last executing test programs:

28.680815425s ago: executing program 3 (id=92):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db2870905"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0x1}, 0x28)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

25.431995066s ago: executing program 3 (id=100):
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x20010, 0xffffffffffffffff, 0xf8b2f000)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc)

24.000729851s ago: executing program 3 (id=102):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x40000012})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x3], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f})

23.817095556s ago: executing program 3 (id=103):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4010, &(0x7f0000000400)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@stripe={'stripe', 0x3d, 0x9}}, {@data_ordered}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

22.245758522s ago: executing program 3 (id=110):
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x40880)
r2 = syz_pidfd_open(r0, 0x0)
setns(r2, 0x20000)

21.52050663s ago: executing program 3 (id=112):
accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, 0x0, 0x8000)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000001c0)={@multicast1, @multicast2, 0x1, "be2326f7df4ee26e083c2d10cde39b4481cb2af1f0c67854c9cb53bcb0fa5ad7", 0x9, 0x7fff, 0x400, 0xfffffffc}, 0x3c)

20.299550988s ago: executing program 32 (id=112):
accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, 0x0, 0x8000)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000001c0)={@multicast1, @multicast2, 0x1, "be2326f7df4ee26e083c2d10cde39b4481cb2af1f0c67854c9cb53bcb0fa5ad7", 0x9, 0x7fff, 0x400, 0xfffffffc}, 0x3c)

12.773829543s ago: executing program 0 (id=132):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x12)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000))

12.660219122s ago: executing program 0 (id=133):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

11.613627886s ago: executing program 0 (id=135):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
r5 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil)
shmctl$IPC_INFO(r5, 0x3, 0x0)
read$FUSE(r0, 0x0, 0x0)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x30, 0x4, 0x5}})

9.109877198s ago: executing program 1 (id=138):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x1)
syz_open_dev$sndctrl(0x0, 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

7.821174171s ago: executing program 0 (id=140):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x40045b0a, &(0x7f0000000040))

7.633774246s ago: executing program 2 (id=141):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @multicast})

7.46254072s ago: executing program 2 (id=142):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x803, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r6, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x30}}, 0x2)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r7)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, 0x0)

6.445625981s ago: executing program 2 (id=143):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f00000003c0)="d4d710980606433d42941c7b962d638a84d9b147d6552e817dc3baa559cf0a0201bf8925e0eb15cc0d6c96101c337e6c759f1624bad71b704c28ee00ac16c47ddcc5cb5d97c5dd5db7eb0d75042c750aa2c0d3979dca85e9864177b533b761e70b002d272c8332c1e1de0dc99f35f4d0e397d24c3d9b6523091d5c8efd12bc0a23f4174d1ba268fa0f8b7ddb05ce23f020fce07b612560ef4a8a06952e8ba83bef51095af1b6c94fd25cbff6b2313eff99a8175f44e15785218a", &(0x7f0000000180)=""/120}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x6}}, @RTA_VIA={0x14, 0x12, {0x1e, "5d87700c6849edc9248e44676f28"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r5, 0x4b52, &(0x7f0000000900)="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")

6.385673006s ago: executing program 1 (id=144):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@appraise}, {@fowner_eq}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x2, 0xfffffffc, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb}}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x40)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.931245053s ago: executing program 1 (id=145):
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0)
pipe(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x70bd2a, 0x0, {0x5}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40)
r4 = syz_clone(0x12000, &(0x7f0000000880)="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", 0x5e0, 0x0, 0x0, &(0x7f0000000200))
prctl$PR_SET_PTRACER(0x59616d61, r4)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r1, 0xffffffffffffffff, 0x0)

4.606778639s ago: executing program 0 (id=146):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04360702aaaaaaaaaa10206b161c2a858d646e9ec73e7435dcc42a1ae4959a94240fbe34d60f79f99da9b5b3ed61b20a24e9c5fe00dbef2755435cc99803a232"], 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
open(0x0, 0xa942, 0x0)
syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0)

4.189981563s ago: executing program 1 (id=147):
dup(0xffffffffffffffff)
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x840000000002, 0x3, 0xff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000000)="a058b776e7315b35ac0005f527104cb204c99bf2fc326394941e82e7a2e8d883a5f71a8ef39a458e253b9657efb842a1ad35b878d6c892e77b76a0f3b703fea78f2dd6e9e16dc4fc66257228d0e3f53f2a8092d4bc1e035900b843d950ec760308bec03c21be314b7867a721df6458bb813b7319", 0x74}, {0x0, 0x20}, {0x0}], 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x20000003, 0x1, 0xffffffffffffffff, 0x20}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)

2.901705646s ago: executing program 2 (id=148):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = syz_io_uring_setup(0xa0, &(0x7f0000000480)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1.86473406s ago: executing program 2 (id=149):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x371, &(0x7f0000001280)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[], 0x118)

1.557517304s ago: executing program 0 (id=150):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES16], 0x1, 0x5e97, &(0x7f0000005e00)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d)
symlink(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x0)
open$dir(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101840, 0x101)
creat(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x32)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

960.401732ms ago: executing program 1 (id=151):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0)

843.080771ms ago: executing program 4 (id=113):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r5, r4}}, 0x18)

524.770747ms ago: executing program 4 (id=152):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x20, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={0x10, 0x0, 0x3}, 0x0, 0x0, 0x0})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x3)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCGFLAGS1(r1, 0x40047457, &(0x7f00000019c0))

5.734579ms ago: executing program 2 (id=153):
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/partitions\x00', 0x0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x10400, 0x0, 0xfb, 0x0, &(0x7f0000000000))
mount(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,\xfc\xb5%o\x85\x9b\xe1F\xe8*X\xe7\x84\xcc\xfd\xec\xcd\xbe\x9d3\x1a\x00\v_\xcf\xb7\xb5\xe1\xf9\x1eC')

5.549129ms ago: executing program 4 (id=154):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f000000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2})

0s ago: executing program 1 (id=155):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={<r3=>0x0, @in={{0x2, 0x4e21, @broadcast}}, 0xfffffff6, 0x9947, 0xffff, 0x1, 0x4b, 0x20000, 0xc4}, &(0x7f0000000540)=0x9c)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000600)={r3, 0x2}, 0x8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@isdn={0x22, 0x5, 0x4, 0x61, 0x6}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)}, {&(0x7f0000000fc0)="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", 0x1000}], 0x2}, 0x24004015)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f40)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff2, 0xfff0}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, 'f'}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x34000844}, 0x4040000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts.
[   64.136107][ T5772] cgroup: Unknown subsys name 'net'
[   64.265110][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.678702][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.666103][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.683123][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.691683][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   67.700897][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.708854][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   67.716879][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.725863][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.731601][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.740208][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   67.741584][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.755931][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.763298][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   67.764188][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.778663][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   67.786107][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.795131][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   67.795670][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.809876][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   67.817754][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   67.827338][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.830426][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.843557][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.852670][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   67.860331][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.319965][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   68.388023][ T5789] chnl_net:caif_netlink_parms(): no params data found
[   68.399004][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   68.464149][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.472358][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.481091][ T5785] bridge_slave_0: entered allmulticast mode
[   68.487943][ T5785] bridge_slave_0: entered promiscuous mode
[   68.522532][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.529730][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.536879][ T5785] bridge_slave_1: entered allmulticast mode
[   68.544277][ T5785] bridge_slave_1: entered promiscuous mode
[   68.574761][ T5782] chnl_net:caif_netlink_parms(): no params data found
[   68.625042][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.637375][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.704368][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.712123][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.719469][ T5783] bridge_slave_0: entered allmulticast mode
[   68.726180][ T5783] bridge_slave_0: entered promiscuous mode
[   68.746204][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.753458][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.760806][ T5789] bridge_slave_0: entered allmulticast mode
[   68.767972][ T5789] bridge_slave_0: entered promiscuous mode
[   68.775270][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.782862][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.790292][ T5789] bridge_slave_1: entered allmulticast mode
[   68.796964][ T5789] bridge_slave_1: entered promiscuous mode
[   68.807612][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.814992][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.822305][ T5783] bridge_slave_1: entered allmulticast mode
[   68.829647][ T5783] bridge_slave_1: entered promiscuous mode
[   68.839573][ T5785] team0: Port device team_slave_0 added
[   68.875466][ T5785] team0: Port device team_slave_1 added
[   68.906907][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.946669][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.968128][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.978912][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.985865][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.012403][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.034777][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.042042][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.049841][ T5782] bridge_slave_0: entered allmulticast mode
[   69.056564][ T5782] bridge_slave_0: entered promiscuous mode
[   69.065857][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.085028][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.092369][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.118410][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.146483][ T5789] team0: Port device team_slave_0 added
[   69.156693][ T5789] team0: Port device team_slave_1 added
[   69.162754][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.170128][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.177286][ T5782] bridge_slave_1: entered allmulticast mode
[   69.184153][ T5782] bridge_slave_1: entered promiscuous mode
[   69.204868][ T5783] team0: Port device team_slave_0 added
[   69.258385][ T5783] team0: Port device team_slave_1 added
[   69.289717][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.296682][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.322989][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.368686][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.375660][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.402825][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.422751][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.434715][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.444528][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.451585][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.478364][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.493618][ T5785] hsr_slave_0: entered promiscuous mode
[   69.500249][ T5785] hsr_slave_1: entered promiscuous mode
[   69.519951][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.526914][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.553423][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.584571][ T5782] team0: Port device team_slave_0 added
[   69.593320][ T5782] team0: Port device team_slave_1 added
[   69.659492][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.666461][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.692508][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.717198][ T5789] hsr_slave_0: entered promiscuous mode
[   69.723916][ T5789] hsr_slave_1: entered promiscuous mode
[   69.730678][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.738850][ T5789] Cannot create hsr debugfs directory
[   69.755519][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.762542][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.788472][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.828916][ T5783] hsr_slave_0: entered promiscuous mode
[   69.835128][ T5783] hsr_slave_1: entered promiscuous mode
[   69.841649][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.849342][ T5783] Cannot create hsr debugfs directory
[   69.859818][ T5792] Bluetooth: hci0: command tx timeout
[   69.865678][ T5795] Bluetooth: hci3: command tx timeout
[   69.937846][ T5792] Bluetooth: hci1: command tx timeout
[   69.943704][ T5795] Bluetooth: hci2: command tx timeout
[   69.988730][ T5782] hsr_slave_0: entered promiscuous mode
[   69.995076][ T5782] hsr_slave_1: entered promiscuous mode
[   70.002491][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.010205][ T5782] Cannot create hsr debugfs directory
[   70.274727][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.294383][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.305531][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.329786][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   70.385951][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.399575][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.424547][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.434973][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.515253][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.538278][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.547572][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.559665][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.633108][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.642529][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.653386][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.663580][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.720623][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.772376][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   70.804748][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.812216][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.835399][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.874737][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.883624][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.890902][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.967078][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[   70.983271][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   71.004723][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.011840][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.031740][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.039050][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.061459][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.076828][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.084100][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.097282][  T169] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.104474][  T169] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.174021][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.261621][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   71.277001][  T169] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.284176][  T169] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.335377][  T169] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.342857][  T169] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.536615][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.553551][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[   71.563716][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[   71.667643][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.710246][ T5785] veth0_vlan: entered promiscuous mode
[   71.750012][ T5785] veth1_vlan: entered promiscuous mode
[   71.798643][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.815996][ T5785] veth0_macvtap: entered promiscuous mode
[   71.843758][ T5783] veth0_vlan: entered promiscuous mode
[   71.864190][ T5785] veth1_macvtap: entered promiscuous mode
[   71.891103][ T5783] veth1_vlan: entered promiscuous mode
[   71.917285][ T5789] veth0_vlan: entered promiscuous mode
[   71.936902][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.948412][ T5792] Bluetooth: hci0: command tx timeout
[   71.953926][ T5795] Bluetooth: hci3: command tx timeout
[   71.954195][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.978675][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.003434][ T5783] veth0_macvtap: entered promiscuous mode
[   72.011727][ T5789] veth1_vlan: entered promiscuous mode
[   72.019002][ T5795] Bluetooth: hci2: command tx timeout
[   72.024444][ T5795] Bluetooth: hci1: command tx timeout
[   72.036692][ T5783] veth1_macvtap: entered promiscuous mode
[   72.052279][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.061616][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.071451][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.080478][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.135653][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.146969][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.158937][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.184089][ T5782] veth0_vlan: entered promiscuous mode
[   72.192161][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.204206][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.215726][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.239735][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.251849][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.261822][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.271073][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.301489][ T5782] veth1_vlan: entered promiscuous mode
[   72.346864][ T5789] veth0_macvtap: entered promiscuous mode
[   72.347017][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.364590][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.392145][ T5789] veth1_macvtap: entered promiscuous mode
[   72.432831][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.445753][ T5782] veth0_macvtap: entered promiscuous mode
[   72.451916][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.482262][ T5782] veth1_macvtap: entered promiscuous mode
[   72.509481][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.524815][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.536139][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.546975][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.560173][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.585432][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.596472][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.609454][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.620594][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.630954][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.642083][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.653417][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.664554][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.676241][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.703385][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.719790][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.733347][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.745558][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.761896][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.775179][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.795560][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.801951][ T5877] syz.3.4[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   72.806602][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.826245][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.836439][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.847326][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.860663][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.871066][  T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.881371][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.890551][  T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.903525][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.912646][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.922576][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.936659][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.946574][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.955930][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.975091][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.176911][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.207054][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.312831][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.328165][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.409652][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.417506][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.445892][ T5877] loop3: detected capacity change from 0 to 32768
[   73.492396][ T5877] 
[   73.492396][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   73.492396][ T5877] 
[   73.538524][ T5877] 
[   73.538524][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   73.538524][ T5877] 
[   73.559527][ T5877] 
[   73.559527][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   73.559527][ T5877] 
[   73.595841][ T5877] 
[   73.595841][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   73.595841][ T5877] 
[   73.613727][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.643222][ T5877] 
[   73.643222][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   73.643222][ T5877] 
[   73.654650][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.718420][ T5877] 
[   73.718420][ T5877]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   73.718420][ T5877] 
[   73.790892][  T112] 
[   73.790892][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   73.790892][  T112] 
[   73.884268][ T5785] 
[   73.884268][ T5785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   73.884268][ T5785] 
[   73.928249][ T5785] 
[   73.928249][ T5785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   73.928249][ T5785] 
[   74.021471][ T5792] Bluetooth: hci0: command tx timeout
[   74.035920][ T5795] Bluetooth: hci3: command tx timeout
[   74.235190][ T5886] affs: No valid root block on device nullb0
[   74.441006][ T5795] Bluetooth: hci1: command tx timeout
[   74.477406][ T5792] Bluetooth: hci2: command tx timeout
[   76.102595][ T5898] vivid-002: disconnect
[   76.102809][ T5795] Bluetooth: hci3: command tx timeout
[   76.113538][ T5792] Bluetooth: hci0: command tx timeout
[   76.249647][ T5895] vivid-002: reconnect
[   76.577276][ T5795] Bluetooth: hci1: command tx timeout
[   76.585135][ T5795] Bluetooth: hci2: command tx timeout
[   78.668656][ T5915] loop2: detected capacity change from 0 to 8192
[   78.826585][ T5924] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[   78.839182][ T5924] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   79.326598][ T5920] loop1: detected capacity change from 0 to 8192
[   79.469089][ T5920] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   79.579406][ T5920] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[   79.627964][ T5920] REISERFS (device loop1): using ordered data mode
[   79.634573][ T5920] reiserfs: using flush barriers
[   79.694668][ T5920] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   79.759445][ T5920] REISERFS (device loop1): checking transaction log (loop1)
[   79.862690][ T5920] REISERFS (device loop1): Using r5 hash to sort names
[   79.919830][ T5920] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   80.049546][ T5932] xt_NFQUEUE: number of total queues is 0
[   80.828615][ T5922] loop3: detected capacity change from 0 to 32768
[   80.885424][ T5922] (syz.3.15,5922,0):ocfs2_verify_volume:2366 ERROR: bad block number on superblock: found 0, should be 2
[   80.912137][ T5922] (syz.3.15,5922,0):ocfs2_verify_volume:2389 ERROR: status = -22
[   80.943277][ T5922] (syz.3.15,5922,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[   80.987514][ T5922] (syz.3.15,5922,0):ocfs2_fill_super:1178 ERROR: status = -22
[   81.062861][ T5921] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   81.242781][ T5921] netlink: 'syz.3.15': attribute type 10 has an invalid length.
[   81.432316][ T5921] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   81.748870][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   81.793580][   T55] cfg80211: failed to load regulatory.db
[   81.822848][ T5947] loop2: detected capacity change from 0 to 1024
[   81.838006][ T5947] =======================================================
[   81.838006][ T5947] WARNING: The mand mount option has been deprecated and
[   81.838006][ T5947]          and is ignored by this kernel. Remove the mand
[   81.838006][ T5947]          option from the mount to silence this warning.
[   81.838006][ T5947] =======================================================
[   81.883386][ T5947] EXT4-fs: Ignoring removed nobh option
[   81.890484][ T5947] EXT4-fs: Ignoring removed bh option
[   81.902037][ T5947] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   81.946501][ T5947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.987977][ T5875] usb 1-1: Using ep0 maxpacket: 16
[   82.004558][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[   82.061744][ T5875] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[   82.119399][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.138523][ T5875] usb 1-1: Product: syz
[   82.162497][ T5875] usb 1-1: Manufacturer: syz
[   82.167133][ T5875] usb 1-1: SerialNumber: syz
[   82.198491][ T5875] usb 1-1: config 0 descriptor??
[   82.199478][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.213750][ T5875] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[   82.233026][ T5875] usb 1-1: Detected FT232B
[   82.681200][ T5875] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   82.692031][ T5875] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   82.705511][ T5875] usb 1-1: USB disconnect, device number 2
[   82.717403][ T5875] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   82.727801][ T5875] ftdi_sio 1-1:0.0: device disconnected
[   83.476161][ T5985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.514595][ T5985] No such timeout policy "syz0"
[   84.450675][ T5981] syz.1.29 (5981) used greatest stack depth: 16968 bytes left
[   84.600498][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.740148][ T5993] loop3: detected capacity change from 0 to 8
[   86.162908][ T6004] loop3: detected capacity change from 0 to 1024
[   86.438589][ T6006] loop1: detected capacity change from 0 to 4096
[   86.546981][ T5991] loop2: detected capacity change from 0 to 32768
[   86.605672][ T6006] ntfs: volume version 3.1.
[   86.729321][ T5997] loop0: detected capacity change from 0 to 40427
[   86.778267][ T5997] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   86.821611][ T5997] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   86.866437][ T5997] F2FS-fs (loop0): invalid crc value
[   86.922193][ T5997] F2FS-fs (loop0): Found nat_bits in checkpoint
[   87.100081][ T5997] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   87.127844][ T5997] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   87.217351][ T5997] syz.0.34: attempt to access beyond end of device
[   87.217351][ T5997] loop0: rw=2051, sector=65536, nr_sectors = 65536 limit=40427
[   87.254792][ T5997] F2FS-fs (loop0): Issue discard(8192, 8192, 8192) failed, ret: -5
[   87.969211][   T12] hfsplus: b-tree write err: -5, ino 4
[   88.148601][ T6021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.41'.
[   88.183149][ T6021] unsupported nlmsg_type 40
[   88.523357][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.625848][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.956166][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   90.737780][ T5875] usb 4-1: Using ep0 maxpacket: 16
[   90.798088][ T5875] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   90.807174][ T5875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.942401][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   90.969807][ T5875] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   90.984490][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.998933][ T5875] usb 4-1: Product: syz
[   91.058294][ T5875] usb 4-1: Manufacturer: syz
[   91.063437][ T5875] usb 4-1: SerialNumber: syz
[   91.603879][ T6044] loop2: detected capacity change from 0 to 256
[   91.623260][ T6044] exfat: Deprecated parameter 'utf8'
[   91.636006][ T5875] usb 4-1: 0:2 : does not exist
[   91.713640][ T6044] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbc51571d, utbl_chksum : 0xe619d30d)
[   91.762253][ T5875] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1)
[   91.903611][ T5875] usb 4-1: USB disconnect, device number 2
[   91.995680][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.206161][ T6051] loop1: detected capacity change from 0 to 4096
[   92.372451][ T6051] NILFS (loop1): invalid segment: Checksum error in segment payload
[   92.512105][ T6051] NILFS (loop1): trying rollback from an earlier position
[   92.621330][ T6058] loop2: detected capacity change from 0 to 4096
[   92.893096][ T6051] NILFS (loop1): recovery complete
[   92.985162][ T6058] ntfs: (device loop2): parse_options(): Unrecognized mount option nYs.
[   93.144233][ T6058] ntfs: (device loop2): parse_options(): NLS character set maccenteuroAdmask=000000000000400 not found.
[   93.242725][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.432891][ T6063] loop3: detected capacity change from 0 to 4096
[   93.532391][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   93.562488][ T6063] ntfs: (device loop3): parse_options(): NLS character set maccenteuroAdmask=0000000000004000 not found. Using previous one default.
[   93.635259][ T6063] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[   93.647050][ T6049] loop0: detected capacity change from 0 to 40427
[   93.675386][ T6063] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[   93.702151][ T6049] F2FS-fs (loop0): invalid crc value
[   93.727961][ T6063] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[   93.759368][ T6049] F2FS-fs (loop0): Found nat_bits in checkpoint
[   93.788007][ T6063] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[   93.867981][ T6063] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[   93.892945][ T6069] loop2: detected capacity change from 0 to 4096
[   93.925067][ T6063] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[   93.978541][ T6069] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096).  This is not supported.  Sorry.
[   94.000162][ T6063] ntfs: volume version 3.1.
[   94.049807][ T6049] F2FS-fs (loop0): Start checkpoint disabled!
[   94.279658][ T6049] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   94.956875][ T6081] loop2: detected capacity change from 0 to 512
[   94.977109][ T6081] journal_path: Lookup failure for './file0'
[   94.996995][ T6081] EXT4-fs: error: could not find journal device path
[   95.360904][ T6085] loop2: detected capacity change from 0 to 8192
[   95.396075][ T6085] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   95.403089][ T6089] loop1: detected capacity change from 0 to 1024
[   95.444242][ T6085] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   95.453927][ T6085] REISERFS (device loop2): using ordered data mode
[   95.460883][ T6085] reiserfs: using flush barriers
[   95.476130][ T6085] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   95.498737][ T6085] REISERFS (device loop2): checking transaction log (loop2)
[   95.512739][ T6047] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   95.552736][ T6085] REISERFS (device loop2): Using r5 hash to sort names
[   95.601548][ T6085] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   97.147004][ T6105] loop1: detected capacity change from 0 to 128
[   97.165276][ T6105] ADFS-fs (loop1): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value
[   97.721378][ T5799] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   97.787732][ T6077] loop3: detected capacity change from 0 to 65536
[   97.870802][ T6077] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop3": -EINTR
[   97.946752][ T5774] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   98.093418][ T6092] loop0: detected capacity change from 0 to 32768
[   98.112321][ T6111] loop1: detected capacity change from 0 to 1024
[   98.208006][ T5774] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[   98.249428][ T6092] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.266619][ T5774] usb 3-1: config 0 has no interface number 0
[   98.312335][ T5774] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   98.406609][ T5774] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   98.634616][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.857216][ T5774] usb 3-1: Product: syz
[   98.958612][ T5774] usb 3-1: Manufacturer: syz
[   98.963254][ T5774] usb 3-1: SerialNumber: syz
[   99.064499][ T6092] XFS (loop0): Ending clean mount
[   99.075541][ T5774] usb 3-1: config 0 descriptor??
[   99.104099][ T3462] hfsplus: b-tree write err: -5, ino 4
[   99.158884][ T5774] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[   99.285340][ T5782] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   99.357822][    T8] usb 3-1: USB disconnect, device number 2
[   99.394650][    T8] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  100.135830][ T6135] overlayfs: missing 'lowerdir'
[  100.340851][ T6136] tipc: Started in network mode
[  100.346017][ T6136] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  100.355747][ T6136] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  100.365000][ T6136] tipc: Enabled bearer <udp:syz0>, priority 10
[  101.027210][ T6144] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  101.039793][ T6144] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  101.628888][    T9] tipc: Node number set to 1
[  101.818053][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  101.828118][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  101.838120][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  101.846403][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  101.919226][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  101.938188][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  102.127839][ T6151] loop2: detected capacity change from 0 to 32768
[  102.255571][ T6151] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  102.265302][ T6151] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  102.337101][ T6151] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  102.549874][ T6151] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  103.903318][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  104.199218][    T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  104.293732][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  104.339531][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  104.376342][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  104.531553][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  104.594221][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.922803][    T9] usb 3-1: config 0 descriptor??
[  104.944974][ T6170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  105.615673][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  105.641853][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  105.665329][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  106.464085][ T6170] futex_wake_op: syz.2.82 tries to shift op by 144; fix this program
[  106.482163][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  106.512345][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  106.565177][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  106.581155][    T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  106.899926][    T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  106.928788][ T6193] loop1: detected capacity change from 0 to 8
[  106.984850][ T6189] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  107.087126][ T5790] udevd[5790]: symlink '../../loop1' '/dev/disk/by-diskseq/117.tmp-b7:1' failed: Read-only file system
[  107.131721][ T5790] udevd[5790]: symlink '../../loop1' '/dev/disk/by-diskseq/117.tmp-b7:1' failed: Read-only file system
[  107.242918][ T5799] udevd[5799]: symlink '../hidraw0' '/dev/char/497:0.tmp-c497:0' failed: Read-only file system
[  107.411819][ T5790] udevd[5790]: symlink '../../loop1' '/dev/disk/by-diskseq/117.tmp-b7:1' failed: Read-only file system
[  107.498598][ T6203] loop0: detected capacity change from 0 to 16
[  107.529053][ T6203] erofs: (device loop0): mounted with root inode @ nid 36.
[  107.581517][ T6203] syz.0.91: attempt to access beyond end of device
[  107.581517][ T6203] loop0: rw=524288, sector=34359738360, nr_sectors = 1984 limit=16
[  108.020273][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/117.tmp-b7:1' failed: Read-only file system
[  108.092617][ T5875] usb 3-1: reset high-speed USB device number 3 using dummy_hcd
[  108.191120][ T5790] udevd[5790]: symlink '../../loop0' '/dev/disk/by-diskseq/119.tmp-b7:0' failed: Read-only file system
[  108.272227][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/118.tmp-b7:1' failed: Read-only file system
[  108.326291][ T5790] udevd[5790]: symlink '../../loop0' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:0' failed: Read-only file system
[  108.459549][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-diskseq/119.tmp-b7:0' failed: Read-only file system
[  108.498452][ T5774] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  108.517602][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:0' failed: Read-only file system
[  108.719799][ T5774] usb 4-1: config 4 has an invalid interface number: 44 but max is 0
[  108.748204][ T5774] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  108.792486][ T5774] usb 4-1: config 4 has no interface number 0
[  108.802824][ T6207] loop2: detected capacity change from 0 to 128
[  108.807716][    C0] sched: RT throttling activated
[  108.820343][ T5774] usb 4-1: config 4 interface 44 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  108.844213][ T5774] usb 4-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  108.875483][ T6207] omfs: sysblock number (f784317bf884317b) is out of range
[  108.921523][ T5774] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  108.966498][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.017101][ T5774] usb 4-1: Product: syz
[  109.027518][ T5774] usb 4-1: Manufacturer: syz
[  109.067929][ T5774] usb 4-1: SerialNumber: syz
[  109.353097][ T6212] netlink: 'syz.1.95': attribute type 10 has an invalid length.
[  109.488339][ T5875] usb 3-1: device descriptor read/64, error -71
[  109.543976][ T6217] loop1: detected capacity change from 0 to 2048
[  109.558729][ T6217] EXT4-fs: Ignoring removed bh option
[  109.565908][ T6218] loop0: detected capacity change from 0 to 2048
[  109.584812][ T6218] NILFS (loop0): invalid segment: Sequence number mismatch
[  109.596144][ T5774] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  109.622921][ T5774] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  109.635906][ T6218] NILFS (loop0): trying rollback from an earlier position
[  109.645689][ T5774] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  109.656853][ T5774] usb 4-1: media controller created
[  109.664251][ T6217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.722250][ T6218] NILFS (loop0): recovery complete
[  109.733031][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.748132][ T6222] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.758901][ T5875] usb 3-1: reset high-speed USB device number 3 using dummy_hcd
[  110.008947][ T5774] DVB: Unable to find symbol dib7000p_attach()
[  110.015238][ T5774] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  110.053088][ T6227] loop0: detected capacity change from 0 to 256
[  110.226580][ T6227] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.618795][ T6221] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  110.659412][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.660262][ T5875] usb 3-1: device firmware changed
[  110.732720][ T6230] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  111.221902][ T5774] rc_core: IR keymap rc-dib0700-rc5 not found
[  111.229811][ T5774] Registered IR keymap rc-empty
[  111.235293][ T5774] dvb-usb: could not initialize remote control.
[  111.244617][   T55] usb 3-1: USB disconnect, device number 3
[  111.254638][ T5774] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  112.002375][ T5774] usb 4-1: USB disconnect, device number 3
[  112.053757][ T5774] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  112.102248][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/128.tmp-b7:1' failed: Read-only file system
[  112.311090][   T55] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  112.319293][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  112.361865][ T6243] loop3: detected capacity change from 0 to 1024
[  112.642383][ T5787] udevd[5787]: symlink '../../loop2' '/dev/disk/by-diskseq/121.tmp-b7:2' failed: Read-only file system
[  112.673273][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/128.tmp-b7:1' failed: Read-only file system
[  112.735038][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/128.tmp-b7:1' failed: Read-only file system
[  112.802540][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.104'.
[  112.816593][ T6253] process 'syz.2.104' launched './file0' with NULL argv: empty string added
[  113.378835][ T6243] EXT4-fs (loop3): Test dummy encryption mode enabled
[  113.426089][ T6047] udevd[6047]: symlink '../../loop3' '/dev/disk/by-diskseq/129.tmp-b7:3' failed: Read-only file system
[  113.448143][ T6243] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  113.461470][ T6256] loop1: detected capacity change from 0 to 128
[  113.483037][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-diskseq/127.tmp-b7:0' failed: Read-only file system
[  113.525093][ T6047] udevd[6047]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  113.528158][ T6261] loop2: detected capacity change from 0 to 64
[  113.595700][ T6243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.604077][ T5790] udevd[5790]: symlink '../../loop3' '/dev/disk/by-diskseq/129.tmp-b7:3' failed: Read-only file system
[  113.622550][ T5790] udevd[5790]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  113.624405][ T6250] udevd[6250]: symlink '../../loop2' '/dev/disk/by-diskseq/121.tmp-b7:2' failed: Read-only file system
[  113.775591][ T6261] syz.2.108: attempt to access beyond end of device
[  113.775591][ T6261] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64
[  113.799092][ T6261] Buffer I/O error on dev loop2, logical block 65, lost async page write
[  113.817793][ T5857] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  113.850860][ T6261] syz.2.108: attempt to access beyond end of device
[  113.850860][ T6261] loop2: rw=2049, sector=66, nr_sectors = 1 limit=64
[  113.865314][ T6261] Buffer I/O error on dev loop2, logical block 66, lost async page write
[  113.874515][ T6261] syz.2.108: attempt to access beyond end of device
[  113.874515][ T6261] loop2: rw=2049, sector=67, nr_sectors = 1 limit=64
[  113.888750][ T6261] Buffer I/O error on dev loop2, logical block 67, lost async page write
[  113.897279][ T6261] syz.2.108: attempt to access beyond end of device
[  113.897279][ T6261] loop2: rw=2049, sector=68, nr_sectors = 1 limit=64
[  113.912405][ T6261] Buffer I/O error on dev loop2, logical block 68, lost async page write
[  113.927877][ T6261] syz.2.108: attempt to access beyond end of device
[  113.927877][ T6261] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64
[  113.946598][ T6261] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  113.955639][ T6261] syz.2.108: attempt to access beyond end of device
[  113.955639][ T6261] loop2: rw=2049, sector=73, nr_sectors = 1 limit=64
[  113.974594][ T6261] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  113.984360][ T6261] syz.2.108: attempt to access beyond end of device
[  113.984360][ T6261] loop2: rw=2049, sector=76, nr_sectors = 1 limit=64
[  114.002669][ T6261] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  114.011322][ T5857] usb 1-1: Using ep0 maxpacket: 8
[  114.017017][ T6261] syz.2.108: attempt to access beyond end of device
[  114.017017][ T6261] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64
[  114.056369][ T5857] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  114.067669][ T5857] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  114.094870][ T6261] Buffer I/O error on dev loop2, logical block 77, lost async page write
[  114.129747][ T5857] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  114.146684][ T6261] syz.2.108: attempt to access beyond end of device
[  114.146684][ T6261] loop2: rw=2049, sector=78, nr_sectors = 95 limit=64
[  114.182801][ T5857] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  114.206844][ T5857] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.211019][ T6265] loop1: detected capacity change from 0 to 40427
[  114.236920][ T6265] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  114.244804][ T6265] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  114.265100][ T6265] F2FS-fs (loop1): invalid crc value
[  114.282766][ T5857] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  114.299106][ T6265] F2FS-fs (loop1): Found nat_bits in checkpoint
[  114.318099][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.381994][ T6265] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  114.389239][ T6265] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  114.449563][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.734805][ T1133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.358891][   T55] usb 1-1: USB disconnect, device number 3
[  115.537960][ T6275] tipc: Started in network mode
[  115.542886][ T6275] tipc: Node identity 4, cluster identity 4711
[  115.612373][ T6275] tipc: Node number set to 4
[  115.695209][ T1133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.820025][ T1133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.105141][ T6279] Device name cannot be null; rc = [-22]
[  116.247079][ T1133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.629185][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  117.640432][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  117.653062][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  117.661295][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  117.693843][ T5787] udevd[5787]: symlink '../../loop0' '/dev/disk/by-diskseq/127.tmp-b7:0' failed: Read-only file system
[  117.711380][ T6047] udevd[6047]: symlink '../../loop2' '/dev/disk/by-diskseq/135.tmp-b7:2' failed: Read-only file system
[  117.727970][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  117.741586][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  117.849267][ T1133] tipc: Disabling bearer <udp:syz0>
[  117.859651][ T1133] tipc: Left network mode
[  117.921374][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/136.tmp-b7:1' failed: Read-only file system
[  118.054310][ T6286] loop0: detected capacity change from 0 to 512
[  118.141345][ T5799] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  118.164928][ T6295] loop1: detected capacity change from 0 to 4096
[  118.197426][ T6250] udevd[6250]: symlink '../../loop2' '/dev/disk/by-diskseq/135.tmp-b7:2' failed: Read-only file system
[  118.237533][ T6295] __ntfs_error: 13 callbacks suppressed
[  118.237549][ T6295] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  118.298768][ T6295] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  118.313259][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-diskseq/137.tmp-b7:0' failed: Read-only file system
[  118.348940][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-diskseq/137.tmp-b7:0' failed: Read-only file system
[  118.360714][ T6295] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  118.413827][ T6295] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  118.448561][ T6283] chnl_net:caif_netlink_parms(): no params data found
[  118.478649][ T6295] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  118.565642][ T6295] ntfs: volume version 3.1.
[  118.613795][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-diskseq/137.tmp-b7:0' failed: Read-only file system
[  119.160591][ T6250] udevd[6250]: symlink '../../loop2' '/dev/disk/by-diskseq/135.tmp-b7:2' failed: Read-only file system
[  119.281748][ T6295] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  119.345070][ T6295] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  119.391343][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-diskseq/137.tmp-b7:0' failed: Read-only file system
[  119.414708][ T5790] udevd[5790]: symlink '../../loop1' '/dev/disk/by-diskseq/139.tmp-b7:1' failed: Read-only file system
[  119.418631][ T6295] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  119.457792][ T6295] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  119.477984][ T6295] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  119.778284][ T5792] Bluetooth: hci2: command tx timeout
[  120.783279][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.817181][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.849499][ T6283] bridge_slave_0: entered allmulticast mode
[  120.865990][ T6283] bridge_slave_0: entered promiscuous mode
[  120.874851][ T6311] loop2: detected capacity change from 0 to 32768
[  120.886502][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.895610][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.903847][ T6283] bridge_slave_1: entered allmulticast mode
[  120.922820][ T6311] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  120.924522][ T6283] bridge_slave_1: entered promiscuous mode
[  121.368766][ T6311] XFS (loop2): Ending clean mount
[  121.541688][ T6311] XFS (loop2): Quotacheck needed: Please wait.
[  121.857853][ T5792] Bluetooth: hci2: command tx timeout
[  121.918932][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.943529][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.090225][ T6311] XFS (loop2): Quotacheck: Done.
[  122.153614][ T6352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.129'.
[  122.943444][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-diskseq/141.tmp-b7:2' failed: Read-only file system
[  122.970462][ T5783] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.005687][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system
[  123.171865][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/140.tmp-b7:1' failed: Read-only file system
[  123.229630][ T6283] team0: Port device team_slave_0 added
[  123.239833][ T6283] team0: Port device team_slave_1 added
[  123.373874][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system
[  123.463709][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system
[  123.696144][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-diskseq/141.tmp-b7:2' failed: Read-only file system
[  123.780990][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-diskseq/141.tmp-b7:2' failed: Read-only file system
[  123.819823][ T1133] bond0: (slave wlan1): Releasing backup interface
[  123.868520][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-diskseq/142.tmp-b7:2' failed: Read-only file system
[  123.903511][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.937886][ T5792] Bluetooth: hci2: command tx timeout
[  123.947490][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.951873][ T6368] loop2: detected capacity change from 0 to 2048
[  123.974452][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.976562][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.999580][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.048591][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.099466][ T6368] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.428605][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-diskseq/143.tmp-b7:2' failed: Read-only file system
[  124.441647][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system
[  124.931079][ T1133] hsr_slave_0: left promiscuous mode
[  124.959227][ T1133] hsr_slave_1: left promiscuous mode
[  125.810280][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.817865][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.856849][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.897847][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.941595][ T1133] bridge_slave_1: left allmulticast mode
[  125.947295][ T1133] bridge_slave_1: left promiscuous mode
[  125.996951][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.018834][ T5792] Bluetooth: hci2: command tx timeout
[  126.071909][ T1133] bridge_slave_0: left allmulticast mode
[  126.103227][ T1133] bridge_slave_0: left promiscuous mode
[  126.112152][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.230045][ T1133] veth1_macvtap: left promiscuous mode
[  126.254237][ T1133] veth0_macvtap: left promiscuous mode
[  126.280748][ T1133] veth1_vlan: left promiscuous mode
[  126.297580][ T1133] veth0_vlan: left promiscuous mode
[  127.241259][ T1133] team0 (unregistering): Port device team_slave_1 removed
[  127.289651][ T1133] team0 (unregistering): Port device team_slave_0 removed
[  127.331134][ T5857] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  127.342816][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.387012][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.527815][ T5857] usb 2-1: Using ep0 maxpacket: 32
[  127.546606][ T5857] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  127.569152][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.577379][ T5857] usb 2-1: Product: syz
[  127.585985][ T5857] usb 2-1: Manufacturer: syz
[  127.590872][ T5857] usb 2-1: SerialNumber: syz
[  127.616523][ T5857] usb 2-1: config 0 descriptor??
[  127.642844][ T5857] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  128.063876][ T1133] bond0 (unregistering): Released all slaves
[  128.302884][ T5857] gspca_ov534_9: reg_w failed -71
[  128.334119][ T6047] udevd[6047]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system
[  128.419566][ T6250] udevd[6250]: symlink '../../loop2' '/dev/disk/by-diskseq/144.tmp-b7:2' failed: Read-only file system
[  128.457933][ T6283] hsr_slave_0: entered promiscuous mode
[  128.488046][ T6283] hsr_slave_1: entered promiscuous mode
[  128.530141][ T6409] veth0_vlan: entered allmulticast mode
[  128.632027][ T6250] udevd[6250]: symlink '../../loop2' '/dev/disk/by-diskseq/144.tmp-b7:2' failed: Read-only file system
[  128.828628][ T5857] gspca_ov534_9: Unknown sensor 0000
[  128.828783][ T5857] ov534_9: probe of 2-1:0.0 failed with error -22
[  128.900244][ T5857] usb 2-1: USB disconnect, device number 2
[  129.709598][ T6283] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  129.727346][ T6283] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  129.739343][ T6417] loop1: detected capacity change from 0 to 512
[  129.756219][ T6283] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  129.762516][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-diskseq/144.tmp-b7:2' failed: Read-only file system
[  129.807451][ T6283] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  129.867119][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/145.tmp-b7:1' failed: Read-only file system
[  129.948707][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/145.tmp-b7:1' failed: Read-only file system
[  130.031928][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/145.tmp-b7:1' failed: Read-only file system
[  130.081973][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/145.tmp-b7:1' failed: Read-only file system
[  130.162464][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/145.tmp-b7:1' failed: Read-only file system
[  130.162950][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.234023][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/146.tmp-b7:1' failed: Read-only file system
[  130.286825][ T6283] 8021q: adding VLAN 0 to HW filter on device team0
[  130.373766][ T6435] random: crng reseeded on system resumption
[  130.546513][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.553894][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.943137][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.950364][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.490901][ T6283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.234188][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.292319][ T6457] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  132.984874][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  132.991701][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  133.045608][ T6283] veth0_vlan: entered promiscuous mode
[  133.081724][ T6283] veth1_vlan: entered promiscuous mode
[  133.220833][ T6283] veth0_macvtap: entered promiscuous mode
[  133.401816][ T6283] veth1_macvtap: entered promiscuous mode
[  133.458514][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.477733][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.622734][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.754078][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.883495][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.053711][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.131752][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.199399][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.257931][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.276750][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-diskseq/144.tmp-b7:2' failed: Read-only file system
[  134.292133][ T6488] loop2: detected capacity change from 0 to 256
[  134.299710][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.320897][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.354507][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.355596][ T6488] FAT-fs (loop2): Directory bread(block 64) failed
[  134.397267][ T6488] FAT-fs (loop2): Directory bread(block 65) failed
[  134.397734][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.408962][ T6488] FAT-fs (loop2): Directory bread(block 66) failed
[  134.416316][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-diskseq/147.tmp-b7:2' failed: Read-only file system
[  134.447224][ T6488] FAT-fs (loop2): Directory bread(block 67) failed
[  134.449458][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.469453][ T6488] FAT-fs (loop2): Directory bread(block 68) failed
[  134.496580][ T6488] FAT-fs (loop2): Directory bread(block 69) failed
[  134.502306][ T6283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.532884][ T6488] FAT-fs (loop2): Directory bread(block 70) failed
[  134.542770][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system
[  134.554961][ T6283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.557919][ T6488] FAT-fs (loop2): Directory bread(block 71) failed
[  134.578074][ T6283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.586800][ T6283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.603650][ T6488] FAT-fs (loop2): Directory bread(block 72) failed
[  134.619727][ T6488] FAT-fs (loop2): Directory bread(block 73) failed
[  134.791453][ T5799] udevd[5799]: symlink '../../loop2' '/dev/disk/by-diskseq/147.tmp-b7:2' failed: Read-only file system
[  134.861468][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.909281][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.014361][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.046823][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.102382][ T5799] udevd[5799]: symlink '../../loop1' '/dev/disk/by-diskseq/146.tmp-b7:1' failed: Read-only file system
[  135.651627][ T6508] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006c61)
[  135.690295][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  135.690310][   T27] audit: type=1800 audit(1754798396.330:2): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.149" name="cpu.stat" dev="loop2" ino=1048605 res=0 errno=0
[  136.051572][   T59] kworker/u4:4: attempt to access beyond end of device
[  136.051572][   T59] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256
[  136.092039][ T6492] loop0: detected capacity change from 0 to 32768
[  136.237473][ T6492] ================================================================================
[  136.275730][ T5790] udevd[5790]: symlink '../../loop2' '/dev/disk/by-diskseq/147.tmp-b7:2' failed: Read-only file system
[  136.287436][ T6492] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1601:11
[  136.302354][ T6250] udevd[6250]: symlink '../../loop1' '/dev/disk/by-diskseq/146.tmp-b7:1' failed: Read-only file system
[  136.314418][ T6492] index 26 is out of range for type 'struct lv[20]'
[  136.350484][ T6492] CPU: 1 PID: 6492 Comm: syz.0.150 Not tainted 6.6.101-syzkaller #0
[  136.353923][ T5790] udevd[5790]: symlink '../../loop2' '/dev/disk/by-diskseq/147.tmp-b7:2' failed: Read-only file system
[  136.358619][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  136.358673][ T6492] Call Trace:
[  136.358683][ T6492]  <TASK>
[  136.386278][ T6492]  dump_stack_lvl+0x16c/0x230
[  136.391010][ T6492]  ? show_regs_print_info+0x20/0x20
[  136.393840][ T6250] udevd[6250]: symlink '../../loop2' '/dev/disk/by-diskseq/149.tmp-b7:2' failed: Read-only file system
[  136.396223][ T6492]  ? load_image+0x3b0/0x3b0
[  136.411827][ T6492]  ubsan_epilogue+0xa/0x30
[  136.416296][ T6492]  __ubsan_handle_out_of_bounds+0xe3/0xf0
[  136.422071][ T6492]  dtSplitPage+0x38be/0x3b10
[  136.426764][ T6492]  dtInsert+0x108f/0x5f40
[  136.431159][ T6492]  ? txLock+0x2b1/0x2090
[  136.435437][ T6492]  ? __lock_acquire+0x7c80/0x7c80
[  136.440521][ T6492]  ? UniStrupr+0x2e0/0x2e0
[  136.444981][ T6492]  ? txLock+0x1125/0x2090
[  136.449368][ T6492]  ? txEnd+0x520/0x520
[  136.453494][ T6492]  jfs_create+0x6a1/0xa40
[  136.457872][ T6492]  ? jfs_lookup+0x380/0x380
[  136.462409][ T6492]  ? jfs_get_parent+0xb0/0xb0
[  136.467141][ T6492]  ? make_vfsuid+0x51/0xb0
[  136.471610][ T6492]  ? inode_permission+0xf3/0x480
[  136.476584][ T6492]  ? bpf_lsm_inode_create+0x9/0x10
[  136.481717][ T6492]  ? security_inode_create+0xb7/0x100
[  136.487095][ T6492]  ? jfs_lookup+0x380/0x380
[  136.491691][ T6492]  path_openat+0x1277/0x3190
[  136.496401][ T6492]  ? do_filp_open+0x3d0/0x3d0
[  136.501115][ T6492]  do_filp_open+0x1c5/0x3d0
[  136.505622][ T6492]  ? vfs_tmpfile+0x490/0x490
[  136.510258][ T6492]  ? _raw_spin_unlock+0x28/0x40
[  136.515121][ T6492]  ? alloc_fd+0x58f/0x630
[  136.519461][ T6492]  do_sys_openat2+0x12c/0x1c0
[  136.524143][ T6492]  ? do_sys_open+0xe0/0xe0
[  136.528560][ T6492]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  136.534536][ T6492]  ? lock_chain_count+0x20/0x20
[  136.539382][ T6492]  __x64_sys_creat+0x90/0xb0
[  136.544067][ T6492]  do_syscall_64+0x55/0xb0
[  136.548478][ T6492]  ? clear_bhb_loop+0x40/0x90
[  136.553152][ T6492]  ? clear_bhb_loop+0x40/0x90
[  136.557840][ T6492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  136.563925][ T6492] RIP: 0033:0x7fc6c018ebe9
[  136.568370][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.587988][ T6492] RSP: 002b:00007fc6c0f3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  136.596403][ T6492] RAX: ffffffffffffffda RBX: 00007fc6c03b5fa0 RCX: 00007fc6c018ebe9
[  136.604459][ T6492] RDX: 0000000000000000 RSI: 0000000000000032 RDI: 00002000000008c0
[  136.612519][ T6492] RBP: 00007fc6c0211e19 R08: 0000000000000000 R09: 0000000000000000
[  136.620490][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.628480][ T6492] R13: 00007fc6c03b6038 R14: 00007fc6c03b5fa0 R15: 00007ffe335f28c8
[  136.636461][ T6492]  </TASK>
[  136.663855][ T5799] udevd[5799]: symlink '../../loop0' '/dev/disk/by-diskseq/148.tmp-b7:0' failed: Read-only file system
[  136.695397][ T6492] ================================================================================
[  136.710789][ T6492] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  136.718021][ T6492] CPU: 1 PID: 6492 Comm: syz.0.150 Not tainted 6.6.101-syzkaller #0
[  136.726013][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  136.736079][ T6492] Call Trace:
[  136.739400][ T6492]  <TASK>
[  136.742381][ T6492]  dump_stack_lvl+0x16c/0x230
[  136.747166][ T6492]  ? show_regs_print_info+0x20/0x20
[  136.752388][ T6492]  ? load_image+0x3b0/0x3b0
[  136.756934][ T6492]  panic+0x2c0/0x710
[  136.760857][ T6492]  ? bpf_jit_dump+0xd0/0xd0
[  136.765415][ T6492]  check_panic_on_warn+0x84/0xa0
[  136.770381][ T6492]  __ubsan_handle_out_of_bounds+0xe3/0xf0
[  136.776146][ T6492]  dtSplitPage+0x38be/0x3b10
[  136.780828][ T6492]  dtInsert+0x108f/0x5f40
[  136.785196][ T6492]  ? txLock+0x2b1/0x2090
[  136.789454][ T6492]  ? __lock_acquire+0x7c80/0x7c80
[  136.794512][ T6492]  ? UniStrupr+0x2e0/0x2e0
[  136.798944][ T6492]  ? txLock+0x1125/0x2090
[  136.803312][ T6492]  ? txEnd+0x520/0x520
[  136.807415][ T6492]  jfs_create+0x6a1/0xa40
[  136.811771][ T6492]  ? jfs_lookup+0x380/0x380
[  136.816287][ T6492]  ? jfs_get_parent+0xb0/0xb0
[  136.821015][ T6492]  ? make_vfsuid+0x51/0xb0
[  136.825560][ T6492]  ? inode_permission+0xf3/0x480
[  136.829220][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  136.838064][ T6492]  ? bpf_lsm_inode_create+0x9/0x10
[  136.843199][ T6492]  ? security_inode_create+0xb7/0x100
[  136.848600][ T6492]  ? jfs_lookup+0x380/0x380
[  136.853127][ T6492]  path_openat+0x1277/0x3190
[  136.857764][ T6492]  ? do_filp_open+0x3d0/0x3d0
[  136.862487][ T6492]  do_filp_open+0x1c5/0x3d0
[  136.867019][ T6492]  ? vfs_tmpfile+0x490/0x490
[  136.871663][ T6492]  ? _raw_spin_unlock+0x28/0x40
[  136.876542][ T6492]  ? alloc_fd+0x58f/0x630
[  136.880904][ T6492]  do_sys_openat2+0x12c/0x1c0
[  136.885608][ T6492]  ? do_sys_open+0xe0/0xe0
[  136.890061][ T6492]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  136.896047][ T6492]  ? lock_chain_count+0x20/0x20
[  136.900914][ T6492]  __x64_sys_creat+0x90/0xb0
[  136.905523][ T6492]  do_syscall_64+0x55/0xb0
[  136.909947][ T6492]  ? clear_bhb_loop+0x40/0x90
[  136.914626][ T6492]  ? clear_bhb_loop+0x40/0x90
[  136.919320][ T6492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  136.925352][ T6492] RIP: 0033:0x7fc6c018ebe9
[  136.929772][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.949385][ T6492] RSP: 002b:00007fc6c0f3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  136.957799][ T6492] RAX: ffffffffffffffda RBX: 00007fc6c03b5fa0 RCX: 00007fc6c018ebe9
[  136.965769][ T6492] RDX: 0000000000000000 RSI: 0000000000000032 RDI: 00002000000008c0
[  136.973742][ T6492] RBP: 00007fc6c0211e19 R08: 0000000000000000 R09: 0000000000000000
[  136.981712][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.989698][ T6492] R13: 00007fc6c03b6038 R14: 00007fc6c03b5fa0 R15: 00007ffe335f28c8
[  136.997678][ T6492]  </TASK>
[  137.000811][ T6492] Kernel Offset: disabled
[  137.005190][ T6492] Rebooting in 86400 seconds..