 as /devices/virtual/input/input17
[ 1915.944485][T18345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1915.981714][T18345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1916.246698][T18345] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1916.279127][T18345] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1916.318102][T18345] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1916.345697][T18345] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1916.494656][T18358] @: renamed from vlan0
[ 1917.607307][T18384] loop8: detected capacity change from 0 to 32768
[ 1917.785350][T18398] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1917.808969][   T59] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1917.815913][T18384] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1918.008486][T18384] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1918.236539][T18384] XFS (loop8): Starting recovery (logdev: internal)
[ 1918.494114][T18384] XFS (loop8): Ending recovery (logdev: internal)
[ 1918.741061][   T27] audit: type=1800 audit(1897.696:146): pid=18384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3319" name="file1" dev="loop8" ino=4422 res=0 errno=0
[ 1919.693114][T18415] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22)
[ 1919.936933][T10344] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[ 1919.990529][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1920.263132][T10344] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1920.273708][T10344] usb 9-1: no configurations
[ 1920.278346][T10344] usb 9-1: can't read configurations, error -22
[ 1920.774929][T18420] loop7: detected capacity change from 0 to 32768
[ 1920.815971][T18420] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.3327 (18420)
[ 1920.906339][T18420] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1920.941928][T18420] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[ 1920.966469][T11141] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1920.990145][T18420] BTRFS info (device loop7): using free space tree
[ 1921.359346][T18420] BTRFS info (device loop7): enabling ssd optimizations
[ 1921.370118][T18420] BTRFS info (device loop7): auto enabling async discard
[ 1921.671433][T18443] loop8: detected capacity change from 0 to 16
[ 1921.743646][T18443] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1921.763303][T18443] erofs: (device loop8): z_erofs_readahead: readahead error at folio 87 @ nid 36
[ 1921.773110][T18443] erofs: (device loop8): z_erofs_readahead: readahead error at folio 86 @ nid 36
[ 1921.783265][T18443] syz.8.3328: attempt to access beyond end of device
[ 1921.783265][T18443] loop8: rw=524288, sector=8, nr_sectors = 24 limit=16
[ 1921.830473][T11055] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1921.849914][T18443] syz.8.3328: attempt to access beyond end of device
[ 1921.849914][T18443] loop8: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[ 1922.184318][T18447] loop8: detected capacity change from 0 to 512
[ 1922.210544][T18447] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1922.235967][T15920] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop7 scanned by udevd (15920)
[ 1922.303321][T18447] EXT4-fs (loop8): 1 truncate cleaned up
[ 1922.326153][T18447] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1922.617998][T11141] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1922.817206][T15336] Bluetooth: hci0: command 0x0406 tx timeout
[ 1923.950722][T18450] loop7: detected capacity change from 0 to 32768
[ 1924.063998][T18450] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1924.332665][T18450] XFS (loop7): Ending clean mount
[ 1924.343471][T18450] XFS (loop7): Quotacheck needed: Please wait.
[ 1924.361042][  T995] XFS (loop7): Metadata CRC error detected at xfs_agfl_read_verify+0x18d/0x250, xfs_agfl block 0x3 
[ 1924.376972][  T995] XFS (loop7): Unmount and run xfs_repair
[ 1924.382781][  T995] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[ 1924.392499][  T995] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[ 1924.403330][  T995] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[ 1924.413641][  T995] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[ 1924.423456][  T995] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[ 1924.443826][  T995] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1924.456946][  T995] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1924.477755][  T995] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1924.489948][  T995] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1924.655422][  T995] XFS (loop7): metadata I/O error in "xfs_alloc_read_agfl+0x21e/0x3d0" at daddr 0x3 len 1 error 74
[ 1924.677411][T18450] XFS (loop7): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[ 1924.863728][T10344] XFS (loop7): Metadata CRC error detected at xfs_agfl_read_verify+0x18d/0x250, xfs_agfl block 0x3 
[ 1924.989335][T10344] XFS (loop7): Unmount and run xfs_repair
[ 1925.013740][T10344] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[ 1925.023092][T18474] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1925.030034][T10344] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[ 1925.100342][T10344] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[ 1925.120348][   T49] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1925.183919][T10344] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[ 1925.216631][T10344] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[ 1925.244017][T10344] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1925.254580][T10344] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1925.264026][T10344] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1925.277714][T10344] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1925.321485][T18450] XFS (loop7): metadata I/O error in "xfs_alloc_read_agfl+0x21e/0x3d0" at daddr 0x3 len 1 error 74
[ 1925.531753][T18450] XFS (loop7): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598).  Shutting down filesystem.
[ 1925.574661][T18450] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[ 1925.700399][T11055] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1927.021981][T18478] loop9: detected capacity change from 0 to 32768
[ 1927.069427][T18484] loop6: detected capacity change from 0 to 16
[ 1927.111272][T18484] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1927.295022][T15332] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1927.301906][T15336] Bluetooth: hci1: command 0x1003 tx timeout
[ 1927.314189][T18478] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1927.325829][T18484] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1927.388011][T18484] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1927.675839][T18478] XFS (loop9): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1927.691537][T18496] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1927.813462][   T31] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1927.859359][T18478] XFS (loop9): Starting recovery (logdev: internal)
[ 1928.095159][T18478] XFS (loop9): Ending recovery (logdev: internal)
[ 1928.205999][   T27] audit: type=1800 audit(1906.555:147): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3338" name="file1" dev="loop9" ino=4422 res=0 errno=0
[ 1928.441572][T18502] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1928.451877][T18502] 8021q: adding VLAN 0 to HW filter on device team0
[ 1928.469838][T18502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1928.629153][T18118] usb 10-1: new full-speed USB device number 26 using dummy_hcd
[ 1929.072172][T18510] 0x7fffffffffffffff-0x8000000000000006 : ""
[ 1929.078855][T18510] mtd: partition "" is out of reach -- disabled
[ 1929.117728][T18510] ftl_cs: FTL header not found.
[ 1929.966957][T15336] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1930.280493][T18118] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1930.290705][T18118] usb 10-1: no configurations
[ 1930.295429][T18118] usb 10-1: can't read configurations, error -22
[ 1930.352244][T11132] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1931.558625][T18522] loop9: detected capacity change from 0 to 4096
[ 1931.740940][T18526] loop8: detected capacity change from 0 to 16
[ 1931.820353][T18526] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1931.929662][T18526] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1932.486629][T18526] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1932.540184][T18522] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[ 1932.584552][T18522] ntfs3: loop9: Failed to load $Extend (-22).
[ 1932.616738][T18522] ntfs3: loop9: Failed to initialize $Extend.
[ 1932.939868][T18532] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1932.982259][   T49] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1933.635791][T18534] loop8: detected capacity change from 0 to 40427
[ 1933.662895][T18534] F2FS-fs (loop8): invalid crc value
[ 1933.705478][T18534] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1933.837893][T18534] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1934.036580][T11141] syz-executor: attempt to access beyond end of device
[ 1934.036580][T11141] loop8: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[ 1934.070773][T11141] syz-executor: attempt to access beyond end of device
[ 1934.070773][T11141] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427
[ 1934.095737][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3356'.
[ 1934.242162][T13560] syz.8.1898: attempt to access beyond end of device
[ 1934.242162][T13560] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1934.257345][T13560] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1934.378520][T18543] loop6: detected capacity change from 0 to 32768
[ 1934.425116][T18543] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1934.549250][T18543] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1934.570518][T18561] loop9: detected capacity change from 0 to 16
[ 1934.642261][T18561] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1934.645653][T18543] XFS (loop6): Starting recovery (logdev: internal)
[ 1934.678708][T18561] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1934.722877][T18561] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1934.743884][T18543] XFS (loop6): Ending recovery (logdev: internal)
[ 1934.867492][   T27] audit: type=1800 audit(1912.784:148): pid=18543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3355" name="file1" dev="loop6" ino=4422 res=0 errno=0
[ 1935.128824][T15336] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1937.015425][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1937.032920][T17262] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1937.278805][T18577] bridge2: entered promiscuous mode
[ 1937.284057][T18577] bridge2: entered allmulticast mode
[ 1937.374721][T18577] team0: Port device bridge2 added
[ 1937.537546][T18578] bridge0: port 3(team0) entered blocking state
[ 1938.414538][T18583] loop6: detected capacity change from 0 to 131072
[ 1938.439455][T18578] bridge0: port 3(team0) entered disabled state
[ 1938.474470][T18583] F2FS-fs (loop6): invalid crc value
[ 1938.530235][T18578] team0: entered allmulticast mode
[ 1938.535466][T18578] team_slave_0: entered allmulticast mode
[ 1938.545603][T18578] team_slave_1: entered allmulticast mode
[ 1938.570418][T18583] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1938.635484][T18583] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1938.682303][T18578] team0: entered promiscuous mode
[ 1938.687544][T18578] team_slave_0: entered promiscuous mode
[ 1938.697267][T18578] team_slave_1: entered promiscuous mode
[ 1939.866679][  T995] tipc: Disabling bearer <udp:syz0>
[ 1939.888857][  T995] tipc: Left network mode
[ 1940.780232][T16902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1940.793482][T16902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1940.807591][T16902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1940.816234][T16902] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1940.826717][T16902] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1940.834216][T16902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1941.253663][T18602] lo speed is unknown, defaulting to 1000
[ 1942.227381][T18616] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1943.083487][T15336] Bluetooth: hci1: command tx timeout
[ 1943.624686][T18602] chnl_net:caif_netlink_parms(): no params data found
[ 1944.251259][  T995] hsr_slave_0: left promiscuous mode
[ 1944.272448][  T995] hsr_slave_1: left promiscuous mode
[ 1944.293992][  T995] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1944.308522][  T995] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1944.327371][  T995] bridge_slave_1: left allmulticast mode
[ 1944.343438][  T995] bridge_slave_1: left promiscuous mode
[ 1944.350505][  T995] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1944.360748][  T995] bridge_slave_0: left allmulticast mode
[ 1944.367042][T15336] Bluetooth: hci4: command 0x1003 tx timeout
[ 1944.376046][T16902] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1944.422163][  T995] bridge_slave_0: left promiscuous mode
[ 1944.428127][  T995] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1944.924623][T18631] loop6: detected capacity change from 0 to 32768
[ 1945.026441][T18631] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1945.316329][T16902] Bluetooth: hci1: command tx timeout
[ 1945.590418][T18631] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1945.759629][T18631] XFS (loop6): Starting recovery (logdev: internal)
[ 1945.962865][T18631] XFS (loop6): Ending recovery (logdev: internal)
[ 1946.097537][   T27] audit: type=1800 audit(1923.289:149): pid=18631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3373" name="file1" dev="loop6" ino=4422 res=0 errno=0
[ 1946.205039][T18669] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3378'.
[ 1947.444064][T16944] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1947.550836][T16902] Bluetooth: hci1: command tx timeout
[ 1947.713932][T16944] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1947.723802][T16944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1947.735560][T16944] usb 10-1: config 0 descriptor??
[ 1947.755874][T16944] cp210x 10-1:0.0: cp210x converter detected
[ 1948.042107][T17262] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1948.207439][T16944] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1948.301627][  T995] team0 (unregistering): Port device team_slave_1 removed
[ 1948.411283][  T995] team0 (unregistering): Port device team_slave_0 removed
[ 1948.459511][T16944] cp210x 10-1:0.0: failed to get vendor val 0x370c size 15: -32
[ 1948.467248][T16944] cp210x 10-1:0.0: GPIO initialisation failed: -32
[ 1948.507691][T16944] usb 10-1: cp210x converter now attached to ttyUSB0
[ 1948.526010][T16944] usb 10-1: USB disconnect, device number 28
[ 1948.567572][  T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1948.578156][T16944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1948.586555][T16944] cp210x 10-1:0.0: device disconnected
[ 1948.708337][  T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1949.158027][T18682] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1949.170229][ T7592] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1949.755178][T15336] Bluetooth: hci1: command tx timeout
[ 1949.969001][  T995] bond0 (unregistering): Released all slaves
[ 1950.233699][T18602] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1950.241320][T18602] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1950.249573][T18602] bridge_slave_0: entered allmulticast mode
[ 1950.257905][T18602] bridge_slave_0: entered promiscuous mode
[ 1950.268961][T18602] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1950.276345][T18602] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1950.291141][T18602] bridge_slave_1: entered allmulticast mode
[ 1950.300925][T18602] bridge_slave_1: entered promiscuous mode
[ 1950.379330][T18602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1950.438973][T18602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1950.539031][T18602] team0: Port device team_slave_0 added
[ 1950.564782][T18602] team0: Port device team_slave_1 added
[ 1950.775170][T18602] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1950.799467][T18602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1950.880212][T18602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1950.920652][T18602] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1950.949431][T18602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1951.030287][T18602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1951.093951][  T995] IPVS: stop unused estimator thread 0...
[ 1951.173675][T18602] hsr_slave_0: entered promiscuous mode
[ 1951.197454][T18602] hsr_slave_1: entered promiscuous mode
[ 1951.208653][T18602] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1951.230273][T18602] Cannot create hsr debugfs directory
[ 1951.293266][T15336] Bluetooth: hci4: command 0x1003 tx timeout
[ 1951.301169][T16902] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1951.476650][T18708] loop9: detected capacity change from 0 to 40427
[ 1951.490051][T18708] F2FS-fs (loop9): Small segment_count (9 < 1 * 24)
[ 1951.524260][T18708] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1951.617480][T18708] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1951.876526][T18708] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1951.887438][T18711] loop6: detected capacity change from 0 to 32768
[ 1951.894161][T18708] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1953.588545][T18711] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1953.826613][T18602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1953.967837][T18711] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1954.071326][T18711] XFS (loop6): Starting recovery (logdev: internal)
[ 1954.215157][T18711] XFS (loop6): Ending recovery (logdev: internal)
[ 1954.401935][T17262] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1954.412112][T18602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1954.975299][T18602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1955.009921][T18757] overlayfs: missing 'lowerdir'
[ 1955.151275][T18753] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1957.436839][T18602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1958.095646][T18602] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1958.196231][T18602] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1958.251056][T18602] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1958.345691][T18602] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1959.261872][T18789] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1959.294170][ T7592] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1959.420881][T18602] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1959.580382][T18602] 8021q: adding VLAN 0 to HW filter on device team0
[ 1959.679682][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1959.686843][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1959.847202][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1959.854336][ T7592] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1960.462534][T18602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1960.970256][T18602] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1961.083205][T18802] loop6: detected capacity change from 0 to 32768
[ 1961.162985][T18602] veth0_vlan: entered promiscuous mode
[ 1961.199818][T18802] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1961.253090][T18602] veth1_vlan: entered promiscuous mode
[ 1961.365267][T18602] veth0_macvtap: entered promiscuous mode
[ 1961.392356][T18602] veth1_macvtap: entered promiscuous mode
[ 1961.415954][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1961.470282][T15332] Bluetooth: hci4: command 0x1003 tx timeout
[ 1961.479693][T16902] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1961.544660][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.565993][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1961.603980][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.662498][T18802] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1961.674239][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1961.725700][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.745020][T18802] XFS (loop6): Starting recovery (logdev: internal)
[ 1961.770664][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1961.825451][T18802] XFS (loop6): Ending recovery (logdev: internal)
[ 1961.838574][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1961.901442][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1961.933704][   T27] audit: type=1800 audit(1938.087:150): pid=18802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3398" name="file1" dev="loop6" ino=4422 res=0 errno=0
[ 1961.988541][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1962.065102][T18602] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1962.107599][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1962.181492][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1962.250628][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1962.305173][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1962.324677][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1962.421358][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1962.431262][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1962.470655][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1962.528176][T18602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1962.549602][T18602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1962.575574][T18602] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1962.659538][T18602] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1962.678154][T18602] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1962.686992][T18602] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1962.696263][T18602] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1963.639824][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1963.725327][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1963.767355][T18843] input: syz1 as /devices/virtual/input/input19
[ 1965.856420][T17262] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1966.857350][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1966.891694][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1967.576706][T18864] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1969.214315][   T31] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1969.329819][T18888] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1970.034933][T18876] loop6: detected capacity change from 0 to 32768
[ 1970.084712][T18876] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.3404 (18876)
[ 1970.159163][T18876] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1970.195403][T18876] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[ 1970.236190][T18876] BTRFS info (device loop6): setting nodatacow, compression disabled
[ 1970.258010][T18876] BTRFS info (device loop6): force clearing of disk cache
[ 1970.323648][T18883] loop7: detected capacity change from 0 to 32768
[ 1970.352283][T18876] BTRFS info (device loop6): enabling ssd optimizations
[ 1970.534153][T18876] BTRFS info (device loop6): using spread ssd allocation scheme
[ 1970.542615][T18876] BTRFS info (device loop6): turning off barriers
[ 1970.549621][T18883] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1970.581638][T18876] BTRFS info (device loop6): disabling free space tree
[ 1970.597033][T18876] BTRFS info (device loop6): not using ssd optimizations
[ 1970.618611][T18876] BTRFS info (device loop6): not using spread ssd allocation scheme
[ 1971.069520][T18876] BTRFS info (device loop6): rebuilding free space tree
[ 1971.156201][T18883] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1971.187981][T18876] BTRFS info (device loop6): disabling free space tree
[ 1971.212513][T18876] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1971.244851][T18876] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1971.348357][T18883] XFS (loop7): Starting recovery (logdev: internal)
[ 1971.390832][T15332] Bluetooth: hci4: command 0x1003 tx timeout
[ 1971.399770][T16902] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1971.626875][T18883] XFS (loop7): Ending recovery (logdev: internal)
[ 1971.819224][   T27] audit: type=1800 audit(1947.357:151): pid=18883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3411" name="file1" dev="loop7" ino=4422 res=0 errno=0
[ 1972.269735][T17262] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1972.282368][T18941] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1972.450300][T16893] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[ 1973.219127][T18953] input: syz1 as /devices/virtual/input/input20
[ 1974.470116][T15332] Bluetooth: hci4: command 0x1003 tx timeout
[ 1974.479723][T16902] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1974.512387][T16893] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1974.548778][T16893] usb 8-1: no configurations
[ 1974.553497][T16893] usb 8-1: can't read configurations, error -22
[ 1974.568481][T11055] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1974.905649][T18972] syzkaller1: entered promiscuous mode
[ 1974.984514][T18972] syzkaller1: entered allmulticast mode
[ 1975.181294][ T7592] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1975.191911][ T7592] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1976.040464][T18995] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1977.378822][T16902] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1978.148634][T15332] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1978.876405][   T59] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1978.885254][T19017] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1979.510526][T19025] __vm_enough_memory: pid: 19025, comm: syz.1.3430, not enough memory for the allocation
[ 1979.692371][T19028] loop1: detected capacity change from 0 to 512
[ 1979.714383][T19028] EXT4-fs: Ignoring removed nobh option
[ 1979.782027][T19028] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.3431: iget: bad i_size value: 38620345925642
[ 1979.829218][T19028] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.3431: couldn't read orphan inode 15 (err -117)
[ 1979.845049][T19013] loop6: detected capacity change from 0 to 32768
[ 1979.861276][T19028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1979.911785][T19013] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1980.177437][T19013] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1980.575044][T19013] XFS (loop6): Starting recovery (logdev: internal)
[ 1980.637026][T19013] XFS (loop6): Ending recovery (logdev: internal)
[ 1980.700683][   T27] audit: type=1800 audit(1955.654:152): pid=19013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3428" name="file1" dev="loop6" ino=4422 res=0 errno=0
[ 1980.880187][T16944] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1980.901045][T18602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1981.060250][T15332] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1981.108526][T16944] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1981.125314][T16944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1981.174884][T16944] usb 10-1: config 0 descriptor??
[ 1981.206184][T16944] cp210x 10-1:0.0: cp210x converter detected
[ 1981.624148][T16944] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1981.985364][T16944] cp210x 10-1:0.0: failed to get vendor val 0x370c size 15: -121
[ 1982.017196][T16944] cp210x 10-1:0.0: GPIO initialisation failed: -121
[ 1982.060806][T16944] usb 10-1: cp210x converter now attached to ttyUSB0
[ 1982.074061][T17262] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1982.208330][T16944] usb 10-1: USB disconnect, device number 29
[ 1982.242596][T16944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1982.251059][T16944] cp210x 10-1:0.0: device disconnected
[ 1982.598125][T19060] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1982.655954][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1982.770539][T19056] loop7: detected capacity change from 0 to 32768
[ 1982.823423][T19056] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1982.871941][T19056] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[ 1982.900308][T19062] loop6: detected capacity change from 0 to 1024
[ 1982.903978][T19056] BTRFS info (device loop7): force clearing of disk cache
[ 1982.946782][T19056] BTRFS info (device loop7): enabling auto defrag
[ 1982.967372][T19056] BTRFS info (device loop7): enabling ssd optimizations
[ 1982.989774][T19056] BTRFS info (device loop7): max_inline at 0
[ 1983.017959][T19056] BTRFS info (device loop7): enabling disk space caching
[ 1983.034955][T19056] BTRFS info (device loop7): disk space caching is enabled
[ 1983.148211][ T5932] hfsplus: b-tree write err: -5, ino 4
[ 1983.158516][T19056] BTRFS info (device loop7): rebuilding free space tree
[ 1983.178197][T19056] BTRFS info (device loop7): disabling free space tree
[ 1983.187358][T19056] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1983.197955][T19056] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1983.541481][   T27] audit: type=1800 audit(1958.310:153): pid=19056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3436" name="file1" dev="loop7" ino=260 res=0 errno=0
[ 1983.755242][T12662] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1984.141371][T11055] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1984.821336][T15332] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1985.049695][T19097] loop7: detected capacity change from 0 to 512
[ 1985.193282][T19097] EXT4-fs: Ignoring removed nobh option
[ 1985.281232][T19097] EXT4-fs error (device loop7): ext4_orphan_get:1398: inode #15: comm syz.7.3441: iget: bad i_size value: 38620345925642
[ 1985.374261][T19097] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.3441: couldn't read orphan inode 15 (err -117)
[ 1985.448251][T19097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1986.121758][T16902] Bluetooth: hci5: command 0x1003 tx timeout
[ 1986.145480][T15336] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1986.565512][T11055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1986.631759][T19108] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1986.647016][   T31] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1988.454638][T19130] __vm_enough_memory: pid: 19130, comm: syz.7.3448, not enough memory for the allocation
[ 1988.749890][T19137] siw: device registration error -23
[ 1988.762177][T19137] smc: removing ib device syz2
[ 1988.853793][T16902] Bluetooth: hci4: command 0x1003 tx timeout
[ 1988.861937][T15336] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1988.917004][T19115] loop1: detected capacity change from 0 to 32768
[ 1989.023378][T19115] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1989.218099][T19115] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1989.266596][T19115] XFS (loop1): Starting recovery (logdev: internal)
[ 1989.316683][T19115] XFS (loop1): Ending recovery (logdev: internal)
[ 1989.416670][   T27] audit: type=1800 audit(1963.810:154): pid=19115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3446" name="file1" dev="loop1" ino=4422 res=0 errno=0
[ 1989.736180][ T5780] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[ 1990.026944][ T5780] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1990.039895][ T5780] usb 2-1: no configurations
[ 1990.044559][ T5780] usb 2-1: can't read configurations, error -22
[ 1990.605517][T18602] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2002.697760][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 2068.381364][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 2076.080736][T15336] Bluetooth: hci1: command 0x0406 tx timeout
[ 2134.063488][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 2199.747090][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 2265.431260][ T1286] ieee802154 phy0 wpan0: encryption failed: -22