last executing test programs:

2m58.457189952s ago: executing program 4 (id=303):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file2\x00', 0x42, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

2m56.880691775s ago: executing program 4 (id=308):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x34)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f00000000c0))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x25)
r2 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40082102, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff, 0x8})
write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

2m53.891055601s ago: executing program 4 (id=312):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x52cd, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, <r5=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r5})

2m51.781129173s ago: executing program 4 (id=318):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file2\x00', 0x42, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

2m49.994011751s ago: executing program 1 (id=320):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)

2m49.572811547s ago: executing program 4 (id=323):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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")
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x8d)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb2, &(0x7f00000008c0)="$eJzs1zFqAkEUBuC3G0i2CqQJgRSpt8kdcpSQMjZipQjeQLyIV/EI9hYW24o4ws6KiJ3FCvJ9xcA/Pw9e+1a75eeijkiziFR/DDfpbDSe/P8O8hs8pDIiXiKiioivt5y3P7kruv61mf6tm6fr4ed57/sCAAC3K+P7Mh9S97HvrsA2vJ/6Kp8KraK/NQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu5hgAAP//VS0nxA==")
unlink(&(0x7f0000000140)='./file1\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
socket(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0x0)
accept4$x25(r3, 0x0, 0x0, 0x80800)

2m49.520469608s ago: executing program 1 (id=324):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg$unix(r0, 0x0, 0x61)

2m48.374250695s ago: executing program 1 (id=326):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0)

2m48.150193088s ago: executing program 4 (id=327):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r1, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getpriority(0x2, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
r3 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
preadv(r3, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x34, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x6, 0x17, 0x0, 0x1, [@generic="b82f"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)='`', 0x1}], 0x1}, 0x4010)
writev(r4, &(0x7f00000006c0)=[{&(0x7f00000005c0)='I', 0x1}], 0x1)

2m47.163989253s ago: executing program 32 (id=327):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r1, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getpriority(0x2, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
r3 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
preadv(r3, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x34, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x6, 0x17, 0x0, 0x1, [@generic="b82f"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)='`', 0x1}], 0x1}, 0x4010)
writev(r4, &(0x7f00000006c0)=[{&(0x7f00000005c0)='I', 0x1}], 0x1)

2m44.727847211s ago: executing program 1 (id=334):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file2\x00', 0x42, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

2m43.903319693s ago: executing program 1 (id=339):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x218881, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

2m42.298641598s ago: executing program 1 (id=343):
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x3e0000}], 0x5)

2m39.722288967s ago: executing program 33 (id=343):
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x3e0000}], 0x5)

7.654509564s ago: executing program 6 (id=760):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2)
ftruncate(r4, 0xffff)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000})
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)

7.451430967s ago: executing program 6 (id=761):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1], 0x0, 0x0)
r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,us', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,max_read=0x0000000000000e5a,blksi'])
r5 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x4, 0x2, 0x80a0000, 0x2000, &(0x7f000005e000/0x2000)=nil})
ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4})
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]})
shmctl$IPC_RMID(r4, 0x0)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)

7.346294118s ago: executing program 2 (id=762):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[], 0x8)

7.083058432s ago: executing program 2 (id=763):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x290, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x27c, 0x1, [@m_vlan={0x130, 0x1f, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7c0}]}, {0xf9, 0x6, "82a76b3a727162cd122b5e05a56455ad3c45e5928b3fc1528e3a76c837eed6059cfc399f7c19f3a1d9805960f2bcdcabbf8e3da4a84cb6f50e6e9451b35cda46d61a69cd89f6fb984322295278851c9af8a3e7232519bc060436f0274c39eeb73b92b026f4115725c06474cb8d222ef54e984a83deb3a42039e9142a0bbb1e09a7a16fa96a1c17320b99cc99ec3204996006698cac3f10d38b8716e70bc63e33bd7c42b8f3b20b8ef99a82a8592029c36d0abefcdb38483663261b21b974cb878b5ee675de6404002b134c3b71bd7d690e1d2d7661419b1838277c0821cad6f39158a721d6829db56a9f8d9e53f8bf1247232b064b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x48, 0x12, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x92f7, 0x10001, 0x7, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0xac, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x75, 0x6, "bd3a5376a2440c64d6314cc7f446e251aa486d1931d16d2a62a54d085a1be90b436fdedf917b760ef37b4272893313d629bb02bcd42142bb0469eba6b0eddd9bc3612d9b46c64f145f45c89cb5bb716f4a44dc897bd951f9775a35dd8303b774f0c02924dc414d297ae96eb8e36c2dfb53"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x54, 0x12, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}]}, {0xd, 0x6, "644cfabbe56830b72d"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

6.55491281s ago: executing program 2 (id=764):
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0)

6.463183192s ago: executing program 6 (id=765):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000111401002dbd700000000000080001000000000008004a000000000008004b001300000008000300"], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800)

6.330230874s ago: executing program 3 (id=766):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

6.237542395s ago: executing program 2 (id=768):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40)

6.146182126s ago: executing program 6 (id=769):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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")
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x8d)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb2, &(0x7f00000008c0)="$eJzs1zFqAkEUBuC3G0i2CqQJgRSpt8kdcpSQMjZipQjeQLyIV/EI9hYW24o4ws6KiJ3FCvJ9xcA/Pw9e+1a75eeijkiziFR/DDfpbDSe/P8O8hs8pDIiXiKiioivt5y3P7kruv61mf6tm6fr4ed57/sCAAC3K+P7Mh9S97HvrsA2vJ/6Kp8KraK/NQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu5hgAAP//VS0nxA==")
unlink(&(0x7f0000000140)='./file1\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
socket(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
syz_clone(0xa2093000, &(0x7f0000000340)="ffd3e669b5b38f1e0fd10a336564ef47c2e15bba", 0x14, &(0x7f0000000180), &(0x7f00000001c0), 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0x0)
accept4$x25(r3, 0x0, 0x0, 0x80800)

6.066240008s ago: executing program 3 (id=770):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
r4 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)

5.554037725s ago: executing program 2 (id=772):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
io_setup(0x8, 0x0)
syz_open_procfs(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x10000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40106308, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001})

5.132250232s ago: executing program 5 (id=773):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x34)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0))
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x25)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40082102, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff, 0x8})
write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

4.706342539s ago: executing program 6 (id=776):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r1 = syz_open_pts(r0, 0x20000)
dup3(r1, r0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}])

4.62896718s ago: executing program 5 (id=777):
r0 = socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_persistent(0x16, r1, r2)

4.282490435s ago: executing program 5 (id=778):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/49)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x11000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x108, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}]}, 0x108}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x4, 0x0, @void}, 0x10)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
dup2(r7, r6)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r8, &(0x7f0000000200), 0xfffffd9d)
close_range(r7, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)=""/46, &(0x7f00000003c0)=0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
r10 = fcntl$dupfd(r4, 0x0, r4)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='X', 0x1}], 0x1, 0x800000, 0x70)
ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x5, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96e", 0x0, 0x300, 0x0, 0x0, 0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000180)='5', 0x1)

3.846193141s ago: executing program 0 (id=779):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="9276bb52b7ad57", 0x7}], 0x1)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r5, 0x0, 0x0)
splice(r1, 0x0, r5, 0x0, 0x80, 0x4)
write(r3, 0x0, 0x0)

3.548885196s ago: executing program 0 (id=780):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

3.477266357s ago: executing program 6 (id=781):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_PRINT_DEBUG(r0, 0xab06)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = open(0x0, 0x80, 0x122)
fcntl$notify(r4, 0x402, 0x8000003d)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x3a)
sendfile(r2, r1, 0x0, 0x20000023893)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0)
memfd_secret(0x0)

3.30332468s ago: executing program 0 (id=782):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40)

2.981821075s ago: executing program 0 (id=783):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18)
ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffe})
setpriority(0x1, 0x0, 0x3)

2.228460246s ago: executing program 5 (id=784):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYRES64=0x0, @ANYBLOB="8d95f1031dccaa2df87d132b749eb198d489e226b1c19d312b4ff85eed4d63ad71c6350eb440f025e024a8c8b9e6d7fa5473650e6db510ca4f89a04b566811d15208a60abb8d988867596ae0e7e20bce530ad85891180debde4cc5096d6930c66b462c57a6acc22f6e637ea62249c5022a32f365b17cdb5fe70663b1aaa0af78968f9e73715692b8084dc1b23784aca4de7a13b709ad5c9cb9f82e810e2429db7623f0bf2da13afcd27d58c648bdf64f3e4ad96fdcd7464098ddf745da1660d18f80320b49eae50d2ac5c0f3a6f5365f21c2e91a95a7096122d75f977d012f970f2c70b3534f2e774c769472db689c06d284681ec9bd42a3ba49e20cc97abd89c37b9bf16a7ff29f550cec667f1facec6f29b6a58a15b433dafe766cfc0b163b5aa5463a509e918b754ef6aee74e711ffb9807f132145e06673e454ecffe9eb56003be94597606cdf8da0529061cf58610a2120da0357404793877b64ffe023a03688f8f1b01bb2a31b2e201716fccddf43cbadee70c94216fcc0f0f171423a077ddc816f0fcc9402e5fac419b02e8bfdcfa556ddde3b62cf100d6dc529cc71e3659829a82e3a5182cc29cebfa895e2659f36770bc7ddba4fbf9f4964b3f951bf872b69a19d6eb871234c7cb30f26faa6e5a0347e34a180f29b55149ed82a95d3c677d0e2f4a758ef8bfaebd5f296cf03bb675cd8980211e3ec0fcbf80fdeed222a69261cddbcf4a38161cf118943e208b271d317dffdc080878b940853b323bc76fd37ad1845826706291f437f1d591c810fe5ec1ef0d2794f5b16ce3121fc21e8c26aa8d45958da54362a2d0839bc41a6d7107331b781c5cb1eea8fecd62831c01a530da4a626d828c64ec540196d6c4e68e4051b932e7792a10d04fd51c3ea32a4b6f1fd73274461895c8f5ef0e7713ddec36cb00c719caceab03aaacd43ac7830511fb756c1e855ce0bebf5e6b1a280eb114b290ce8465f2cc09542a4fc96c864a0d1c7fac4a087a9f16df1141bf4eebd86717f436d28e76e6716cdf6b05390dcd749e7503215deb6788cd992788d8501f87bc8ce72e862741bde18804e2132c75a36ec47df49c9787457d774c2c1dfc156f38141b67282f5bf7087965cea1be32661c630d07cdc96b6035bc9b54feb08a6822dae57afecffa0ef66689e4be38c452adf0665a9e28688dd47f19f24687abf068d0e94fd788502c1c8e0d5f3fb65edb8726bbce2948186ec8abbad2acd2a72f458e7e3c6bf8f860f76b3cf17c0b20dfdee344a8356fd9f81fc0f417d6ab1c7e847ede9ab28b6664c693a46e7ad27146acd2cdc0f3d0f7b21f9f33e4dcd991a546707ae656fd1230bcc1996e83b79ecd156ebaff3647f43e79210844062764321ab0a01c161789b72a03b1b89d1602c864e03564323ab78174549e48008f7baa5854a2f42233c8ba2594b85de25beaa26a61a413f123123b4640af5dd57a9d3220496879ed902dd3841293449fd4962e45249b2e9ceffb8be97724d428a50516b1357337bc1e1258e3df1ad7bc7cbeb9b39769de3aad8d59376256c49a33064ed3ce0ea41b9be8e98ac3513b98d9e879cb381a2166f47968c05aaf99865de8dcdb632ec346e3889eaafbe68141804d78b39eb4ee9efced3051ccfd05027b69e2ceec0ad89ee7dcbc0a3e8313a4fd56aac3190c84de152e36e86258bfdbebdaa56124ee2a72e179f67f82234fe6820a6befa9ddfc72bae9673152985d5511f7f0864856332a47184313955fac6f5196840a4d25e634ace07fa6387ac595894dcdc82cf9ff33de3e612e498e66cb05a07620c472275003f1871890afe06c936f9d3238e50905bd2c6766960a1be32088b9b1cc9371f38da60ce4c6d2e130773cad227cf72aa48260686b557d5de2f51aa48cb457d02323a7dff20a68f328db037a459ac6ef057b6b6ee23b446af110d6741251c3aa3ba2e06560d7f06f37ad49218de79f4251c2eb81e226295157b9c4043fe96bfc8cb143bd5b454fe431cce96f539919b3bd990be397dab1bc3ec6cd16d23447a8010674b03b2331ca9b4fedbe7aac69e30c2e414ac5f5c198763ac761cb1cf218728a5041a13a54cf218db24ff96de649f56b1ae1d36e44146875f0d6d3cbf08ba3033f370408ad36588bd01a03e9e7d8729a11a7124ba7f59807cff99f96edecd02b905d00612d6b405caae7e69baac8246334ad49b2ff32980a61850bec381c51f9fca5886edb10434852a36a52e9aa887d45d10f967e6ff8323fa08e57e02a645b03d5bc0a9d7eed5da072f82ea87903ebddcc74aa684a4e137d6ddceaaeb81218b6b1af919919e48e43f6be7bcab13b69766478f31c8f43cddb8f4628153b314d4dd5f906fa51f65dd07539b221271a9f0a279d751d0b61f0859c07bc7754604af24246ee9f4cef4414a1e5e1d96244e9f0fe738d5ec9a484c9b9f695ced0d7859701a5748f48f55e16a3c5fadf39fbfb29fa3c88bc96506f0666eead5b8546e29c6cadd074468fd158bec3dda38e727fc04a75881b5233ae3593340f6dc5eda0d1f9096b0b83e172ac301d8ec05fce492110df23b014ee4ac79a91c4981d820eca6600e10f54448ffae8cd61206364693d0f3be71b4a62dacd5df08f391d5769fceb0a8a5c14f8450008cd87571408a3bc311e4b7169838dd4c1366b55f97df572f65d248ad4debeb0afa5c2f4b3763f7f1d48b9ad7d3a6d47f5c352ecbe3ee1765a2b4ad54c06807bfe0b3e52babe92b5b92a7764dd4710015c2a9082444ac27efc31056945e7646bcb37cdac7dcfcbb9d47e8a58915dc6b827f2a98c1505244f51d664fc9676eda656a096d72092c2077a27cec5e602ba62558d30f66cea3eb9843f8b6ded6239de5aff0860191e51c633475f8cb20d5de82bf30a86a495e730fb6da653b7a2216daf409ef279f42eeb96efcb0381bda9d4784d10a633ea1e8ac24a34f3d2a1a09ac008770d8d899def9ed444f678ca3566ceb3bdedc466a3a04217e91e73d532f4d046d767abb868100f37b17ff41cc83ea09eba73283f9800bd934cb7b1c62e75bb5ce1347a5cb1a2bca85c5722df3f44bc9bdede46ad72e5088b23caf0c58c10b247adfd753b84b386f1a9bacd7f46200956ec68b715c16772c4c8f5513ae883fa8ad30a862f288ff3a69a4fb75864d147b6e585bf96867d696617a43d1fa0bd77a3bd5ac77e7b89c745f2f34064527cec7fb6d2096de0970080221fbc44d3309c08ae57110bf56656f95c97cedee8d5e517775cc16411930c21e7ab7cf622ffce0ccd6dca8e85e6a488cc70f73b6bda64440e6ecafe8b30900b7e14f9dfd34c99732d4aa12e1319c74a06ca4341a806896e63fd5370250a9d6f498b854a22f329ab574b604326ee16cb333c52210bc629dfb39d554c89611a7a42346067c8f85c2f5f19427260a8e0e14460a5fb8ec9077ff4feb7892717a39db8b09bb2d928111ebc4142afeb8120f0a76e2cca92ea004280ca54df386fbd104dbeb213804eee90ae00705ad1f386bd353279df0fa9b966e0cc877ba21fec17306e2d7609147709aa99fbfe16a4c5221494deaa679581c98f7b98a9f4d6b4121a3ffac0df51872ad270909c2399c278e5ff67cc452f5a2c8bf2a2d38af1985b62a27e3249b30db3c3f52c8c1ee5119779780943af4af17799e272eeddd6bc088563e7e4e1c17afa1c2f008c0606585fd06516b34229daca6a9935e0e7975853b7f42d7c20020691cf7d1ba4365851fcfbfb99e3334ee73432fbe04774225cbd1eeade738ebb06c7d22c9183382051e67ec4f2093b41466dd5920461fd23f315d4160245964fd17f8c82875578c5ece793317bd019a7dbcf0b80a8e6502e980a0e1a445fbf6230d8aa2c83bcef47a76e9042da7a5120eca804d63f095b8e86d275e6f8a855cb069b9a5b28381e5ec8486f534d6dbbc5af55e8f1466de31e2fe9ed045a6bbb19dc2ec605b71c5c7ac75ecce8bf40e1e9a773938a855204965d8b6d363a4f4f40b92d371122cb637e9732ab1afbe3049169f238838bb30a874c293cb697a90026edaed16061ed78a41baefbc5c73960cd4131cd269ce02407867a7f8ca9e9e3de3288217ba52a463e91b5eb86d2155206197eee90e22c37437938a878f2bbe2015bb4a1fc89652e18aa282d1525494df30015369c2b1db3c92bd0fa77a4c556d5b573b777c0177ac46efae01858aa4c1fbd357ce0f2ac5f15343573197b9ec44253331a6cc4cfd467f9cc46613c4f25e942e376ff790c1e0ac2eaa3f0a9a373ae504cc247489fb23c6fca321ae286715c4afb9952e44f4fc2fc81f90a062795cce46c962ba032ef040ed75819cfed56bc5b5df91ae4ef8c198b151c7ffb3f8ed07a557304e557458a5493bde6154af909a69af9be8dc5eb4f95c8a0d99104f77b9b148b3481a257cfaa60be1b61ff3f81f07d2a6a0955c32cb735eef686a78be7f813a15ec2c07ae77f6b7ae659ef193e0bbd7bc44f2f1bde99f45869b81cc85fb9dd741a1d001249dbf3b1b1bba205d479f49713eb673cea212f8c14f9060bc8ed1c44362932230b28fc35112be7ef309f1f0ced58a8aed31726ee0d9579ad53b08db298842905b11230300cfdaeecac77852efbb438f1302417b624d4cb0b2cb114100782b12d6ff040ae95fae5e5b91c26dec6a845c3a65244e1356078d542dbd77d21a75c143baa90b274db1fcf719bf0ec3e11f160880f1df19c798f50869405897cd7d43734881b57f7f94d607b787e2cb20d41e6cb5cc979b68e6a15ffa541f522f6ac24b398041bee464ccaa7d18305d2a265c087b9976519871c191cafb782e18765d08b8b831ead366890325b8c9e27b0c656d872eda2b536a92fd36b42cf9e8fb2adb210450e544dbcad3252f16100ce27885f7217a9495bbbc8f3834a54f800630b57991cf5534e59d44cfabb43e1174d39aa86a789dffb0fc521b9c09ab1179fe63f8802acc122e87fc7d19f1e94c5bc6d7eeabba823c8dfb047601982b861e2519b59522cdc6e22be0b42e7b13c25367a5840eab8535b51ba9a2cd39d9fdd220a32a0325d3ae0ad97937757b770ce067248701da92d129f6223a4b65cb00de6585954557e2dec9f78936a0a050388f5def91e2b0c009a6dfbb0c73bc57552c07d56968fe35c3c00c75ffa3f93da71466e2134920f2115dc19ae1368aea605916acf5e11b13506ddd87579a8d267d1147e5ba0a70219ecc5380a88ce90837ff551aa6b2fd3b8ff2fb3d66d65005c647a02437ab11ea05844384846de26e2a225f732c031320b489a3db970adb55d4dc490c38d87137cfada41cd609c1906a29134b816008ee2ce144dd1df3485eae1327e8033e16c65ddea4738a545b93c95d70548729b6d64c5cdb4293cf72c6e1f9dcc72cbe56725e37aebac28871dda6e4942a35575fbe33a4b8159b939c0f6488cf521588f3ff3b38e0048212af03b99d3b78479a12aa6dcff4cd9a9d3b210e9fe177d710a7a53f9f7cc29a87a1287b4b665cf39cdc107e67f2717d6a6016ebb1666cf9b77c544d41242a23778603b36868118b1e707ea40e54eb59e00a6c097661979ec50ae2ac557636d7a0324a93c08480777f89ffc664c41b189b5819ec466c1ad74e5e66222142e58176387f708892e9a48969f64ed23ec0acb4cb1c84862acb1ca254ab92861b6ed70f38f3cc31e4f1b46ab3549e48b0c9d5afec4cacdf969a7a5b9b5c48cfee7b914aed3149c8fe58fc54235b9228a1c9a2a064587641d37785f1ce4c8208ec1377490f02dd22bf5668fc039b67f"], 0x2, 0x2ba, &(0x7f0000000240)="$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")
r0 = creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
write$UHID_CREATE2(r0, 0x0, 0x0)
rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.99287998s ago: executing program 2 (id=785):
openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x81b, 0x0)

1.637101665s ago: executing program 5 (id=786):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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")
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x8d)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb2, &(0x7f00000008c0)="$eJzs1zFqAkEUBuC3G0i2CqQJgRSpt8kdcpSQMjZipQjeQLyIV/EI9hYW24o4ws6KiJ3FCvJ9xcA/Pw9e+1a75eeijkiziFR/DDfpbDSe/P8O8hs8pDIiXiKiioivt5y3P7kruv61mf6tm6fr4ed57/sCAAC3K+P7Mh9S97HvrsA2vJ/6Kp8KraK/NQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu5hgAAP//VS0nxA==")
unlink(&(0x7f0000000140)='./file1\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
socket(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
syz_clone(0xa2093000, &(0x7f0000000340)="ffd3e669b5b38f1e0fd10a336564ef47c2e15bba", 0x14, &(0x7f0000000180), &(0x7f00000001c0), 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0x0)
accept4$x25(r3, 0x0, 0x0, 0x80800)

1.400658399s ago: executing program 0 (id=787):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x34)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0))
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x25)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40082102, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff, 0x8})
write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

976.125665ms ago: executing program 3 (id=788):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40)
r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0)

883.288017ms ago: executing program 0 (id=789):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1], 0x0, 0x0)
r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,us', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',allow_other,max_read=0x0000000000000e5a,blksi'])
r5 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x4, 0x2, 0x80a0000, 0x2000, &(0x7f000005e000/0x2000)=nil})
ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4})
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]})
shmctl$IPC_RMID(r4, 0x0)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)

681.67337ms ago: executing program 3 (id=790):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x80003, 0x0)
r2 = socket(0x200000100000011, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0x1, r4, 0x1, 0x7, 0x6, @local}, 0x14)
close_range(r1, 0xffffffffffffffff, 0x0)

605.441031ms ago: executing program 5 (id=791):
syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)

590.615902ms ago: executing program 3 (id=792):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

0s ago: executing program 3 (id=793):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts.
[   73.903749][ T4241] cgroup: Unknown subsys name 'net'
[   74.009929][ T4241] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.554368][ T4241] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   77.476717][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.485046][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.486233][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.493305][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.501204][ T4269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   77.510197][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.515184][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.522177][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.535727][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.537140][ T4267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   77.543670][ T4269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.550593][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.557122][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.564871][ T4267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.571427][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.579177][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.585455][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.593623][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   77.600755][ T4269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.606911][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.620492][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   77.628754][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.647422][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.655761][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   77.663159][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.671909][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   77.679775][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.712929][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.726719][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   77.734221][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.048316][ T4256] chnl_net:caif_netlink_parms(): no params data found
[   78.156921][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.165220][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.175326][ T4256] device bridge_slave_0 entered promiscuous mode
[   78.208859][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.219091][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.227850][ T4256] device bridge_slave_1 entered promiscuous mode
[   78.285117][ T4254] chnl_net:caif_netlink_parms(): no params data found
[   78.327957][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.360312][ T4253] chnl_net:caif_netlink_parms(): no params data found
[   78.370936][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.402392][ T4251] chnl_net:caif_netlink_parms(): no params data found
[   78.478998][ T4256] team0: Port device team_slave_0 added
[   78.489135][ T4252] chnl_net:caif_netlink_parms(): no params data found
[   78.517807][ T4256] team0: Port device team_slave_1 added
[   78.593670][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.600812][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.609852][ T4254] device bridge_slave_0 entered promiscuous mode
[   78.630623][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.637752][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.663779][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.681827][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.689519][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.698429][ T4254] device bridge_slave_1 entered promiscuous mode
[   78.714744][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.721881][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.730521][ T4253] device bridge_slave_0 entered promiscuous mode
[   78.738884][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.746007][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.772128][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.802811][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.810111][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.818586][ T4253] device bridge_slave_1 entered promiscuous mode
[   78.842431][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.849736][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.858560][ T4251] device bridge_slave_0 entered promiscuous mode
[   78.884708][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.904633][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.914927][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.922048][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.930256][ T4251] device bridge_slave_1 entered promiscuous mode
[   78.939645][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.960217][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.994286][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.001499][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.009693][ T4252] device bridge_slave_0 entered promiscuous mode
[   79.057738][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.065195][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.073112][ T4252] device bridge_slave_1 entered promiscuous mode
[   79.091123][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.104788][ T4253] team0: Port device team_slave_0 added
[   79.114884][ T4256] device hsr_slave_0 entered promiscuous mode
[   79.121968][ T4256] device hsr_slave_1 entered promiscuous mode
[   79.149348][ T4254] team0: Port device team_slave_0 added
[   79.157452][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.167914][ T4253] team0: Port device team_slave_1 added
[   79.190912][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.202456][ T4254] team0: Port device team_slave_1 added
[   79.233032][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.269520][ T4251] team0: Port device team_slave_0 added
[   79.276045][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.283035][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.309622][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.343856][ T4251] team0: Port device team_slave_1 added
[   79.350248][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.357369][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.383716][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.404809][ T4252] team0: Port device team_slave_0 added
[   79.411431][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.418559][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.444657][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.473936][ T4252] team0: Port device team_slave_1 added
[   79.484932][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.491964][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.519574][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.539360][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.546567][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.572623][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.609913][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.617031][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.643486][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.703944][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.710960][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.738017][ T4271] Bluetooth: hci0: command 0x0409 tx timeout
[   79.738237][ T4271] Bluetooth: hci2: command 0x0409 tx timeout
[   79.744244][ T4258] Bluetooth: hci4: command 0x0409 tx timeout
[   79.744467][ T4258] Bluetooth: hci3: command 0x0409 tx timeout
[   79.757384][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.779132][ T4253] device hsr_slave_0 entered promiscuous mode
[   79.786154][ T4253] device hsr_slave_1 entered promiscuous mode
[   79.793037][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.801276][ T4253] Cannot create hsr debugfs directory
[   79.813901][ T4258] Bluetooth: hci1: command 0x0409 tx timeout
[   79.831917][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.839321][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.865312][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.897576][ T4251] device hsr_slave_0 entered promiscuous mode
[   79.904800][ T4251] device hsr_slave_1 entered promiscuous mode
[   79.911419][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.919114][ T4251] Cannot create hsr debugfs directory
[   79.928284][ T4254] device hsr_slave_0 entered promiscuous mode
[   79.935606][ T4254] device hsr_slave_1 entered promiscuous mode
[   79.942212][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.949908][ T4254] Cannot create hsr debugfs directory
[   80.085212][ T4252] device hsr_slave_0 entered promiscuous mode
[   80.092143][ T4252] device hsr_slave_1 entered promiscuous mode
[   80.099409][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.107198][ T4252] Cannot create hsr debugfs directory
[   80.319117][ T4256] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.347732][ T4256] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.360452][ T4256] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.388711][ T4256] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.442997][ T4254] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.457910][ T4254] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.474426][ T4254] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.484612][ T4254] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.576236][ T4253] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.587057][ T4253] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.597940][ T4253] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.628316][ T4253] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.676124][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.696699][ T4251] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.709521][ T4251] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.720711][ T4251] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.757719][ T4251] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.772882][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.782908][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.799544][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.810216][ T4256] 8021q: adding VLAN 0 to HW filter on device team0
[   80.848522][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.857835][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.867746][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.875174][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.901418][ T4254] 8021q: adding VLAN 0 to HW filter on device team0
[   80.918050][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.927278][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.935998][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.952550][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.962284][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.971146][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.978303][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.986410][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.999408][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.012426][ T4252] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.021880][ T4252] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.034821][ T4252] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.057686][ T4252] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.073221][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.085171][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.095062][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.102178][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.110886][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.120363][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.129378][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.140705][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.182332][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.193220][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.202749][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.209926][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.219131][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.228494][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.238506][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.248990][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.257946][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.267032][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.290222][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.301794][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.322026][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.332422][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.342464][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.356074][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.370239][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.380548][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.420900][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.439457][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.451191][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.460374][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.469987][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.479141][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.494627][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.523689][ T4253] 8021q: adding VLAN 0 to HW filter on device team0
[   81.536669][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.552058][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.560839][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.571534][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.581093][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.588335][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.602229][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.638722][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.655288][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.676155][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.683359][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.727085][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.742787][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.761480][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.786326][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.804425][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.813356][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.820821][ T4258] Bluetooth: hci2: command 0x041b tx timeout
[   81.820863][ T4258] Bluetooth: hci4: command 0x041b tx timeout
[   81.823967][ T4267] Bluetooth: hci3: command 0x041b tx timeout
[   81.839604][ T4258] Bluetooth: hci0: command 0x041b tx timeout
[   81.878263][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.891044][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.898884][ T4267] Bluetooth: hci1: command 0x041b tx timeout
[   81.898971][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.916209][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.926046][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.934971][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.943338][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.952158][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.964990][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.985567][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.994248][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.002952][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.032192][ T4251] 8021q: adding VLAN 0 to HW filter on device team0
[   82.064756][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.080871][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.107713][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.129109][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.154510][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.171156][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.178379][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.203842][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.230046][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.250461][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.257701][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.266799][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.308610][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.320327][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.336867][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.349445][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.373064][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.387984][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.399589][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.413035][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.429864][ T4256] device veth0_vlan entered promiscuous mode
[   82.446297][ T4252] 8021q: adding VLAN 0 to HW filter on device team0
[   82.457275][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.473283][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.504594][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.533587][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.546436][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.554244][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.561747][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.571321][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.580747][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.587934][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.596021][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.605274][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.613968][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.621149][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.629369][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.637089][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.644979][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.655095][ T4256] device veth1_vlan entered promiscuous mode
[   82.672101][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.687524][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.698591][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.710469][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.719281][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.728332][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.739046][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.751044][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.782802][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.806282][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.816034][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.830010][ T4251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.842214][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.879064][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.892855][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.902279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.912249][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.922312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.939928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.951720][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.967678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.985039][ T4256] device veth0_macvtap entered promiscuous mode
[   83.035805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.054576][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.066196][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.079266][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.090035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.101485][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.110665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.119765][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.135319][ T4256] device veth1_macvtap entered promiscuous mode
[   83.158192][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.167204][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.180575][ T4254] device veth0_vlan entered promiscuous mode
[   83.207836][ T4253] device veth0_vlan entered promiscuous mode
[   83.216673][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.237402][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.264885][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.284331][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.309009][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.344014][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.351998][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.372771][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.382926][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.402430][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.427601][ T4256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.458876][ T4256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.476005][ T4256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.487404][ T4256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.504218][ T4254] device veth1_vlan entered promiscuous mode
[   83.511462][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.525467][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.536408][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.547241][ T4253] device veth1_vlan entered promiscuous mode
[   83.620530][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.630940][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.645364][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.654632][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.662218][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.703040][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.715188][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.732722][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.754551][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.768974][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.781722][ T4254] device veth0_macvtap entered promiscuous mode
[   83.800806][ T4253] device veth0_macvtap entered promiscuous mode
[   83.811758][ T4254] device veth1_macvtap entered promiscuous mode
[   83.846868][ T4253] device veth1_macvtap entered promiscuous mode
[   83.893928][ T4267] Bluetooth: hci3: command 0x040f tx timeout
[   83.900051][ T4267] Bluetooth: hci0: command 0x040f tx timeout
[   83.906327][ T4258] Bluetooth: hci4: command 0x040f tx timeout
[   83.906497][ T4271] Bluetooth: hci2: command 0x040f tx timeout
[   83.944752][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.953178][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.971370][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.983794][ T4271] Bluetooth: hci1: command 0x040f tx timeout
[   83.991448][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.999806][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.008098][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.030217][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.038441][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.056067][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.064152][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.078959][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.092289][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.100328][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.110197][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.126420][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.145640][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.161733][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.172328][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.190429][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.203034][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.229638][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.240894][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.269629][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.282138][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.297896][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.308811][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.320948][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.331191][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.341999][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.354155][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.370041][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.382693][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.396340][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.410689][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.425492][ T4254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.440104][ T4254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.449288][ T4254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.459751][ T4254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.482685][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.491435][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.500803][ T4253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.509830][ T4253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.520695][ T4253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.530018][ T4253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.556445][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.565346][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.574957][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.588430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.598800][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.632531][ T4252] device veth0_vlan entered promiscuous mode
[   84.671407][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.682889][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.710749][ T4252] device veth1_vlan entered promiscuous mode
[   84.721550][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.730097][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.739765][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.788657][ T4251] device veth0_vlan entered promiscuous mode
[   84.829362][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.844855][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.862559][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.878640][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.890094][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.952581][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.958335][ T4251] device veth1_vlan entered promiscuous mode
[   84.967682][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.461276][ T4375] loop2: detected capacity change from 0 to 32768
[   85.500659][ T4375] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   85.509575][ T4375] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   85.534917][ T4375] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[   85.537617][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.562554][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.572626][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.592951][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.593321][ T4375] gfs2: fsid=syz:syz.s: first mount done, others may mount
[   85.696096][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.717747][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.729352][ T4252] device veth0_macvtap entered promiscuous mode
[   85.753095][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.779813][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.867962][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.891988][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.897750][ T4252] device veth1_macvtap entered promiscuous mode
[   85.925184][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.934526][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.942738][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.951780][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.974530][ T4271] Bluetooth: hci2: command 0x0419 tx timeout
[   85.980667][ T4271] Bluetooth: hci0: command 0x0419 tx timeout
[   85.986855][ T4263] Bluetooth: hci4: command 0x0419 tx timeout
[   85.986875][ T4267] Bluetooth: hci3: command 0x0419 tx timeout
[   86.008870][ T4251] device veth0_macvtap entered promiscuous mode
[   86.038664][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.051826][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.054261][ T4271] Bluetooth: hci1: command 0x0419 tx timeout
[   86.073049][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.100447][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.141217][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.168854][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.200956][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.240894][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.253111][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.281065][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.286287][ T4380] loop2: detected capacity change from 0 to 1024
[   86.318826][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.354276][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.379172][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.400847][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.412186][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.423186][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.455271][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.465382][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.492465][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.608018][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.637123][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.656477][ T4251] device veth1_macvtap entered promiscuous mode
[   86.698946][ T4252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.746590][ T4252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.777924][ T4252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.822533][ T4252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.855918][   T14] cfg80211: failed to load regulatory.db
[   86.889948][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.902555][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.915069][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.926965][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.938041][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.951384][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.961699][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.972883][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.985846][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.032459][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.052718][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.117066][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.140594][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.161405][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.171615][ T4391] loop0: detected capacity change from 0 to 1024
[   87.183495][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.208884][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.219483][ T4391] =======================================================
[   87.219483][ T4391] WARNING: The mand mount option has been deprecated and
[   87.219483][ T4391]          and is ignored by this kernel. Remove the mand
[   87.219483][ T4391]          option from the mount to silence this warning.
[   87.219483][ T4391] =======================================================
[   87.338943][ T4391] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   87.353452][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.363336][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.374120][ T4391] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.393536][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.412221][ T4400] loop2: detected capacity change from 0 to 128
[   87.419623][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.452697][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.498464][ T4400] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   87.529213][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.652571][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.785144][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.805632][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.822869][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.905012][ T4404] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 1: comm syz.0.1: lblock 1 mapped to illegal pblock 1 (length 1)
[   88.465041][ T4407] capability: warning: `syz.2.12' uses 32-bit capabilities (legacy support in use)
[   88.701477][ T4404] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[   88.713872][ T4404] EXT4-fs (loop0): This should not happen!! Data will be lost
[   88.713872][ T4404] 
[   88.725846][ T4405] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 1: comm syz.0.1: lblock 1 mapped to illegal pblock 1 (length 1)
[   89.357188][ T4413] loop1: detected capacity change from 0 to 32768
[   89.387805][ T4413] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   89.396531][ T4413] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   89.419304][ T4253] EXT4-fs (loop0): unmounting filesystem.
[   89.434230][ T4413] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[   89.570327][ T4413] gfs2: fsid=syz:syz.s: first mount done, others may mount
[   89.659970][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.669488][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.684138][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.692519][ T4415] loop2: detected capacity change from 0 to 512
[   89.715877][ T4415] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   89.731459][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.751357][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.772519][ T4415] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   89.774919][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.828529][ T4419] loop0: detected capacity change from 0 to 1024
[   89.847275][ T4415] EXT4-fs (loop2): 1 truncate cleaned up
[   89.853006][ T4415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   89.946706][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.019656][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.031289][ T4415] overlayfs: failed to resolve './file2': -2
[   90.080496][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.083144][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.107861][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.216348][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.333185][ T4256] EXT4-fs (loop2): unmounting filesystem.
[   91.680440][ T4430] loop2: detected capacity change from 0 to 1024
[   92.132694][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   92.141405][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   92.153454][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   92.161768][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   92.169999][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   92.178294][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   92.186517][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   92.194813][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   92.937426][ T4430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   92.958736][ T4430] process 'syz.2.18' launched './file1' with NULL argv: empty string added
[   93.254622][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   93.264006][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[   93.388281][ T4464] loop1: detected capacity change from 0 to 1024
[   93.641508][ T4463] loop4: detected capacity change from 0 to 1024
[   93.706323][ T4467] loop3: detected capacity change from 0 to 2048
[   93.726025][ T4256] EXT4-fs (loop2): unmounting filesystem.
[   93.759233][ T4464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   93.830411][ T4467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   93.850986][ T4464] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.201478][ T4479] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 1: comm syz.1.23: lblock 1 mapped to illegal pblock 1 (length 1)
[   94.217271][ T4479] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[   94.229706][ T4479] EXT4-fs (loop1): This should not happen!! Data will be lost
[   94.229706][ T4479] 
[   94.242454][ T4479] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: block 1: comm syz.1.23: lblock 1 mapped to illegal pblock 1 (length 1)
[   95.101589][ T4481] loop4: detected capacity change from 0 to 512
[   95.338400][ T4254] EXT4-fs (loop1): unmounting filesystem.
[   95.353565][ T4481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   95.427674][ T4481] EXT4-fs (loop4): 1 truncate cleaned up
[   95.454506][ T4484] No such timeout policy "syz0"
[   95.462419][ T4481] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   95.689712][ T4252] EXT4-fs (loop3): unmounting filesystem.
[   96.062009][ T4251] EXT4-fs (loop4): unmounting filesystem.
[   96.241241][ T4496] loop2: detected capacity change from 0 to 65
[   96.252731][ T4496] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   97.785259][ T4512] loop2: detected capacity change from 0 to 1024
[   97.957850][   T27] audit: type=1800 audit(1751505265.599:2): pid=4512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.38" name="file1" dev="loop2" ino=20 res=0 errno=0
[   99.129283][ T4522] loop3: detected capacity change from 0 to 40427
[   99.179371][ T4522] F2FS-fs (loop3): invalid crc value
[   99.272870][ T4522] F2FS-fs (loop3): Found nat_bits in checkpoint
[   99.311634][ T4522] F2FS-fs (loop3): Start checkpoint disabled!
[   99.394993][ T4525] loop1: detected capacity change from 0 to 2048
[   99.604353][ T4522] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  100.171383][ T4534] loop0: detected capacity change from 0 to 512
[  100.287847][ T4525] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  100.367305][ T4534] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.425109][ T4534] EXT4-fs (loop0): 1 truncate cleaned up
[  100.453643][ T4534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  100.572907][ T4505] loop4: detected capacity change from 0 to 32768
[  100.624510][ T4505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.35 (4505)
[  100.702267][ T4254] EXT4-fs (loop1): unmounting filesystem.
[  100.710322][ T4532] kworker/u4:14: attempt to access beyond end of device
[  100.710322][ T4532] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  100.736827][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  100.826995][ T4337] kworker/u4:5: attempt to access beyond end of device
[  100.826995][ T4337] loop3: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  103.749366][   T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  103.961366][   T26] usb 3-1: Using ep0 maxpacket: 8
[  104.026622][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  104.136887][   T26] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB3, skipping
[  104.275867][   T26] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  104.293581][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.301897][   T26] usb 3-1: Product: syz
[  104.307324][   T26] usb 3-1: Manufacturer: syz
[  104.313540][   T26] usb 3-1: SerialNumber: syz
[  104.411065][   T26] usb 3-1: config 0 descriptor??
[  104.497374][   T26] radioshark 3-1:0.0: Invalid radioSHARK device
[  104.528691][   T26] radioshark: probe of 3-1:0.0 failed with error -22
[  104.536844][   T26] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  104.593639][ T4586] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551
[  104.636605][   T26] usb 3-1: USB disconnect, device number 2
[  104.927769][ T4590] loop0: detected capacity change from 0 to 40427
[  104.981052][ T4590] F2FS-fs (loop0): invalid crc value
[  105.021572][ T4590] F2FS-fs (loop0): Found nat_bits in checkpoint
[  105.057230][ T4590] F2FS-fs (loop0): Start checkpoint disabled!
[  105.119400][ T4590] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  105.638107][ T4594] loop3: detected capacity change from 0 to 2048
[  105.717011][ T4597] loop4: detected capacity change from 0 to 512
[  105.726869][ T4597] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  105.809945][ T4337] kworker/u4:5: attempt to access beyond end of device
[  105.809945][ T4337] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  105.825814][ T4337] kworker/u4:5: attempt to access beyond end of device
[  105.825814][ T4337] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  105.842559][ T4594] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  105.852136][ T4597] EXT4-fs (loop4): 1 truncate cleaned up
[  105.881273][ T4597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  106.144468][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  106.794933][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  111.392133][ T4650] loop3: detected capacity change from 0 to 512
[  111.405199][ T4650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  111.850539][ T4650] EXT4-fs (loop3): 1 truncate cleaned up
[  111.859567][ T4650] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  112.236189][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  112.250500][ T4660] loop1: detected capacity change from 0 to 2048
[  112.409802][ T4660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  113.011160][ T4254] EXT4-fs (loop1): unmounting filesystem.
[  113.026517][ T4646] loop2: detected capacity change from 0 to 32768
[  113.110954][ T4646] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.69 (4646)
[  113.233227][ T4672] No such timeout policy "syz0"
[  113.874382][ T4646] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  113.909106][ T4646] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  114.713869][ T4646] BTRFS info (device loop2): force zlib compression, level 3
[  114.747162][ T4646] BTRFS info (device loop2): force clearing of disk cache
[  115.016587][ T4646] BTRFS info (device loop2): setting nodatasum
[  115.086998][ T4646] BTRFS info (device loop2): doing ref verification
[  115.176771][ T4646] BTRFS info (device loop2): allowing degraded mounts
[  115.313253][ T4646] BTRFS info (device loop2): enabling disk space caching
[  115.353859][ T4646] BTRFS info (device loop2): disk space caching is enabled
[  115.622813][ T4691] loop1: detected capacity change from 0 to 40427
[  115.628393][ T4646] BTRFS error (device loop2): open_ctree failed: -12
[  115.798615][ T4691] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  115.806570][ T4691] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  116.049592][ T4691] F2FS-fs (loop1): invalid crc value
[  116.227039][ T4691] F2FS-fs (loop1): Found nat_bits in checkpoint
[  116.349848][ T4691] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  116.357438][ T4691] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  116.861067][ T4725] syz.1.80: attempt to access beyond end of device
[  116.861067][ T4725] loop1: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  117.742258][ T4255] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by udevd (4255)
[  119.251541][ T4742] syz.2.87 (4742): drop_caches: 2
[  120.952522][ T4753] loop1: detected capacity change from 0 to 512
[  121.005669][ T4753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  121.499851][ T4753] EXT4-fs (loop1): 1 truncate cleaned up
[  121.505923][ T4753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  123.204388][ T4254] EXT4-fs (loop1): unmounting filesystem.
[  123.399132][ T4774] Zero length message leads to an empty skb
[  125.383900][ T4787] loop0: detected capacity change from 0 to 40427
[  125.441505][ T4787] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  125.449420][ T4787] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  125.461433][ T4787] F2FS-fs (loop0): invalid crc value
[  126.344451][ T4795] loop1: detected capacity change from 0 to 40427
[  126.395213][ T4795] F2FS-fs (loop1): invalid crc value
[  126.412506][ T4795] F2FS-fs (loop1): Found nat_bits in checkpoint
[  126.414914][ T4799] loop2: detected capacity change from 0 to 8
[  126.485439][ T4795] F2FS-fs (loop1): Start checkpoint disabled!
[  126.490076][ T4787] F2FS-fs (loop0): Found nat_bits in checkpoint
[  126.573774][ T4795] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  126.575910][ T4787] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  126.588538][ T4787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  127.167081][ T4807] syz.0.96: attempt to access beyond end of device
[  127.167081][ T4807] loop0: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  128.738708][ T4811] loop4: detected capacity change from 0 to 512
[  128.833840][ T4811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  129.016700][ T4813] loop3: detected capacity change from 0 to 32768
[  129.028076][ T4813] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  129.036483][ T4813] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  129.049101][ T4813] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  129.059122][ T4811] EXT4-fs (loop4): 1 truncate cleaned up
[  129.088878][ T4811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  129.101572][ T4673] kworker/u4:16: attempt to access beyond end of device
[  129.101572][ T4673] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  129.117810][ T4813] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  129.626403][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  129.826473][ T4827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.356574][ T4833] No such timeout policy "syz0"
[  132.872937][ T4842] loop2: detected capacity change from 0 to 32768
[  132.913198][ T4842] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  132.921565][ T4842] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  133.152186][ T4846] loop3: detected capacity change from 0 to 40427
[  133.168284][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  133.187534][ T4846] F2FS-fs (loop3): invalid crc value
[  133.188011][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.223487][ T4842] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  133.466238][ T4842] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  133.525549][ T4846] F2FS-fs (loop3): Found nat_bits in checkpoint
[  133.556529][ T4846] F2FS-fs (loop3): Start checkpoint disabled!
[  133.569451][ T4846] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  134.765757][ T4416] kworker/u4:9: attempt to access beyond end of device
[  134.765757][ T4416] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  134.819771][ T4861] loop0: detected capacity change from 0 to 32768
[  134.838819][ T4861] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  134.847251][ T4861] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  134.885934][ T4861] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  134.969210][ T4861] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  135.415423][ T4872] loop2: detected capacity change from 0 to 512
[  135.544621][ T4872] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  136.110463][ T4872] EXT4-fs (loop2): 1 truncate cleaned up
[  136.123576][ T4872] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  136.195537][ T4872] overlayfs: missing 'lowerdir'
[  137.270903][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  137.919787][ T4893] loop1: detected capacity change from 0 to 40427
[  138.530920][ T4893] F2FS-fs (loop1): invalid crc value
[  138.624880][ T4893] F2FS-fs (loop1): Found nat_bits in checkpoint
[  138.648226][ T4900] loop2: detected capacity change from 0 to 32768
[  138.676052][ T4900] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  138.677679][ T4893] F2FS-fs (loop1): Start checkpoint disabled!
[  138.684397][ T4900] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  138.705434][ T4900] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  138.769793][ T4900] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  138.894650][ T4893] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  139.850722][ T4908] loop3: detected capacity change from 0 to 131072
[  139.870024][ T4908] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  139.878359][ T4908] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  139.936573][ T4908] F2FS-fs (loop3): invalid crc value
[  140.044246][ T4908] F2FS-fs (loop3): Found nat_bits in checkpoint
[  140.634389][ T4921] loop2: detected capacity change from 0 to 32768
[  140.645784][ T4921] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  140.654060][ T4921] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  140.666745][ T4921] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  140.714805][ T4908] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  140.722125][ T4908] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  140.881315][ T4921] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  140.903337][    T9] kworker/u4:0: attempt to access beyond end of device
[  140.903337][    T9] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  143.568279][ T4938] loop2: detected capacity change from 0 to 512
[  143.585260][ T4938] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  143.638708][ T4938] EXT4-fs (loop2): 1 truncate cleaned up
[  143.647650][ T4938] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  143.714730][ T4938] overlayfs: missing 'lowerdir'
[  144.116798][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  145.885957][ T4954] loop0: detected capacity change from 0 to 32768
[  145.909259][ T4954] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  145.917707][ T4954] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  145.929072][ T4954] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  145.972131][ T4954] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  149.204536][ T4984] loop6: detected capacity change from 0 to 524287999
[  150.019515][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 1
[  150.029384][    C0] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 1
[  150.039558][    C0] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 46 prio class 1
[  150.133378][    C1] sched: RT throttling activated
[  150.185517][ T4982] loop3: detected capacity change from 0 to 512
[  150.225381][ T4983] loop0: detected capacity change from 0 to 2048
[  150.261100][ T4982] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  150.495664][ T4983] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  150.529208][ T4982] EXT4-fs (loop3): 1 truncate cleaned up
[  150.561114][ T4982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  151.158170][ T4995] loop4: detected capacity change from 0 to 512
[  151.286194][ T4982] overlayfs: missing 'lowerdir'
[  151.406147][ T4995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  151.452622][ T4995] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.566465][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  151.574759][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  152.157481][ T4995] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #4: comm syz.4.154: corrupted inode contents
[  152.408363][ T4995] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #4: comm syz.4.154: mark_inode_dirty error
[  152.456388][ T5005] loop1: detected capacity change from 0 to 32768
[  152.491412][ T5005] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  152.499812][ T5005] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  152.517452][ T5005] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  152.559543][ T4995] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #4: comm syz.4.154: corrupted inode contents
[  152.612832][  T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  153.003771][  T126] usb 1-1: device descriptor read/64, error -71
[  153.024230][ T4995] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.154: mark_inode_dirty error
[  153.056812][ T5005] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  153.321111][  T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  154.097157][ T4995] Quota error (device loop4): write_blk: dquota write failed
[  154.174800][  T126] usb 1-1: device descriptor read/64, error -71
[  154.185073][ T4995] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  154.451887][  T126] usb usb1-port1: attempt power cycle
[  154.457395][ T4995] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.154: Failed to acquire dquot type 1
[  154.783324][ T5004] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #4: comm syz.4.154: corrupted inode contents
[  154.828955][ T5004] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #4: comm syz.4.154: mark_inode_dirty error
[  154.881680][ T5004] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #4: comm syz.4.154: corrupted inode contents
[  154.911861][ T5004] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.154: mark_inode_dirty error
[  154.981080][ T5004] Quota error (device loop4): write_blk: dquota write failed
[  155.032441][ T5004] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  155.060266][ T5004] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  155.078352][ T5004] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.154: Failed to acquire dquot type 1
[  155.284804][  T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  156.693614][  T126] usb 1-1: device descriptor read/8, error -71
[  156.911680][ T5042] loop3: detected capacity change from 0 to 2048
[  157.805765][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  157.818605][ T5042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  158.218525][ T5023] Bluetooth: Error in BCSP hdr checksum
[  159.016425][ T4376] Bluetooth: Error in BCSP hdr checksum
[  159.075822][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  159.273897][   T46] Bluetooth: Error in BCSP hdr checksum
[  159.409057][  T126] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  159.812952][ T4673] Bluetooth: Error in BCSP hdr checksum
[  160.003511][  T126] usb 1-1: Using ep0 maxpacket: 32
[  160.080868][ T5074] loop2: detected capacity change from 0 to 64
[  160.092158][ T4532] Bluetooth: Error in BCSP hdr checksum
[  160.154152][  T126] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[  160.229259][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  160.903346][ T4341] Bluetooth: Error in BCSP hdr checksum
[  161.042511][  T126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.067901][ T5074] hfs: walked past end of dir
[  161.111459][  T126] usb 1-1: string descriptor 0 read error: -71
[  161.123856][  T126] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  161.138286][ T5080] loop1: detected capacity change from 0 to 1024
[  161.167402][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.222501][  T126] usb 1-1: config 0 descriptor??
[  161.237973][ T5082] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  161.259412][  T126] usb 1-1: can't set config #0, error -71
[  161.321040][  T126] usb 1-1: USB disconnect, device number 6
[  161.327029][   T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  162.412811][ T5091] loop0: detected capacity change from 0 to 32768
[  162.433187][ T5091] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  162.439372][   T26] usb 5-1: device descriptor read/64, error -71
[  162.441483][ T5091] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  162.863477][ T5091] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  163.093570][   T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  163.231004][ T5091] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  163.279673][ T4469] hfsplus: b-tree write err: -5, ino 4
[  163.323594][   T26] usb 5-1: device descriptor read/64, error -71
[  163.443615][   T26] usb usb5-port1: attempt power cycle
[  163.863603][   T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  163.912665][   T26] usb 5-1: device descriptor read/8, error -71
[  164.074562][ T5097] No such timeout policy "syz0"
[  164.183658][   T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  164.299699][ T5103] loop0: detected capacity change from 0 to 2048
[  164.394165][ T5106] loop4: detected capacity change from 0 to 2048
[  164.423651][   T26] usb 5-1: device not accepting address 5, error -71
[  164.461970][   T26] usb usb5-port1: unable to enumerate USB device
[  164.530531][ T5103] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  164.540644][ T5106] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  164.602265][ T5106] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.707723][   T27] audit: type=1800 audit(1751505333.355:3): pid=5106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.186" name="file0" dev="loop4" ino=13 res=0 errno=0
[  164.871920][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  165.046332][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  165.256401][ T4532] Bluetooth: Error in BCSP hdr checksum
[  165.483158][ T5118] loop4: detected capacity change from 0 to 8192
[  165.500304][ T4416] Bluetooth: Error in BCSP hdr checksum
[  165.506224][  T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  165.517959][ T5122] loop0: detected capacity change from 0 to 40427
[  165.549330][ T5122] F2FS-fs (loop0): invalid crc value
[  165.573727][ T5122] F2FS-fs (loop0): Found nat_bits in checkpoint
[  165.614214][ T5122] F2FS-fs (loop0): Start checkpoint disabled!
[  165.670218][ T5122] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  165.723733][  T126] usb 2-1: Using ep0 maxpacket: 32
[  165.734255][  T126] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[  165.950063][  T126] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.073957][ T5127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.192'.
[  166.089897][ T5109] loop3: detected capacity change from 0 to 40427
[  166.115123][ T5109] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  166.150637][ T4673] Bluetooth: Error in BCSP hdr checksum
[  166.172955][  T126] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  166.183702][ T5109] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  166.241856][ T5109] F2FS-fs (loop3): invalid crc value
[  166.259487][  T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.283455][  T126] usb 2-1: Product: syz
[  166.287715][  T126] usb 2-1: Manufacturer: syz
[  166.331385][  T126] usb 2-1: SerialNumber: syz
[  166.388012][  T126] usb 2-1: config 0 descriptor??
[  166.459421][ T5109] F2FS-fs (loop3): Found nat_bits in checkpoint
[  166.480631][ T4532] Bluetooth: Error in BCSP hdr checksum
[  166.594865][ T4673] kworker/u4:16: attempt to access beyond end of device
[  166.594865][ T4673] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  166.777141][ T4673] kworker/u4:16: attempt to access beyond end of device
[  166.777141][ T4673] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  167.204228][ T4532] Bluetooth: Error in BCSP hdr checksum
[  167.293680][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  167.345136][ T5109] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  167.370020][ T5109] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  167.475853][ T4563] Bluetooth: Error in BCSP hdr checksum
[  167.729070][ T4563] Bluetooth: Error in BCSP hdr checksum
[  167.980565][   T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  167.990664][ T4563] Bluetooth: Error in BCSP hdr checksum
[  168.086512][  T129] usb 2-1: USB disconnect, device number 2
[  168.160009][   T26] usb 4-1: device descriptor read/64, error -71
[  168.218332][ T5147] loop2: detected capacity change from 0 to 512
[  168.237608][ T5147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  168.266989][ T5147] EXT4-fs (loop2): 1 truncate cleaned up
[  168.272770][ T5147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  168.593667][   T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  168.788741][ T5147] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  168.843597][   T26] usb 4-1: device descriptor read/64, error -71
[  168.910468][ T5147] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  169.034111][   T26] usb usb4-port1: attempt power cycle
[  169.077657][ T5141] loop4: detected capacity change from 0 to 32768
[  169.121271][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  169.226898][ T5141] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  169.274931][ T5157] loop0: detected capacity change from 0 to 2048
[  169.372670][ T5157] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  169.510946][ T5158] loop1: detected capacity change from 0 to 4096
[  170.230511][   T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  170.271520][   T26] usb 4-1: device descriptor read/8, error -71
[  170.603259][ T5158] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  170.613024][ T4251] ocfs2: Unmounting device (7,4) on (node local)
[  170.683592][   T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  170.918697][   T26] usb 4-1: device descriptor read/8, error -71
[  170.970159][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  171.043714][   T26] usb usb4-port1: unable to enumerate USB device
[  171.950772][ T5182] Bluetooth: MGMT ver 1.22
[  172.127931][ T5180] loop0: detected capacity change from 0 to 40427
[  172.150429][ T5180] F2FS-fs (loop0): invalid crc value
[  172.185412][ T5180] F2FS-fs (loop0): Found nat_bits in checkpoint
[  172.226879][ T5180] F2FS-fs (loop0): Start checkpoint disabled!
[  172.235041][ T5180] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  173.102685][ T4416] kworker/u4:9: attempt to access beyond end of device
[  173.102685][ T4416] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  173.725131][ T4416] kworker/u4:9: attempt to access beyond end of device
[  173.725131][ T4416] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  173.973968][ T5191] loop3: detected capacity change from 0 to 32768
[  173.994465][ T5191] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  174.002726][ T5191] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  174.025870][ T5191] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  174.074625][ T5191] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  174.637536][ T5194] loop0: detected capacity change from 0 to 32768
[  174.645095][ T5194] XFS: ikeep mount option is deprecated.
[  174.842206][ T5194] XFS (loop0): Mounting V5 Filesystem
[  175.033710][ T5194] XFS (loop0): Ending clean mount
[  175.042747][ T5207] loop3: detected capacity change from 0 to 2048
[  175.050703][ T5205] loop2: detected capacity change from 0 to 256
[  175.060148][ T5194] XFS (loop0): Quotacheck needed: Please wait.
[  175.171152][ T5194] XFS (loop0): Quotacheck: Done.
[  175.177808][ T5205] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  175.418540][ T5207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  175.788168][ T5187] loop1: detected capacity change from 0 to 32768
[  176.153894][ T4253] XFS (loop0): Unmounting Filesystem
[  176.234707][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  176.463459][  T126] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  176.633544][  T126] usb 3-1: device descriptor read/64, error -71
[  176.913806][  T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  177.106359][  T126] usb 3-1: device descriptor read/64, error -71
[  177.274477][  T126] usb usb3-port1: attempt power cycle
[  177.713582][  T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  177.781179][  T126] usb 3-1: device descriptor read/8, error -71
[  178.073884][  T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  178.114427][  T126] usb 3-1: device descriptor read/8, error -71
[  178.173829][ T5247] loop1: detected capacity change from 0 to 512
[  178.198490][ T5247] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  178.311079][ T5247] EXT4-fs (loop1): 1 truncate cleaned up
[  178.343114][ T5247] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  178.402602][  T126] usb usb3-port1: unable to enumerate USB device
[  178.417010][ T5247] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  178.426076][ T5247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  179.136626][ T4254] EXT4-fs (loop1): unmounting filesystem.
[  179.644588][ T5256] loop0: detected capacity change from 0 to 2048
[  180.101709][ T5256] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  180.384224][ T5259] loop4: detected capacity change from 0 to 131072
[  180.391889][ T5259] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  180.400171][ T5259] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  180.410653][ T5259] F2FS-fs (loop4): invalid crc value
[  180.549992][ T5259] F2FS-fs (loop4): Found nat_bits in checkpoint
[  180.611170][ T5259] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  180.618417][ T5259] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  181.326948][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  181.472007][ T5288] loop0: detected capacity change from 0 to 164
[  182.151825][ T5287] loop1: detected capacity change from 0 to 131072
[  182.199545][ T5287] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  182.207832][ T5287] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  182.223944][ T5287] F2FS-fs (loop1): invalid crc value
[  182.317805][ T5287] F2FS-fs (loop1): Found nat_bits in checkpoint
[  182.565738][ T5283] syz.2.231 (5283): drop_caches: 2
[  182.594142][ T5288] isofs_fill_super: root inode is not a directory. Corrupted media?
[  182.624226][ T5287] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  182.631345][ T5287] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  187.023729][ T5315] loop1: detected capacity change from 0 to 512
[  187.073832][ T5315] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  187.118999][ T5315] EXT4-fs (loop1): 1 truncate cleaned up
[  187.130756][ T5315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  187.170863][ T5315] overlayfs: missing 'lowerdir'
[  187.196551][ T4350] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  187.403662][ T4254] EXT4-fs (loop1): unmounting filesystem.
[  187.681103][ T5326] loop1: detected capacity change from 0 to 2048
[  187.750745][ T5326] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  190.738982][ T5341] loop0: detected capacity change from 0 to 131072
[  190.810917][ T5341] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  190.819133][ T5341] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  190.835020][ T5341] F2FS-fs (loop0): invalid crc value
[  190.875968][ T4254] EXT4-fs (loop1): unmounting filesystem.
[  190.947225][ T5341] F2FS-fs (loop0): Found nat_bits in checkpoint
[  191.132068][ T5341] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  191.139196][ T5341] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  191.333272][ T5352] loop1: detected capacity change from 0 to 256
[  191.880411][ T5352] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  192.123463][ T4722] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  192.293621][ T4722] usb 3-1: device descriptor read/64, error -71
[  192.600569][ T4722] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  192.863546][ T4722] usb 3-1: device descriptor read/64, error -71
[  192.983631][ T4722] usb usb3-port1: attempt power cycle
[  193.413798][ T4722] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  193.476506][ T4722] usb 3-1: device descriptor read/8, error -71
[  193.923672][ T4722] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  193.968148][ T4722] usb 3-1: device descriptor read/8, error -71
[  194.094045][ T4722] usb usb3-port1: unable to enumerate USB device
[  194.301256][ T5377] loop4: detected capacity change from 0 to 40427
[  194.699039][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.705510][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.733868][ T5377] F2FS-fs (loop4): invalid crc value
[  194.768818][ T5380] loop1: detected capacity change from 0 to 2048
[  194.787897][ T5377] F2FS-fs (loop4): Found nat_bits in checkpoint
[  194.828844][ T5377] F2FS-fs (loop4): Start checkpoint disabled!
[  195.025116][ T5383] loop0: detected capacity change from 0 to 32768
[  195.043936][ T5380] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  195.076164][ T5383] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  195.084790][ T5383] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  195.096621][ T5383] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  195.153672][ T5377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  195.887998][ T5383] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  197.225886][ T4254] EXT4-fs (loop1): unmounting filesystem.
[  197.915887][ T5401] loop2: detected capacity change from 0 to 131072
[  197.934126][ T5401] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  197.942290][ T5401] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  197.958025][ T5401] F2FS-fs (loop2): invalid crc value
[  198.031571][ T5401] F2FS-fs (loop2): Found nat_bits in checkpoint
[  198.114915][ T5401] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  198.122896][ T5401] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  199.612304][ T4416] kworker/u4:9: attempt to access beyond end of device
[  199.612304][ T4416] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  199.735195][ T4416] kworker/u4:9: attempt to access beyond end of device
[  199.735195][ T4416] loop4: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  202.783479][ T4271] Bluetooth: hci4: command 0x0406 tx timeout
[  202.789620][ T4271] Bluetooth: hci2: command 0x0406 tx timeout
[  202.795840][ T4267] Bluetooth: hci3: command 0x0406 tx timeout
[  202.795869][ T4258] Bluetooth: hci1: command 0x0406 tx timeout
[  202.873132][ T5445] loop2: detected capacity change from 0 to 2048
[  202.990658][ T5445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  203.042131][ T5451] loop3: detected capacity change from 0 to 2048
[  203.852580][ T5451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  205.191491][ T5468] loop0: detected capacity change from 0 to 32768
[  205.282733][ T5468] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  205.286648][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  205.292081][ T5468] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  205.329590][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  205.389937][ T5468] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  205.427291][ T5468] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  205.553203][ T5473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.280'.
[  206.018950][ T5475] loop2: detected capacity change from 0 to 40427
[  206.031506][ T5475] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  206.039467][ T5475] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  206.052074][ T5475] F2FS-fs (loop2): invalid crc value
[  206.307127][ T5475] F2FS-fs (loop2): Found nat_bits in checkpoint
[  206.360779][ T5475] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  206.369671][ T5475] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  208.138718][ T5507] syz.2.281: attempt to access beyond end of device
[  208.138718][ T5507] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  208.189390][ T5509] loop0: detected capacity change from 0 to 512
[  208.361881][ T5509] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  208.387884][ T5508] loop4: detected capacity change from 0 to 40427
[  208.449924][ T5508] F2FS-fs (loop4): invalid crc value
[  208.500788][ T5509] EXT4-fs (loop0): 1 truncate cleaned up
[  208.513757][ T5509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  208.529262][ T5508] F2FS-fs (loop4): Found nat_bits in checkpoint
[  208.572316][ T5508] F2FS-fs (loop4): Start checkpoint disabled!
[  208.613917][ T5508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  208.622778][ T5509] overlayfs: missing 'workdir'
[  208.650609][ T5513] loop1: detected capacity change from 0 to 2048
[  208.779903][ T5513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  208.849695][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  209.986348][   T46] kworker/u4:3: attempt to access beyond end of device
[  209.986348][   T46] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  210.005228][ T4254] EXT4-fs (loop1): unmounting filesystem.
[  210.143881][   T46] kworker/u4:3: attempt to access beyond end of device
[  210.143881][   T46] loop4: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  211.643249][ T5539] loop1: detected capacity change from 0 to 32768
[  211.659880][ T5539] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  211.668188][ T5539] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  211.690703][ T5539] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  211.726473][ T5539] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  214.789196][ T5565] loop4: detected capacity change from 0 to 512
[  214.818096][ T5565] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  215.474970][ T5565] EXT4-fs (loop4): 1 truncate cleaned up
[  215.480798][ T5565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  215.602299][ T5565] overlayfs: missing 'workdir'
[  215.733896][ T5573] loop0: detected capacity change from 0 to 2048
[  216.645260][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  216.733955][ T5573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  217.504591][ T5583] loop3: detected capacity change from 0 to 32768
[  217.567474][ T5583] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  217.576456][ T5583] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  217.589815][ T5583] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  217.685135][ T5583] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  219.335891][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  221.465736][ T5620] loop2: detected capacity change from 0 to 40427
[  221.482176][ T5621] loop4: detected capacity change from 0 to 512
[  221.502775][ T5620] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  221.510643][ T5620] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  222.205653][ T5626] loop0: detected capacity change from 0 to 32768
[  222.214382][ T5621] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  222.233766][ T5620] F2FS-fs (loop2): invalid crc value
[  222.235656][ T5626] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  222.247467][ T5626] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  222.259040][ T5626] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  222.672831][ T5626] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  222.970227][ T5621] EXT4-fs (loop4): 1 truncate cleaned up
[  222.980351][ T5621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  223.008222][ T5620] F2FS-fs (loop2): Found nat_bits in checkpoint
[  223.114518][ T5620] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  223.121842][ T5620] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  223.545755][ T5644] syz.2.317: attempt to access beyond end of device
[  223.545755][ T5644] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  224.699494][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  224.955670][ T5654] No such timeout policy "syz0"
[  225.173691][ T4350] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  225.229848][ T4416] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.415704][ T4350] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  225.453432][ T4350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.533464][ T4350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.608188][ T4350] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  225.657309][ T4350] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  225.685526][ T4350] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  225.703493][ T4350] usb 2-1: Manufacturer: syz
[  225.716357][ T4350] usb 2-1: config 0 descriptor??
[  225.737486][ T4416] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.857117][ T5663] loop0: detected capacity change from 0 to 256
[  225.887264][ T4416] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.916787][ T5663] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  225.943584][ T5663] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  225.973095][ T5663] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  226.083267][ T4416] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.158090][ T4350] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[  226.177788][ T5663] exFAT-fs (loop0): hint_cluster is invalid (17)
[  226.201597][ T4350] appleir 0003:05AC:8243.0001: No inputs registered, leaving
[  226.296734][ T4350] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  226.519405][ T4332] usb 2-1: USB disconnect, device number 3
[  226.771462][ T5669] fido_id[5669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  227.396520][ T5677] loop0: detected capacity change from 0 to 32768
[  228.097474][ T5677] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  228.105752][ T5677] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  228.113015][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  228.135080][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  228.139863][ T5677] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  228.144367][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  228.159752][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  228.168762][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  228.177377][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  228.196906][ T5677] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  228.479881][ T5687] loop1: detected capacity change from 0 to 512
[  228.628085][ T5687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  228.764958][ T5687] EXT4-fs (loop1): 1 truncate cleaned up
[  228.771928][ T5687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  228.903264][ T5697] loop0: detected capacity change from 0 to 64
[  228.928814][ T5697] hfs: unable to parse mount options
[  230.214598][ T4258] Bluetooth: hci0: command 0x0409 tx timeout
[  230.372980][ T5705] loop2: detected capacity change from 0 to 2048
[  230.518933][ T5705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  230.554339][ T4254] EXT4-fs (loop1): unmounting filesystem.
[  232.293544][ T4258] Bluetooth: hci0: command 0x041b tx timeout
[  232.408693][ T5678] chnl_net:caif_netlink_parms(): no params data found
[  232.517563][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  232.916553][ T5729] loop3: detected capacity change from 0 to 32768
[  232.946115][ T5729] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  232.955190][ T5729] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  232.966751][ T5729] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  232.997602][ T5729] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  233.491438][ T5733] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  233.685587][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.706117][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.740951][ T5678] device bridge_slave_0 entered promiscuous mode
[  233.863005][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.873599][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.881944][ T5678] device bridge_slave_1 entered promiscuous mode
[  233.979183][ T5746] loop2: detected capacity change from 0 to 1024
[  234.144096][ T4258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  234.170239][ T4258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  234.201930][ T4258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  234.224435][ T4258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  234.243700][ T4258] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  234.265331][ T4258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  234.375546][ T4258] Bluetooth: hci0: command 0x040f tx timeout
[  236.123045][ T5768] loop2: detected capacity change from 0 to 2048
[  236.220796][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.386217][ T4258] Bluetooth: hci3: command 0x0409 tx timeout
[  236.453656][ T4258] Bluetooth: hci0: command 0x0419 tx timeout
[  236.456133][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.537563][ T5768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  237.081854][ T5678] team0: Port device team_slave_0 added
[  237.095840][ T5678] team0: Port device team_slave_1 added
[  237.168863][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  237.182469][ T4416] device hsr_slave_0 left promiscuous mode
[  237.190551][ T4416] device hsr_slave_1 left promiscuous mode
[  237.198201][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.206267][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.217033][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.224640][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.232728][ T4416] device bridge_slave_1 left promiscuous mode
[  237.243065][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.263942][ T4416] device bridge_slave_0 left promiscuous mode
[  237.272228][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.449316][ T4416] device veth1_macvtap left promiscuous mode
[  237.471602][ T4416] device veth0_macvtap left promiscuous mode
[  237.497020][ T4416] device veth1_vlan left promiscuous mode
[  237.531461][ T4416] device veth0_vlan left promiscuous mode
[  237.984459][ T5800] loop3: detected capacity change from 0 to 1764
[  238.609421][ T4271] Bluetooth: hci3: command 0x041b tx timeout
[  238.772565][ T5804] loop3: detected capacity change from 0 to 128
[  238.793481][ T5804] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  238.848454][ T5804] EXT4-fs (loop3): Encoding requested by superblock is unknown
[  239.757298][ T5808] loop3: detected capacity change from 0 to 64
[  239.777306][ T5808] hfs: unable to parse mount options
[  239.907455][ T4416] team0 (unregistering): Port device team_slave_1 removed
[  240.705102][ T4271] Bluetooth: hci3: command 0x040f tx timeout
[  241.219199][ T4416] team0 (unregistering): Port device team_slave_0 removed
[  241.292943][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.366192][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.149043][ T4258] Bluetooth: hci3: command 0x0419 tx timeout
[  244.946160][ T5828] loop3: detected capacity change from 0 to 2048
[  245.031503][ T5828] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  245.685074][ T4416] bond0 (unregistering): Released all slaves
[  245.714743][ T5840] loop0: detected capacity change from 0 to 128
[  245.749239][ T5840] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4558: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  245.781371][ T5840] EXT4-fs (loop0): Encoding requested by superblock is unknown
[  245.976291][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.983276][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.031415][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.034380][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  246.045867][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.055324][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.081771][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.897214][ T5678] device hsr_slave_0 entered promiscuous mode
[  247.201802][ T5850] loop2: detected capacity change from 0 to 40427
[  247.214634][ T5678] device hsr_slave_1 entered promiscuous mode
[  247.224415][ T5850] F2FS-fs (loop2): invalid crc value
[  247.252694][ T5850] F2FS-fs (loop2): Found nat_bits in checkpoint
[  247.293270][ T5850] F2FS-fs (loop2): Start checkpoint disabled!
[  247.301219][ T5678] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.311587][ T5850] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  247.347045][ T5678] Cannot create hsr debugfs directory
[  248.258364][ T4337] kworker/u4:5: attempt to access beyond end of device
[  248.258364][ T4337] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  248.473085][ T5751] chnl_net:caif_netlink_parms(): no params data found
[  249.464487][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.471668][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.529982][ T5751] device bridge_slave_0 entered promiscuous mode
[  249.618836][ T5678] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  249.859901][ T5882] loop0: detected capacity change from 0 to 2048
[  250.342977][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.350288][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.358562][ T5751] device bridge_slave_1 entered promiscuous mode
[  250.453495][ T5678] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  250.484660][ T5882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  250.515402][ T5889] netlink: 44 bytes leftover after parsing attributes in process `syz.2.380'.
[  250.578701][ T5678] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  250.615986][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.787567][ T4416] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.971967][ T5678] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  250.993286][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.077612][ T4416] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.131681][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  252.148183][ T4416] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.219482][ T5913] loop0: detected capacity change from 0 to 4096
[  252.289354][ T5751] team0: Port device team_slave_0 added
[  252.481302][ T5917] loop2: detected capacity change from 0 to 40427
[  252.490149][ T5751] team0: Port device team_slave_1 added
[  252.512636][ T5917] F2FS-fs (loop2): invalid crc value
[  252.536676][ T5917] F2FS-fs (loop2): Found nat_bits in checkpoint
[  252.592336][ T5917] F2FS-fs (loop2): Start checkpoint disabled!
[  252.602487][ T5917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  252.654142][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.261659][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.037313][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.157752][ T4673] kworker/u4:16: attempt to access beyond end of device
[  254.157752][ T4673] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  254.205782][ T4416] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.330639][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.366343][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.400709][ T4673] kworker/u4:16: attempt to access beyond end of device
[  254.400709][ T4673] loop2: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  254.624653][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.829043][ T5751] device hsr_slave_0 entered promiscuous mode
[  254.864653][ T5751] device hsr_slave_1 entered promiscuous mode
[  254.879172][ T5932] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  254.904032][ T5751] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  254.911682][ T5751] Cannot create hsr debugfs directory
[  255.151959][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.903798][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.919197][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  256.310419][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  256.354592][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  256.402045][ T5678] 8021q: adding VLAN 0 to HW filter on device team0
[  256.631822][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  256.737544][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  256.790820][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.798144][ T5076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.850902][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  256.978757][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  257.016823][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  257.032880][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.040146][ T5076] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.056724][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  257.243902][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  257.253226][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  257.274670][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  257.780264][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  257.933180][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  257.971360][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  258.499261][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  258.679503][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  258.880977][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  258.895289][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  258.938599][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  259.462558][ T5751] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  259.548180][ T5751] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  260.094022][ T5751] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  260.200390][ T5751] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  260.345180][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.364009][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  260.394216][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  262.612287][ T4416] device hsr_slave_0 left promiscuous mode
[  262.641705][ T6025] loop0: detected capacity change from 0 to 40427
[  262.654227][ T6025] F2FS-fs (loop0): invalid crc value
[  262.667045][ T4416] device hsr_slave_1 left promiscuous mode
[  262.683261][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.711206][ T6025] F2FS-fs (loop0): Found nat_bits in checkpoint
[  262.760934][ T6025] F2FS-fs (loop0): Start checkpoint disabled!
[  262.783559][ T6025] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  262.786830][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.887365][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.947361][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.220574][ T4416] device bridge_slave_1 left promiscuous mode
[  263.251351][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.341608][ T4416] device bridge_slave_0 left promiscuous mode
[  263.381264][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.806267][ T4416] device veth1_macvtap left promiscuous mode
[  263.812756][ T4416] device veth0_macvtap left promiscuous mode
[  263.822286][ T4416] device veth1_vlan left promiscuous mode
[  263.828681][ T4416] device veth0_vlan left promiscuous mode
[  264.622554][   T11] kworker/u4:1: attempt to access beyond end of device
[  264.622554][   T11] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  264.674974][   T11] kworker/u4:1: attempt to access beyond end of device
[  264.674974][   T11] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  266.764408][ T4416] team0 (unregistering): Port device team_slave_1 removed
[  266.884735][ T4416] team0 (unregistering): Port device team_slave_0 removed
[  267.047380][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.132556][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.905948][ T4416] bond0 (unregistering): Released all slaves
[  268.962390][ T6082] loop3: detected capacity change from 0 to 4096
[  269.069808][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.416881][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  269.444295][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  269.791879][ T5751] 8021q: adding VLAN 0 to HW filter on device team0
[  270.012357][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  270.060235][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  270.131527][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.138804][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.302362][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  271.372646][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  271.514348][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  271.676273][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  271.685403][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  271.694171][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.701474][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.709487][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  271.721151][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  271.837208][ T5678] device veth0_vlan entered promiscuous mode
[  271.962353][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  271.992532][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  272.013777][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  272.046074][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  272.510423][ T6104] binder: BINDER_SET_CONTEXT_MGR already set
[  272.510527][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  272.549986][ T6104] binder: 6103:6104 ioctl 4018620d 200000000040 returned -16
[  272.571670][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  272.600741][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  272.678874][ T5678] device veth1_vlan entered promiscuous mode
[  272.742645][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  272.768460][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  272.821225][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  272.870506][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  272.909982][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  272.939396][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  273.560387][ T5751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  274.112823][ T5678] device veth0_macvtap entered promiscuous mode
[  274.178629][ T5678] device veth1_macvtap entered promiscuous mode
[  274.301389][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.433204][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.463387][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.494574][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.528378][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.752768][ T6127] loop0: detected capacity change from 0 to 40427
[  274.778883][ T6127] F2FS-fs (loop0): invalid crc value
[  274.788732][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.812302][ T6127] F2FS-fs (loop0): Found nat_bits in checkpoint
[  274.838706][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.865243][ T6127] F2FS-fs (loop0): Start checkpoint disabled!
[  274.889775][ T6127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  274.904364][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  274.936634][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  274.954714][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  274.971817][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  275.054286][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  275.313874][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  275.458651][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.469239][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.488499][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.563368][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.573245][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.673442][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.711295][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.789959][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  275.864275][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  275.948562][ T5678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.008919][ T5678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.018776][ T4376] kworker/u4:7: attempt to access beyond end of device
[  276.018776][ T4376] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  276.091462][   T46] kworker/u4:3: attempt to access beyond end of device
[  276.091462][   T46] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  276.123394][ T5678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.178760][ T5678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.335197][ T4673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.363510][ T4673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.428264][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  277.476859][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  277.509795][ T4673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.538881][ T4673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.549315][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  278.221062][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.270548][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  278.662737][ T6168] loop0: detected capacity change from 0 to 4096
[  278.831218][ T6168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  279.084315][ T6168] EXT4-fs: can't change dax mount option while remounting
[  279.519473][ T6172] loop5: detected capacity change from 0 to 131072
[  279.570493][ T6172] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  279.578916][ T6172] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  279.597633][ T6172] F2FS-fs (loop5): invalid crc value
[  279.607677][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  279.791689][ T6191] No such timeout policy "syz0"
[  279.973804][ T6172] F2FS-fs (loop5): Found nat_bits in checkpoint
[  280.118428][ T6172] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  280.125625][ T6172] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  283.237191][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  283.264387][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  283.390706][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  283.426360][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  283.469473][ T5751] device veth0_vlan entered promiscuous mode
[  283.482438][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  283.531706][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  283.991881][ T5751] device veth1_vlan entered promiscuous mode
[  284.289694][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  284.429444][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  284.455657][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  284.492334][ T5751] device veth0_macvtap entered promiscuous mode
[  284.545874][ T5751] device veth1_macvtap entered promiscuous mode
[  284.637064][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.670882][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.701520][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.722739][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.743254][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.793572][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.865559][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.916948][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.954439][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.977257][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.000686][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.018776][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.053485][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.104436][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.722630][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.011346][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.353410][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.402487][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.446900][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  286.468755][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  286.511772][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  286.556461][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  286.594472][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  286.619814][ T6252] loop3: detected capacity change from 0 to 4096
[  286.629228][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  286.666140][ T5751] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.705446][ T5751] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.734277][ T5751] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.764585][ T5751] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.785079][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.861957][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.951751][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  288.043211][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.086528][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.132692][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  288.406870][ T6270] loop0: detected capacity change from 0 to 2048
[  288.721779][ T6270] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  288.736467][ T6275] loop6: detected capacity change from 0 to 40427
[  288.751689][ T6275] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  288.759611][ T6275] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  288.772025][ T6275] F2FS-fs (loop6): invalid crc value
[  288.812020][ T6275] F2FS-fs (loop6): Found nat_bits in checkpoint
[  288.848833][ T6288] loop3: detected capacity change from 0 to 128
[  288.865989][ T6275] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  288.873114][ T6275] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  288.918469][ T6291] loop2: detected capacity change from 0 to 2048
[  289.313473][   T27] audit: type=1800 audit(1751505458.954:4): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.461" name="file1" dev="loop3" ino=1048603 res=0 errno=0
[  289.428006][ T6291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  289.655324][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  289.781888][ T6299] syz.6.346: attempt to access beyond end of device
[  289.781888][ T6299] loop6: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  290.203878][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  290.616707][ T6313] loop2: detected capacity change from 0 to 1764
[  290.935105][ T6321] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  291.777320][ T6324] loop5: detected capacity change from 0 to 2048
[  292.172277][ T6336] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  292.586794][ T6348] loop3: detected capacity change from 0 to 2048
[  292.784690][ T6336] NILFS error (device loop5): nilfs_sufile_mark_dirty: active segment 3 is erroneous
[  292.924457][ T6336] Remounting filesystem read-only
[  293.061102][ T5678] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  293.108677][ T6348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  294.086061][ T6366] loop5: detected capacity change from 0 to 2048
[  294.182140][ T6366] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  294.735625][ T4252] EXT4-fs (loop3): unmounting filesystem.
[  295.115168][ T5678] EXT4-fs (loop5): unmounting filesystem.
[  295.289214][ T6379] loop2: detected capacity change from 0 to 2048
[  295.378080][ T6383] loop3: detected capacity change from 0 to 256
[  295.421275][ T6379] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  295.579212][ T6383] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.064311][ T6383] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.090632][ T6379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.212303][ T6383] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  296.320439][   T27] audit: type=1800 audit(1751505465.964:5): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.484" name="file1" dev="loop3" ino=1048604 res=0 errno=0
[  296.648770][ T6393] loop5: detected capacity change from 0 to 4096
[  296.730047][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  296.731176][ T6393] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  296.812051][ T6393] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  296.819178][ T6399] loop0: detected capacity change from 0 to 2048
[  296.827756][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  296.837660][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  296.856791][ T6398] device bridge_slave_0 left promiscuous mode
[  296.867001][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.883888][ T6399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  296.956531][ T6398] device bridge_slave_1 left promiscuous mode
[  296.962878][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.349291][ T5678] EXT4-fs (loop5): unmounting filesystem.
[  297.357710][ T6398] bond0: (slave bond_slave_0): Releasing backup interface
[  297.554011][ T6413] loop2: detected capacity change from 0 to 40427
[  297.580394][ T6413] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  297.588935][ T6413] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  297.600958][ T6398] bond0: (slave bond_slave_1): Releasing backup interface
[  297.637113][ T6413] F2FS-fs (loop2): invalid crc value
[  297.783763][ T6413] F2FS-fs (loop2): Found nat_bits in checkpoint
[  297.833031][ T6413] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  297.840323][ T6413] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  298.075645][ T6413] syz.2.490: attempt to access beyond end of device
[  298.075645][ T6413] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  298.497474][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  298.623852][ T6398] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  298.654374][ T6398] team0: Port device team_slave_0 removed
[  298.732793][ T6398] team0: Failed to send options change via netlink (err -105)
[  298.761611][ T6398] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  298.792831][ T6398] team0: Port device team_slave_1 removed
[  298.818089][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.847932][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.933449][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  298.982957][ T6432] No such timeout policy "syz0"
[  299.204745][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.482868][ T6406] team0: Failed to send options change via netlink (err -105)
[  299.548911][ T6406] team0: Mode changed to "loadbalance"
[  300.132115][ T6438] loop0: detected capacity change from 0 to 40427
[  300.153895][ T6438] F2FS-fs (loop0): invalid crc value
[  300.215571][ T6438] F2FS-fs (loop0): Found nat_bits in checkpoint
[  300.257044][ T6438] F2FS-fs (loop0): Start checkpoint disabled!
[  300.562468][ T6438] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  302.153426][ T4563] kworker/u4:15: attempt to access beyond end of device
[  302.153426][ T4563] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  302.325901][ T6464] loop6: detected capacity change from 0 to 2048
[  302.727867][ T6468] loop3: detected capacity change from 0 to 40427
[  302.750166][ T6468] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  302.758258][ T6468] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  302.772193][ T6468] F2FS-fs (loop3): invalid crc value
[  302.784548][ T6464] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  302.810495][ T6468] F2FS-fs (loop3): Found nat_bits in checkpoint
[  302.896108][ T6468] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  302.903229][ T6468] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  303.075324][ T6468] syz.3.503: attempt to access beyond end of device
[  303.075324][ T6468] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  303.729445][ T6482] No such timeout policy "syz0"
[  304.665181][ T5751] EXT4-fs (loop6): unmounting filesystem.
[  305.815779][ T6502] loop0: detected capacity change from 0 to 64
[  305.840487][ T6493] loop3: detected capacity change from 0 to 4096
[  306.233536][   T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  306.247015][ T6507] loop2: detected capacity change from 0 to 40427
[  306.278559][ T6507] F2FS-fs (loop2): invalid crc value
[  306.295012][ T6507] F2FS-fs (loop2): Found nat_bits in checkpoint
[  306.334758][ T6507] F2FS-fs (loop2): Start checkpoint disabled!
[  306.353464][ T6507] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  306.363442][ T4258] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  306.374370][ T4258] CPU: 1 PID: 4258 Comm: kworker/u5:1 Not tainted 6.1.142-syzkaller #0
[  306.382667][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  306.392754][ T4258] Workqueue: hci1 hci_rx_work
[  306.397488][ T4258] Call Trace:
[  306.400785][ T4258]  <TASK>
[  306.403736][ T4258]  dump_stack_lvl+0x168/0x22e
[  306.408447][ T4258]  ? show_regs_print_info+0x12/0x12
[  306.413674][ T4258]  ? load_image+0x3b0/0x3b0
[  306.418213][ T4258]  sysfs_create_dir_ns+0x252/0x280
[  306.423353][ T4258]  ? hci_rx_work+0x3eb/0xd40
[  306.427971][ T4258]  ? sysfs_warn_dup+0xa0/0xa0
[  306.432680][ T4258]  ? do_raw_spin_unlock+0x11d/0x230
[  306.437919][ T4258]  kobject_add_internal+0x6b8/0xc80
[  306.443147][ T4258]  kobject_add+0x152/0x210
[  306.447591][ T4258]  ? kobject_init+0x1d0/0x1d0
[  306.452296][ T4258]  ? klist_children_get+0x50/0x50
[  306.457387][ T4258]  ? get_device_parent+0x121/0x3f0
[  306.462548][ T4258]  device_add+0x483/0xfb0
[  306.466927][ T4258]  ? kmem_cache_free+0xf7/0x290
[  306.471823][ T4258]  hci_conn_add_sysfs+0xd1/0x1e0
[  306.476793][ T4258]  le_conn_complete_evt+0xd1d/0x1320
[  306.482111][ T4258]  ? hci_le_big_info_adv_report_evt+0x310/0x310
[  306.488385][ T4258]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  306.494050][ T4258]  ? skb_pull_data+0xf7/0x200
[  306.498748][ T4258]  hci_le_conn_complete_evt+0x183/0x440
[  306.504320][ T4258]  ? hci_remote_host_features_evt+0x270/0x270
[  306.510420][ T4258]  hci_event_packet+0x791/0x1210
[  306.515390][ T4258]  ? bis_list+0x280/0x280
[  306.519747][ T4258]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  306.525680][ T4258]  ? kcov_remote_start+0x4c7/0x7e0
[  306.530816][ T4258]  ? nf_ct_l4proto_log_invalid+0x34/0x206
[  306.536565][ T4258]  ? hci_send_to_monitor+0x9c/0x4a0
[  306.541792][ T4258]  hci_rx_work+0x3eb/0xd40
[  306.546234][ T4258]  ? _raw_spin_unlock+0x40/0x40
[  306.551122][ T4258]  ? process_one_work+0x7a1/0x1160
[  306.556262][ T4258]  process_one_work+0x898/0x1160
[  306.561242][ T4258]  ? worker_detach_from_pool+0x240/0x240
[  306.566906][ T4258]  ? _raw_spin_lock_irq+0xab/0xe0
[  306.571984][ T4258]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  306.577409][ T4258]  ? kthread_data+0x4b/0xc0
[  306.581955][ T4258]  worker_thread+0xaa2/0x1250
[  306.586679][ T4258]  kthread+0x29d/0x330
[  306.590805][ T4258]  ? worker_clr_flags+0x1a0/0x1a0
[  306.595866][ T4258]  ? kthread_blkcg+0xd0/0xd0
[  306.600494][ T4258]  ret_from_fork+0x1f/0x30
[  306.604952][ T4258]  </TASK>
[  306.609014][ T4258] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  306.624114][ T4258] Bluetooth: hci1: failed to register connection device
[  306.707730][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.933779][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.045985][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.102304][   T14] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  307.153057][   T14] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  307.193428][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.266554][   T14] usb 6-1: config 0 descriptor??
[  307.329932][   T11] kworker/u4:1: attempt to access beyond end of device
[  307.329932][   T11] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  307.807093][   T14] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[  314.187749][   T14] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0002/input/input6
[  314.216190][ T6536] loop0: detected capacity change from 0 to 2048
[  314.302899][ T6536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  316.485793][ T6554] loop3: detected capacity change from 0 to 131072
[  316.497220][ T6554] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  316.505464][ T6554] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  316.554562][ T6554] F2FS-fs (loop3): invalid crc value
[  316.602529][ T6554] F2FS-fs (loop3): Found nat_bits in checkpoint
[  316.714429][ T6554] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  316.721555][ T6554] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  316.730386][   T14] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  316.955398][ T6566] No such timeout policy "syz0"
[  317.153475][ T6562] loop6: detected capacity change from 0 to 164
[  317.203954][   T14] usb 6-1: USB disconnect, device number 2
[  317.258245][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.265774][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.279427][ T6562] ISOFS: unable to read i-node block
[  317.306554][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  317.319956][ T6562] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  317.454336][ T6562] isofs_fill_super: get root inode failed
[  317.473818][ T6562] 9pnet_fd: Insufficient options for proto=fd
[  318.328132][ T6585] loop2: detected capacity change from 0 to 40427
[  318.379673][ T6585] F2FS-fs (loop2): invalid crc value
[  319.075176][ T6585] F2FS-fs (loop2): Found nat_bits in checkpoint
[  319.084994][ T6569] fido_id[6569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  319.103799][ T6592] binder: BINDER_SET_CONTEXT_MGR already set
[  319.110062][ T6592] binder: 6590:6592 ioctl 4018620d 200000000040 returned -16
[  319.118508][ T6585] F2FS-fs (loop2): Start checkpoint disabled!
[  319.130688][ T6585] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  319.754488][ T6603] netlink: 36 bytes leftover after parsing attributes in process `syz.6.530'.
[  320.654348][ T4532] kworker/u4:14: attempt to access beyond end of device
[  320.654348][ T4532] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  324.034749][ T6640] loop5: detected capacity change from 0 to 2048
[  324.101550][ T6648] No such timeout policy "syz0"
[  324.518008][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.6.542'.
[  324.852958][ T6640] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  324.968000][ T6655] binder: BINDER_SET_CONTEXT_MGR already set
[  325.004085][ T6655] binder: 6652:6655 ioctl 4018620d 200000000040 returned -16
[  325.823193][ T6659] loop3: detected capacity change from 0 to 131072
[  325.893756][ T6659] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  325.902116][ T6659] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  325.918091][ T6659] F2FS-fs (loop3): invalid crc value
[  325.979638][ T6659] F2FS-fs (loop3): Found nat_bits in checkpoint
[  326.013046][ T6659] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  326.020728][ T6659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  326.095786][ T5678] EXT4-fs (loop5): unmounting filesystem.
[  326.576084][ T6672] loop2: detected capacity change from 0 to 2048
[  326.719122][ T6672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  326.748153][ T6681] loop0: detected capacity change from 0 to 256
[  326.771772][ T6672] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.859928][ T6683] loop5: detected capacity change from 0 to 2048
[  326.910324][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  327.066288][ T6683] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  327.890623][ T6700] loop5: detected capacity change from 0 to 64
[  328.387637][ T6695] loop0: detected capacity change from 0 to 4096
[  328.578655][ T6705] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  328.824417][ T6708] loop2: detected capacity change from 0 to 2048
[  328.991494][ T6712] binder: BINDER_SET_CONTEXT_MGR already set
[  329.070618][ T6717] netlink: 36 bytes leftover after parsing attributes in process `syz.5.558'.
[  329.354409][ T6712] binder: 6711:6712 ioctl 4018620d 200000000040 returned -16
[  329.772204][ T6708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  330.970798][ T6729] loop6: detected capacity change from 0 to 131072
[  330.993029][ T6729] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0)
[  331.001549][ T6729] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  331.011660][ T6729] F2FS-fs (loop6): invalid crc value
[  331.211850][ T6730] loop5: detected capacity change from 0 to 40427
[  331.225695][ T6730] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  331.233575][ T6730] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  331.252118][ T6730] F2FS-fs (loop5): invalid crc value
[  331.254062][ T6729] F2FS-fs (loop6): Found nat_bits in checkpoint
[  331.300619][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  331.314069][ T6729] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  331.321189][ T6729] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  331.407426][ T6730] F2FS-fs (loop5): Found nat_bits in checkpoint
[  331.478235][ T6730] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  331.485500][ T6730] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  332.133100][ T6748] syz.5.560: attempt to access beyond end of device
[  332.133100][ T6748] loop5: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  333.795792][ T6769] loop2: detected capacity change from 0 to 2048
[  334.806003][ T6769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  335.007028][ T6781] binder: BINDER_SET_CONTEXT_MGR already set
[  335.013109][ T6781] binder: 6779:6781 ioctl 4018620d 2000000000c0 returned -16
[  336.079190][ T6791] loop6: detected capacity change from 0 to 2048
[  336.166304][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  336.195869][ T6791] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  336.915132][ T6802] loop3: detected capacity change from 0 to 131072
[  336.932915][ T6802] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  336.941199][ T6802] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  336.951862][ T6802] F2FS-fs (loop3): invalid crc value
[  336.985740][ T6802] F2FS-fs (loop3): Found nat_bits in checkpoint
[  337.051915][ T6802] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  337.059195][ T6802] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  337.919920][ T2165] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  337.955268][ T6811] loop2: detected capacity change from 0 to 40427
[  337.963164][ T6811] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  337.971033][ T6811] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  337.981504][ T6811] F2FS-fs (loop2): invalid crc value
[  338.005118][ T5751] EXT4-fs (loop6): unmounting filesystem.
[  338.101971][ T6811] F2FS-fs (loop2): Found nat_bits in checkpoint
[  338.123422][ T2165] usb 1-1: Using ep0 maxpacket: 8
[  338.131791][ T2165] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  338.171127][ T6811] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  338.178800][ T6811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  338.466140][ T6832] syz.2.578: attempt to access beyond end of device
[  338.466140][ T6832] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  338.838228][ T2165] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  338.870328][ T2165] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  338.886974][ T2165] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  338.900283][ T2165] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  338.926765][ T2165] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  339.053573][ T2165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.113593][ T2165] usbtmc 1-1:16.0: bulk endpoints not found
[  340.675642][ T6849] loop6: detected capacity change from 0 to 2048
[  340.794268][ T6849] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  340.910668][ T6851] loop3: detected capacity change from 0 to 4096
[  340.982592][ T6858] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  341.429353][ T5751] EXT4-fs (loop6): unmounting filesystem.
[  341.737068][ T6870] loop5: detected capacity change from 0 to 2048
[  341.817362][ T6870] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  342.140443][ T4723] usb 1-1: USB disconnect, device number 8
[  343.095728][ T5678] EXT4-fs (loop5): unmounting filesystem.
[  343.920559][ T6916] No such timeout policy "syz0"
[  343.985412][ T6912] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.604'.
[  344.540345][ T6932] loop5: detected capacity change from 0 to 2048
[  345.348308][ T4723] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  345.604384][ T6932] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  345.633724][ T4723] usb 1-1: Using ep0 maxpacket: 8
[  345.643180][ T4723] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  345.665619][ T6950] binder: BINDER_SET_CONTEXT_MGR already set
[  345.693472][ T4723] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  345.702517][ T6950] binder: 6948:6950 ioctl 4018620d 200000000040 returned -16
[  345.715244][ T4723] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  345.737481][ T4723] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  345.760710][ T4723] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  345.792688][ T4723] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  345.812431][ T4723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.883265][ T4723] usbtmc 1-1:16.0: bulk endpoints not found
[  345.949538][ T5678] EXT4-fs (loop5): unmounting filesystem.
[  345.998080][ T6956] loop2: detected capacity change from 0 to 16
[  346.055475][ T6956] erofs: (device loop2): mounted with root inode @ nid 36.
[  346.170350][ T6958] No such timeout policy "syz0"
[  346.331067][ T6961] loop2: detected capacity change from 0 to 256
[  347.936307][ T6999] loop6: detected capacity change from 0 to 2048
[  347.954244][ T6997] binder: BINDER_SET_CONTEXT_MGR already set
[  347.961651][ T6997] binder: 6994:6997 ioctl 4018620d 200000000040 returned -16
[  348.142760][ T6999] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  349.163075][ T4723] usb 1-1: USB disconnect, device number 9
[  349.281873][ T7020] loop0: detected capacity change from 0 to 512
[  349.308705][ T7017] No such timeout policy "syz0"
[  349.401239][ T7020] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  349.441746][ T7020] EXT4-fs (loop0): 1 truncate cleaned up
[  349.451330][ T7020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  349.486545][ T5751] EXT4-fs (loop6): unmounting filesystem.
[  350.965356][ T7041] binder: BINDER_SET_CONTEXT_MGR already set
[  350.971791][ T7041] binder: 7040:7041 ioctl 4018620d 200000000040 returned -16
[  352.081844][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  352.111720][ T7054] loop6: detected capacity change from 0 to 256
[  352.268500][ T7057] loop2: detected capacity change from 0 to 1024
[  353.253843][ T4723] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  353.290019][ T7063] loop6: detected capacity change from 0 to 2048
[  353.430308][ T7063] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  353.453509][ T4723] usb 4-1: Using ep0 maxpacket: 8
[  353.461113][ T4723] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  353.586305][ T4723] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  353.937840][ T4723] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  353.951836][ T4723] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  354.513390][ T4723] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  354.526864][ T4723] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  354.557622][ T4723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.576008][ T7074] No such timeout policy "syz0"
[  354.645070][ T4723] usbtmc 4-1:16.0: bulk endpoints not found
[  354.712792][ T5751] EXT4-fs (loop6): unmounting filesystem.
[  355.244945][ T4258] Bluetooth: hci0: command 0x0406 tx timeout
[  355.731324][   T27] audit: type=1326 audit(1751505525.374:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12b78e929 code=0x7ffc0000
[  356.976522][   T27] audit: type=1326 audit(1751505525.394:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fc12b78e929 code=0x7ffc0000
[  357.124190][ T4723] usb 4-1: USB disconnect, device number 6
[  357.140498][ T7111] loop2: detected capacity change from 0 to 256
[  357.183542][   T27] audit: type=1326 audit(1751505525.394:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12b78e929 code=0x7ffc0000
[  357.529863][ T7112] loop6: detected capacity change from 0 to 40427
[  357.662658][ T7112] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  357.670715][ T7112] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  357.698029][ T7112] F2FS-fs (loop6): invalid crc value
[  358.006506][ T7112] F2FS-fs (loop6): Found nat_bits in checkpoint
[  358.045081][   T27] audit: type=1326 audit(1751505525.394:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12b78e929 code=0x7ffc0000
[  358.117541][ T7112] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  358.124903][ T7112] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  358.391140][ T7129] syz.6.654: attempt to access beyond end of device
[  358.391140][ T7129] loop6: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  358.474111][ T7131] loop0: detected capacity change from 0 to 2048
[  358.770769][ T7131] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  359.393008][ T7149] No such timeout policy "syz0"
[  359.775290][ T7152] netlink: 'syz.3.665': attribute type 11 has an invalid length.
[  359.797260][ T7152] netlink: 36 bytes leftover after parsing attributes in process `syz.3.665'.
[  359.853231][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  361.138402][ T7165] loop5: detected capacity change from 0 to 256
[  362.832326][ T4332] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  363.027646][ T4332] usb 7-1: Using ep0 maxpacket: 8
[  363.041981][ T4332] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  363.068251][ T4332] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  363.086716][ T7189] loop5: detected capacity change from 0 to 256
[  363.109543][ T4332] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  363.126214][ T4332] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  363.152149][ T7189] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  363.163191][ T7189] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  363.169540][ T4332] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  363.190881][ T4332] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  363.209867][ T4332] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  363.232619][ T7189] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  363.250113][ T4332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.314353][ T4332] usbtmc: probe of 7-1:16.0 failed with error -22
[  363.701703][ T7199] loop5: detected capacity change from 0 to 2048
[  364.005006][ T7214] loop3: detected capacity change from 0 to 256
[  364.019172][ T7199] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  364.196598][ T7209] No such timeout policy "syz0"
[  364.557616][ T7214] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  364.892501][ T5678] EXT4-fs (loop5): unmounting filesystem.
[  365.292779][ T7236] loop3: detected capacity change from 0 to 164
[  366.109347][ T7236] Unable to read rock-ridge attributes
[  366.147784][ T4298] usb 7-1: USB disconnect, device number 2
[  366.631624][ T7254] loop2: detected capacity change from 0 to 2048
[  366.876802][ T7254] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  368.146895][ T7274] loop3: detected capacity change from 0 to 128
[  368.195888][ T7274] EXT4-fs: Ignoring removed nobh option
[  368.217257][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  368.254039][ T7274] EXT4-fs (loop3): Encoding requested by superblock is unknown
[  368.607500][ T7274] loop3: detected capacity change from 0 to 32768
[  368.615449][ T7274] XFS: noikeep mount option is deprecated.
[  368.789675][ T7296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.700'.
[  368.975016][ T4723] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  369.223437][ T4723] usb 3-1: Using ep0 maxpacket: 8
[  369.231534][ T4723] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  369.282813][ T4723] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  369.340666][ T4723] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  369.432172][ T4723] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  369.473393][ T4298] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  369.483114][ T4723] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  369.502632][ T4723] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  369.541289][ T4723] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  369.560995][ T4723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.619176][ T7274] XFS (loop3): Mounting V5 Filesystem
[  369.642562][ T4723] usbtmc: probe of 3-1:16.0 failed with error -22
[  369.673343][ T4298] usb 7-1: Using ep0 maxpacket: 8
[  369.689405][ T4298] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  369.749339][ T4298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.754261][ T7274] XFS (loop3): Ending clean mount
[  369.768771][ T7274] XFS (loop3): Quotacheck needed: Please wait.
[  369.813939][ T4298] usb 7-1: Product: syz
[  369.823774][ T4298] usb 7-1: Manufacturer: syz
[  369.837449][ T7312] loop5: detected capacity change from 0 to 256
[  369.854998][ T4298] usb 7-1: SerialNumber: syz
[  369.865646][ T4298] usb 7-1: config 0 descriptor??
[  369.965076][ T4298] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  369.985528][ T7312] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  370.033921][ T4298] usb 7-1: setting power ON
[  370.044261][ T4298] dvb-usb: bulk message failed: -22 (2/0)
[  370.157992][ T4298] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  370.203181][ T7274] XFS (loop3): Quotacheck: Done.
[  370.204237][ T4298] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  370.228707][ T4298] usb 7-1: media controller created
[  370.330059][ T4298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  370.361334][ T4252] XFS (loop3): Unmounting Filesystem
[  370.603237][ T4298] usb 7-1: selecting invalid altsetting 6
[  371.111410][ T4298] usb 7-1: digital interface selection failed (-22)
[  371.132291][ T4298] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  371.171387][ T4298] usb 7-1: setting power OFF
[  371.183208][ T4298] dvb-usb: bulk message failed: -22 (2/0)
[  371.190039][ T4298] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  371.199786][ T4298] (NULL device *): no alternate interface
[  371.369251][ T4298] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  371.451306][ T4298] usb 7-1: USB disconnect, device number 3
[  371.969969][ T7348] netlink: 44 bytes leftover after parsing attributes in process `syz.6.715'.
[  372.769593][ T4363] usb 3-1: USB disconnect, device number 11
[  372.920725][ T7355] loop5: detected capacity change from 0 to 256
[  373.009706][ T7355] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  374.148871][ T7382] loop2: detected capacity change from 0 to 256
[  374.363865][ T6716] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  374.608878][ T6716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.784108][ T6716] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  374.967873][ T6716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.234830][ T6716] usb 6-1: config 0 descriptor??
[  375.880753][ T6716] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[  376.124536][ T6716] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0003/input/input7
[  376.565267][ T6716] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  376.657630][ T6716] usb 6-1: USB disconnect, device number 3
[  376.892990][ T7402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.728'.
[  377.948642][ T7397] fido_id[7397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  378.383103][ T7425] loop2: detected capacity change from 0 to 256
[  378.408313][ T7425] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  378.699609][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.707033][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  380.281704][ T7445] loop5: detected capacity change from 0 to 2048
[  380.319277][ T7442] loop2: detected capacity change from 0 to 4096
[  380.430993][ T7445] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  380.782376][ T7458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.741'.
[  381.631412][ T5678] EXT4-fs (loop5): unmounting filesystem.
[  382.280403][ T7475] loop6: detected capacity change from 0 to 256
[  382.613900][ T7475] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  382.792829][ T7475] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  383.004734][ T7475] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  383.218355][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.751'.
[  383.834203][ T7505] netlink: 36 bytes leftover after parsing attributes in process `syz.5.755'.
[  387.092074][ T7557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.767'.
[  387.732759][ T7553] loop6: detected capacity change from 0 to 2048
[  387.938767][ T7553] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  388.195467][ T5751] EXT4-fs (loop6): unmounting filesystem.
[  389.533779][ T7563] loop2: detected capacity change from 0 to 40427
[  389.598662][ T7563] F2FS-fs (loop2): invalid crc value
[  389.640821][ T7563] F2FS-fs (loop2): Found nat_bits in checkpoint
[  389.844191][ T7563] F2FS-fs (loop2): Start checkpoint disabled!
[  389.912156][ T7563] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  390.595664][ T7616] capability: warning: `syz.0.783' uses deprecated v2 capabilities in a way that may be insecure
[  390.897319][ T7621] loop5: detected capacity change from 0 to 256
[  391.162254][ T4376] kworker/u4:7: attempt to access beyond end of device
[  391.162254][ T4376] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  391.256168][ T4376] kworker/u4:7: attempt to access beyond end of device
[  391.256168][ T4376] loop2: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  391.537918][ T7631] loop5: detected capacity change from 0 to 2048
[  391.613061][ T7631] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  392.322964][ T5678] EXT4-fs (loop5): unmounting filesystem.
Connection to 10.128.1.35 closed by remote host.
[  394.900933][ T4528] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.016015][ T4528] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.131127][ T4528] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.226343][ T4528] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.270469][ T4528] device hsr_slave_0 left promiscuous mode
[  396.277342][ T4528] device hsr_slave_1 left promiscuous mode
[  396.283991][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.291411][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_0
[  396.299766][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.307437][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.315941][ T4528] device bridge_slave_1 left promiscuous mode
[  396.322164][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.332826][ T4528] device bridge_slave_0 left promiscuous mode
[  396.339590][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.368488][ T4528] device veth1_macvtap left promiscuous mode
[  396.374631][ T4528] device veth0_macvtap left promiscuous mode
[  396.380705][ T4528] device veth1_vlan left promiscuous mode
[  396.387018][ T4528] device veth0_vlan left promiscuous mode
[  396.946135][ T4528] team0 (unregistering): Port device team_slave_1 removed
[  396.997129][ T4528] team0 (unregistering): Port device team_slave_0 removed
[  397.049633][ T4528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.099231][ T4528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.687252][ T4528] bond0 (unregistering): Released all slaves
[  398.148799][ T4528] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.242485][ T4528] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.323683][ T4528] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.404310][ T4528] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.521807][ T4528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.593880][ T4528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.661671][ T4528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.746092][ T4528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.190295][ T4528] device hsr_slave_0 left promiscuous mode
[  400.197022][ T4528] device hsr_slave_1 left promiscuous mode
[  400.204517][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.211971][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.222652][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.230671][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.238833][ T4528] device bridge_slave_1 left promiscuous mode
[  400.245349][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.254527][ T4528] device bridge_slave_0 left promiscuous mode
[  400.260761][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.272820][ T4528] device hsr_slave_0 left promiscuous mode
[  400.279384][ T4528] device hsr_slave_1 left promiscuous mode
[  400.286140][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.293700][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.301381][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.309122][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.317792][ T4528] device bridge_slave_1 left promiscuous mode
[  400.324083][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.332177][ T4528] device bridge_slave_0 left promiscuous mode
[  400.339856][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.388038][ T4528] device veth1_macvtap left promiscuous mode
[  400.394325][ T4528] device veth0_macvtap left promiscuous mode
[  400.400503][ T4528] device veth1_vlan left promiscuous mode
[  400.406414][ T4528] device veth0_vlan left promiscuous mode
[  400.415761][ T4528] device veth1_macvtap left promiscuous mode
[  400.421824][ T4528] device veth0_macvtap left promiscuous mode
[  400.428715][ T4528] device veth1_vlan left promiscuous mode
[  400.435389][ T4528] device veth0_vlan left promiscuous mode
[  401.076312][ T4528] team0 (unregistering): Port device team_slave_1 removed
[  401.128963][ T4528] team0 (unregistering): Port device team_slave_0 removed
[  401.178845][ T4528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  401.229593][ T4528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  401.787349][ T4528] bond0 (unregistering): Released all slaves
[  402.300497][ T4528] team0 (unregistering): Port device team_slave_1 removed
[  402.350095][ T4528] team0 (unregistering): Port device team_slave_0 removed
[  402.398356][ T4528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.447156][ T4528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.044690][ T4528] bond0 (unregistering): Released all slaves