last executing test programs:

2m23.954559276s ago: executing program 1 (id=386):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)

2m9.653353344s ago: executing program 1 (id=409):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580)=ANY=[], 0x1, 0x6c9, &(0x7f0000000b40)="$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")
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e967358056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f"], 0x1, 0x183, &(0x7f0000000380)="$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")
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000002300)=0xffffffbe)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)
syz_fuse_handle_req(r1, &(0x7f0000000100)="441dc4cccf61bbe670c9a162ee3f4131f7ac93e15ff13e5e3266848f4ac39db1d922e8e19d1b0caf9b88b18d9c81f0af935f3fcd6e0a16373e04b463f98d1aeafc3a6ac932c774e6e0611525b8562297592bbc2ffae0c996a6a6e4e9fc86eaf126c239c24ddcb16a04449dcb3115b95e9cac1d35320e1f866472e4f38cdd2b018beccb380d7fc746839f90af4b119b2167ac65109ae202edc80dbb609f86e6141a2be5fa0c0272193ff985952ec06a2ec1e0410448e3d09d842c6cdccf8e59b465aab77390a79c4b81d91d43a1e1bf5861a2f04fbd636f309a91f5a9c33d25f7b03c589dab2f4d4849c2146bbc1c24e4998baefbdbdefc809a8d1550c4695d7c082ec2931863500f279624f7e6da93a78308daf5d34fe0735607e50a9fbaa1c8c5ce53936ab9cfc7cb1ff318f8050c0a669d7c46cd481148740b913d20dcc2fe3efbe4e040f9464b40c399449267ab6a4dd15fa1edc9da962771958a7ca1d56f6a40a28acded95c4c385bbb0cf25d7975e993ef164f1218e335424cacf51f5829d7acaf77f8f4b20ce4bd7e2d9f7650f8f5bdf53bee073543fd7bbdddff61fccfe0bef7f98973239ab8ca31ce6d9a7f7b68cc8061719ddb57ae2eb36b3b4847a4ff38f80118b17185a8551fbf4848bad9798626cd35d5cebd64c5c602a72b99f7862d3e7a48222b8d2604f8c7eb2f9d54908fec591b1565442dbb6066cc69baef5c4df83c421cfd744b95ce864b99cd4de0e62a1242fe2fd01652a7f7fbe9e0ffe66c782e0c5c75a7c722ffcb91f55ddc05409c265bddb7dd5e2bf6bb67aef46ad2710195b9d7941ef7850c028cfb9debd302f59e2d4d8fe7fdc32b433a1f7f087119e2f03a8b04b5fc9d384cabed3cd1cfe21027c0b4cc72b471506736cd6b0b9477adb0c71a1bd17e5e1c04bbf0088e1dd47380195c7892483aed16ff4e1614af924111a32c753b654fc7434028d78f7ba3ae95f622dd8e090769fa2d1cacdbaef4e16e2c984e2f918ad1d4c6c1320266c29c28f31117c8a3f78ddd82086169963d170eb9aa3e08a67fba771c693204cde736ecaa670eac58dc1ee1264c614002f020ac804ca964dc871e4c7d6f45d8f36c9286694bf5404b0962c77bd6e017f9581f349c07a64d71ea8cb603e17ffb1eeb685e64ff661eb711cf239df16061a18f1b5f2b205253fe94e7b88da5f89d25c23ecf7581d13ce04c9142a854bc10d80c448bd32e4ff95a4d4198ec6497af86207717fe41b075245d3733f6b86989b6f928cbb4bd217e71f5f0d0b7f773d4e358d48241db916c8a823029d0dbd3f84c5bd883248e1074cbec741381b5e2f33aa9b11dbf5c8efc44cde79160971f8b99a4508d7f526f05e9b4045c479682867f8e0b3080457b7361ee27d6e41eeb19af163a851db51dfc7622251d43d2f157178b78f505eefe2b74544db9e9192912c3c5e0c05fce01b7769a9a8c7b95c7ca0c9351a24a5b9457839fe24994b5044501eb7dbb37eac1ada55ab8ab1026b0599e2015550a6ac51b0347ed33d1ade8f6284d65b070808c8c23bfe9aa433b4600e18de836649074801f5f0ba422489544eb1dfe70ec72f61cc2bed2dcec65a2acf6f22e8779f30e565bf2353d82dd647e1bfe4e737463e987981418c93944947eca531f74997c9a8faa78a1688fbc525645f4ee9e59d5fa98e19684bd156ec7b70b31f9f5d0a4760e47f72fae3300be641d1d99eb98b4028b898d0a937e9d68df6da9dc11423bc513873a2b3b29b2a226fe1d4ed24a9c16e9c17df2d3c6fc9d08ee229653e1864766376339245b69f7a0f958ad2c218b1a536b4b979dd2b09894b6726bd6e33d5c1abee084c7a9287166befdf18e3a887b35d26564a91ac6c76b07ae0470cc4fa3759523284aa371905696b52edeff38636b8acdbf099d13a2b6ed6f3a10278f3cd56842911ff6b47b58f1123a68831df551072dab8903781188b17da457bcd1c3412625864eb3cc7d9bf51626ba9f20407030d8b8492ef2c87369745ca372ea82a0996737b6ca99a6460de5a24aa4fbc0991482213f0e7849781884c464203b12eae572d92d11d17f9fb34fbdcd24109dc05b89901c12caa034848435982d592936e8c0b0f15be8172fd8967580de63aa4719880ad332ad87957fd29f80bdec08a17bf1a7d3bf9ae4e954c6a5cad1f1fb1342ab76cada4e5d324aaa765c78b0776f2152ed0824f24c2249170fdb29524335ceb34cdc6e2bbee0e4ca2e81c3b5fbdd23fa3c58c7f5d0667142232225da4c19a7ca407c2da4c8a7d20fba24bdfd53e7cfd877a812b626767cce2f99ee2936a37002df1cb5be7e77fc42b474c4276588e0f967303e17bd23743f28dc328e8f689beed0967574261bbc1a6b3115543b43b82e1c99e717e8f0c0df34cd23ff66b65083118af200aa87c3e61c06db197beff820264377a3cd249606f5a0d72647e5a9b85fc582c47e6691e1c737c02266f9c290c712e97738bc32c307ba0c16d0c15af199fa45e056e172e80b0f0d68f344bfbae09a9f94f3dd8a6e70f966a874ea3800bebd327751e01b5ebc766f4800431a7259a9cb88a27a4fe4860f008b4c00ec2be65b959dd1b9dc15384216fe75da6ff9fe769f0042bd0e339c791deaafcd5b26de034554fece99179614a87d40738cd0ee9bd62555c2008f2bdbbfd850cf3367665a58bb5aecf8d89512d73a33e58404ca784537153d75edc0fefd4f5d47fe55a271f70572c4c188afe52bd604248bc429840805caccc0dae96a6988bfc6117727a9ad99ded65ffaef5c5c50d4def8f193083f6d699b9a0e5eaf24d07a730d93a939cb993c8ea23a6ea282aa676e1b200713920050738cc89c5658009297c27ad9f605b1fa92308f768a948eb77a2892b85483ec3664c72532a00ade0207d6e0f9ff12d90d0c525ed2912489836a6d112dd09eb217152fd91bd0870d185bccaa9e7c646bbd36fe857cb36829b224c1ad2d3243bcbdaa4051a606b5c1458f627add211416a5c28fadb44a65169c1bcef2fa8dae2a3e53853ed27816a380832ef3abc8ea3357906c76dba49c27377222106f9b5ca4ed9403f8b3ce751a7002a8c0e12893f4180a07946f94a4f91c81423aae6a77d77bf406f4aac5cf77ffabeedc305738d0bdaccc7b0f9757cd608f9e891f3a6fd4105b948f84cd75830454d1c81e58c6bde555de5e7322c68a696b6c74c3e74178bca0bdcb1691311202f35cebb67c87c81c1c9de7f9b1aa93544ac5df04c11dfeb2bb71655caa89fb4517fd3a1daa553e740a4ae33c0dc976bdfa380d347192dffda313480fb9b77c6f2d12cce6b0951d28a8f6f710dc02edf6dafc93cd87f3ad27f00a063f78ca38fb0d265b976322aa9e30924b60a37fa906054a53056cb607f4303100972af2ea00c41c8db02d04f01a59a241b541c016e69b0578ad67418cada774f285ec2fd83823ae087c05292e5eb9b93c4acacceaf4effc97377038e6a1263d941d8d8f54b677a8103df3bf76a6051bad0953330ffb8c8cdd68167c8e92ce2bf856cf6fa89ca3e6f4e377e5bac1093439a25c07b9789859ac40538fdbfb5b43af4d606223c257b10ef6caecc44d8e396db0327735369eb7767fbe824284ecf77742534a6a5965c1ed88b25afcd512b650b1a90b5eda3e0990425d17ceca1e08a98250de33e9cb8dd146f00acf5e9fed71fa92542eea7a5d29e078b0f590a561934d68ec9585b955c699d339ee4f587f7080c40781b323afeea02b5f690f6555c4fb6b8171b0ece634421835c314468f0391cba486447de54a5e5edf1c154a32ce223c4ed872b34593f501d30eb3ac2cf1b5ee15e20cf9c0cb4acfb1e6d89f1b5f32f08c126a576ac9c85b86eeb930c3f1ee72a41b70856a92addc2dfdda2b33fe252006c3931a7028964259c42eff45079cf2e6a72abeb44690301cc35ec501e808177687bc11693ad4e45797e5f2ffb343f2597ea504926f696e9258c85472e4238faa76d1156af7cda89f3fef5158071e9a20bae9f7fed127e8966b4869a24b2e372c0fa3ac0627e9091afd14a86c7bcc48db479f563051b89878c7701c6af4032ba45712376603966840dd022e8d5b54f80c30e05b986a87a7d1fc99b0cdcc1b0acf4c99a05dbd990559c3635a5881d2c4d23f7be8ea1ab5e4f83376279e8ecd593803a3674acc0ae36c07b50c3143aa252a35b36f57131be8aefafebdb25c6a702700ff2355682e7d6a50177ada7c02b2999217b4aa60268e638b1efa316b2cd15cb4ef9d031acfa2dc38577c6cf93fe536fd6e98931d9fd7df076b93f1cae3bccb2ecac8c7304bb96e6b8d17f14cb2c5026b67b8b8a0ab0dcb08ce13970d30c3571ff64d24c06328d5385de3f18c37669f95f35de2d30e3a3721fe0b49bec68e42bd5ed0fcd2490da357747c93449725f0a4a80d48567b68e516585847b9dc3e6cad9f5065271ca56cb645b97a2b368a60daf5d9add5c218bac5ba0995cfbe9f6255a6a239111ce294a70f50018f651669998a9340a01aa0c423e16c03dad2b0f8cc0af9ba210ab0b456d353a989111178128e00812b34cbe90cad16af7ebc86cabfff0935e0e655c6fe536e2e432071f1da249f11f5937dd679b56d3fd5e784345a7efde8fc886c4177c19e0dd326c1579132c4e75169aebee1728a4a9f258ecdb9a0b43c882f62e682b39895a7b8f9aed8188b8401f00d9046fa9867344d4ee76cc2c28280fc31fc84398215758fe4eec79550efc2ac8126af6391d216ac4e3a22b063868925680e56213302d6a1bd256d6c13178d1255d1022c8664ab6c1dbdacc601381d3ad300cb19480b9bbc35bd11b231bfde95befe250ab89d9daae0f131f050c17b8e51589a171210b469df4a4c5d95736109a35ded00a19b3fb691261d4590cb29a935ade8cc4dd7d023bdf898123b5b72b9838834634e57acb4c5789a49e40427837598fb2b3a71f466b8c7ab0b9773cd98c84260af113a494dffce9b8a825cab0aed4149c40def029ab9c3a03369189ee180afc7af502ccb3c6ed50af87d80e244d5a663edb3dde4b45fc4812907c74860de5dd54065f4f017e00a9e0b6df3b28f6a5da7b1d51469f6e6d0ff116d32a90f5fbd0b7e7afd3256ec99ce54987baf6578c97e2bd08b120be33b98cb43811650f46f69ea130df6937cdbe0262343633680b16e1a2dc317706e8915657ea1e32b05dbceeea0554c6f0345a36ed6f212f77af75c090c44d5043a76e49fd323dfb5b58346a550c0d732ac8c991d4a77cc7ead0ac259a3f63255a735ce1a8de746929e4bf6311407b40e905b97e8876268281639cdeddd698e3715906e63f7c9d6403e4b42f4c0fa2083d91e6e5d44b880a03d6f41b0b0909f6fb789493ecb32774bdf0122a5c7e8c1c38385cea9fd9a235f95d7731b48e94deca481630b8998c5ae3dd2438a9d228a7b7f1fb38a6ef8bd9e37ccb1437ea9157219ba3f2d1d63872065d40314f1aafbee2b315ffd0a69cb1550d78e997c4e2403ae8dcc833bf9e54e145a4c08766fb090c99cec5cf7dba079478713027fbab6f03244f47baa354360d6d7ac067162106657db4be7e80fae25178a0550f425d5214dcadaf44ea99ea41e2a5afdeb22e1133e6d3748265c4947c40ba479b83772945819e8bc34d78a124faf3748ce5f524003540bdf529b22199369654e4cafb3e9bbb20dc9a855f817164b44867b7b146f285780cf3573483798d85265157563ffde156c03d0b5b233fe1a7fe34be0573085d4cee9f9e4ebacf9b7dd708d981c7fbc2ba7f9f57053a6d7da3ab162f5ae03554edb471fa12c4b37290d7dfc819943332a2b5afe2c8185d0986bc27dc7f70530a544b189b87e7471af9811040435b5a1db64c905a94b5bb51876eeb6378a82d8a9864a142e4ebaf48847ffd65b2410554ac5e414404c8ed72cc788f77fd296fad040626f5cc4adbe8e89711aeb58f73746ecb92a910f0de212f8804e368cc1cb1c2f737ffe0f076d9c563b88fd2ec44ed7287ad93cbd4da73de5c787aedaef7038301bffa81e1ac3adc9551be5cfb0c928c98a8145c627e562481593890eb73f6f10e4bbcb4d731e725450cb507f5ee60cf763f31538fdbaef8db325fca8108c7732b67b9d246f4ec07423e98e460e7653ef5cd1307779f8eff8e17831a6bccb54142f6c5d9869e0a5b8182af12cc3a3c3b2d300e5e16a868a2dce782d156261a17770038edcbef522592c631d27ae9e89d40fe3f1044d8594556ff9c5c7c93b607552532908e1232833cfd804142f143bb50fd2d9cc7c9d4812d51260c6932018d524dcd1de744b886046220cf1fc512a0d6dc5f68d2a71c1938b2c16d984289743f712e5a66fd560bc64de623a2b4f879f6b6d554c2361a994ccab499df8612b24204689b604c4ca3065823eaf0d3464b3ea414308e4e27fb44ab72c4c178c0500a18a2f6adda1eab34c3b78ba4c820a536f8e5a7f6b9d79703f73bc63bdbc1d551dc03c6cfcf96f6935fa9881002a6523778e05af641e761932733bce5962722341f7f34a1ad35e3e35813c2b626ed9133f50452b2492e846591d8a42e8ef3333ec1ce387cda54825c5c2dad96515a50cca5dad736d73cdf4cf9dfe055314d308163583e4d36a6ac2a6dfd0bb6de9a6c57607797def82c4a10f2503959ac61f56bba409bd5b63d3416e57bf1cb75aee0e191222a195eb8716346b0eda19d2a78f51cc8b5f8d5059a06e315b885c5f72ac58f502d4c5c1b399bc1030bba9a97b17cf59f333271f486083089d219c4327e564d599ed74c7234715e0c7737bf0cf261013736e78be3b32992d4cf0aa7b0172b83a7558b18dd35d9d61dd07e3a4f93c9280a294e4982e5a7d8a142aef26e0e4c587f1485a81231fac207311d7db351842ec97722bfca487be1b2f7d2b63c1ce9fe35ac17fcdd987c2d7832109860784028e46521298860d7f46d869c0ac152febfca95aca8420d54a25019b4d98ff2342c8c3f162ba450e6c4996edfe348d14aec300d808f2d6c85b10b08673761497e249ab4d20b293ba9279bb9db3593e3c7c2e05ab34cb77621e2d4ce175d3ce0b25c7a0bc85a5df782a81e0a32f89dc6d472b07fbc4efb382a94f6483bc2c2776c088094e89c5a49d5628ad78ce7ecbdbee528a0c184bfc2a4f07442591e27524d75136c3eae29d19c430628916f71ce5ff944c1ab27fd110d8f902bdad1f4973bce379fcf82ceb2899b0c3869ca04042da8ae1ddc904eea800724ede5b54b92f83d2bc65fc34d266188112f2c6128261545a789c82cd76d3f29bcd1a2067af3a78ec756524ef5c33f73e750c9148f9b3e7b04a53a73058c26a7c4047c30696bda0ec170e8e32122684be3387b4701c2af19c3b3624b4b23848871ce51c33c5b9401131e9f5b5783b4d09c5e5b2a6f943f83764dfe01908ecd82cbc948cf69d2a595fb5d3507ce13d24f8f6b1f71ae08858d34b1e20539aaf16288743b80281f2a2db1fdb663fb26a528a0ac27d52e1ad7e49f5e8c15e76b3b269ce383eedd5778fe81fd57feb9d5a71fe140b707fe09e4709f2dcaf61f8d184d31a7c6bbe767ea27af3c97b0c103f5234815f0d1fbb9268bfc84fcebbb6a738da7c7d2007c81f9ccdce18ed017571b0ada3eb21733a1df52db0313d1f7be846e0048ef39538a284d7c8f15abe0010013f8c678531ea6774ee4536e2f84ce995d43658a19a859c349a552efbd58ad64c7e973f7eb3fb5c35a224719fa141be5707c01b52f9885f17891e5722c93c605377f44858ee0255acaad2a1a7cf4d4b12d03adf6bba3afbd23e99776866268833a0867d40a2167916f2ba706781522b623694345af64e23511cd4add8755206e8bd168578452730b5a3a318de3d081d7b13007e3881fad3e7299716ab6509192d6df781917d1a41a595934490e75dbb77ceef99df4e8b1655f7c6787280300000057649f6482bcd99aa76c8b92e8eb98ec6c84d7b34968c1a720e420573491ccfd6534aebebe3b67226c9d664d92bb478f4c335cda6a8116f3be19b13ca294018a9691b86007b3846c0e27b613bded91903fd3976cea5975afeeb4d53de10e6aa595ad308f1dd502726781e33da8d9b589b5cf28427d38f3ee20820a662076a4f6a0a962de55adcb99025a124a9ad2f0c108224aff8287b42221ff790f3f3347987dcdc28557e12bc1c9230b7b12880f473f85983d75fb7652e0138a289a7e6d995be48b477114fcf8c52f9528abd9a8e059232b94e0e6741e79d98de5678452740f8c32531d5e31b5bf9773fa441d135da0284783e9773a15b78f3c1721472a47e80d6b4bfc6d3e99105e6cc1d2e004beab92e4c883ace98b985dcf87b88d143998945a06cd204c6106adfa08c26fb769e1e8228c163639e820c39c20233adb29d0043b5be34ef2b6218910d1c9bae133325d4ca0c8f2db33a9a5d77716b311d9a630a5932611e57133eb9f90a7549b116d67aead1017a1de54f551fa94c3e38fc768e65ce35d8acef134530224a5e5a43e8fe3b6687dfb48281805f24b9ae6e888817569a6f9d698758f2efdddd9908bfe08e66adf1b2bd014b8e064297750f8ba3670d7f338569999f90d9f437fefea9b101323cd638c8ede385c29efb0102824dfb10bba3bb02149935681b918b155210648d503db811a4c361ed562c8581bc5753268ea7ae665bcbd075139d86b938a2ebccf2e327e0be4ede5c1e1416bd5260217363c8e0724bc2640a008903e44407c1d79b30c93e6d370634a99544697e1fb00f3313090931d69d211fbdbb7c9226ef8230c49ad6e1ea9b2fe73fff13997d2c1cf5da28d829f3438c063af9f7e5d7ee3eefce8b805565442d321745200451c266ce8783a0e7cbb43e4b6dc5230c3244250defa5049e8a370f697262f7c35f7efeb6aecea096fde2bc3e0dc2b26bc20ee5fc21ba8c54c4bcd0f0b487f26382e98043fe18e9252f7f5883ede0006c8e378ee10e627771ba4602e16e8768f94fdee69d198fc8fe8f082f6fcdf72194a6fdf33936e5dd121c3a395b400b12f23e38b9fb72f9d4a3e58b2315e710f97a15eb3a76461cdc77947e5a2d0a771c67815752ee42b2b433a7a16909b8a21c5f85297f71db0ad81fd490ba7245b044ed173d03bd7e4c1527d466ba868acb2e7bf297ee96b6b4547235981f4592622a0d78db9f5904ae2becd8a6a85df77be9ccc7c9a447c472d25df6fbcf14e77e83712b784b10f4949bfb3505c0543d9de34e968a83ca322605ad219db671f91052334fe7f259fd0b072d3f8743ab1795962d98297b8de451f93af47554276f1b6d15661b31470a88cdcb0ebdb7564a659ec8de6dba91be1bfe288a4f2894c216ec86eae3f5b4b9ab519ab6fa784d3fb8cb41e77b457e6cce024a7ede2ce90e3c7fb9abfd8852d6a07d3614fc0806e458baf370a4e6bbae200b1021ebcdba8ae6acace1235a6e0bbfa67c087e72922bf910cd78c39429270b9097c97a30541acb246a4aa5e5133cdd2f7ff53cbc4c0d6b026541949d31659fe0e899c1bcd70c1c8775cf192696451d102052aabbbccc4b9adce945de8270f56c7abb34c4cc64a4de49fe3b2d6d3846bea4c200fc4818cbc29b42f3137bda22f1c30179bf65a8970c02fe95cda6c33b57dc4a42bd642d75a28912c218c6e4c3fce1b85f7e73aa3b2f1349a52f55a6bc8bfc8e707b9f215701350394faffc29aee230f3befdeab7a79f08b453c42155f03c9dcc88a8659f5231ecb1ff1d569ce49dbc1c653eab0377c2ac0e631e43d0d65002d3b1c2abbb09831b881f9ba0d62f531e2f5fcbc9ee6bc4decf0e8e4c487552a9f8a7fab9a9b532ad4600458d0732160c21b5fd12984e250ac6f50bdb8e00a1f9fe8d9fe4b4c5fcb583def1c0909ff3bab7e980c57105d40ae0b80002b3a43c663bcd793f80596ad50f99f7ca32194a49ebcd7b623e8b31c344c2411352539141c144e8d6e80f463737dbd0878005693457c7341f86db8d9d846a091c7ff5ad639bbf03a20c7130e9aed2c745b27bd9d7459984fc647732b64b21b2d6510a0c59850ad65ff8407e6dcedece3c8791a72e84d85530da4d82cbd4eb5ef846e861328df902d7c8eb9008b1f0f7e681b0c3557833a83a6bc2862f6cd69fee060eb796305617b80465514544c6416463648598581527b4618d5fe5cf9d90432db2e03efaa4c37223daf9abba782a6f0c2bfdf69c81f41c277123e1eca24ce04320de85b4a589f99e4d6c9dbe1ddbd8bcb2a78fdbcd1e83acaf5fbc8e080b5cc76401437a3858c551203cde584b73e30265a75b23167628aa4a277c0bb67ab2c59adad13015ef3bf44b62bdfc8754b2cc5bcf28e5c78594882eb3f095880e9d5a7719bdff1c870ad0ac30a6e65881621b8e7e497e6930c56b84ce227c17371916b4800382016549b61246c6143349c22d19b6bfa6d1d120addcdf6120a5b252a772ddc73d495ae2ec0401b2fc0ca90128631878ce83538b48881b79648b5d2b9cff7467804f757f949453b251f845ec2dd5293d8d1890ba6af69aeb973920ad2c222c6d9f11073c2475dd99347f9ab9f110e3d4fdf88f7b19c3e2adfe7e99806048c9c97f44e7936e585ed4e10af8e8c5e1ddfaebf2508c7161f97a01dd61acae0db57b409d78d98c30cbe8db2aa9e18b1a8230a24601463115fe0cece698bc58550f9f031dd01fddddf76e7d514481e5dba6fb872e2787891a5529b30863e3b36d55ceb585ab3a5a85e436ce86499f3d4d32d1a67fe1f910a4b7105fe65b350758f5b916f8a9b01ed55addbc73e2693261fe6bd0fe64a3d4e8d58b8956479b15be5b78038fa7b930f313173df02c325710a6358f7268e0be7aa1861c062928f6d5c6b438d22660fd7872ca4c2bd010a675d7b901054cdaf7c74a9ed303cf97f7392faf48647888fbe86368ca6675a83ed451b046f542e289a641b2849377e0a1534371cdffcf5767a9cb939ef5641b30239e42fd277e5355f488caab80f8fff77c770d5102aa55f2c2a73d404241c51034a50e916751da67ec159a856b6dd7946c597cd566b824202ac0b8841656a4e7564cac21f73af79001bfe411c93288a2c3615aa11028c6d5f6b814468ee01f965bfd309bd30857e9ba41733fdae310033e91ac09ff4532194c830f5cd2ca5e9baeb318cf8c2053fb465166943625a7040c332f80c03a58ee37a6d112de0913f7e5e6403f892430e8e3e4a9a04c8e86aa71cda551177c398dee2187de9d6944b7741e451d699791e4cb9beee18344e7c427785abb664e02ec3d8d5fd21dc5fcb0adf9d58019852565da4a830e7cb81c1a1c9c8ffaa0d82fe78b583ebe2d94a043bacc11f5218b18df82232f1efc20001aa48b1e9172a713e7a8a7d9c3f16c26d420ba0526e1bd154c8cae3f7661ef6de83da1441f99a4754f448549191f255fe77840577564e1d2e803d8bf371e97b7edb020cbf1098aa950eed5a0ef0ab1f76980be4c4df29c9927ce71b9f1a83b8e2c4bd63dce14ad9487b5a31d9de8bc6f2b856f33f20b457648185970f6f48e22b3aa4eb736a0acfe31f2b5ceb7d9b80a83aa07ba5ea748c372446059da75c1bc8100", 0x2000, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)
llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

2m8.912155908s ago: executing program 1 (id=412):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf7473000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x3f, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)

2m4.639075211s ago: executing program 1 (id=419):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)

2m0.160012266s ago: executing program 1 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x8, &(0x7f0000000340)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m58.012536102s ago: executing program 1 (id=429):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
pipe(&(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0)
getgroups(0x0, 0x0)
setregid(0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x4142, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)

1m42.826834796s ago: executing program 32 (id=429):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
pipe(&(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0)
getgroups(0x0, 0x0)
setregid(0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x4142, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)

1m42.700333204s ago: executing program 4 (id=446):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x1b7b, 0x0)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m40.604383872s ago: executing program 4 (id=448):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/232, 0xe8}], 0x1}, 0x1ff}], 0x1, 0x2, 0x0)

1m39.486283571s ago: executing program 4 (id=450):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m38.183349627s ago: executing program 4 (id=453):
mkdir(0x0, 0x8)
inotify_init()
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
unshare(0x20000400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

1m36.187611238s ago: executing program 4 (id=457):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x1b7b, 0x0)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m33.820519439s ago: executing program 4 (id=459):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0xf, 0x6, @random="1905664bdaf1"}, 0x14)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xff97}}], 0x400000000000172, 0x4000000)

1m17.488390117s ago: executing program 33 (id=459):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0xf, 0x6, @random="1905664bdaf1"}, 0x14)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xff97}}], 0x400000000000172, 0x4000000)

1m2.895470937s ago: executing program 2 (id=484):
semop(0x0, &(0x7f00000000c0)=[{0x0, 0xc63e}], 0x1)
semop(0x0, &(0x7f0000000100)=[{0x4}, {0x3, 0x200, 0x1000}, {0x4, 0x0, 0x800}, {0x1, 0xffff}], 0x4)
semop(0x0, &(0x7f0000000140)=[{0x1, 0x1, 0x800}, {0x0, 0x9, 0x800}], 0x2)

1m0.976385748s ago: executing program 2 (id=486):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0)

1m0.899476271s ago: executing program 2 (id=487):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)

59.948279026s ago: executing program 2 (id=488):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000005c0)='./file2\x00', 0x4008, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64], 0x1, 0x2b2, &(0x7f0000000840)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3, &(0x7f0000000540), 0x1, 0x4a1, &(0x7f0000000000)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
open(0x0, 0x109042, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
write$UHID_INPUT2(r0, &(0x7f00000002c0)=ANY=[], 0x90)

57.557737612s ago: executing program 2 (id=490):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
ptrace$getregset(0x4204, r0, 0x4, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f00000004c0)=""/4096)

57.120400781s ago: executing program 2 (id=491):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='htcp', 0x4)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

56.763378959s ago: executing program 34 (id=491):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='htcp', 0x4)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

22.018807478s ago: executing program 0 (id=537):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x800004)
syz_clone3(&(0x7f00000004c0)={0x10001800, 0x0, 0x0, &(0x7f00000000c0), {0x3}, 0x0, 0x0, &(0x7f0000000240)=""/100, 0x0}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, r1, 0xffffd000)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200001)
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000180)={0x8a4, 0x40, 0x1})
r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(r1, 0x0, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000500)={0x9, [[0x3, 0x101, 0x8, 0x5, 0x4c, 0x3, 0x4, 0x4], [0xa, 0x81, 0xffffffff, 0x2, 0x6, 0xffffff80, 0x5, 0x1], [0x1, 0x5, 0x8517, 0x7, 0x7, 0x10001, 0xb, 0xb]], '\x00', [{0x3, 0xc, 0x1, 0x1, 0x1}, {0x5776d45a, 0x40, 0x1, 0x1, 0x1}, {0x10001, 0x1000, 0x1, 0x1}, {0xfffffff7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xc, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x80000001})
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
read$char_usb(r8, &(0x7f00000002c0)=""/106, 0x6a)
sendfile(r1, r8, 0x0, 0x9)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)

18.884531206s ago: executing program 0 (id=539):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d00", 0x15)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000000c0)={0x66666666666689b})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0)

18.795150166s ago: executing program 6 (id=471):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[], 0x1, 0x122e, &(0x7f0000002580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x4, 0x1, 0xab0, 0x11, 'syz0\x00', 0x65}, 0x1, [0xd, 0x8, 0x3, 0x1, 0x7, 0x3, 0x8, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x4, 0xfffffffffffffffd, 0x1, 0x14, 0x4, 0xc, 0x4, 0x9, 0x4, 0x9, 0x3, 0x7, 0x8, 0x5, 0x4, 0x1, 0x7, 0x6, 0x9, 0x1000, 0xfff, 0x1, 0xb, 0x4, 0xc, 0x7, 0x1, 0x169, 0x1, 0x0, 0x8001, 0x2, 0xc, 0x4f, 0x7, 0x2, 0x6, 0x1, 0x8, 0xad, 0x9, 0x2, 0x5, 0x3ff, 0x2, 0xffffffffffffe12c, 0xfffffffffffffff8, 0x9, 0x6, 0x5, 0x6, 0x8, 0xfffffffffffffffc, 0xffff, 0x6, 0xffffffffffffffff, 0x7, 0x0, 0x2, 0x7b, 0x4, 0x101, 0x5, 0x100, 0xfffffffffffffffe, 0x5, 0x6, 0xe, 0x7, 0xffffffff, 0x0, 0x9, 0xd8, 0x7f, 0x7, 0x4, 0x6, 0x200, 0x100000000, 0x7, 0x9, 0x7, 0x1, 0x1800000, 0x5, 0x1, 0x2, 0x401, 0x7, 0x7, 0x2, 0x100, 0x7b, 0x7, 0xff, 0x401, 0x4, 0x8, 0x5, 0x7, 0x7, 0x2, 0xb472, 0x6, 0x6, 0x9, 0x9, 0x200, 0x1, 0x2f88, 0x40, 0x6, 0x4759f821, 0x3, 0x9008, 0x6, 0x55ec]})
syz_open_procfs(0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x1, 0x8a5, 0x1001f0)
socket$packet(0x11, 0x3, 0x300)

17.953120847s ago: executing program 6 (id=540):
r0 = io_uring_setup(0x53fb, &(0x7f00000000c0)={0x0, 0xdad5, 0x1000, 0x1, 0x15c})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
close_range(r0, r0, 0x2)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$hidraw(0x0, 0x82, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000380))
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)

16.500611838s ago: executing program 7 (id=492):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000a00)={{0xc, 0x0, 0x4, 0x4, 'syz1\x00', 0x49f1}, 0x0, [0x6, 0x8, 0x7, 0x642f, 0x200, 0x2, 0x3, 0xf64, 0x6b2, 0x8, 0x7, 0x28fe, 0x7fff, 0x1, 0x8, 0x0, 0x9, 0x80, 0x4fe, 0x5, 0x0, 0x0, 0xfffffffffffffff9, 0x9, 0x6, 0xa, 0xff, 0x2, 0x5, 0x70, 0x9, 0x0, 0x100000001, 0xa, 0x7c60000000000000, 0x10000, 0x2, 0x8, 0x7ff, 0x2, 0x8, 0x7, 0x80, 0x74d68366, 0x2, 0x4, 0x7f, 0x9, 0x1, 0xd, 0x7fff, 0x2, 0x6, 0x0, 0x7ffffff9, 0x7, 0x4000000000003, 0x2, 0xffffffffffff8d4d, 0x3a5, 0x80000000, 0x80000000, 0x2, 0x3, 0x8001, 0x1, 0xf2e3, 0x9, 0x1, 0x6ce8, 0x6, 0xf, 0xad2, 0x3, 0x1000, 0xffff, 0x6, 0x1, 0x9, 0x6, 0x996, 0x5, 0x1, 0xfffffffffffffff7, 0x7, 0x0, 0x6, 0x800, 0x1, 0x1000000, 0x9, 0xf, 0x1, 0xa, 0x0, 0x10, 0x7, 0x3, 0x8, 0x6, 0x1, 0x6296, 0x1000000000, 0x9, 0x3808, 0x2, 0x7, 0x5, 0x8, 0x7, 0x3, 0x7, 0x7, 0x7, 0x1, 0x80000001, 0x8, 0x0, 0x1, 0x809, 0x9, 0x6a9, 0x83, 0x3, 0x0, 0x81, 0x9, 0x3]})
mprotect(&(0x7f0000c69000/0x2000)=nil, 0x2000, 0x7)
pipe(0x0)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x84)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10)

15.754077421s ago: executing program 7 (id=541):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=0x6, 0x4)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000b77000/0x2000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port0\x00', 0x72, 0x200400, 0xffffff4a, 0x8000008, 0x7, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=@newtaction={0x18, 0x76, 0x1, 0xfffffffc, 0x1, {0x0, 0x0, 0x81ff}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)
mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})

15.086597137s ago: executing program 0 (id=542):
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2bfde7a0, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fstat(0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
getpid()
openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

14.212455557s ago: executing program 6 (id=543):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000400))

12.758660903s ago: executing program 0 (id=544):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

12.75615294s ago: executing program 7 (id=546):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x800004)
syz_clone3(&(0x7f00000004c0)={0x10001800, 0x0, 0x0, &(0x7f00000000c0), {0x3}, 0x0, 0x0, &(0x7f0000000240)=""/100, 0x0}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, r1, 0xffffd000)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200001)
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000180)={0x8a4, 0x40, 0x1})
r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(r1, 0x0, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000500)={0x9, [[0x3, 0x101, 0x8, 0x5, 0x4c, 0x3, 0x4, 0x4], [0xa, 0x81, 0xffffffff, 0x2, 0x6, 0xffffff80, 0x5, 0x1], [0x1, 0x5, 0x8517, 0x7, 0x7, 0x10001, 0xb, 0xb]], '\x00', [{0x3, 0xc, 0x1, 0x1, 0x1}, {0x5776d45a, 0x40, 0x1, 0x1, 0x1}, {0x10001, 0x1000, 0x1, 0x1}, {0xfffffff7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xc, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x80000001})
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
read$char_usb(r8, &(0x7f00000002c0)=""/106, 0x6a)
sendfile(r1, r8, 0x0, 0x9)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)

11.707840158s ago: executing program 6 (id=547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r3)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

9.939537346s ago: executing program 3 (id=549):
close(0x3)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0)
timer_create(0xb, 0x0, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0xf, 0x2000000003, 0x0, 0x2000000000, 0xfffffffffffffffd, 0xe00, 0xffffffffffffffff, 0x0, 0x6, 0x45, 0x7, 0x0, 0x3cf2a278, 0x0, 0x0, 0x0, 0x4, 0x67})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000019c0)=@nat={'nat\x00', 0x670, 0x5, 0x3e8, 0x278, 0x350, 0xfeffffff, 0x0, 0xa8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key=0x3}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {0x0, 0x7}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@set={{0x40}, {{0x1, [0x4, 0x7, 0x0, 0x6, 0x2, 0xc], 0x3, 0x4}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x350}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x6, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x40, 0x17f]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x290)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x0, 0x5, 0x7fffffff, 0xffffff81, 0x4]}, &(0x7f00000001c0)=0x54)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)

8.989604177s ago: executing program 3 (id=550):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x46, 0xc11, &(0x7f0000000d00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)

8.938399765s ago: executing program 5 (id=445):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8931, &(0x7f0000000440)={'sit0\x00', 0x0})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[], 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x9, 0xfe, 0x10cf, 0x4005, 0x5, 0x2, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)

7.531983866s ago: executing program 5 (id=551):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d00", 0x15)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000000c0)={0x66666666666689b})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0)

6.71220811s ago: executing program 3 (id=552):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f00000004c0)=""/4096)

5.24420898s ago: executing program 3 (id=553):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x5)
io_setup(0x3ff, 0x0)

5.013489238s ago: executing program 7 (id=554):
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2bfde7a0, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fstat(0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = syz_pidfd_open(0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

4.892250389s ago: executing program 0 (id=555):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000087d1e222e0000000000010902"], 0x0)
ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0)

3.846077261s ago: executing program 5 (id=556):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000400)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x7fffffff, 0x2, 0xe7c1, 0xffffffff, 0x1, 0x401, 0x2, 0x10001, 0xb1c, 0x401, 0x9, 0xfffffffc, 0xfffffffa, 0x401, 0x2, 0x8, 0x1, 0xe71, 0x2, 0x7, 0xffffffff, 0x22}})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0c81)
write$sndseq(r5, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000008000300af51823c3567", @ANYRES32=0x0, @ANYBLOB="080022019d0200000800270003000000080022017b01000008002600cc150000"], 0x3c}}, 0x4000054)

3.033017086s ago: executing program 3 (id=557):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x14, 0x0, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050)

2.910357424s ago: executing program 3 (id=558):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0)
io_setup(0x2, &(0x7f0000000a00)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x7, 0x7, r0, 0x0, 0x0, 0x9}])
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000004)

2.803776631s ago: executing program 0 (id=559):
close(0x3)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0)
timer_create(0xb, 0x0, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0xf, 0x2000000003, 0x0, 0x2000000000, 0xfffffffffffffffd, 0xe00, 0xffffffffffffffff, 0x0, 0x6, 0x45, 0x7, 0x0, 0x3cf2a278, 0x0, 0x0, 0x0, 0x4, 0x67})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000019c0)=@nat={'nat\x00', 0x670, 0x5, 0x3e8, 0x278, 0x350, 0xfeffffff, 0x0, 0xa8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key=0x3}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {0x0, 0x7}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@set={{0x40}, {{0x1, [0x4, 0x7, 0x0, 0x6, 0x2, 0xc], 0x3, 0x4}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x350}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x6, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x40, 0x17f]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x290)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x0, 0x5, 0x7fffffff, 0xffffff81, 0x4]}, &(0x7f00000001c0)=0x54)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)

0s ago: executing program 7 (id=560):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = inotify_init1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff})
io_setup(0x8f0, &(0x7f0000002400))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts.
[   67.865753][ T5809] cgroup: Unknown subsys name 'net'
[   67.971644][ T5809] cgroup: Unknown subsys name 'cpuset'
[   67.980043][ T5809] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.338398][ T5809] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.186437][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[   71.196080][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[   71.464056][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.484081][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.497755][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.529798][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.537664][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.545362][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.553364][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.557095][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.568063][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.568827][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.611813][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.619786][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.627183][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.635565][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.644355][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.662504][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.669633][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.677823][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.685220][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.689045][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.700043][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.708112][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.716032][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.723457][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.731580][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   72.152120][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   72.348772][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   72.424229][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   72.502321][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.510737][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.518009][ T5825] bridge_slave_0: entered allmulticast mode
[   72.527043][ T5825] bridge_slave_0: entered promiscuous mode
[   72.544901][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.552308][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.559827][ T5825] bridge_slave_1: entered allmulticast mode
[   72.567357][ T5825] bridge_slave_1: entered promiscuous mode
[   72.602659][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   72.677539][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   72.695235][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.727802][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.735261][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.742733][ T5831] bridge_slave_0: entered allmulticast mode
[   72.750525][ T5831] bridge_slave_0: entered promiscuous mode
[   72.774627][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.810010][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.817419][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.824917][ T5831] bridge_slave_1: entered allmulticast mode
[   72.832989][ T5831] bridge_slave_1: entered promiscuous mode
[   72.928551][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.935808][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.943072][ T5821] bridge_slave_0: entered allmulticast mode
[   72.950755][ T5821] bridge_slave_0: entered promiscuous mode
[   72.966745][ T5825] team0: Port device team_slave_0 added
[   72.982201][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.991771][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.999413][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.006752][ T5821] bridge_slave_1: entered allmulticast mode
[   73.014887][ T5821] bridge_slave_1: entered promiscuous mode
[   73.029883][ T5825] team0: Port device team_slave_1 added
[   73.044893][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.168245][ T5831] team0: Port device team_slave_0 added
[   73.178224][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.187953][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.195499][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.202990][ T5832] bridge_slave_0: entered allmulticast mode
[   73.210761][ T5832] bridge_slave_0: entered promiscuous mode
[   73.220144][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.227161][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.253250][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.279407][ T5831] team0: Port device team_slave_1 added
[   73.289094][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.298840][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.306355][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.313941][ T5832] bridge_slave_1: entered allmulticast mode
[   73.323239][ T5832] bridge_slave_1: entered promiscuous mode
[   73.332232][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.339283][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.365234][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.376380][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.383840][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.391068][ T5830] bridge_slave_0: entered allmulticast mode
[   73.398760][ T5830] bridge_slave_0: entered promiscuous mode
[   73.460836][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.468064][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.475653][ T5830] bridge_slave_1: entered allmulticast mode
[   73.483291][ T5830] bridge_slave_1: entered promiscuous mode
[   73.505461][ T5821] team0: Port device team_slave_0 added
[   73.528946][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.551769][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.558804][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.584760][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.598972][ T5821] team0: Port device team_slave_1 added
[   73.609223][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.631410][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.638858][ T5829] Bluetooth: hci1: command tx timeout
[   73.639469][ T5143] Bluetooth: hci0: command tx timeout
[   73.644318][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.675631][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.718787][ T5143] Bluetooth: hci2: command tx timeout
[   73.731637][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.785545][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.797657][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.805099][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.831072][ T5143] Bluetooth: hci3: command tx timeout
[   73.831265][ T5143] Bluetooth: hci4: command tx timeout
[   73.842388][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.860100][ T5825] hsr_slave_0: entered promiscuous mode
[   73.867318][ T5825] hsr_slave_1: entered promiscuous mode
[   73.877467][ T5832] team0: Port device team_slave_0 added
[   73.910615][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.917557][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.943987][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.960065][ T5832] team0: Port device team_slave_1 added
[   73.980957][ T5830] team0: Port device team_slave_0 added
[   74.022091][ T5830] team0: Port device team_slave_1 added
[   74.066715][ T5831] hsr_slave_0: entered promiscuous mode
[   74.073752][ T5831] hsr_slave_1: entered promiscuous mode
[   74.080622][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   74.086436][ T5831] Cannot create hsr debugfs directory
[   74.127813][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.134927][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.161259][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.174288][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.181276][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.207307][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.274897][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.282166][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.308459][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.332396][ T5821] hsr_slave_0: entered promiscuous mode
[   74.339497][ T5821] hsr_slave_1: entered promiscuous mode
[   74.346103][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   74.352124][ T5821] Cannot create hsr debugfs directory
[   74.375066][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.382109][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.408054][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.503486][ T5832] hsr_slave_0: entered promiscuous mode
[   74.510360][ T5832] hsr_slave_1: entered promiscuous mode
[   74.517147][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[   74.522943][ T5832] Cannot create hsr debugfs directory
[   74.632674][ T5830] hsr_slave_0: entered promiscuous mode
[   74.639719][ T5830] hsr_slave_1: entered promiscuous mode
[   74.646301][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   74.652174][ T5830] Cannot create hsr debugfs directory
[   75.056849][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.080943][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.106861][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.134232][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.191992][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.202741][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.220230][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.243326][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.310005][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   75.337586][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   75.360740][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   75.371180][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   75.453511][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.480333][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.492959][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.503653][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.594488][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.619884][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.639860][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.651475][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.695199][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.719470][ T5829] Bluetooth: hci0: command tx timeout
[   75.719491][ T5143] Bluetooth: hci1: command tx timeout
[   75.753363][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.792760][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   75.800305][ T5143] Bluetooth: hci2: command tx timeout
[   75.833724][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.840986][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.864997][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   75.878575][ T5143] Bluetooth: hci4: command tx timeout
[   75.882552][ T5829] Bluetooth: hci3: command tx timeout
[   75.895733][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.902930][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.911954][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.919130][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.953752][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.960881][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.035744][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.096125][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.134944][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   76.168061][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.175254][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.194994][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.221061][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.228293][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.247797][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.302338][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   76.352878][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.360148][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.416981][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.424149][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.454452][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   76.487792][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.495013][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.552986][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.560192][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.664266][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.751736][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.880086][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.965846][ T5825] veth0_vlan: entered promiscuous mode
[   77.038806][ T5825] veth1_vlan: entered promiscuous mode
[   77.076094][ T5831] veth0_vlan: entered promiscuous mode
[   77.161934][ T5831] veth1_vlan: entered promiscuous mode
[   77.208059][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.237651][ T5825] veth0_macvtap: entered promiscuous mode
[   77.280347][ T5825] veth1_macvtap: entered promiscuous mode
[   77.312797][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.419290][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.433309][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.455611][ T5831] veth0_macvtap: entered promiscuous mode
[   77.491996][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.502166][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.526731][ T5831] veth1_macvtap: entered promiscuous mode
[   77.540300][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.549251][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.598095][ T5830] veth0_vlan: entered promiscuous mode
[   77.613881][ T5821] veth0_vlan: entered promiscuous mode
[   77.632856][ T5832] veth0_vlan: entered promiscuous mode
[   77.647920][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.685859][ T5830] veth1_vlan: entered promiscuous mode
[   77.696846][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.736463][ T5821] veth1_vlan: entered promiscuous mode
[   77.764141][ T3464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.773424][ T3464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.782564][ T3464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.795628][ T5832] veth1_vlan: entered promiscuous mode
[   77.801445][ T5829] Bluetooth: hci0: command tx timeout
[   77.809146][ T5829] Bluetooth: hci1: command tx timeout
[   77.824649][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.838927][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.848742][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.878548][ T5829] Bluetooth: hci2: command tx timeout
[   77.913231][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.934804][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.958647][ T5829] Bluetooth: hci4: command tx timeout
[   77.964292][ T5143] Bluetooth: hci3: command tx timeout
[   78.013072][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   78.044757][ T5832] veth0_macvtap: entered promiscuous mode
[   78.057469][ T5830] veth0_macvtap: entered promiscuous mode
[   78.073409][ T5821] veth0_macvtap: entered promiscuous mode
[   78.114458][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.141686][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.155327][ T5832] veth1_macvtap: entered promiscuous mode
[   78.165628][ T5932] loop2: detected capacity change from 0 to 128
[   78.173553][ T5821] veth1_macvtap: entered promiscuous mode
[   78.181778][ T5932] =======================================================
[   78.181778][ T5932] WARNING: The mand mount option has been deprecated and
[   78.181778][ T5932]          and is ignored by this kernel. Remove the mand
[   78.181778][ T5932]          option from the mount to silence this warning.
[   78.181778][ T5932] =======================================================
[   78.184928][ T5830] veth1_macvtap: entered promiscuous mode
[   78.250896][   T30] audit: type=1804 audit(1770438322.412:2): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3" name="/newroot/0/file0/bus" dev="loop2" ino=1048585 res=1 errno=0
[   78.281363][   T30] audit: type=1804 audit(1770438322.442:3): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/file0/bus" dev="loop2" ino=1048585 res=1 errno=0
[   78.344372][   T30] audit: type=1804 audit(1770438322.472:4): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3" name="/newroot/0/file0/bus" dev="loop2" ino=1048585 res=1 errno=0
[   78.380965][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.392105][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.401133][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.408898][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.419721][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.455700][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.476171][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.491995][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.529735][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.538624][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.595336][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.615916][ T1102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.700786][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.709984][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.739171][ T1102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.750377][ T1102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.800263][ T1102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.850141][ T1102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.897007][ T1102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.981251][ T1102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.072926][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.096467][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.251239][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.269370][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.289946][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.310938][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.414930][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.428389][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.461102][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.481567][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.668842][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.676739][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.891241][ T5143] Bluetooth: hci1: command tx timeout
[   79.896681][ T5143] Bluetooth: hci0: command tx timeout
[   79.959271][ T5829] Bluetooth: hci2: command tx timeout
[   80.039572][ T5829] Bluetooth: hci3: command tx timeout
[   80.040066][ T5143] Bluetooth: hci4: command tx timeout
[   80.556528][ T5984] loop4: detected capacity change from 0 to 128
[   80.799182][ T5989] loop0: detected capacity change from 0 to 764
[   80.878081][ T5992] loop2: detected capacity change from 0 to 128
[   80.910023][ T5992] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   80.936354][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   80.945172][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   80.957045][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   81.031256][ T5992] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   81.299636][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2ca!!!
[   81.508627][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.517174][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.525688][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   82.598930][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   82.705295][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   82.717786][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   82.839034][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   82.880015][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'.
[   82.910955][ T6008] 8021q: VLANs not supported on gre0
[   84.384950][ T6044] loop4: detected capacity change from 0 to 256
[   84.501630][ T6044] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   84.542937][ T6044] FAT-fs (loop4): Filesystem has been set read-only
[   84.572244][ T6050] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   84.700031][ T6050] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   85.398159][ T6054] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.461345][ T6058] loop4: detected capacity change from 0 to 164
[   86.357701][ T6062] loop0: detected capacity change from 0 to 16
[   86.407086][ T6062] erofs (device loop0): mounted with root inode @ nid 36.
[   87.809627][ T6073] loop4: detected capacity change from 0 to 8192
[   87.829363][ T6077] capability: warning: `syz.0.53' uses 32-bit capabilities (legacy support in use)
[   87.870965][ T6073] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   87.891150][ T6076] xt_hashlimit: size too large, truncated to 1048576
[   88.033257][ T6079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.100890][ T6083] loop1: detected capacity change from 0 to 16
[   88.257970][ T6083] erofs (device loop1): mounted with root inode @ nid 36.
[   91.657165][ T1207] cfg80211: failed to load regulatory.db
[   92.013090][ T6120] loop1: detected capacity change from 0 to 1024
[   92.268784][ T6124] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.675165][ T6131] xt_hashlimit: size too large, truncated to 1048576
[   94.212288][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[   94.377940][ T6144] team0 (unregistering): Port device team_slave_0 removed
[   94.414308][ T6144] team0 (unregistering): Port device team_slave_1 removed
[   96.304087][ T6171] loop4: detected capacity change from 0 to 1024
[   99.049984][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89'.
[  101.402746][ T6213] loop4: detected capacity change from 0 to 1024
[  103.328896][ T6213] hfsplus: xattr searching failed
[  103.334934][ T6213] hfsplus: unable to mark blocks free: error -4
[  103.341354][ T6213] hfsplus: can't free extent: start 134, count 1
[  103.864860][ T6223] loop4: detected capacity change from 0 to 16
[  103.877373][ T6223] erofs (device loop4): invalid ishare xattr prefix id 0
[  104.478120][ T6225] loop4: detected capacity change from 0 to 764
[  104.824143][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[  107.849001][ T6255] capability: warning: `syz.4.112' uses deprecated v2 capabilities in a way that may be insecure
[  114.684877][ T6326] mmap: syz.2.129 (6326) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  116.947075][ T6340] syz.3.134 uses obsolete (PF_INET,SOCK_PACKET)
[  117.776468][ T6347] loop2: detected capacity change from 0 to 1024
[  117.786303][ T6343] syzkaller0: entered promiscuous mode
[  117.815363][ T6343] syzkaller0: entered allmulticast mode
[  118.085834][   T49] hfsplus: b-tree write err: -5, ino 8
[  120.710764][ T6370] loop2: detected capacity change from 0 to 128
[  120.770811][ T6370] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  120.798993][ T6370] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  120.954507][ T6375] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  120.980041][ T6376] loop1: detected capacity change from 0 to 512
[  121.001595][ T6376] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  121.062851][ T6376] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  121.093426][ T6376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  121.105075][ T6379] EXT4-fs (loop2): shut down requested (2)
[  121.111362][ T6376] System zones: 1-12
[  121.133299][ T6376] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  121.181832][ T6375] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-lib)"
[  121.212575][ T6376] EXT4-fs (loop1): 1 truncate cleaned up
[  121.222668][ T6376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.921128][ T5825] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.327848][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.549626][ T6399] syzkaller0: entered promiscuous mode
[  123.555151][ T6399] syzkaller0: entered allmulticast mode
[  125.579861][ T6424] loop4: detected capacity change from 0 to 128
[  125.599730][ T6424] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  125.640706][ T6424] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  127.519020][ T6436] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  128.125086][ T6438] syzkaller0: entered promiscuous mode
[  128.135064][ T6438] syzkaller0: entered allmulticast mode
[  129.391406][ T6448] loop4: detected capacity change from 0 to 128
[  129.424195][ T6448] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.552954][ T6448] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.773249][ T5832] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.943727][ T6466] loop0: detected capacity change from 0 to 1024
[  130.018416][ T6466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.697853][   T30] audit: type=1800 audit(1770438374.852:5): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.168" name="file2" dev="loop0" ino=840 res=0 errno=0
[  131.988218][ T6482] syzkaller0: entered promiscuous mode
[  132.004767][ T6482] syzkaller0: entered allmulticast mode
[  132.995583][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  133.018536][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  133.996142][ T6496] loop4: detected capacity change from 0 to 8
[  134.019627][ T6498] input: syz0 as /devices/virtual/input/input5
[  134.056565][ T6496] SQUASHFS error: zlib decompression failed, data probably corrupt
[  134.083639][ T6496] SQUASHFS error: Failed to read block 0x9b: -5
[  134.148319][ T6496] SQUASHFS error: Unable to read metadata cache entry [99]
[  134.155577][ T6496] SQUASHFS error: Unable to read inode 0x127
[  137.027390][ T6507] loop1: detected capacity change from 0 to 1024
[  138.215071][ T6518] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  139.344907][ T6525] loop3: detected capacity change from 0 to 512
[  139.353543][ T6525] EXT4-fs: Ignoring removed nobh option
[  139.575815][ T6525] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.184: invalid indirect mapped block 256 (level 2)
[  139.589808][ T6525] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  139.592613][ T6525] EXT4-fs (loop3): Remounting filesystem read-only
[  139.601864][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  139.601952][    C1] EXT4-fs (loop3): initial error at time 1770438383: ext4_free_branches:1023: inode 11
[  139.601985][    C1] EXT4-fs (loop3): last error at time 1770438383: ext4_free_branches:1023: inode 11
[  139.635734][ T6525] EXT4-fs (loop3): 2 truncates cleaned up
[  139.945137][ T6525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.962079][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.102779][ T6537] loop3: detected capacity change from 0 to 256
[  142.301444][ T6539] loop0: detected capacity change from 0 to 1024
[  142.361390][ T6541] loop3: detected capacity change from 0 to 8
[  142.378463][ T6539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.423308][   T30] audit: type=1800 audit(1770438386.582:6): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.182" name="file2" dev="loop0" ino=840 res=0 errno=0
[  143.956582][ T6547] loop0: detected capacity change from 0 to 8192
[  144.032380][ T5834]  loop0: p1 p2 p3
[  144.036334][ T5834] loop0: partition table partially beyond EOD, truncated
[  144.065439][ T5834] loop0: p1 start 51379968 is beyond EOD, truncated
[  144.111284][ T5834] loop0: p3 size 100663552 extends beyond EOD, truncated
[  144.178618][ T6547]  loop0: p1 p2 p3
[  144.182513][ T6547] loop0: partition table partially beyond EOD, truncated
[  144.218524][ T6547] loop0: p1 start 51379968 is beyond EOD, truncated
[  144.248806][ T6547] loop0: p3 size 100663552 extends beyond EOD, truncated
[  144.281168][ T6553] syzkaller0: entered promiscuous mode
[  144.286670][ T6553] syzkaller0: entered allmulticast mode
[  144.475216][ T5889] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  145.043867][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.061494][ T5889] usb 1-1: config 0 has no interfaces?
[  145.069205][ T5889] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  145.083378][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.199000][ T5889] usb 1-1: config 0 descriptor??
[  145.450186][ T1207] hid-generic 0005:0006:5508.0001: item fetching failed at offset 3/5
[  146.140735][ T1207] hid-generic 0005:0006:5508.0001: probe with driver hid-generic failed with error -22
[  146.265534][ T5933] usb 1-1: USB disconnect, device number 2
[  146.330500][ T1207] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  146.356151][ T6566] loop1: detected capacity change from 0 to 2048
[  146.379997][ T1207] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  146.448891][ T6566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.603352][ T6569] fido_id[6569]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  149.315187][ T6587] syzkaller0: entered promiscuous mode
[  149.339872][ T6587] syzkaller0: entered allmulticast mode
[  149.502592][ T6589] loop3: detected capacity change from 0 to 8192
[  150.599879][ T6600] loop1: detected capacity change from 0 to 1024
[  150.674070][ T6600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.491659][   T30] audit: type=1800 audit(1770438395.652:7): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.203" name="file2" dev="loop1" ino=840 res=0 errno=0
[  151.761239][ T6609] loop1: detected capacity change from 0 to 8
[  152.443719][ T6609] SQUASHFS error: Failed to read block 0x4de: -5
[  152.465705][ T6609] SQUASHFS error: Failed to read block 0x4de: -5
[  152.486704][ T6609] SQUASHFS error: Failed to read block 0x4de: -5
[  152.618933][ T6609] SQUASHFS error: Failed to read block 0x4de: -5
[  152.625960][   T30] audit: type=1800 audit(1770438396.632:8): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.211" name="file1" dev="loop1" ino=5 res=0 errno=0
[  153.205926][ T6609] SQUASHFS error: Failed to read block 0x4de: -5
[  156.932303][ T6637] loop2: detected capacity change from 0 to 512
[  157.009859][ T6637] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.222: inode has both inline data and extents flags
[  157.139439][ T6637] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  157.148786][ T6637] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.222: couldn't read orphan inode 15 (err -117)
[  157.170154][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  157.170167][    C1] EXT4-fs (loop2): initial error at time 1770438401: ext4_orphan_get:1391: inode 15
[  157.170186][    C1] EXT4-fs (loop2): last error at time 1770438401: ext4_orphan_get:1391: inode 15
[  157.228486][ T6637] loop2: lost filesystem error report for type 5 error -117
[  157.320349][ T6637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.419593][ T6643] loop1: detected capacity change from 0 to 1024
[  157.600805][ T6643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.235297][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.409997][ T6656] loop2: detected capacity change from 0 to 1024
[  158.454112][ T6656] hfsplus: invalid length 32517 has been corrected to 255
[  158.510605][ T6656] hfsplus: invalid length 32517 has been corrected to 255
[  158.522495][ T6656] hfsplus: invalid length 32517 has been corrected to 255
[  160.074936][   T49] hfsplus: b-tree write err: -5, ino 4
[  161.514141][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.116629][ T6671] Bluetooth: MGMT ver 1.23
[  162.965979][ T6677] loop3: detected capacity change from 0 to 1024
[  163.071860][ T6677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.161517][   T30] audit: type=1800 audit(1770438407.302:9): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.221" name="file2" dev="loop3" ino=840 res=0 errno=0
[  163.505660][ T6683] syz_tun: entered allmulticast mode
[  163.547697][ T6682] syz_tun: left allmulticast mode
[  165.497687][ T6698] loop3: detected capacity change from 0 to 128
[  165.504974][ T6699] loop0: detected capacity change from 0 to 8
[  165.577936][ T6698] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  165.591843][ T6699] SQUASHFS error: Failed to read block 0x4de: -5
[  165.622280][ T6699] SQUASHFS error: Failed to read block 0x4de: -5
[  166.835468][   T30] audit: type=1800 audit(1770438410.982:10): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.239" name="file1" dev="loop0" ino=5 res=0 errno=0
[  166.921545][ T6698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.104215][ T6706] loop0: detected capacity change from 0 to 1024
[  167.488730][ T6710] loop3: detected capacity change from 0 to 1024
[  167.551924][ T6710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.614897][   T30] audit: type=1800 audit(1770438411.772:11): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.245" name="file2" dev="loop3" ino=840 res=0 errno=0
[  168.798871][ T6715] Illegal XDP return value 4294967274 on prog  (id 12) dev syz_tun, expect packet loss!
[  170.710700][ T6725] netlink: 'syz.4.250': attribute type 16 has an invalid length.
[  170.759365][ T6725] netlink: 'syz.4.250': attribute type 17 has an invalid length.
[  170.767266][ T6725] netlink: 'syz.4.250': attribute type 27 has an invalid length.
[  170.954012][ T6731] loop4: detected capacity change from 0 to 736
[  171.749598][ T6737] loop4: detected capacity change from 0 to 8
[  171.966145][ T6742] netlink: 'syz.4.254': attribute type 16 has an invalid length.
[  171.974224][ T6742] netlink: 'syz.4.254': attribute type 17 has an invalid length.
[  172.400499][ T6747] loop3: detected capacity change from 0 to 8
[  172.509362][ T6747] SQUASHFS error: lzo decompression failed, data probably corrupt
[  172.548315][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  172.560777][ T6742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.586404][ T6747] SQUASHFS error: Failed to read block 0x91: -5
[  172.610894][ T6747] SQUASHFS error: Unable to read metadata cache entry [8f]
[  172.618103][ T6747] SQUASHFS error: Unable to read inode 0x11f
[  172.768375][ T5881] usb 5-1: Using ep0 maxpacket: 32
[  173.089665][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.179856][ T6752] loop1: detected capacity change from 0 to 1024
[  173.197780][ T6754] loop0: detected capacity change from 0 to 1024
[  173.207736][ T5881] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  173.250127][ T5881] usb 5-1: config 1 has no interface number 1
[  173.280867][ T5881] usb 5-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  173.328831][ T6754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.381713][   T30] audit: type=1800 audit(1770438417.542:12): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.257" name="file2" dev="loop0" ino=840 res=0 errno=0
[  173.418911][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  173.469229][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.477373][ T5881] usb 5-1: Product: syz
[  173.497525][ T5881] usb 5-1: Manufacturer: syz
[  173.515808][ T5881] usb 5-1: SerialNumber: syz
[  174.059802][ T5881] usb 5-1: USB disconnect, device number 2
[  175.441013][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.199927][ T6773] loop4: detected capacity change from 0 to 128
[  176.256188][ T6773] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  176.351777][ T6773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.440579][ T6791] loop0: detected capacity change from 0 to 128
[  179.635056][ T6795] loop3: detected capacity change from 0 to 1024
[  179.659954][ T6791] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  179.678666][ T6791] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  179.831752][ T6795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.960799][   T30] audit: type=1800 audit(2000000005.500:13): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.269" name="file2" dev="loop3" ino=840 res=0 errno=0
[  180.414062][ T5821] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.656277][ T6799] loop3: detected capacity change from 0 to 1024
[  180.720013][ T6799] EXT4-fs: Ignoring removed orlov option
[  180.725758][ T6799] EXT4-fs: Ignoring removed bh option
[  180.773315][ T6799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.703652][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.943313][ T6829] loop1: detected capacity change from 0 to 1024
[  185.040382][ T6829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.174955][ T6829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  185.352878][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.493536][ T6839] loop0: detected capacity change from 0 to 128
[  185.521116][ T6841] loop1: detected capacity change from 0 to 1024
[  185.575154][ T6841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.665058][ T6839] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  185.670907][   T30] audit: type=1800 audit(2000000011.220:14): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.281" name="file2" dev="loop1" ino=840 res=0 errno=0
[  185.748461][ T6839] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  188.088547][ T5821] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.181534][ T6858] loop3: detected capacity change from 0 to 1024
[  188.380088][ T6860] loop2: detected capacity change from 0 to 2048
[  188.453471][ T6860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.908330][ T6860] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.503091][ T6873] loop4: detected capacity change from 0 to 512
[  191.598848][ T6873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  191.936036][ T6873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  191.946351][ T6873] System zones: 1-12
[  191.970558][ T6873] EXT4-fs (loop4): 1 truncate cleaned up
[  192.003065][ T6873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.450183][ T6832] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  193.010950][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.067187][ T6882] loop1: detected capacity change from 0 to 512
[  193.139394][ T6882] EXT4-fs: inline encryption not supported
[  193.246335][ T6882] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  193.344990][ T6890] loop4: detected capacity change from 0 to 1024
[  193.450522][   T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[  193.459697][ T6882] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.291: invalid indirect mapped block 2683928664 (level 1)
[  193.497264][ T6890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.500814][   T36] EXT4-fs (loop2): This should not happen!! Data will be lost
[  193.500814][   T36] 
[  193.520669][ T6892] Bluetooth: MGMT ver 1.23
[  193.532153][ T6892] loop3: detected capacity change from 0 to 512
[  193.539466][ T6892] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  193.598308][ T6882] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  193.599847][ T6882] EXT4-fs (loop1): 1 truncate cleaned up
[  193.609034][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  193.609046][    C1] EXT4-fs (loop1): initial error at time 2000000275: ext4_free_branches:1023: inode 13
[  193.609065][    C1] EXT4-fs (loop1): last error at time 2000000275: ext4_free_branches:1023: inode 13
[  193.696096][   T30] audit: type=1800 audit(2000000275.259:15): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.294" name="file2" dev="loop4" ino=840 res=0 errno=0
[  193.730593][ T1102] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2560 with max blocks 1143 with error 28
[  193.746160][ T1102] EXT4-fs (loop2): This should not happen!! Data will be lost
[  193.746160][ T1102] 
[  193.759273][ T6882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.773709][ T1102] EXT4-fs (loop2): Total free blocks count 0
[  193.822406][ T1102] EXT4-fs (loop2): Free/Dirty block details
[  193.836879][ T1102] EXT4-fs (loop2): free_blocks=0
[  193.847172][ T1102] EXT4-fs (loop2): dirty_blocks=1152
[  193.891220][ T6882] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.291: Invalid block bitmap block 3 in block_group 0
[  193.915189][ T1102] EXT4-fs (loop2): Block reservation details
[  193.919012][ T6894] loop3: detected capacity change from 0 to 128
[  193.944232][ T1102] EXT4-fs (loop2): i_reserved_data_blocks=72
[  193.989201][ T6894] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.011871][ T6894] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.059655][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.066019][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  194.087746][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.157176][ T6882] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.291: Invalid block bitmap block 3 in block_group 0
[  194.608359][ T6882] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.291: Invalid block bitmap block 3 in block_group 0
[  195.549901][ T5830] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.084667][ T6906] xt_CT: You must specify a L4 protocol and not use inversions on it
[  196.884055][ T5823] Bluetooth: hci0: command 0x0406 tx timeout
[  196.891515][ T5823] Bluetooth: hci1: command 0x0406 tx timeout
[  196.897550][ T5823] Bluetooth: hci2: command 0x0406 tx timeout
[  196.904688][ T5823] Bluetooth: hci3: command 0x0406 tx timeout
[  196.910982][ T6832] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  197.127599][ T6910] loop3: detected capacity change from 0 to 1024
[  197.201457][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.992163][ T6919] loop0: detected capacity change from 0 to 128
[  198.019845][ T6919] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.042332][ T6919] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.657538][ T5821] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.670586][ T6928] loop2: detected capacity change from 0 to 8
[  200.606423][ T6933] loop3: detected capacity change from 0 to 1024
[  200.639494][ T5828] Bluetooth: hci4: link tx timeout
[  200.645377][ T5828] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  200.718661][ T6933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.729446][ T6944] loop4: detected capacity change from 0 to 512
[  200.748580][ T6942] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  200.750731][ T6944] EXT4-fs: Ignoring removed bh option
[  200.856277][ T6944] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  200.874406][ T6944] EXT4-fs (loop4): 1 truncate cleaned up
[  200.885449][ T6944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.920266][   T30] audit: type=1800 audit(2000000282.489:16): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.308" name="file2" dev="loop3" ino=840 res=0 errno=0
[  201.194190][ T6949] loop0: detected capacity change from 0 to 128
[  202.925403][ T5828] Bluetooth: hci4: command 0x0406 tx timeout
[  202.978872][ T6949] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  203.027967][ T6949] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  203.763895][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.774090][ T5821] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  205.770996][ T6971] loop4: detected capacity change from 0 to 1024
[  207.726995][ T6981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  212.651104][ T7000] loop4: detected capacity change from 0 to 128
[  212.793650][ T7000] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  212.905363][ T7000] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  213.207376][ T7007] xt_CT: You must specify a L4 protocol and not use inversions on it
[  213.588308][ T5933] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  213.844981][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.879525][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.010281][ T5933] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  214.019406][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.037661][ T5933] usb 5-1: config 0 descriptor??
[  214.645499][ T5933] steelseries 0003:1038:1410.0003: missing HID_OUTPUT_REPORT 0
[  214.973301][ T7018] loop3: detected capacity change from 0 to 128
[  216.194513][ T5889] usb 5-1: USB disconnect, device number 3
[  216.249447][ T5832] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.259609][ T7018] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  216.272002][ T7018] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  216.809969][ T5830] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.824158][ T7029] loop4: detected capacity change from 0 to 256
[  216.874071][ T7029] vfat: Unknown parameter ''
[  216.886772][ T7031] loop1: detected capacity change from 0 to 8
[  220.319500][ T7062] loop4: detected capacity change from 0 to 256
[  220.351636][ T7062] exfat: Unknown parameter ''
[  221.294196][ T7063] loop4: detected capacity change from 0 to 1024
[  221.370904][ T7063] ext4: Bad value for 'max_batch_time'
[  221.578607][   T30] audit: type=1800 audit(2000000303.139:17): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.341" name="file1" dev="tmpfs" ino=401 res=0 errno=0
[  224.718313][ T5933] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  224.899516][ T5933] usb 1-1: Using ep0 maxpacket: 32
[  224.973657][ T5933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.999215][ T5933] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.020703][ T5933] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  225.058497][ T5933] usb 1-1: config 0 interface 0 has no altsetting 0
[  225.065155][ T5933] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  225.136382][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.177243][ T5933] usb 1-1: config 0 descriptor??
[  226.087997][ T5933] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x1
[  226.096017][ T5933] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x2
[  226.105609][ T5933] corsair-cpro 0003:1B1C:0C10.0004: unbalanced collection at end of report description
[  226.131555][ T5933] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -22
[  226.266171][ T7083] loop3: detected capacity change from 0 to 2048
[  226.286310][ T7083] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  226.346848][ T7083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.571476][ T7083] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  226.697092][ T7083] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  226.746724][ T7083] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  227.128616][ T5902] usb 1-1: USB disconnect, device number 3
[  229.152709][ T7109] loop0: detected capacity change from 0 to 128
[  229.227951][ T7109] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  229.955277][ T7105] loop1: detected capacity change from 0 to 2048
[  229.978709][ T7109] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  231.201768][ T7105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.471051][ T7122] xt_CT: You must specify a L4 protocol and not use inversions on it
[  231.955310][ T5821] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  232.059845][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.381770][ T7129] loop0: detected capacity change from 0 to 8
[  234.508273][ T5902] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  234.766770][ T5902] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.780605][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  234.812684][ T5902] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  234.833766][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  234.858320][ T5902] usb 3-1: SerialNumber: syz
[  235.106879][ T5902] usb 3-1: 0:2 : does not exist
[  235.327779][ T5902] usb 3-1: USB disconnect, device number 2
[  246.164396][ T7197] loop4: detected capacity change from 0 to 2048
[  246.363811][ T7197] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  249.955517][ T7219] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  255.484248][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.493820][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  256.320933][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.397'.
[  257.948772][ T7265] syzkaller0: entered promiscuous mode
[  257.954335][ T7265] syzkaller0: entered allmulticast mode
[  258.324893][ T7267] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  258.924071][ T7272] loop3: detected capacity change from 0 to 2048
[  263.162951][ T7290] loop2: detected capacity change from 0 to 512
[  263.281140][ T7290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.299240][ T7290] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.479585][ T7295] loop1: detected capacity change from 0 to 1024
[  263.491540][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.636991][ T7295] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  263.872124][ T6693] hfsplus: b-tree write err: -5, ino 4
[  265.372374][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.404'.
[  266.875788][ T7320] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  276.805649][ T7362] xt_CT: You must specify a L4 protocol and not use inversions on it
[  279.904454][ T7374] loop0: detected capacity change from 0 to 512
[  282.534736][ T7388] loop2: detected capacity change from 0 to 512
[  282.588348][ T7388] EXT4-fs: Mount option(s) incompatible with ext3
[  286.142706][ T7399] xt_CT: You must specify a L4 protocol and not use inversions on it
[  289.074164][ T7407] loop4: detected capacity change from 0 to 1024
[  292.038272][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  292.052343][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  292.070050][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  292.081026][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  292.089650][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  292.356888][ T7427] loop3: detected capacity change from 0 to 256
[  292.465592][ T7427] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  292.589004][ T7427] exFAT-fs (loop3): start_clu is invalid cluster(0x0)
[  293.338087][ T7420] chnl_net:caif_netlink_parms(): no params data found
[  293.958484][ T7440] loop3: detected capacity change from 0 to 2048
[  294.118206][ T7440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  294.421747][ T5829] Bluetooth: hci5: command tx timeout
[  294.434621][ T7439] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh
[  297.265516][ T5829] Bluetooth: hci5: command tx timeout
[  297.346105][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.030687][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.318204][ T5829] Bluetooth: hci5: command tx timeout
[  299.363375][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.411790][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.438562][ T7420] bridge_slave_0: entered allmulticast mode
[  299.461048][ T7420] bridge_slave_0: entered promiscuous mode
[  299.568919][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.648484][  T957] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  299.656850][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.674682][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.700273][ T7420] bridge_slave_1: entered allmulticast mode
[  299.737297][ T7420] bridge_slave_1: entered promiscuous mode
[  299.838232][  T957] usb 4-1: Using ep0 maxpacket: 8
[  299.860140][  T957] usb 4-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  299.898203][  T957] usb 4-1: config 0 interface 0 has no altsetting 0
[  299.929467][ T7420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.948325][  T957] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  299.961054][  T957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.995564][  T957] usb 4-1: config 0 descriptor??
[  300.066956][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.145293][ T7420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.335787][ T7420] team0: Port device team_slave_0 added
[  300.352494][ T7420] team0: Port device team_slave_1 added
[  300.426158][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.433335][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  300.564404][ T7474] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  300.580068][  T957] logitech-hidpp-device 0003:046D:C086.0005: reserved main item tag 0xe
[  301.925272][  T957] logitech-hidpp-device 0003:046D:C086.0005: hidraw0: USB HID v0.09 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0
[  301.928234][ T5829] Bluetooth: hci5: command tx timeout
[  302.929003][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.913433][ T7420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.909336][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.246322][ T7477] syz.0.462 (7477) used greatest stack depth: 16064 bytes left
[  308.833214][ T7489] syz.0.463 (7489) used greatest stack depth: 15648 bytes left
[  308.917211][ T5902] usb 4-1: USB disconnect, device number 2
[  309.188839][ T7495] loop3: detected capacity change from 0 to 128
[  310.092386][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.128435][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  311.088239][ T7420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.432143][ T7420] hsr_slave_0: entered promiscuous mode
[  311.469733][ T7420] hsr_slave_1: entered promiscuous mode
[  311.477861][ T7420] debugfs: 'hsr0' already exists in 'hsr'
[  311.508175][ T7420] Cannot create hsr debugfs directory
[  311.513893][   T13] bridge_slave_1: left allmulticast mode
[  311.572506][   T13] bridge_slave_1: left promiscuous mode
[  311.609514][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.773902][   T13] bridge_slave_0: left allmulticast mode
[  311.803006][   T13] bridge_slave_0: left promiscuous mode
[  311.809458][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.355362][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  315.371899][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  315.379607][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  315.387611][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  315.395351][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  317.542590][ T5828] Bluetooth: hci2: command tx timeout
[  317.546913][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.554766][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  319.319579][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  319.488273][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.368878][ T5828] Bluetooth: hci2: command tx timeout
[  320.482761][   T13] bond0 (unregistering): Released all slaves
[  322.440870][ T5828] Bluetooth: hci2: command tx timeout
[  324.546191][ T5828] Bluetooth: hci2: command tx timeout
[  324.982773][ T7572] loop2: detected capacity change from 0 to 1024
[  325.889291][ T7572] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  325.919211][   T13] hsr_slave_0: left promiscuous mode
[  325.941747][   T13] hsr_slave_1: left promiscuous mode
[  325.958631][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.966147][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.071237][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.090814][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.496751][   T13] veth1_macvtap: left promiscuous mode
[  327.502537][   T13] veth0_macvtap: left promiscuous mode
[  327.508175][   T13] veth1_vlan: left promiscuous mode
[  327.513528][   T13] veth0_vlan: left promiscuous mode
[  334.731708][ T7420] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  334.799977][ T7420] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  334.852016][ T7616] loop2: detected capacity change from 0 to 256
[  334.868704][ T7420] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  334.944084][ T7420] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  335.031187][ T7523] chnl_net:caif_netlink_parms(): no params data found
[  335.069847][ T5825] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  335.119759][ T5825] FAT-fs (loop2): Filesystem has been set read-only
[  335.149112][ T5825] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  335.920715][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.220480][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  337.245009][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  337.258396][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  337.268558][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  337.277820][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  337.296944][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.338671][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.345990][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.369332][ T7523] bridge_slave_0: entered allmulticast mode
[  337.398069][ T7523] bridge_slave_0: entered promiscuous mode
[  337.452450][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.464235][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.473871][ T7523] bridge_slave_1: entered allmulticast mode
[  337.482933][ T7523] bridge_slave_1: entered promiscuous mode
[  337.568518][ T7658] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  337.619840][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.957369][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.012854][ T7523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.893555][ T7523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.104067][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.151717][ T7523] team0: Port device team_slave_0 added
[  339.254567][ T7523] team0: Port device team_slave_1 added
[  339.398500][ T5829] Bluetooth: hci1: command tx timeout
[  339.423642][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.440457][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.494820][ T7523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.551180][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.568309][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.628200][ T7523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.768934][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.158864][ T7420] 8021q: adding VLAN 0 to HW filter on device team0
[  341.175649][ T7523] hsr_slave_0: entered promiscuous mode
[  341.190894][ T7523] hsr_slave_1: entered promiscuous mode
[  341.197571][ T7523] debugfs: 'hsr0' already exists in 'hsr'
[  341.218225][ T7523] Cannot create hsr debugfs directory
[  341.249682][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.348378][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  341.369399][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.376572][ T7695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.457972][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.465178][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.478350][ T5829] Bluetooth: hci1: command tx timeout
[  341.520411][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.558796][ T5888] usb 4-1: Using ep0 maxpacket: 16
[  341.568921][ T5888] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  341.578068][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.596251][ T5888] usb 4-1: Product: syz
[  341.609117][ T5888] usb 4-1: Manufacturer: syz
[  341.613839][ T5888] usb 4-1: SerialNumber: syz
[  341.645981][ T5888] r8152-cfgselector 4-1: Unknown version 0x0000
[  341.656463][ T5888] r8152-cfgselector 4-1: config 0 descriptor??
[  341.662999][ T7653] chnl_net:caif_netlink_parms(): no params data found
[  341.749388][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.112742][ T5888] r8152-cfgselector 4-1: USB disconnect, device number 3
[  342.236915][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.247605][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.255296][ T7653] bridge_slave_0: entered allmulticast mode
[  342.265102][ T7653] bridge_slave_0: entered promiscuous mode
[  342.291596][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.303604][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.311808][ T7653] bridge_slave_1: entered allmulticast mode
[  342.320717][ T7653] bridge_slave_1: entered promiscuous mode
[  343.593827][ T5829] Bluetooth: hci1: command tx timeout
[  343.797172][ T7653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.821545][ T7653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.896308][   T13] bridge_slave_1: left allmulticast mode
[  343.904021][   T13] bridge_slave_1: left promiscuous mode
[  343.910675][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.932524][   T13] bridge_slave_0: left allmulticast mode
[  343.978301][   T13] bridge_slave_0: left promiscuous mode
[  343.985188][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.021233][   T13] bridge_slave_1: left allmulticast mode
[  344.026925][   T13] bridge_slave_1: left promiscuous mode
[  345.249503][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.320310][   T13] bridge_slave_0: left allmulticast mode
[  345.326010][   T13] bridge_slave_0: left promiscuous mode
[  345.348426][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.599119][ T7739] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  345.668345][ T5829] Bluetooth: hci1: command tx timeout
[  345.935895][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.978922][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  346.002673][   T13] bond0 (unregistering): Released all slaves
[  347.854528][ T7751] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10
[  348.024565][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.045093][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.057823][   T13] bond0 (unregistering): Released all slaves
[  348.072347][ T7523] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  348.094968][ T7653] team0: Port device team_slave_0 added
[  348.123647][ T7653] team0: Port device team_slave_1 added
[  348.256967][ T7523] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  348.350374][ T7523] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  348.391907][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.408217][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.458412][ T7653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.503385][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.529957][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.558811][ T7653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.577438][ T7523] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  349.399058][ T7653] hsr_slave_0: entered promiscuous mode
[  349.487402][ T7653] hsr_slave_1: entered promiscuous mode
[  349.513443][ T7653] debugfs: 'hsr0' already exists in 'hsr'
[  349.519300][ T7653] Cannot create hsr debugfs directory
[  349.751345][ T7420] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.172207][ T7784] loop3: detected capacity change from 0 to 2048
[  351.272443][ T7784] loop3: detected capacity change from 0 to 512
[  352.859660][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  352.874266][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  352.884292][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  352.898388][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  352.905424][   T13] hsr_slave_0: left promiscuous mode
[  352.911625][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  352.947276][   T13] hsr_slave_1: left promiscuous mode
[  352.955868][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.963791][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.019702][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.027123][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.088750][   T13] hsr_slave_0: left promiscuous mode
[  353.119257][   T13] hsr_slave_1: left promiscuous mode
[  353.138205][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.145617][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.188555][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.195976][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.266955][   T13] veth1_macvtap: left promiscuous mode
[  353.288976][   T13] veth0_macvtap: left promiscuous mode
[  353.294586][   T13] veth1_vlan: left promiscuous mode
[  353.308383][   T13] veth0_vlan: left promiscuous mode
[  353.333469][   T13] veth1_macvtap: left promiscuous mode
[  353.339128][   T13] veth0_macvtap: left promiscuous mode
[  353.348945][   T13] veth1_vlan: left promiscuous mode
[  353.354236][   T13] veth0_vlan: left promiscuous mode
[  354.614358][ T7805] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  354.999073][ T5828] Bluetooth: hci4: command tx timeout
[  355.095644][   T13] team0 (unregistering): Port device team_slave_1 removed
[  355.180504][   T13] team0 (unregistering): Port device team_slave_0 removed
[  355.758185][ T7817] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  357.005273][   T13] team0 (unregistering): Port device team_slave_1 removed
[  357.034738][   T13] team0 (unregistering): Port device team_slave_0 removed
[  357.080392][ T5828] Bluetooth: hci4: command tx timeout
[  357.686129][ T7523] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.917253][ T7523] 8021q: adding VLAN 0 to HW filter on device team0
[  357.980307][ T7653] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  358.059860][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.067053][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.118149][ T7653] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  358.173750][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.180946][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.222715][ T7653] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  358.244223][ T7653] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  358.282348][ T7832] loop0: detected capacity change from 0 to 2048
[  358.362419][ T7832] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  358.468371][ T7832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  358.527809][ T7823] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  358.864258][ T7790] chnl_net:caif_netlink_parms(): no params data found
[  360.099978][ T5828] Bluetooth: hci4: command tx timeout
[  362.031119][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.048779][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.056076][ T7790] bridge_slave_0: entered allmulticast mode
[  362.098266][ T7790] bridge_slave_0: entered promiscuous mode
[  362.118410][ T5829] Bluetooth: hci4: command tx timeout
[  362.129880][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.137231][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.188563][ T7790] bridge_slave_1: entered allmulticast mode
[  362.196998][ T7790] bridge_slave_1: entered promiscuous mode
[  362.261472][ T7523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.582775][ T7653] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.602486][ T7790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.619787][ T7790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.681031][ T7892] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  362.908721][ T7790] team0: Port device team_slave_0 added
[  362.919832][ T7790] team0: Port device team_slave_1 added
[  363.235159][ T3519] bridge_slave_1: left allmulticast mode
[  363.256378][ T3519] bridge_slave_1: left promiscuous mode
[  363.299181][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.483274][ T3519] bridge_slave_0: left allmulticast mode
[  364.509071][ T3519] bridge_slave_0: left promiscuous mode
[  364.515513][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.060887][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.077887][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.120311][ T3519] bond0 (unregistering): Released all slaves
[  365.147497][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.155323][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.182469][ T7790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.229690][ T7653] 8021q: adding VLAN 0 to HW filter on device team0
[  365.243297][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.258174][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.284516][ T7790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.392382][ T3519] hsr_slave_0: left promiscuous mode
[  365.438797][ T3519] hsr_slave_1: left promiscuous mode
[  365.471693][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.488979][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.540363][ T3519] team0 (unregistering): Port device team_slave_1 removed
[  366.606789][ T3519] team0 (unregistering): Port device team_slave_0 removed
[  368.640224][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.647393][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.671673][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.678793][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.785295][ T7790] hsr_slave_0: entered promiscuous mode
[  368.792911][ T7790] hsr_slave_1: entered promiscuous mode
[  369.150686][ T7940] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  369.458462][ T7523] veth0_vlan: entered promiscuous mode
[  369.625666][ T7523] veth1_vlan: entered promiscuous mode
[  369.931737][ T7523] veth0_macvtap: entered promiscuous mode
[  369.975563][ T7523] veth1_macvtap: entered promiscuous mode
[  370.105360][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.145349][ T7653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.190950][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.237716][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.298219][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.306970][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.371894][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.574720][ T7790] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  371.608631][ T7790] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  371.621279][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.711247][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.104128][ T7790] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  372.162410][ T7790] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  373.540584][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.570426][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.844141][ T7653] veth0_vlan: entered promiscuous mode
[  373.940585][ T7653] veth1_vlan: entered promiscuous mode
[  374.103144][ T7653] veth0_macvtap: entered promiscuous mode
[  374.146770][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.169919][ T8000] loop6: detected capacity change from 0 to 8192
[  374.181699][ T7653] veth1_macvtap: entered promiscuous mode
[  374.220089][ T8000] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  374.285856][ T7790] 8021q: adding VLAN 0 to HW filter on device team0
[  374.602915][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.610084][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.690092][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.697295][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.797090][ T7653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.875646][ T7653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.954721][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.088160][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.119298][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.135956][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.641648][ T7695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.718640][ T7695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.835318][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.844370][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  375.878283][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.959097][ T5933] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  376.156883][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  376.217722][ T5933] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  376.353634][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.698162][ T5933] usb 7-1: config 0 descriptor??
[  376.705406][ T8022] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  377.309385][ T7790] veth0_vlan: entered promiscuous mode
[  377.433320][ T7790] veth1_vlan: entered promiscuous mode
[  377.785209][ T5933] usbhid 7-1:0.0: can't add hid device: -71
[  377.794681][ T5933] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  378.343834][ T7790] veth0_macvtap: entered promiscuous mode
[  378.363779][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  378.370667][ T7790] veth1_macvtap: entered promiscuous mode
[  378.381421][ T8049] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  378.383271][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  379.851314][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  379.866200][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.899625][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.939613][ T5933] usb 7-1: USB disconnect, device number 2
[  379.972580][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.028190][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.011234][ T3464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.544199][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.568669][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.759207][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.767066][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.754305][ T8088] loop3: detected capacity change from 0 to 2048
[  385.470441][ T8088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  387.572858][ T8106] loop0: detected capacity change from 0 to 256
[  388.268125][ T5881] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  388.276815][ T8111] syzkaller0: entered promiscuous mode
[  388.296252][ T8111] syzkaller0: entered allmulticast mode
[  388.449972][ T5881] usb 1-1: config 0 has no interfaces?
[  388.455642][ T5881] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  388.489116][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.521585][ T5881] usb 1-1: config 0 descriptor??
[  388.730398][ T5933] usb 1-1: USB disconnect, device number 4
[  389.067244][ T8127] netlink: 32 bytes leftover after parsing attributes in process `syz.5.556'.
[  390.873383][ T8131] loop3: detected capacity change from 0 to 32768
[  390.904215][ T8131] (syz.3.558,8131,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  390.977367][ T8131] (syz.3.558,8131,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  391.074338][ T8131] JBD2: Ignoring recovery information on journal
[  391.202244][ T8131] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  392.684183][ T8131] 
[  392.686561][ T8131] ======================================================
[  392.693658][ T8131] WARNING: possible circular locking dependency detected
[  392.700675][ T8131] syzkaller #0 Not tainted
[  392.705083][ T8131] ------------------------------------------------------
[  392.712102][ T8131] syz.3.558/8131 is trying to acquire lock:
[  392.718000][ T8131] ffff888067e0a610 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_simple_size_update+0xd6/0x4a0
[  392.727785][ T8131] 
[  392.727785][ T8131] but task is already holding lock:
[  392.735162][ T8131] ffff888082d1cda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_create_local_dquot+0x1a5/0x1af0
[  392.746514][ T8131] 
[  392.746514][ T8131] which lock already depends on the new lock.
[  392.746514][ T8131] 
[  392.756954][ T8131] 
[  392.756954][ T8131] the existing dependency chain (in reverse order) is:
[  392.765968][ T8131] 
[  392.765968][ T8131] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  392.774836][ T8131]        down_write+0x96/0x200
[  392.779622][ T8131]        ocfs2_lock_global_qf+0x201/0x290
[  392.785356][ T8131]        ocfs2_acquire_dquot+0x3fa/0xb30
[  392.791003][ T8131]        dqget+0x7b1/0xf10
[  392.795423][ T8131]        __dquot_initialize+0x3ba/0xd30
[  392.800982][ T8131]        ocfs2_get_init_inode+0x147/0x1c0
[  392.806709][ T8131]        ocfs2_mknod+0xa67/0x2290
[  392.811749][ T8131]        ocfs2_create+0x195/0x490
[  392.816780][ T8131]        path_openat+0x1395/0x3860
[  392.821890][ T8131]        do_file_open+0x23e/0x4a0
[  392.826917][ T8131]        do_sys_openat2+0x113/0x200
[  392.832128][ T8131]        __x64_sys_open+0x11e/0x150
[  392.837335][ T8131]        do_syscall_64+0x14d/0xf80
[  392.842452][ T8131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.848864][ T8131] 
[  392.848864][ T8131] -> #2 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}:
[  392.859374][ T8131]        down_write+0x96/0x200
[  392.864144][ T8131]        ocfs2_lock_global_qf+0x1da/0x290
[  392.869875][ T8131]        ocfs2_acquire_dquot+0x3fa/0xb30
[  392.875539][ T8131]        dqget+0x7b1/0xf10
[  392.879963][ T8131]        __dquot_initialize+0x3ba/0xd30
[  392.885509][ T8131]        ocfs2_get_init_inode+0x147/0x1c0
[  392.891233][ T8131]        ocfs2_mknod+0xa67/0x2290
[  392.896262][ T8131]        ocfs2_create+0x195/0x490
[  392.901288][ T8131]        path_openat+0x1395/0x3860
[  392.906398][ T8131]        do_file_open+0x23e/0x4a0
[  392.911424][ T8131]        do_sys_openat2+0x113/0x200
[  392.916630][ T8131]        __x64_sys_open+0x11e/0x150
[  392.921837][ T8131]        do_syscall_64+0x14d/0xf80
[  392.926953][ T8131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.933367][ T8131] 
[  392.933367][ T8131] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  392.941928][ T8131]        down_read+0x47/0x2e0
[  392.946625][ T8131]        ocfs2_start_trans+0x3ab/0x700
[  392.952089][ T8131]        ocfs2_modify_bh+0xe3/0x4d0
[  392.957292][ T8131]        ocfs2_local_read_info+0x1454/0x1810
[  392.963282][ T8131]        dquot_load_quota_sb+0x791/0xbd0
[  392.968926][ T8131]        dquot_load_quota_inode+0x2e1/0x5d0
[  392.974819][ T8131]        ocfs2_enable_quotas+0x1c8/0x4a0
[  392.980461][ T8131]        ocfs2_fill_super+0x5305/0x6900
[  392.986008][ T8131]        get_tree_bdev_flags+0x431/0x4f0
[  392.991645][ T8131]        vfs_get_tree+0x92/0x2a0
[  392.996614][ T8131]        do_new_mount+0x341/0xd30
[  393.001662][ T8131]        __se_sys_mount+0x31d/0x420
[  393.006872][ T8131]        do_syscall_64+0x14d/0xf80
[  393.011996][ T8131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.018431][ T8131] 
[  393.018431][ T8131] -> #0 (sb_internal#3){.+.+}-{0:0}:
[  393.025915][ T8131]        __lock_acquire+0x15a5/0x2cf0
[  393.031315][ T8131]        lock_acquire+0xf0/0x2e0
[  393.036259][ T8131]        ocfs2_start_trans+0x2ac/0x700
[  393.041725][ T8131]        ocfs2_simple_size_update+0xd6/0x4a0
[  393.047711][ T8131]        ocfs2_create_local_dquot+0x70d/0x1af0
[  393.053873][ T8131]        ocfs2_acquire_dquot+0x6d7/0xb30
[  393.059533][ T8131]        dqget+0x7b1/0xf10
[  393.063967][ T8131]        __dquot_initialize+0x3ba/0xd30
[  393.069515][ T8131]        ocfs2_get_init_inode+0x147/0x1c0
[  393.075238][ T8131]        ocfs2_mknod+0xa67/0x2290
[  393.080268][ T8131]        ocfs2_create+0x195/0x490
[  393.085296][ T8131]        path_openat+0x1395/0x3860
[  393.090413][ T8131]        do_file_open+0x23e/0x4a0
[  393.095440][ T8131]        do_sys_openat2+0x113/0x200
[  393.100680][ T8131]        __x64_sys_open+0x11e/0x150
[  393.105889][ T8131]        do_syscall_64+0x14d/0xf80
[  393.111010][ T8131]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.117424][ T8131] 
[  393.117424][ T8131] other info that might help us debug this:
[  393.117424][ T8131] 
[  393.127648][ T8131] Chain exists of:
[  393.127648][ T8131]   sb_internal#3 --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key
[  393.127648][ T8131] 
[  393.144599][ T8131]  Possible unsafe locking scenario:
[  393.144599][ T8131] 
[  393.152048][ T8131]        CPU0                    CPU1
[  393.157423][ T8131]        ----                    ----
[  393.162790][ T8131]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  393.168434][ T8131]                                lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]);
[  393.178247][ T8131]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  393.186405][ T8131]   rlock(sb_internal#3);
[  393.190790][ T8131] 
[  393.190790][ T8131]  *** DEADLOCK ***
[  393.190790][ T8131] 
[  393.198932][ T8131] 5 locks held by syz.3.558/8131:
[  393.203972][ T8131]  #0: ffff888067e0a420 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  393.213211][ T8131]  #1: ffff88803ae63480 (&type->i_mutex_dir_key#14){+.+.}-{4:4}, at: path_openat+0xb4c/0x3860
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  393.223495][ T8131]  #2: ffff88803ae69800 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  393.237246][ T8131]  #3: ffff88803afef6a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x271/0xb30
[  393.247262][ T8131]  #4: ffff888082d1cda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_create_local_dquot+0x1a5/0x1af0
[  393.259031][ T8131] 
[  393.259031][ T8131] stack backtrace:
[  393.264963][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz.3.558 Not tainted syzkaller #0 PREEMPT(full) 
[  393.264980][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  393.264995][ T8131] Call Trace:
[  393.265003][ T8131]  <TASK>
[  393.265010][ T8131]  dump_stack_lvl+0xe8/0x150
[  393.265032][ T8131]  print_circular_bug+0x2e1/0x300
[  393.265056][ T8131]  check_noncircular+0x12e/0x150
[  393.265080][ T8131]  __lock_acquire+0x15a5/0x2cf0
[  393.265107][ T8131]  lock_acquire+0xf0/0x2e0
[  393.265124][ T8131]  ? ocfs2_simple_size_update+0xd6/0x4a0
[  393.265144][ T8131]  ocfs2_start_trans+0x2ac/0x700
[  393.265164][ T8131]  ? ocfs2_simple_size_update+0xd6/0x4a0
[  393.265181][ T8131]  ? __pfx_ocfs2_start_trans+0x10/0x10
[  393.265206][ T8131]  ocfs2_simple_size_update+0xd6/0x4a0
[  393.265223][ T8131]  ? __pfx_ocfs2_simple_size_update+0x10/0x10
[  393.265237][ T8131]  ? down_write+0x16d/0x200
[  393.265257][ T8131]  ? __pfx_down_write+0x10/0x10
[  393.265280][ T8131]  ocfs2_create_local_dquot+0x70d/0x1af0
[  393.265305][ T8131]  ? __pfx_ocfs2_create_local_dquot+0x10/0x10
[  393.265323][ T8131]  ? kasan_quarantine_put+0xbb/0x1f0
[  393.265337][ T8131]  ? lockdep_hardirqs_on+0x7a/0x110
[  393.265355][ T8131]  ? kmem_cache_free+0x187/0x630
[  393.265370][ T8131]  ? jbd2_journal_stop+0x8dd/0xda0
[  393.265395][ T8131]  ? __up_read+0x291/0x6b0
[  393.265412][ T8131]  ? sb_end_intwrite+0xe9/0x1c0
[  393.265432][ T8131]  ? ocfs2_commit_trans+0x133/0x250
[  393.265453][ T8131]  ? __pfx_ocfs2_commit_trans+0x10/0x10
[  393.265475][ T8131]  ? do_raw_spin_unlock+0xf5/0x210
[  393.265494][ T8131]  ocfs2_acquire_dquot+0x6d7/0xb30
[  393.265519][ T8131]  ? __pfx_ocfs2_acquire_dquot+0x10/0x10
[  393.265543][ T8131]  dqget+0x7b1/0xf10
[  393.265561][ T8131]  __dquot_initialize+0x3ba/0xd30
[  393.265579][ T8131]  ? __pfx___dquot_initialize+0x10/0x10
[  393.265594][ T8131]  ? do_raw_spin_unlock+0xf5/0x210
[  393.265607][ T8131]  ? from_vfsgid+0x72/0xa0
[  393.265622][ T8131]  ? inode_init_owner+0x1ed/0x390
[  393.265639][ T8131]  ocfs2_get_init_inode+0x147/0x1c0
[  393.265656][ T8131]  ? __pfx_ocfs2_get_init_inode+0x10/0x10
[  393.265676][ T8131]  ocfs2_mknod+0xa67/0x2290
[  393.265698][ T8131]  ? __pfx_ocfs2_mknod+0x10/0x10
[  393.265715][ T8131]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  393.265737][ T8131]  ? ocfs2_inode_lock_full_nested+0xaec/0x1bd0
[  393.265762][ T8131]  ? look_up_lock_class+0x57/0x110
[  393.265781][ T8131]  ? __lock_acquire+0x6b5/0x2cf0
[  393.265799][ T8131]  ? ocfs2_inode_lock_full_nested+0xaec/0x1bd0
[  393.265819][ T8131]  ? __lock_acquire+0x6b5/0x2cf0
[  393.265838][ T8131]  ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10
[  393.265862][ T8131]  ? do_raw_spin_lock+0x12b/0x2f0
[  393.265879][ T8131]  ? do_raw_spin_unlock+0xf5/0x210
[  393.265893][ T8131]  ? _raw_spin_unlock+0x28/0x50
[  393.265908][ T8131]  ? rcu_is_watching+0x15/0xb0
[  393.265927][ T8131]  ? ocfs2_lookup+0x5e1/0xa50
[  393.265943][ T8131]  ? __pfx_apparmor_path_mknod+0x10/0x10
[  393.265961][ T8131]  ocfs2_create+0x195/0x490
[  393.265977][ T8131]  ? __pfx_ocfs2_lookup+0x10/0x10
[  393.265994][ T8131]  ? __pfx_ocfs2_create+0x10/0x10
[  393.266010][ T8131]  ? bpf_lsm_inode_permission+0x9/0x20
[  393.266024][ T8131]  ? security_inode_permission+0xb7/0x2e0
[  393.266040][ T8131]  ? may_o_create+0x2d2/0x370
[  393.266054][ T8131]  ? bpf_lsm_inode_create+0x9/0x20
[  393.266068][ T8131]  ? __pfx_ocfs2_create+0x10/0x10
[  393.266084][ T8131]  path_openat+0x1395/0x3860
[  393.266110][ T8131]  ? __pfx_path_openat+0x10/0x10
[  393.266123][ T8131]  ? __x64_sys_open+0x11e/0x150
[  393.266145][ T8131]  ? __lock_acquire+0x6b5/0x2cf0
[  393.266165][ T8131]  do_file_open+0x23e/0x4a0
[  393.266181][ T8131]  ? __pfx_do_file_open+0x10/0x10
[  393.266203][ T8131]  ? _raw_spin_unlock+0x28/0x50
[  393.266216][ T8131]  ? alloc_fd+0x64b/0x6c0
[  393.266238][ T8131]  do_sys_openat2+0x113/0x200
[  393.266258][ T8131]  ? __se_sys_futex+0x3a8/0x450
[  393.266276][ T8131]  ? __pfx_do_sys_openat2+0x10/0x10
[  393.266297][ T8131]  ? rcu_is_watching+0x15/0xb0
[  393.266318][ T8131]  __x64_sys_open+0x11e/0x150
[  393.266339][ T8131]  do_syscall_64+0x14d/0xf80
[  393.266356][ T8131]  ? trace_irq_disable+0x3b/0x150
[  393.266376][ T8131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.266390][ T8131]  ? clear_bhb_loop+0x40/0x90
[  393.266406][ T8131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.266424][ T8131] RIP: 0033:0x7f729cf9aeb9
[  393.266441][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  393.266453][ T8131] RSP: 002b:00007f729df21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  393.266468][ T8131] RAX: ffffffffffffffda RBX: 00007f729d215fa0 RCX: 00007f729cf9aeb9
[  393.266478][ T8131] RDX: 0000000000000000 RSI: 0000000000147c7c RDI: 00002000000000c0
[  393.266491][ T8131] RBP: 00007f729d008c1f R08: 0000000000000000 R09: 0000000000000000
[  393.266500][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.266508][ T8131] R13: 00007f729d216038 R14: 00007f729d215fa0 R15: 00007fffcf6b5a88
[  393.266524][ T8131]  </TASK>
[  394.219455][   T30] audit: type=1800 audit(2000000517.790:18): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.558" name="bus" dev="loop3" ino=16978 res=0 errno=0
[  395.021603][ T8127] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  395.031022][ T8127] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  395.041222][ T8127] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  395.075349][   T30] audit: type=1800 audit(2000000518.590:19): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.556" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  395.383783][ T6693] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.542060][ T8131] ocfs2: Unmounting device (7,3) on (node local)
[  395.566178][ T6693] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.643894][ T6693] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.731960][ T6693] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.825703][ T6693] bridge_slave_1: left allmulticast mode
[  395.833389][ T6693] bridge_slave_1: left promiscuous mode
[  395.841379][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.850056][ T6693] bridge_slave_0: left allmulticast mode
[  395.856354][ T6693] bridge_slave_0: left promiscuous mode
[  395.862673][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.966705][ T6693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  395.976603][ T6693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  395.986038][ T6693] bond0 (unregistering): Released all slaves
[  396.197956][ T6693] hsr_slave_0: left promiscuous mode
[  396.205568][ T6693] hsr_slave_1: left promiscuous mode
[  396.213272][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.222648][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  396.230984][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.238442][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.252049][ T6693] veth1_macvtap: left promiscuous mode
[  396.257550][ T6693] veth0_macvtap: left promiscuous mode
[  396.263956][ T6693] veth1_vlan: left promiscuous mode
[  396.269562][ T6693] veth0_vlan: left promiscuous mode
[  396.389582][ T6693] team0 (unregistering): Port device team_slave_1 removed
[  396.407387][ T6693] team0 (unregistering): Port device team_slave_0 removed
[  396.784450][ T6693] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.850472][ T6693] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.903711][ T6693] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.937144][ T6693] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.024257][ T6693] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.094162][ T6693] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.133704][ T6693] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.186946][ T6693] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.296968][ T6693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.384135][ T6693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.433131][ T6693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.505152][ T6693] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.611060][ T6693] bridge_slave_1: left allmulticast mode
[  397.616777][ T6693] bridge_slave_1: left promiscuous mode
[  397.622806][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.631051][ T6693] bridge_slave_0: left allmulticast mode
[  397.636699][ T6693] bridge_slave_0: left promiscuous mode
[  397.644520][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.653368][ T6693] bridge_slave_1: left allmulticast mode
[  397.659385][ T6693] bridge_slave_1: left promiscuous mode
[  397.665371][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.674058][ T6693] bridge_slave_0: left allmulticast mode
[  397.679828][ T6693] bridge_slave_0: left promiscuous mode
[  397.685445][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.694621][ T6693] bridge_slave_1: left allmulticast mode
[  397.700648][ T6693] bridge_slave_1: left promiscuous mode
[  397.706472][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.714513][ T6693] bridge_slave_0: left allmulticast mode
[  397.720722][ T6693] bridge_slave_0: left promiscuous mode
[  397.726381][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.820508][ T6693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.830393][ T6693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.839959][ T6693] bond0 (unregistering): Released all slaves
[  397.921378][ T6693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.931450][ T6693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.940939][ T6693] bond0 (unregistering): Released all slaves
[  398.023633][ T6693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  398.033984][ T6693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  398.043710][ T6693] bond0 (unregistering): Released all slaves
[  398.512205][ T6693] hsr_slave_0: left promiscuous mode
[  398.518894][ T6693] hsr_slave_1: left promiscuous mode
[  398.524648][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.532167][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.542523][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.549982][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.561370][ T6693] hsr_slave_0: left promiscuous mode
[  398.567345][ T6693] hsr_slave_1: left promiscuous mode
[  398.574151][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.581650][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.590337][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.597745][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.611558][ T6693] hsr_slave_0: left promiscuous mode
[  398.617485][ T6693] hsr_slave_1: left promiscuous mode
[  398.623989][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.631688][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.639628][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.647046][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.663425][ T6693] veth1_macvtap: left promiscuous mode
[  398.669558][ T6693] veth0_macvtap: left promiscuous mode
[  398.675189][ T6693] veth1_vlan: left promiscuous mode
[  398.681520][ T6693] veth0_vlan: left promiscuous mode
[  398.687579][ T6693] veth1_macvtap: left promiscuous mode
[  398.693400][ T6693] veth0_macvtap: left promiscuous mode
[  398.700062][ T6693] veth1_vlan: left promiscuous mode
[  398.705329][ T6693] veth0_vlan: left promiscuous mode
[  398.711726][ T6693] veth1_macvtap: left promiscuous mode
[  398.717229][ T6693] veth0_macvtap: left promiscuous mode
[  398.723490][ T6693] veth1_vlan: left promiscuous mode
[  398.729090][ T6693] veth0_vlan: left promiscuous mode
[  398.906122][ T6693] team0 (unregistering): Port device team_slave_1 removed
[  398.926408][ T6693] team0 (unregistering): Port device team_slave_0 removed
[  399.065034][ T6693] team0 (unregistering): Port device team_slave_1 removed
[  399.087504][ T6693] team0 (unregistering): Port device team_slave_0 removed
[  399.225026][ T6693] team0 (unregistering): Port device team_slave_1 removed
[  399.245769][ T6693] team0 (unregistering): Port device team_slave_0 removed