last executing test programs:

2m9.054052019s ago: executing program 2 (id=477):
mknod$loop(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20240, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1000000, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x500, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x16, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuseblk(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, 0x0)

2m6.676705533s ago: executing program 2 (id=484):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$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")
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001fc0)={0x0, ""/256, <r1=>0x0, <r2=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r3=>0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0})
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r6, @ANYRESDEC=r5, @ANYRES16=r2, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r1], 0x5, 0x0, &(0x7f0000000000))

2m4.303834187s ago: executing program 2 (id=492):
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

2m2.204535748s ago: executing program 2 (id=496):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc197c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x16)
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x81c005, &(0x7f0000000400)={[{@space_cache_v1}, {@nodatacow}, {@user_subvol_rm}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@noautodefrag}, {@rescue={'rescue', 0x3d, 'ignoresuperflags'}}, {@datacow}, {@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@thread_pool={'thread_pool', 0x3d, 0x5}}, {@flushoncommit}], [{@smackfsroot={'smackfsroot', 0x3d, '(}]\xb1.&'}}, {@appraise}, {@fsname={'fsname', 0x3d, 'appraise_type=imasig'}}, {@appraise_type}, {@flag='posixacl'}, {@uid_lt}]}, 0x1, 0x55a9, &(0x7f0000005fc0)="$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")
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000002c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x10001}}, {@fatal_errors_bug}, {@rescue={'rescue', 0x3d, 'all'}}, {@fatal_errors_bug}, {@noflushoncommit}, {@nodiscard}, {@discard}, {@acl}, {@datasum}, {@flushoncommit}]}, 0x9, 0x55d4, &(0x7f0000010200)="$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")

1m55.908461713s ago: executing program 2 (id=509):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
r4 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x8b)
fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000000)='ro\x00', &(0x7f0000000080)='./file0\x00', r5)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0)

1m53.468665422s ago: executing program 2 (id=512):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b000000000003290780000000000"], 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)

1m40.258080942s ago: executing program 3 (id=528):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200), 0x1, 0x1a1000)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
open_by_handle_at(r4, &(0x7f0000000580)=ANY=[], 0x60380)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
acct(&(0x7f00000001c0)='./file0\x00')
acct(0x0)

1m39.302545241s ago: executing program 3 (id=529):
syz_open_dev$vim2m(0x0, 0x47b, 0x2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x210002, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
lseek(r4, 0x851, 0x0)

1m38.251421627s ago: executing program 32 (id=512):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b000000000003290780000000000"], 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)

1m38.204799931s ago: executing program 3 (id=531):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = gettid()
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182)
ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe})

1m36.166476897s ago: executing program 3 (id=535):
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff)

1m33.292648912s ago: executing program 3 (id=540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)

1m31.012006568s ago: executing program 3 (id=544):
unshare(0x6a040000)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$alg(0x26, 0x5, 0x0)
dup(0xffffffffffffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000))
syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, 0x0, &(0x7f0000000140))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)

1m15.944591041s ago: executing program 33 (id=544):
unshare(0x6a040000)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$alg(0x26, 0x5, 0x0)
dup(0xffffffffffffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000))
syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, 0x0, &(0x7f0000000140))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)

41.281313234s ago: executing program 5 (id=696):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x4, 0x7}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x10}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x8)
sendto$inet(r0, &(0x7f0000000200)="25d7196c", 0x4, 0x4000054, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x218, 0x805, 0x0, 0x0)

41.116698688s ago: executing program 4 (id=697):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="dd11a4b0e2b1e81cee7a5ccf6681eb1f00"], 0x1, 0x228, &(0x7f0000000300)="$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")
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x240008c8)

41.101891759s ago: executing program 5 (id=698):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="1408", 0x2, 0xfffffffffffffffd)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)

40.800530294s ago: executing program 5 (id=700):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x3c, r2, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}]]}, 0x3c}}, 0x0)

40.645251667s ago: executing program 5 (id=702):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c7320000000000000000"], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x240002, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}], {0x10, 0x4}, {0x20, 0x5}}, 0x34, 0x1)

40.548737335s ago: executing program 4 (id=703):
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280), 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r3, @ANYBLOB="080002007f00000114000600ff030000ffffffff030000000000000008000400e0"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

40.249254509s ago: executing program 4 (id=704):
r0 = socket$kcm(0x21, 0x2, 0x2)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), 0x0, 0x0, 0x2)

39.98873138s ago: executing program 4 (id=706):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c7320000000000000000"], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x240002, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

39.838852803s ago: executing program 5 (id=708):
r0 = fsopen(&(0x7f00000002c0)='minix\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\a\x00\x00\x00\x00\x00\x00\x00\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\x9c\x00\x00\x00\x00\x00\x00\x00&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc50\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\x05\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1oO\xe4\x99\xd6\xed\x83\xb0\x18q\xb9\xda\xf1kk\xb0N\xe69D\x12\x1f\x96\x85y\xe1\xf6\x83\x81\xc1\xcb\x169\xa5A%\xcb\n\xaby\x9f\x97\xde\xcf\x14\x0f\xffl\xb0e\xa2m\xb3\x8fsI\xc8v<\x8a\\7\xbaA\xef\x92\x98K\xfd\xaa\xdb', 0x0)

39.50173082s ago: executing program 4 (id=711):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x2fc})

39.215472783s ago: executing program 5 (id=713):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x4, 0x7}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x10}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x8)
sendto$inet(r0, &(0x7f0000000200)="25d7196c", 0x4, 0x4000054, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

38.669497248s ago: executing program 34 (id=713):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x4, 0x7}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x10}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x8)
sendto$inet(r0, &(0x7f0000000200)="25d7196c", 0x4, 0x4000054, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

38.627578962s ago: executing program 4 (id=718):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f00000001c0), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)

38.360497274s ago: executing program 35 (id=718):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f00000001c0), 0x1, 0x597, &(0x7f0000000b80)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)

20.746176064s ago: executing program 6 (id=801):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x0, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x4}, 0x1, 0xfe}, {0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}, {0x2, 0x0, {0x2}, {0x1, 0x1, 0x2}, 0x3, 0xff}], 0xa0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)

19.632626354s ago: executing program 6 (id=807):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000f40)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@noadinicb}, {@adinicb}, {@uid_forget}, {@uid_forget}, {@umask={'umask', 0x3d, 0x2}}, {@longad}, {@gid}, {@nostrict}]}, 0xfe, 0xc22, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)

19.123444116s ago: executing program 6 (id=809):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da)

17.872664858s ago: executing program 6 (id=814):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x58)

17.425517635s ago: executing program 6 (id=818):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x5)
r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x2, 0x171}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffeffc, 0x0, 0x4)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r6}, 0x18)
getresuid(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
r7 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)

16.903190798s ago: executing program 6 (id=821):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)

16.219392594s ago: executing program 36 (id=821):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)

13.557395852s ago: executing program 1 (id=840):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f00000001c0)={[{@fileset={'fileset', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x10002}}, {@anchor={'anchor', 0x3d, 0x16}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@uid_ignore}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@volume={'volume', 0x3d, 0x2}}, {@gid}]}, 0x1, 0xc32, &(0x7f0000000640)="$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")
memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)

13.180486902s ago: executing program 1 (id=842):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000010400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10, 0x14}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10, 0x4}}], 0x2, 0x0)
close_range(r1, r2, 0x0)
dup(0xffffffffffffffff)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r3 = dup(0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket(0x8000000010, 0x2, 0x0)
write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4b140d82478b1698}]}, 0x24}}, 0x48894)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r9, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}]}, 0x3c}}, 0x0)

12.22790164s ago: executing program 1 (id=853):
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0)

12.039487435s ago: executing program 1 (id=854):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
socket$nl_route(0x10, 0x3, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

11.832696693s ago: executing program 1 (id=855):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
syz_genetlink_get_family_id$tipc2(0x0, r0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

9.316920818s ago: executing program 1 (id=857):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380"], 0x44}}, 0x20008000)

3.080471208s ago: executing program 7 (id=879):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
shutdown(0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="96baa9bd293f32a4be21fdffc77440a9d9c7e16c6c51d63e8ba964b01e06c4ad80d5ba81bf754b2f63dd49ffac2f96d2be9ab12be13dc3bd59217be281d895795a047ce3258eb171bd1200000000000000a112eb61edbb22074fb2464c2c040aa73dc1cccff5291d669049a8e13b373c0960d91ad00e2765cf73b478067d073524b1515e0cf674b54ab1945a77534ca0c321c00bc82e1eec0d6ea55eab950800b5c12b71f10f76", @ANYRESOCT, @ANYRES16], 0x1, 0x1b7, &(0x7f0000000780)="$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")

1.738187358s ago: executing program 7 (id=880):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x8b, &(0x7f0000000200)=""/139, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x8, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000380), 0x12)
write$cgroup_int(r1, &(0x7f0000000040), 0x1)

1.308853053s ago: executing program 0 (id=881):
setresuid(0xee01, 0x0, 0xffffffffffffffff)
r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000440)='wchan\x00')
pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)

1.308675343s ago: executing program 7 (id=882):
r0 = timerfd_create(0x7, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timerfd_gettime(r0, 0x0)

1.111404229s ago: executing program 0 (id=883):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000100)=""/43, 0x2b)
getdents(r1, 0xfffffffffffffffd, 0x58)

1.046638154s ago: executing program 7 (id=884):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x28, 0x801, 0x0)
r0 = epoll_create1(0x0)
r1 = fanotify_init(0x200, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x9}]}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000531000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0x800c1})
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x2, [0x5, 0x2], 0x1ff}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2)
io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0)
fanotify_mark(r1, 0x101, 0x48001051, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
readv(r3, 0x0, 0x0)

988.644689ms ago: executing program 0 (id=885):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x4, 0x4, 0x5}, 0x50)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents64(r2, &(0x7f0000000240)=""/44, 0x2c)
getdents64(r2, &(0x7f0000001780)=""/122, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYRES32], 0x1, 0x1ef, &(0x7f0000000b80)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000d80)={"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"})

754.160498ms ago: executing program 7 (id=886):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x6408665106777083)
mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0)

500.640069ms ago: executing program 0 (id=887):
r0 = memfd_create(&(0x7f0000000080), 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000040), 0x0, 0x0, 0x1)

212.629072ms ago: executing program 0 (id=888):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1})
socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000000))
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)

6.29461ms ago: executing program 7 (id=889):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = msgget$private(0x0, 0x100)
msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="0300"], 0xfd1, 0x0)

0s ago: executing program 0 (id=890):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r3, 0x7f832000)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
userfaultfd(0x80001)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc14)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
gettid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
ioprio_set$pid(0x1, 0x0, 0x6000)
syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140))

kernel console output (not intermixed with test programs):

mmand tx timeout
[   93.381409][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.415784][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.693359][ T5888] syz.2.3[5888]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   94.907351][ T5888] loop2: detected capacity change from 0 to 32768
[   94.946480][ T5888] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (5888)
[   94.975901][ T5888] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   94.986405][ T5888] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   94.996228][ T5888] BTRFS info (device loop2): using free space tree
[   95.010458][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.019803][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.515145][ T5798] Bluetooth: hci0: command tx timeout
[   95.521271][ T5794] Bluetooth: hci3: command tx timeout
[   95.521294][ T5803] Bluetooth: hci2: command tx timeout
[   95.527372][ T5101] Bluetooth: hci1: command tx timeout
[   95.583941][ T5888] BTRFS info (device loop2): enabling ssd optimizations
[   95.591004][ T5888] BTRFS info (device loop2): auto enabling async discard
[   96.122416][ T5886] syz.2.3 (5886) used greatest stack depth: 20200 bytes left
[   96.342680][ T5789] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   97.829720][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   97.839466][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[   98.034311][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   98.043430][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   98.058520][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.808836][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   98.817138][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   98.878697][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.887251][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.896725][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.185690][ T5929] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6'.
[  101.579590][ T5939] loop0: detected capacity change from 0 to 32768
[  101.610106][ T5939] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.8 (5939)
[  101.660340][ T5939] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  101.670714][ T5939] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  101.680278][ T5939] BTRFS info (device loop0): using free space tree
[  101.835518][ T5939] BTRFS info (device loop0): enabling ssd optimizations
[  101.842590][ T5939] BTRFS info (device loop0): auto enabling async discard
[  102.577889][ T5791] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  102.825384][ T5807] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop0 scanned by udevd (5807)
[  104.536693][ T5969] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12'.
[  107.296494][ T5988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  108.512340][    T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  109.208708][ T5999] loop1: detected capacity change from 0 to 32768
[  109.221458][    T8] usb 1-1: not running at top speed; connect to a high speed hub
[  109.229993][ T5999] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  109.248140][    T8] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  109.266013][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.667326][    T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  109.676706][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.687244][    T8] usb 1-1: Product: syz
[  109.694343][    T8] usb 1-1: Manufacturer: syz
[  109.820470][    T8] usb 1-1: SerialNumber: syz
[  110.243775][ T6001] netlink: 76 bytes leftover after parsing attributes in process `syz.2.19'.
[  110.325121][    T8] usb 1-1: 0:2 : does not exist
[  111.407917][    T8] usb 1-1: USB disconnect, device number 2
[  111.490454][ T5807] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  112.309201][ T6011] netlink: 76 bytes leftover after parsing attributes in process `syz.0.21'.
[  112.564910][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.937422][ T6016] binder: 6014:6016 ioctl 4018620d 0 returned -22
[  113.439245][ T6020] loop3: detected capacity change from 0 to 32768
[  113.505252][ T6020] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  114.380941][ T6022] netlink: 76 bytes leftover after parsing attributes in process `syz.0.24'.
[  115.493407][ T6032] loop0: detected capacity change from 0 to 32768
[  115.530913][ T6032] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  115.541297][ T6032] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  115.551232][ T6032] BTRFS info (device loop0): using free space tree
[  115.583346][ T6033] xt_connbytes: Forcing CT accounting to be enabled
[  115.590848][ T6033] Cannot find set identified by id 0 to match
[  116.633481][ T6032] BTRFS info (device loop0): enabling ssd optimizations
[  116.640755][ T6032] BTRFS info (device loop0): auto enabling async discard
[  117.664098][ T5791] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  118.220068][ T6052] netlink: 76 bytes leftover after parsing attributes in process `syz.3.28'.
[  119.144428][ T6069] netlink: 96 bytes leftover after parsing attributes in process `syz.0.29'.
[  120.559253][ T6074] loop3: detected capacity change from 0 to 32768
[  120.581570][ T6074] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.31 (6074)
[  120.616562][ T6074] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  120.626841][ T6074] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  120.636401][ T6074] BTRFS info (device loop3): using free space tree
[  121.256996][ T6083] loop0: detected capacity change from 0 to 32768
[  122.016935][ T6083] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.33 (6083)
[  122.725153][ T6074] BTRFS info (device loop3): enabling ssd optimizations
[  122.733336][ T6074] BTRFS info (device loop3): auto enabling async discard
[  122.929883][ T5806] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (5806)
[  123.217904][ T5841] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  123.678511][ T6103] netlink: 88 bytes leftover after parsing attributes in process `syz.0.34'.
[  123.858676][ T5790] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  124.423219][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'.
[  124.439230][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'.
[  125.791426][ T6121] netlink: 76 bytes leftover after parsing attributes in process `syz.3.35'.
[  127.349555][ T6133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.43'.
[  127.775831][ T6135] loop1: detected capacity change from 0 to 40427
[  127.849996][ T6135] F2FS-fs (loop1): invalid crc value
[  127.881967][ T6135] F2FS-fs (loop1): Found nat_bits in checkpoint
[  128.045881][ T6135] F2FS-fs (loop1): Start checkpoint disabled!
[  128.097405][ T6135] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  128.898198][ T5101] Bluetooth: hci3: command tx timeout
[  129.010244][   T28] audit: type=1326 audit(1755222305.490:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94258ebe9 code=0x7fc00000
[  129.378932][   T28] audit: type=1326 audit(1755222305.890:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94258ebe9 code=0x7fc00000
[  129.629916][ T1136] kworker/u4:7: attempt to access beyond end of device
[  129.629916][ T1136] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  129.678522][ T1136] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  129.685584][ T1136] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  129.698107][ T1136] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  130.659011][   T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  130.895124][   T43] usb 3-1: Using ep0 maxpacket: 8
[  130.943284][   T43] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  131.028441][   T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  131.040110][   T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  131.050941][   T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  131.062575][   T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  131.142368][   T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.189299][   T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  131.253175][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.528146][   T43] usb 3-1: GET_CAPABILITIES returned 0
[  131.547132][ T6169] loop3: detected capacity change from 0 to 4096
[  131.556450][   T43] usbtmc 3-1:16.0: can't read capabilities
[  131.743767][   T43] usb 3-1: USB disconnect, device number 3
[  132.519753][ T6167] loop0: detected capacity change from 0 to 131072
[  133.018028][    C0] sched: RT throttling activated
[  133.035068][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  133.046117][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  134.389225][ T6167] fscrypt: Error allocating hmac(sha512): -2
[  134.395395][ T6167] F2FS-fs (loop0): Error processing option "test_dummy_encryption" [-2]
[  135.493813][ T6181] loop1: detected capacity change from 0 to 131072
[  135.501524][ T6181] =======================================================
[  135.501524][ T6181] WARNING: The mand mount option has been deprecated and
[  135.501524][ T6181]          and is ignored by this kernel. Remove the mand
[  135.501524][ T6181]          option from the mount to silence this warning.
[  135.501524][ T6181] =======================================================
[  135.598740][ T6181] F2FS-fs (loop1): Invalid log sectors per block(570425347) log sectorsize(9)
[  135.607796][ T6181] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  135.625378][ T6181] F2FS-fs (loop1): invalid crc value
[  135.986415][ T6181] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[  136.017192][ T6181] F2FS-fs (loop1): Bad quota inode 2:50331648
[  136.023679][ T6181] F2FS-fs (loop1): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[  136.034643][ T6181] F2FS-fs (loop1): Cannot turn on quotas: error -22
[  136.052300][ T6181] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  136.061736][ T6181] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b
[  139.854984][ T6221] loop0: detected capacity change from 0 to 131072
[  139.943106][ T6221] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  139.951313][ T6221] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  140.026703][ T6221] F2FS-fs (loop0): invalid crc value
[  140.070887][ T6221] F2FS-fs (loop0): Found nat_bits in checkpoint
[  140.129352][ T6221] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  140.136466][ T6221] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  141.276196][ T6245] loop3: detected capacity change from 0 to 8
[  141.848576][ T6245] SQUASHFS error: zlib decompression failed, data probably corrupt
[  141.857140][ T6245] SQUASHFS error: Failed to read block 0x9b: -5
[  141.863751][ T6245] SQUASHFS error: Unable to read metadata cache entry [99]
[  141.871257][ T6245] SQUASHFS error: Unable to read inode 0x127
[  142.011541][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.78'.
[  143.521784][ T6257] loop2: detected capacity change from 0 to 128
[  143.580007][ T5807] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  143.816316][ T6259] Zero length message leads to an empty skb
[  144.662133][ T6259] syz.3.83 (6259) used greatest stack depth: 16072 bytes left
[  145.413696][ T6280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.90'.
[  145.448354][ T6282] @: renamed from vlan0 (while UP)
[  146.486930][ T6295] syzkaller0: entered promiscuous mode
[  146.492889][ T6295] syzkaller0: entered allmulticast mode
[  149.678591][ T6326] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.730873][ T6328] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  151.693395][ T6360] loop1: detected capacity change from 0 to 16
[  151.815983][ T6360] erofs: (device loop1): mounted with root inode @ nid 36.
[  152.028052][ T5798] Bluetooth: hci3: command tx timeout
[  152.473832][ T6373] overlayfs: missing 'lowerdir'
[  153.218288][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  153.249083][ T6384] loop2: detected capacity change from 0 to 64
[  153.576276][ T6384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'.
[  153.585708][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'.
[  154.539606][ T5876] usb 4-1: Using ep0 maxpacket: 32
[  154.561255][ T5876] usb 4-1: config 0 has no interfaces?
[  154.566814][ T5876] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  154.576077][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.595291][ T5876] usb 4-1: config 0 descriptor??
[  155.290947][ T6398] loop1: detected capacity change from 0 to 40427
[  155.354410][ T6396] ksmbd: Unknown IPC event: 6, ignore.
[  155.406103][ T6398] F2FS-fs (loop1): invalid crc value
[  155.434488][ T6398] F2FS-fs (loop1): Found nat_bits in checkpoint
[  155.479842][ T6398] F2FS-fs (loop1): Start checkpoint disabled!
[  155.525985][ T6398] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  156.109909][ T5859] usb 4-1: USB disconnect, device number 2
[  157.026959][   T44] kworker/u4:3: attempt to access beyond end of device
[  157.026959][   T44] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  157.043755][   T44] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  157.456347][ T5798] Bluetooth: hci3: command tx timeout
[  158.365555][ T6426] loop2: detected capacity change from 0 to 64
[  158.372875][ T6426] hfs: creator requires a 4 character value
[  158.379226][ T6426] hfs: unable to parse mount options
[  159.579581][ T6435] block device autoloading is deprecated and will be removed.
[  159.589206][ T6438] loop2: detected capacity change from 0 to 8
[  160.330507][ T6438] Page size > filesystem block size (0).  This is currently not supported!
[  160.339176][ T5792] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  161.335871][ T6434] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  161.342718][ T6434] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  161.389895][ T6434] vhci_hcd vhci_hcd.0: Device attached
[  161.576562][ T6441] vhci_hcd: connection closed
[  161.579445][   T44] vhci_hcd: stop threads
[  161.590872][   T44] vhci_hcd: release socket
[  161.597266][   T44] vhci_hcd: disconnect device
[  161.615517][ T6454] syz.0.139 uses obsolete (PF_INET,SOCK_PACKET)
[  161.628242][ T5841] vhci_hcd: vhci_device speed not set
[  161.679752][ T6448] syzkaller1: entered promiscuous mode
[  161.696244][ T6448] syzkaller1: entered allmulticast mode
[  161.846569][ T5792] usb 2-1: device not accepting address 2, error -71
[  162.060094][ T6463] tipc: Started in network mode
[  162.065212][ T6463] tipc: Node identity , cluster identity 4711
[  162.074904][ T6463] tipc: Failed to obtain node identity
[  162.086679][ T6463] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  162.420794][ T6474] loop1: detected capacity change from 0 to 512
[  162.442790][ T6474] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  164.648313][ T6498] netlink: 'syz.1.155': attribute type 12 has an invalid length.
[  165.815844][ T6503] loop2: detected capacity change from 0 to 40427
[  165.855332][ T6503] F2FS-fs (loop2): invalid crc value
[  165.974515][ T6503] F2FS-fs (loop2): Found nat_bits in checkpoint
[  166.022811][ T6503] F2FS-fs (loop2): Start checkpoint disabled!
[  166.089189][ T6503] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  167.531139][ T6515] loop3: detected capacity change from 0 to 128
[  169.393217][ T6522] hub 9-0:1.0: USB hub found
[  169.400650][ T6522] hub 9-0:1.0: 1 port detected
[  169.895553][  T143] kworker/u4:5: attempt to access beyond end of device
[  169.895553][  T143] loop2: rw=1, sector=77824, nr_sectors = 136 limit=40427
[  169.964646][  T143] kworker/u4:5: attempt to access beyond end of device
[  169.964646][  T143] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  170.010549][  T143] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  170.020313][  T143] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  170.029497][  T143] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  170.699757][  T143] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  171.175333][ T6537] loop1: detected capacity change from 0 to 4096
[  172.903335][ T6567] sctp: [Deprecated]: syz.1.174 (pid 6567) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.903335][ T6567] Use struct sctp_sack_info instead
[  173.778508][ T6569] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  173.956881][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'.
[  174.021747][ T6578] loop1: detected capacity change from 0 to 16
[  174.048605][ T6578] erofs: (device loop1): mounted with root inode @ nid 36.
[  174.511778][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'.
[  179.292953][ T6623] loop2: detected capacity change from 0 to 512
[  179.555423][  T143] Bluetooth: hci4: Frame reassembly failed (-84)
[  179.886318][ T6623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.023582][ T6623] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.501089][ T6623] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  181.528228][ T5798] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  181.587861][ T6623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.397223][ T6637] loop3: detected capacity change from 0 to 65536
[  182.427746][ T6650] loop2: detected capacity change from 0 to 8
[  182.644552][ T6650] SQUASHFS error: zlib decompression failed, data probably corrupt
[  182.652821][ T6650] SQUASHFS error: Failed to read block 0x9b: -5
[  182.659288][ T6650] SQUASHFS error: Unable to read metadata cache entry [99]
[  182.666564][ T6650] SQUASHFS error: Unable to read inode 0x127
[  182.726728][ T6637] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  183.192207][ T6637] XFS (loop3): Ending clean mount
[  183.233470][    T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 
[  183.246697][ T6665] loop2: detected capacity change from 0 to 720
[  183.311756][    T8] XFS (loop3): Unmount and run xfs_repair
[  183.317549][    T8] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  183.319240][ T6666] overlay: filesystem on ./bus not supported
[  183.361165][    T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  183.408904][    T8] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[  183.428104][    T8] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  183.437182][    T8] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[  183.498117][    T8] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[  183.507035][    T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[  183.538119][    T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  183.547048][    T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  183.642958][ T6637] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x6 len 2 error 74
[  183.700712][ T6637] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  183.716788][ T6637] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  183.779077][ T5790] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  184.891929][ T6680] process 'syz.0.206' launched '/dev/fd/-1/./file2' with NULL argv: empty string added
[  187.958097][ T5792] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  188.186198][ T5792] usb 2-1: Using ep0 maxpacket: 16
[  189.643082][ T6694] loop2: detected capacity change from 0 to 32768
[  189.654772][ T6694] (syz.2.210,6694,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  189.673518][ T6694] (syz.2.210,6694,0):ocfs2_fill_super:1178 ERROR: status = -22
[  190.327699][ T5792] usb 2-1: unable to get BOS descriptor or descriptor too short
[  190.406682][ T5792] usb 2-1: no configurations
[  190.428265][ T5792] usb 2-1: can't read configurations, error -22
[  191.812041][ T6730] (null): rxe_set_mtu: Set mtu to 1024
[  191.843913][ T6732] ksmbd: Unknown IPC event: 6, ignore.
[  192.348651][ T6730] infiniband syz2: set active
[  192.353918][ T6730] infiniband syz2: added team_slave_0
[  192.563939][ T6730] RDS/IB: syz2: added
[  192.580807][ T6730] smc: adding ib device syz2 with port count 1
[  192.587256][ T6730] smc:    ib device syz2 port 1 has pnetid 
[  194.411355][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  194.417825][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  197.015133][ T6769] loop1: detected capacity change from 0 to 40427
[  197.053322][ T6769] F2FS-fs (loop1): Found nat_bits in checkpoint
[  197.718899][ T6769] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  198.300817][ T6786] syz.1.232: attempt to access beyond end of device
[  198.300817][ T6786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  198.730470][ T5788] syz-executor: attempt to access beyond end of device
[  198.730470][ T5788] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  198.789853][ T5788] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  201.988194][    T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  203.211953][    T8] usb 2-1: config 0 has no interfaces?
[  203.292459][    T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  203.484749][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.496873][    T8] usb 2-1: config 0 descriptor??
[  205.170855][   T43] usb 2-1: USB disconnect, device number 6
[  205.216213][ T6824] kernel profiling enabled (shift: 17)
[  205.850610][ T6836] loop2: detected capacity change from 0 to 4096
[  206.183361][ T6845] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.188335][ T6849] loop2: detected capacity change from 0 to 32768
[  209.220100][ T6849] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.255 (6849)
[  209.281436][ T6849] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.308258][ T6849] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  209.317150][ T6849] BTRFS info (device loop2): using free space tree
[  209.648260][ T6849] BTRFS error (device loop2): open_ctree failed: -4
[  209.830966][ T6889] warning: `syz.2.265' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  209.849760][ T6889] netlink: 'syz.2.265': attribute type 10 has an invalid length.
[  209.919414][ T6889] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  209.974093][ T5807] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5807)
[  210.026216][ T6891] loop3: detected capacity change from 0 to 2
[  210.038483][   T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  210.045077][ T6891] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  210.110044][ T5806] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  210.263572][   T43] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  210.276060][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.312579][   T43] usb 1-1: config 0 descriptor??
[  210.520624][ T6885] loop1: detected capacity change from 0 to 32768
[  210.588700][ T6885] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.263 (6885)
[  211.339237][ T6885] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  211.349539][ T6885] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  211.358379][ T6885] BTRFS info (device loop1): setting nodatasum
[  211.364581][ T6885] BTRFS info (device loop1): force zlib compression, level 3
[  211.372290][ T6885] BTRFS info (device loop1): metadata ratio 4
[  211.378534][ T6885] BTRFS info (device loop1): enabling ssd optimizations
[  211.385506][ T6885] BTRFS info (device loop1): allowing degraded mounts
[  211.392577][ T6885] BTRFS info (device loop1): using free space tree
[  211.415303][   T43] pegasus: probe of 1-1:0.0 failed with error -121
[  211.613727][ T5846] usb 1-1: USB disconnect, device number 3
[  211.667454][ T6885] BTRFS info (device loop1): auto enabling async discard
[  211.788375][   T43] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  211.912005][ T5794] Bluetooth: hci2: command 0x0406 tx timeout
[  211.924627][ T5803] Bluetooth: hci0: command 0x0406 tx timeout
[  211.932050][ T5803] Bluetooth: hci1: command 0x0406 tx timeout
[  212.130547][   T43] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  212.283209][   T43] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  212.327801][   T43] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  212.427735][   T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  212.454921][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.468848][   T43] usb 4-1: Product: syz
[  212.481092][   T43] usb 4-1: Manufacturer: syz
[  212.525570][   T43] usb 4-1: SerialNumber: syz
[  212.687611][ T5788] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.992997][   T43] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  213.548545][ T5846] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  213.906148][   T43] usb 4-1: current rate 9338433 is different from the runtime rate 9338507
[  213.953697][ T5846] usb 2-1: unable to get BOS descriptor or descriptor too short
[  214.068031][ T5846] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  214.230854][ T6942] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  214.253312][ T5846] usb 2-1: string descriptor 0 read error: -22
[  214.264457][ T5846] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  214.308816][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.348310][   T43] usb 4-1: USB disconnect, device number 3
[  214.472334][ T6949] udevd[6949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  214.579940][ T5846] usb 2-1: reset high-speed USB device number 7 using dummy_hcd
[  214.846899][    T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.884099][    T8] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  215.278211][ T5846] usb 2-1: device descriptor read/64, error -71
[  215.538076][   T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  215.551039][ T5846] usb 2-1: reset high-speed USB device number 7 using dummy_hcd
[  215.591117][ T5846] usb 2-1: device reset changed ep0 maxpacket size!
[  215.604079][ T5846] usb 2-1: USB disconnect, device number 7
[  215.806156][ T5846] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  215.817287][   T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  215.836490][   T23] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  215.847548][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  215.856936][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  215.877039][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  215.900927][   T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  215.918350][   T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  215.941900][   T23] usb 3-1: Product: syz
[  215.946120][   T23] usb 3-1: Manufacturer: syz
[  215.980358][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  215.995929][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  216.008230][ T5846] usb 2-1: Using ep0 maxpacket: 16
[  216.015330][   T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  216.026141][   T23] cdc_wdm 3-1:1.0: Unknown control protocol
[  216.035250][ T5846] usb 2-1: unable to get BOS descriptor or descriptor too short
[  216.072392][ T5846] usb 2-1: unable to read config index 0 descriptor/start: -71
[  216.130307][ T5846] usb 2-1: can't read configurations, error -71
[  216.378399][ T5792] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  216.588287][ T5792] usb 4-1: config 0 has an invalid interface number: 32 but max is 0
[  216.608273][ T5792] usb 4-1: config 0 has no interface number 0
[  216.617487][ T5792] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  216.652017][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.690940][ T5792] usb 4-1: config 0 descriptor??
[  216.835437][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.878848][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.926205][ T5859] usb 3-1: USB disconnect, device number 4
[  216.953288][ T5792] cp210x 4-1:0.32: cp210x converter detected
[  217.234304][ T5792] cp210x 4-1:0.32: failed to get vendor val 0x000e size 3: -71
[  217.504208][ T5792] usb 4-1: cp210x converter now attached to ttyUSB0
[  217.654062][ T5792] usb 4-1: USB disconnect, device number 4
[  217.722587][ T5792] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  217.784099][ T5792] cp210x 4-1:0.32: device disconnected
[  219.528206][ T5792] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  220.128272][ T5792] usb 4-1: Using ep0 maxpacket: 32
[  220.145911][ T5792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.231976][ T5792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.232050][ T5792] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  220.232071][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.241919][ T5792] usb 4-1: config 0 descriptor??
[  220.246697][ T5792] hub 4-1:0.0: USB hub found
[  220.416022][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  220.426365][ T5798] CPU: 1 PID: 5798 Comm: kworker/u5:3 Not tainted 6.6.101-syzkaller #0
[  220.434666][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  220.444752][ T5798] Workqueue: hci2 hci_rx_work
[  220.449493][ T5798] Call Trace:
[  220.452807][ T5798]  <TASK>
[  220.455784][ T5798]  dump_stack_lvl+0x16c/0x230
[  220.460503][ T5798]  ? show_regs_print_info+0x20/0x20
[  220.465751][ T5798]  ? load_image+0x3b0/0x3b0
[  220.470329][ T5798]  sysfs_create_dir_ns+0x256/0x280
[  220.475500][ T5798]  ? hci_rx_work+0x43a/0xd80
[  220.480119][ T5798]  ? sysfs_warn_dup+0xa0/0xa0
[  220.484892][ T5798]  ? do_raw_spin_unlock+0x121/0x230
[  220.490130][ T5798]  kobject_add_internal+0x6b8/0xc70
[  220.495382][ T5798]  kobject_add+0x156/0x220
[  220.499828][ T5798]  ? __rwlock_init+0x150/0x150
[  220.504623][ T5798]  ? kobject_init+0x1e0/0x1e0
[  220.509318][ T5798]  ? _raw_spin_unlock+0x28/0x40
[  220.514196][ T5798]  ? get_device_parent+0x366/0x390
[  220.519348][ T5798]  device_add+0x408/0xc20
[  220.523711][ T5798]  hci_conn_add_sysfs+0xd5/0x1e0
[  220.528672][ T5798]  le_conn_complete_evt+0xc37/0x1220
[  220.533984][ T5798]  ? hci_event_packet+0x4a7/0x1210
[  220.539135][ T5798]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[  220.545428][ T5798]  ? __copy_skb_header+0xa7/0x550
[  220.550609][ T5798]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  220.556285][ T5798]  ? skb_pull_data+0xfb/0x200
[  220.561017][ T5798]  hci_le_conn_complete_evt+0x187/0x440
[  220.566602][ T5798]  ? hci_remote_host_features_evt+0x160/0x160
[  220.572686][ T5798]  hci_event_packet+0x795/0x1210
[  220.577653][ T5798]  ? bis_list+0x290/0x290
[  220.582032][ T5798]  ? lockdep_hardirqs_on+0x98/0x150
[  220.587255][ T5798]  ? hci_send_to_monitor+0xd7/0x4f0
[  220.592469][ T5798]  hci_rx_work+0x43a/0xd80
[  220.596929][ T5798]  ? process_scheduled_works+0x957/0x15b0
[  220.602669][ T5798]  process_scheduled_works+0xa45/0x15b0
[  220.608271][ T5798]  ? assign_work+0x400/0x400
[  220.612900][ T5798]  ? assign_work+0x39e/0x400
[  220.617512][ T5798]  worker_thread+0xa55/0xfc0
[  220.622142][ T5798]  kthread+0x2fa/0x390
[  220.626229][ T5798]  ? pr_cont_work+0x560/0x560
[  220.630939][ T5798]  ? kthread_blkcg+0xd0/0xd0
[  220.635545][ T5798]  ret_from_fork+0x48/0x80
[  220.639976][ T5798]  ? kthread_blkcg+0xd0/0xd0
[  220.644577][ T5798]  ret_from_fork_asm+0x11/0x20
[  220.649370][ T5798]  </TASK>
[  220.652456][    C1] vkms_vblank_simulate: vblank timer overrun
[  220.662075][ T5798] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  220.676206][ T5798] Bluetooth: hci2: failed to register connection device
[  220.709304][ T5792] hub 4-1:0.0: 1 port detected
[  220.897771][ T7002] syzkaller0: entered promiscuous mode
[  220.903405][ T7002] syzkaller0: entered allmulticast mode
[  221.237873][ T7006] loop1: detected capacity change from 0 to 764
[  221.325756][ T5792] hub 4-1:0.0: activate --> -90
[  221.561091][ T5792] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  221.562483][ T5846] usb 4-1: USB disconnect, device number 5
[  223.768268][ T5859] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  223.975924][ T5859] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  223.985358][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.010798][ T5859] usb 4-1: config 0 descriptor??
[  224.030883][ T5859] gspca_main: cpia1-2.14.0 probing 0813:0001
[  224.975572][ T7033] comedi comedi0: Minor 5 could not be opened
[  225.052563][ T5859] gspca_cpia1: usb_control_msg 05, error -110
[  225.807723][ T5859] gspca_cpia1: usb_control_msg 01, error -32
[  225.824317][ T5859] gspca_cpia1: usb_control_msg 01, error -32
[  225.867627][ T5859] gspca_cpia1: usb_control_msg 01, error -32
[  225.901964][ T5859] gspca_cpia1: usb_control_msg 01, error -32
[  225.952515][ T5859] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  226.437766][ T5876] usb 4-1: USB disconnect, device number 6
[  226.657082][ T7056] netlink: 156 bytes leftover after parsing attributes in process `syz.3.313'.
[  226.668162][    T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  226.881979][    T8] usb 1-1: config 0 has no interfaces?
[  226.887558][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  226.958876][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.078946][ T5101] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  227.101219][    T8] usb 1-1: config 0 descriptor??
[  229.065329][ T7089] loop1: detected capacity change from 0 to 764
[  229.090166][ T7089] rock: directory entry would overflow storage
[  229.096800][ T7089] rock: sig=0x4654, size=5, remaining=4
[  229.407292][ T7093] loop2: detected capacity change from 0 to 4096
[  229.414687][    T8] usb 1-1: USB disconnect, device number 4
[  229.439844][ T7093] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  230.493159][ T7101] delete_channel: no stack
[  233.511670][ T7106] loop1: detected capacity change from 0 to 131072
[  233.527754][ T7106] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  233.536033][ T7106] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  233.546697][ T7106] F2FS-fs (loop1): invalid crc value
[  233.632898][ T7106] F2FS-fs (loop1): Found nat_bits in checkpoint
[  233.694060][ T7106] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  233.694138][ T7106] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  235.251839][ T5846] IPVS: starting estimator thread 0...
[  235.939454][ T7142] IPVS: using max 23 ests per chain, 55200 per kthread
[  236.502311][ T7152] loop2: detected capacity change from 0 to 512
[  236.585219][ T7152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.896253][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.222837][ T7168] tipc: Started in network mode
[  238.244141][ T7168] tipc: Node identity aa2d63f0f694, cluster identity 4711
[  238.252377][ T7168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.260259][ T7168] syzkaller0: entered promiscuous mode
[  238.278108][ T7168] syzkaller0: entered allmulticast mode
[  239.091773][ T7168] tipc: Resetting bearer <eth:syzkaller0>
[  239.130856][ T7167] tipc: Resetting bearer <eth:syzkaller0>
[  239.196522][ T7167] tipc: Disabling bearer <eth:syzkaller0>
[  239.585924][ T7181] loop2: detected capacity change from 0 to 4096
[  239.718729][ T7186] loop3: detected capacity change from 0 to 64
[  239.951601][ T7188] loop1: detected capacity change from 0 to 256
[  239.963303][ T7188] FAT-fs (loop1): Unrecognized mount option "shor�name=win95" or missing value
[  241.001743][ T5798] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  241.376519][ T7202] loop2: detected capacity change from 0 to 512
[  241.402826][ T7202] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  245.176156][ T7226] (null): rxe_set_mtu: Set mtu to 4096
[  245.182283][ T7226] lo speed is unknown, defaulting to 1000
[  245.193004][ T7226] lo speed is unknown, defaulting to 1000
[  245.200474][ T7226] lo speed is unknown, defaulting to 1000
[  245.525403][ T7226] infiniband s
z1: set active
[  245.530872][ T7226] infiniband s
z1: added lo
[  245.537753][ T7226] s
z1: rxe_create_cq: returned err = -12
[  245.544263][ T7226] infiniband s
z1: Couldn't create ib_mad CQ
[  245.552388][ T7226] infiniband s
z1: Couldn't open port 1
[  245.578127][   T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  245.591133][ T5876] lo speed is unknown, defaulting to 1000
[  245.652158][ T7226] RDS/IB: s
z1: added
[  245.656340][ T7226] smc: adding ib device s
z1 with port count 1
[  245.662614][ T7226] smc:    ib device s
z1 port 1 has pnetid 
[  245.669673][ T7226] lo speed is unknown, defaulting to 1000
[  245.840530][ T7226] lo speed is unknown, defaulting to 1000
[  245.851002][ T5876] lo speed is unknown, defaulting to 1000
[  246.060811][ T7226] lo speed is unknown, defaulting to 1000
[  246.210445][ T7233] loop2: detected capacity change from 0 to 32768
[  246.217905][ T7233] XFS: ikeep mount option is deprecated.
[  246.235237][ T7226] lo speed is unknown, defaulting to 1000
[  246.300499][ T7233] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.316035][   T43] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 48
[  246.339927][   T43] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  246.486273][   T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  246.501088][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  246.508245][ T7233] XFS (loop2): Ending clean mount
[  246.509685][   T43] usb 2-1: Product: syz
[  246.525766][   T43] usb 2-1: Manufacturer: syz
[  246.538251][ T7233] XFS (loop2): Quotacheck needed: Please wait.
[  246.654710][   T43] usb 2-1: SerialNumber: syz
[  246.666022][ T7233] XFS (loop2): Quotacheck: Done.
[  246.746444][ T7247] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  246.883287][   T43] usb 2-1: can't set config #1, error -71
[  247.035312][   T43] usb 2-1: USB disconnect, device number 10
[  247.145072][ T7253] loop1: detected capacity change from 0 to 2048
[  247.165785][ T5789] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  247.189112][ T7245] loop3: detected capacity change from 0 to 4096
[  247.225957][ T7255] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  249.857524][ T5798] Bluetooth: hci3: link tx timeout
[  249.864044][ T5798] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  249.881668][ T5798] Bluetooth: hci3: link tx timeout
[  249.886930][ T5798] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  249.897624][ T5798] Bluetooth: hci3: link tx timeout
[  249.902913][ T5798] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  249.923423][ T5798] Bluetooth: hci3: link tx timeout
[  249.929054][ T5798] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  250.674447][ T7262] loop2: detected capacity change from 0 to 32768
[  250.734981][ T7262] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  250.890570][ T7262] XFS (loop2): Ending clean mount
[  250.951508][ T7262] XFS (loop2): Quotacheck needed: Please wait.
[  251.111462][ T7266] loop3: detected capacity change from 0 to 32768
[  251.227917][ T7266] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.241329][ T7262] XFS (loop2): Quotacheck: Done.
[  251.810741][ T7266] XFS (loop3): Ending clean mount
[  251.904799][ T5789] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  251.962555][ T5798] Bluetooth: hci3: command 0x0406 tx timeout
[  252.001454][ T5790] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  252.651871][ T7300] loop1: detected capacity change from 0 to 2048
[  252.744210][ T7300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.798729][ T7309] loop2: detected capacity change from 0 to 128
[  252.874051][ T7309] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  252.959821][ T7309] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.026270][ T7300] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.377: bg 0: block 234: padding at end of block bitmap is not set
[  253.084554][ T7309] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  253.113044][ T7300] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 272 with error 28
[  253.136029][ T7309] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #12: comm syz.2.379: mark_inode_dirty error
[  253.147505][ T7300] EXT4-fs (loop1): This should not happen!! Data will be lost
[  253.147505][ T7300] 
[  253.161379][ T7300] EXT4-fs (loop1): Total free blocks count 0
[  253.173753][ T7300] EXT4-fs (loop1): Free/Dirty block details
[  253.187312][ T7300] EXT4-fs (loop1): free_blocks=0
[  253.193290][ T7309] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.379: Invalid block bitmap block 0 in block_group 0
[  253.198676][ T7300] EXT4-fs (loop1): dirty_blocks=288
[  253.228093][ T7300] EXT4-fs (loop1): Block reservation details
[  253.234450][ T7309] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  253.244021][ T7300] EXT4-fs (loop1): i_reserved_data_blocks=18
[  253.263606][ T7309] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #12: comm syz.2.379: mark_inode_dirty error
[  253.305203][ T7309] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.379: Invalid block bitmap block 0 in block_group 0
[  253.354830][ T7309] EXT4-fs error (device loop2): ext4_discard_preallocations:5624: comm syz.2.379: Error -117 reading block bitmap for 0
[  253.358383][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.403306][ T7309] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.379: Invalid block bitmap block 0 in block_group 0
[  253.442351][ T7309] EXT4-fs error (device loop2): ext4_discard_preallocations:5624: comm syz.2.379: Error -117 reading block bitmap for 0
[  253.503041][ T7309] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  253.655498][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  253.820039][ T7313] loop3: detected capacity change from 0 to 32768
[  253.843276][ T7313] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.375 (7313)
[  254.628474][ T7313] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  254.688159][ T7313] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  254.718339][ T7313] BTRFS info (device loop3): force zlib compression, level 3
[  254.739281][ T7313] BTRFS info (device loop3): force clearing of disk cache
[  254.746490][ T7313] BTRFS info (device loop3): setting nodatasum
[  254.768608][ T7313] BTRFS info (device loop3): allowing degraded mounts
[  254.775466][ T7313] BTRFS info (device loop3): enabling disk space caching
[  254.922348][ T7313] BTRFS info (device loop3): disk space caching is enabled
[  255.336709][ T7313] BTRFS info (device loop3): auto enabling async discard
[  255.483941][ T7313] BTRFS info (device loop3): rebuilding free space tree
[  255.736615][ T7313] BTRFS info (device loop3): disabling free space tree
[  255.749548][ T7313] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  255.759807][ T7313] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  255.852219][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  255.858865][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  255.987145][ T5790] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  257.168706][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'.
[  258.920955][ T7378] loop2: detected capacity change from 0 to 4096
[  258.988555][ T7378] NILFS (loop2): invalid segment: Checksum error in segment payload
[  259.033078][ T7378] NILFS (loop2): trying rollback from an earlier position
[  259.044524][ T7383] loop3: detected capacity change from 0 to 512
[  259.097123][ T7371] loop1: detected capacity change from 0 to 32768
[  259.106023][ T7378] NILFS (loop2): recovery complete
[  259.239803][ T7387] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  259.531196][ T7383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.727491][ T7383] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.607563][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.402'.
[  261.693909][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.857517][ T7413] loop1: detected capacity change from 0 to 128
[  263.459757][ T7420] loop3: detected capacity change from 0 to 8192
[  263.519641][ T7420] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  263.564354][ T7420] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  263.624826][ T7420] REISERFS (device loop3): using ordered data mode
[  263.668055][ T7420] reiserfs: using flush barriers
[  263.691783][ T7420] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  263.739363][ T7420] REISERFS (device loop3): checking transaction log (loop3)
[  264.100440][ T7411] loop2: detected capacity change from 0 to 40427
[  264.854718][ T7411] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  264.919410][ T7420] REISERFS (device loop3): Using tea hash to sort names
[  264.934975][ T7411] F2FS-fs (loop2): invalid crc value
[  264.959160][ T7420] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  264.968633][ T7411] F2FS-fs (loop2): Found nat_bits in checkpoint
[  265.087892][ T7411] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  265.176181][ T7411] F2FS-fs (loop2): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x97f/0x19e0
[  265.228671][ T7411] syz.2.405: attempt to access beyond end of device
[  265.228671][ T7411] loop2: rw=2049, sector=53248, nr_sectors = 256 limit=40427
[  265.263682][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.273392][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.290417][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.298833][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.307251][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.317529][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.330736][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.342708][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.354835][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.365635][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.375814][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.394104][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.401760][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.409796][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.416949][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.424576][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.433017][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.462776][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.470662][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.477670][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.487283][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.497119][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.524983][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.532709][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.540264][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.547415][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.555016][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.563431][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.570879][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.582208][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.589717][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.596969][ T7411] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  266.089984][ T7453] loop3: detected capacity change from 0 to 4096
[  266.693081][ T7453] ntfs: volume version 3.1.
[  266.913469][ T7453] ntfs: (device loop3): ntfs_nlstoucs(): Name using character set utf8 contains characters that cannot be converted to Unicode.
[  266.998207][ T7453] ntfs: (device loop3): ntfs_lookup(): Failed to convert name to Unicode.
[  267.602931][ T7466] loop2: detected capacity change from 0 to 32768
[  267.640086][ T7466] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.421 (7466)
[  267.676085][ T7466] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  267.696736][ T7466] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  267.748238][ T7466] BTRFS info (device loop2): disabling tree log
[  267.754570][ T7466] BTRFS info (device loop2): enabling tree log
[  267.776124][ T7466] BTRFS info (device loop2): force clearing of disk cache
[  267.786265][ T7466] BTRFS info (device loop2): using free space tree
[  268.046655][ T7466] BTRFS info (device loop2): enabling ssd optimizations
[  268.103410][ T7466] BTRFS info (device loop2): auto enabling async discard
[  268.328593][ T7466] BTRFS info (device loop2): rebuilding free space tree
[  269.103378][ T7466] BTRFS info (device loop2): checking UUID tree
[  270.123495][ T5789] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  270.587439][ T7508] netlink: 'syz.0.428': attribute type 10 has an invalid length.
[  270.991496][ T7508] 8021q: adding VLAN 0 to HW filter on device team0
[  271.100137][ T7508] bond0: (slave team0): Enslaving as an active interface with an up link
[  272.450151][ T7502] loop3: detected capacity change from 0 to 32768
[  272.623772][ T7502] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.711875][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'.
[  273.394193][ T7502] XFS (loop3): Ending clean mount
[  273.500620][ T5790] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.279111][ T7522] loop1: detected capacity change from 0 to 40427
[  275.298861][ T7522] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  275.306649][ T7522] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  275.328228][   T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  275.384193][ T7522] F2FS-fs (loop1): invalid crc value
[  275.414967][ T7522] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4)
[  275.558172][   T43] usb 3-1: Using ep0 maxpacket: 8
[  275.594996][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  275.608413][   T43] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  275.617866][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.658359][   T43] usb 3-1: config 0 descriptor??
[  276.168803][ T7563] overlayfs: overlapping lowerdir path
[  276.788237][   T43] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  276.821725][   T43] usb 3-1: USB disconnect, device number 5
[  277.319596][ T7568] netlink: 96 bytes leftover after parsing attributes in process `syz.1.442'.
[  277.873740][ T7570] loop2: detected capacity change from 0 to 32768
[  278.739964][ T7570] (syz.2.443,7570,0):ocfs2_find_slot:468 ERROR: no free slots available!
[  278.748667][ T7570] (syz.2.443,7570,0):ocfs2_mount_volume:1809 ERROR: status = -22
[  278.762475][ T7570] (syz.2.443,7570,0):ocfs2_fill_super:1178 ERROR: status = -22
[  279.583393][ T7585] binder: 7578:7585 ioctl 4018620d 0 returned -22
[  279.592323][ T7585] netlink: 52 bytes leftover after parsing attributes in process `syz.3.446'.
[  279.603130][ T7585] virtio-fs: tag </dev/md0> not found
[  281.148482][ T7599] loop3: detected capacity change from 0 to 1024
[  281.197385][ T7599] EXT4-fs: Ignoring removed orlov option
[  281.228132][ T7599] EXT4-fs: Ignoring removed nomblk_io_submit option
[  281.558250][ T7589] loop1: detected capacity change from 0 to 32768
[  281.636786][ T7589] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  281.743391][ T7599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.139378][ T7601] syz.2.453 (7601): drop_caches: 2
[  282.150880][ T7589] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  282.624525][ T5788] ocfs2: Unmounting device (7,1) on (node local)
[  283.084533][ T7614] loop2: detected capacity change from 0 to 128
[  283.110667][ T7614] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  283.144118][   T28] audit: type=1804 audit(1755222459.660:4): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.455" name="file0" dev="ramfs" ino=10879 res=1 errno=0
[  283.207442][ T7614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  285.628071][   T43] IPVS: starting estimator thread 0...
[  285.775444][ T7627] IPVS: using max 22 ests per chain, 52800 per kthread
[  288.135055][ T7619] syz.0.459 (7619): drop_caches: 2
[  288.229481][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.940691][ T7662] random: crng reseeded on system resumption
[  290.775714][ T7666] mmap: syz.1.471 (7666): VmData 48082944 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  291.175480][ T7668] loop2: detected capacity change from 0 to 512
[  291.415278][ T7668] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  291.499776][ T7666] capability: warning: `syz.1.471' uses deprecated v2 capabilities in a way that may be insecure
[  291.512323][ T7668] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  291.701893][ T7668] EXT4-fs (loop2): 1 truncate cleaned up
[  291.708955][ T7668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.779286][   T28] audit: type=1800 audit(1755222468.290:5): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.473" name="file1" dev="loop2" ino=15 res=0 errno=0
[  292.029598][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.733488][ T7697] loop3: detected capacity change from 0 to 1024
[  293.793539][ T7697] hfsplus: unable to parse mount options
[  294.758968][ T7712] loop3: detected capacity change from 0 to 4096
[  294.785983][ T7712] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  295.492913][ T7723] loop3: detected capacity change from 0 to 16
[  295.614915][ T7723] erofs: (device loop3): mounted with root inode @ nid 36.
[  295.643887][ T7723] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  295.672118][ T7723] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851]
[  295.683981][ T7723] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  296.136159][ T7709] loop2: detected capacity change from 0 to 40427
[  296.198017][ T7709] F2FS-fs (loop2): Found nat_bits in checkpoint
[  296.255303][ T7709] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  296.309006][ T7709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  296.341492][ T7717] lo speed is unknown, defaulting to 1000
[  297.273489][ T7736] loop3: detected capacity change from 0 to 64
[  297.348631][ T7736] hfs: unable to locate alternate MDB
[  297.384345][ T7736] hfs: continuing without an alternate MDB
[  300.463121][ T7759] tipc: Started in network mode
[  300.478129][ T7759] tipc: Node identity 2a29728b1aa4, cluster identity 4711
[  300.495869][ T7759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.506840][ T7759] syzkaller0: entered promiscuous mode
[  300.522010][ T7759] syzkaller0: entered allmulticast mode
[  300.589304][ T7759] tipc: Resetting bearer <eth:syzkaller0>
[  300.613395][ T7758] tipc: Resetting bearer <eth:syzkaller0>
[  301.227715][ T7762] loop2: detected capacity change from 0 to 32768
[  301.266206][ T7762] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.496 (7762)
[  301.318625][ T7762] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  301.321913][ T7758] tipc: Disabling bearer <eth:syzkaller0>
[  301.329141][ T7762] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  301.344280][ T7762] BTRFS info (device loop2): enabling disk space caching
[  301.351473][ T7762] BTRFS info (device loop2): setting nodatacow, compression disabled
[  301.359684][ T7762] BTRFS info (device loop2): trying to use backup root at mount time
[  301.367854][ T7762] BTRFS info (device loop2): unrecognized rescue option 'ignoresuperflags'
[  301.376808][ T7762] BTRFS error (device loop2): unrecognized rescue value ignoresuperflags
[  301.385389][ T7762] BTRFS error (device loop2): cannot disable free space tree
[  301.396296][ T7762] BTRFS error (device loop2): open_ctree failed: -22
[  301.836940][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'.
[  301.966013][ T5807] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (5807)
[  304.458854][ T7788] CIFS: VFS: Malformed UNC in devname
[  307.443359][ T7792] loop1: detected capacity change from 0 to 4096
[  307.825044][ T7792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.936974][ T7807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.149420][ T5172] tipc: Node number set to 1555653616
[  311.222418][ T7807] syzkaller0: entered promiscuous mode
[  311.298230][ T7807] syzkaller0: entered allmulticast mode
[  311.327012][ T7807] tipc: Resetting bearer <eth:syzkaller0>
[  311.578674][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.605866][ T7826] loop3: detected capacity change from 0 to 64
[  311.713041][   T11] tipc: Resetting bearer <eth:syzkaller0>
[  311.771493][ T7807] tipc: Resetting bearer <eth:syzkaller0>
[  312.927907][ T7836] input: syz1 as /devices/virtual/input/input6
[  317.291867][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  317.684178][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  318.279102][ T7857] loop1: detected capacity change from 0 to 32768
[  318.286587][ T7857] XFS: ikeep mount option is deprecated.
[  318.365743][ T7857] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  318.636863][ T7857] XFS (loop1): Ending clean mount
[  318.663364][ T7857] XFS (loop1): Quotacheck needed: Please wait.
[  318.780018][ T7857] XFS (loop1): Quotacheck: Done.
[  319.602762][ T7875] loop3: detected capacity change from 0 to 4096
[  320.979009][ T5792] Process accounting resumed
[  321.989012][ T7807] tipc: Disabling bearer <eth:syzkaller0>
[  322.883631][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  325.338059][ T7896] netlink: 'syz.0.534': attribute type 20 has an invalid length.
[  325.492247][ T7900] Bluetooth: MGMT ver 1.22
[  326.966386][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  326.977648][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  326.987531][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  326.997129][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  327.007047][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  327.384109][  T143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.573640][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  328.596931][  T143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.708361][ T5101] Bluetooth: hci1: command tx timeout
[  330.060811][  T143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.527658][ T7938] Bluetooth: MGMT ver 1.22
[  330.826368][  T143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.095442][ T7914] lo speed is unknown, defaulting to 1000
[  331.591783][  T143] tipc: Left network mode
[  331.616682][ T7935] lo speed is unknown, defaulting to 1000
[  331.771979][ T5101] Bluetooth: hci1: command tx timeout
[  333.857993][ T5101] Bluetooth: hci1: command tx timeout
[  335.136457][ T7914] chnl_net:caif_netlink_parms(): no params data found
[  335.191772][ T7983] loop1: detected capacity change from 0 to 4096
[  335.364199][ T5807] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  335.958305][ T5101] Bluetooth: hci1: command tx timeout
[  336.598666][  T143] bond0: (slave wlan1): Releasing backup interface
[  336.737411][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.072861][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.175874][ T7914] bridge_slave_0: entered allmulticast mode
[  337.337398][ T7914] bridge_slave_0: entered promiscuous mode
[  337.348803][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.357683][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.375862][ T7914] bridge_slave_1: entered allmulticast mode
[  337.439092][ T7914] bridge_slave_1: entered promiscuous mode
[  338.025225][ T7914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.139800][ T7914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.560449][ T8014] loop1: detected capacity change from 0 to 40427
[  338.574848][ T8014] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  339.019132][ T8014] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  339.370009][ T8014] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff
[  339.378576][ T7914] team0: Port device team_slave_0 added
[  339.400598][ T7914] team0: Port device team_slave_1 added
[  339.435088][ T8014] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6
[  339.474928][ T8014] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x5
[  339.526490][ T8014] F2FS-fs (loop1): invalid crc value
[  339.565090][ T8014] F2FS-fs (loop1): Found nat_bits in checkpoint
[  339.639274][  T143] hsr_slave_0: left promiscuous mode
[  339.707331][ T8014] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  339.714774][  T143] hsr_slave_1: left promiscuous mode
[  339.728507][ T8014] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  339.767036][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.792356][ T8014] syz.1.557: attempt to access beyond end of device
[  339.792356][ T8014] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  339.915118][ T5788] syz-executor: attempt to access beyond end of device
[  339.915118][ T5788] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  339.938143][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  339.988493][ T5788] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  339.996709][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.078088][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.108947][  T143] bridge_slave_1: left allmulticast mode
[  340.146778][  T143] bridge_slave_1: left promiscuous mode
[  340.161280][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.221509][  T143] bridge_slave_0: left allmulticast mode
[  340.228992][  T143] bridge_slave_0: left promiscuous mode
[  340.234806][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.409247][  T143] veth1_macvtap: left promiscuous mode
[  340.415976][  T143] veth0_macvtap: left promiscuous mode
[  340.438296][  T143] veth1_vlan: left promiscuous mode
[  340.444076][  T143] veth0_vlan: left promiscuous mode
[  340.709534][ T8045] loop1: detected capacity change from 0 to 2048
[  340.783200][ T8045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.818518][ T8045] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  340.982430][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.249707][  T143] team0 (unregistering): Port device team_slave_1 removed
[  342.388311][  T143] team0 (unregistering): Port device team_slave_0 removed
[  342.619872][  T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  342.799547][ T8064] netlink: 512 bytes leftover after parsing attributes in process `syz.0.567'.
[  342.961087][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.516134][ T8060] loop1: detected capacity change from 0 to 32768
[  343.557852][ T8060] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  343.574106][ T8060] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  343.770376][ T8060] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  343.813004][   T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  343.829630][   T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  344.587252][   T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 757ms
[  344.606725][   T27] gfs2: fsid=syz:syz.0: jid=0: Done
[  344.615604][ T8060] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  345.733620][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  345.759271][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  345.762394][  T143] bond0 (unregistering): Released all slaves
[  345.798381][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  345.818705][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  345.828573][ T5798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  345.835996][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  346.188760][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.240077][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.295848][ T7914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.302028][ T8091] SET target dimension over the limit!
[  346.656193][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.670642][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.724007][ T7914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.153057][ T7914] hsr_slave_0: entered promiscuous mode
[  347.186742][ T7914] hsr_slave_1: entered promiscuous mode
[  347.378112][ T7914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.385754][ T7914] Cannot create hsr debugfs directory
[  347.940868][ T5798] Bluetooth: hci4: command tx timeout
[  348.341432][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.578'.
[  348.995661][ T8115] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  349.022124][ T8115] CIFS: Unable to determine destination address
[  350.058065][ T5798] Bluetooth: hci4: command tx timeout
[  350.995004][ T8083] lo speed is unknown, defaulting to 1000
[  351.336912][  T143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.033854][  T143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.088435][ T5798] Bluetooth: hci4: command tx timeout
[  352.274075][  T143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.298694][ T7914] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  352.318738][ T7914] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  352.342550][ T7914] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  352.420351][  T143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.438398][ T7914] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  353.699032][ T8083] chnl_net:caif_netlink_parms(): no params data found
[  354.168879][ T5798] Bluetooth: hci4: command tx timeout
[  354.217524][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.526633][ T7914] 8021q: adding VLAN 0 to HW filter on device team0
[  354.544997][ T8083] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.554193][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.563175][ T8083] bridge_slave_0: entered allmulticast mode
[  354.572111][ T8083] bridge_slave_0: entered promiscuous mode
[  354.635289][ T8083] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.645220][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.662156][ T8083] bridge_slave_1: entered allmulticast mode
[  354.672315][ T8083] bridge_slave_1: entered promiscuous mode
[  354.695408][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.702659][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.787099][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.794358][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.870389][ T8083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.125455][ T8083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.347801][ T8083] team0: Port device team_slave_0 added
[  356.357213][ T8083] team0: Port device team_slave_1 added
[  357.224871][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.252687][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.291103][ T8083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.343416][ T8198] netlink: 'syz.1.594': attribute type 10 has an invalid length.
[  357.351473][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.594'.
[  357.360989][ T8198] dummy0: entered promiscuous mode
[  357.367256][ T8198] bridge0: port 3(dummy0) entered blocking state
[  357.374159][ T8198] bridge0: port 3(dummy0) entered disabled state
[  357.380808][ T8198] dummy0: entered allmulticast mode
[  357.390321][ T8198] bridge0: port 3(dummy0) entered blocking state
[  357.397252][ T8198] bridge0: port 3(dummy0) entered forwarding state
[  357.573045][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.588644][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.614586][    C0] vkms_vblank_simulate: vblank timer overrun
[  357.804652][ T8083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  358.744706][ T8083] hsr_slave_0: entered promiscuous mode
[  358.766891][ T8083] hsr_slave_1: entered promiscuous mode
[  358.774320][ T8083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  358.784172][ T8083] Cannot create hsr debugfs directory
[  359.600876][ T7914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.741661][  T143] hsr_slave_0: left promiscuous mode
[  359.758278][  T143] hsr_slave_1: left promiscuous mode
[  359.991399][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  360.009972][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.052417][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  360.060329][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.073223][  T143] bridge_slave_1: left allmulticast mode
[  360.079194][  T143] bridge_slave_1: left promiscuous mode
[  360.086158][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.105336][  T143] bridge_slave_0: left allmulticast mode
[  360.111435][  T143] bridge_slave_0: left promiscuous mode
[  360.501198][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.980732][  T143] veth1_macvtap: left promiscuous mode
[  360.986371][  T143] veth0_macvtap: left promiscuous mode
[  361.015100][  T143] veth1_vlan: left promiscuous mode
[  361.027340][  T143] veth0_vlan: left promiscuous mode
[  361.181544][  T143] infiniband syz2: set down
[  362.502346][  T143] team0 (unregistering): Port device team_slave_1 removed
[  362.582566][  T143] team0 (unregistering): Port device team_slave_0 removed
[  362.635410][ T1136] smc: removing ib device syz2
[  362.692081][  T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.806420][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.632799][ T8267] ucma_write: process 595 (syz.0.611) changed security contexts after opening file descriptor, this is not allowed.
[  363.879050][  T143] bond0 (unregistering): Released all slaves
[  364.635063][ T8289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.617'.
[  364.843692][ T8083] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  364.896134][ T8083] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  364.991591][ T8083] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  365.044053][ T8083] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  365.192073][ T7914] veth0_vlan: entered promiscuous mode
[  365.276794][ T7914] veth1_vlan: entered promiscuous mode
[  365.564832][ T7914] veth0_macvtap: entered promiscuous mode
[  365.624226][ T7914] veth1_macvtap: entered promiscuous mode
[  365.766180][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.808405][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.827977][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.858037][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.882375][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.928854][ T8083] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.992001][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.045161][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.078125][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.106819][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.120198][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.204440][ T8083] 8021q: adding VLAN 0 to HW filter on device team0
[  366.298565][ T7914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.307361][ T7914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.338126][ T7914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.347126][ T7914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.382832][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.390079][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.448813][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.456045][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.957770][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.997384][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.005172][   T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  367.045711][ T8338] smc: removing ib device s
z1
[  367.161793][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.193987][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.214435][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  367.245482][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  367.286080][   T27] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  367.319733][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.350509][   T27] usb 2-1: config 0 descriptor??
[  367.585472][    T8] usb 2-1: USB disconnect, device number 11
[  367.605504][ T8083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.955830][ T8355] loop4: detected capacity change from 0 to 1024
[  367.964072][ T8355] EXT4-fs: Ignoring removed orlov option
[  367.970079][ T8355] EXT4-fs: Ignoring removed nomblk_io_submit option
[  368.027657][ T8355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.044889][ T8355] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks
[  368.053274][ T8355] EXT4-fs warning (device loop4): ext4_resize_fs:2048: can't shrink FS - resize aborted
[  368.607425][ T7914] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.000887][ T8083] veth0_vlan: entered promiscuous mode
[  369.060582][ T8083] veth1_vlan: entered promiscuous mode
[  369.177861][ T8083] veth0_macvtap: entered promiscuous mode
[  369.227620][ T8083] veth1_macvtap: entered promiscuous mode
[  369.335990][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.380026][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.408096][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.432346][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.462722][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.496688][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.522235][ T8391] loop4: detected capacity change from 0 to 1024
[  369.556356][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.572931][ T8391] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  369.610912][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.633277][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.658143][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.665518][ T8391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  369.688573][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.755737][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.812655][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.871492][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.967582][ T8083] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.390075][ T8083] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.437985][ T8083] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.488005][ T8083] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.700634][ T7914] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.879408][ T8409] (null): rxe_set_mtu: Set mtu to 4096
[  370.904089][ T8409] lo speed is unknown, defaulting to 1000
[  370.924315][ T6662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.947383][ T6662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.976840][ T8409] lo speed is unknown, defaulting to 1000
[  371.018660][ T8409] lo speed is unknown, defaulting to 1000
[  371.031907][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.061218][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.235643][ T8437] loop5: detected capacity change from 0 to 8192
[  372.386105][ T8437] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  372.399533][ T8437] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  372.409779][ T8437] REISERFS (device loop5): using ordered data mode
[  372.416389][ T8437] reiserfs: using flush barriers
[  372.491191][ T8437] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  372.512949][ T8437] REISERFS (device loop5): checking transaction log (loop5)
[  372.539255][ T8437] REISERFS (device loop5): Using r5 hash to sort names
[  372.555026][ T8437] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  373.219556][ T8409] infiniband syz0: set active
[  373.224504][ T5846] lo speed is unknown, defaulting to 1000
[  373.268104][ T8409] infiniband syz0: added lo
[  373.306468][ T8409] syz0: rxe_create_cq: returned err = -12
[  373.366496][ T8409] infiniband syz0: Couldn't create ib_mad CQ
[  373.437759][ T8409] infiniband syz0: Couldn't open port 1
[  373.595359][ T8409] RDS/IB: syz0: added
[  373.626415][ T8450] loop4: detected capacity change from 0 to 8
[  373.638135][ T8409] smc: adding ib device syz0 with port count 1
[  373.686597][ T8409] smc:    ib device syz0 port 1 has pnetid 
[  373.759315][ T8409] lo speed is unknown, defaulting to 1000
[  373.820516][   T27] lo speed is unknown, defaulting to 1000
[  373.902580][ T8450] SQUASHFS error: xz decompression failed, data probably corrupt
[  373.945070][ T8450] SQUASHFS error: Failed to read block 0x108: -5
[  373.997144][ T8450] SQUASHFS error: Unable to read metadata cache entry [106]
[  374.036599][ T8450] SQUASHFS error: Unable to read inode 0x11f
[  374.679402][ T8409] lo speed is unknown, defaulting to 1000
[  374.709032][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'.
[  375.250840][ T8487] loop5: detected capacity change from 0 to 512
[  375.265655][ T8409] lo speed is unknown, defaulting to 1000
[  375.276582][ T8487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  375.347284][ T8487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.363227][ T8487] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.566846][ T8498] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:335: inode #15: comm syz.5.658: verity file corrupted; can't find descriptor
[  375.620982][ T8490] loop4: detected capacity change from 0 to 4096
[  375.633114][ T8498] EXT4-fs (loop5): Remounting filesystem read-only
[  375.672390][ T8498] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size
[  375.791043][ T8083] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.811109][ T8490] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  376.000719][ T8409] lo speed is unknown, defaulting to 1000
[  376.089253][ T8506] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  376.154793][ T8490] overlayfs: upper fs does not support tmpfile.
[  376.228073][ T8490] overlayfs: workdir/#c already exists
[  376.785908][ T8524] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  376.837325][ T8524] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  377.923901][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.677'.
[  377.943926][ T8567] netlink: 'syz.0.677': attribute type 16 has an invalid length.
[  377.982819][ T8567] netlink: 'syz.0.677': attribute type 17 has an invalid length.
[  378.073872][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'.
[  378.408623][ T5101] Bluetooth: hci0: command 0x1003 tx timeout
[  378.409305][ T5798] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  378.519383][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'.
[  378.551165][ T8581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.682'.
[  378.736473][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  378.748013][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  379.460692][ T8620] loop4: detected capacity change from 0 to 1024
[  379.844688][   T34] hfsplus: b-tree write err: -5, ino 4
[  380.104887][ T8637] loop4: detected capacity change from 0 to 8
[  380.149362][ T8637] squashfs: Unknown parameter 'ݤ°â±èîz\Ïf�ë'
[  380.216436][ T8440] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  380.507445][ T8644] loop5: detected capacity change from 0 to 2048
[  380.546540][ T8648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.703'.
[  380.582488][ T8644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  380.774324][ T8644] overlayfs: upper fs needs to support d_type.
[  380.823675][ T8644] overlayfs: cleanup of 'work/#d' failed (-2)
[  380.864442][ T8644] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  380.892743][ T8644] overlayfs: failed to set xattr on upper
[  380.908594][ T8644] overlayfs: ...falling back to redirect_dir=nofollow.
[  380.950254][ T8644] overlayfs: ...falling back to index=off.
[  380.985238][ T8644] overlayfs: ...falling back to uuid=null.
[  381.014855][ T8659] loop4: detected capacity change from 0 to 2048
[  381.045043][ T8659] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  381.150922][ T8659] overlayfs: upper fs needs to support d_type.
[  381.179330][ T8659] overlayfs: cleanup of 'work/#f' failed (-2)
[  381.188080][ T5846] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  381.193427][ T8083] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  381.208339][ T8659] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  381.226885][ T8083] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  381.236082][ T8659] overlayfs: failed to set xattr on upper
[  381.256295][ T8659] overlayfs: ...falling back to redirect_dir=nofollow.
[  381.278811][ T8659] overlayfs: ...falling back to index=off.
[  381.284713][ T8659] overlayfs: ...falling back to uuid=null.
[  381.381185][ T5846] usb 2-1: device descriptor read/64, error -71
[  381.543981][ T7914] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  381.554428][ T7914] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  381.648038][ T5846] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  381.838041][ T5846] usb 2-1: device descriptor read/64, error -71
[  381.967449][ T5846] usb usb2-port1: attempt power cycle
[  382.032175][   T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.269033][   T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.571972][   T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.806128][   T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.309740][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  383.325551][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  383.337636][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  383.353239][ T8700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  383.374994][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  383.390740][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  383.401124][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  383.519789][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.532012][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.541935][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.553896][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.564467][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  383.598861][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.793396][ T8698] lo speed is unknown, defaulting to 1000
[  384.182231][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'.
[  384.298420][ T8703] lo speed is unknown, defaulting to 1000
[  385.325680][ T8698] chnl_net:caif_netlink_parms(): no params data found
[  385.448873][ T5802] Bluetooth: hci0: command tx timeout
[  385.688301][ T5802] Bluetooth: hci1: command tx timeout
[  386.100144][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.107513][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.138583][ T8698] bridge_slave_0: entered allmulticast mode
[  386.159950][ T8698] bridge_slave_0: entered promiscuous mode
[  386.208195][   T34] hsr_slave_0: left promiscuous mode
[  386.226561][   T34] hsr_slave_1: left promiscuous mode
[  386.237404][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  386.260662][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  386.277610][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  386.285892][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.300621][   T34] bridge_slave_1: left allmulticast mode
[  386.311136][   T34] bridge_slave_1: left promiscuous mode
[  386.317168][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.336696][   T34] bridge_slave_0: left allmulticast mode
[  386.344051][   T34] bridge_slave_0: left promiscuous mode
[  386.355416][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.471780][   T34] veth1_macvtap: left promiscuous mode
[  386.481495][   T34] veth0_macvtap: left promiscuous mode
[  386.496064][   T34] veth1_vlan: left promiscuous mode
[  386.521772][   T34] veth0_vlan: left promiscuous mode
[  387.517814][   T34] team0 (unregistering): Port device team_slave_1 removed
[  387.528462][ T5798] Bluetooth: hci0: command tx timeout
[  387.600485][   T34] team0 (unregistering): Port device team_slave_0 removed
[  387.672391][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  387.755575][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  387.768133][ T5798] Bluetooth: hci1: command tx timeout
[  388.572028][ T5802] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  388.669623][   T34] bond0 (unregistering): Released all slaves
[  388.815590][ T8703] chnl_net:caif_netlink_parms(): no params data found
[  388.839084][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.846396][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.868647][ T8698] bridge_slave_1: entered allmulticast mode
[  388.876241][ T8698] bridge_slave_1: entered promiscuous mode
[  389.122807][ T8698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.241030][ T8698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.553665][ T8698] team0: Port device team_slave_0 added
[  389.611966][ T5802] Bluetooth: hci0: command tx timeout
[  389.753788][ T8698] team0: Port device team_slave_1 added
[  389.767341][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.783117][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.798288][ T8703] bridge_slave_0: entered allmulticast mode
[  389.821410][ T8703] bridge_slave_0: entered promiscuous mode
[  389.858001][ T5802] Bluetooth: hci1: command tx timeout
[  389.875703][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.884138][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.892456][ T8703] bridge_slave_1: entered allmulticast mode
[  389.900224][ T8703] bridge_slave_1: entered promiscuous mode
[  389.924909][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.938004][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.971870][ T8698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.000458][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.007486][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.052677][ T8698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.141687][ T8703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.258884][ T8703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.315146][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[  390.324592][ T8823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.481752][ T8823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.726225][ T8698] hsr_slave_0: entered promiscuous mode
[  390.758830][ T8698] hsr_slave_1: entered promiscuous mode
[  390.765855][ T8698] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  390.781575][ T8698] Cannot create hsr debugfs directory
[  390.843461][ T8703] team0: Port device team_slave_0 added
[  390.884843][ T8703] team0: Port device team_slave_1 added
[  391.038265][ T5792] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  391.087019][   T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.160188][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.168132][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.202395][ T8703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.232449][ T5792] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  391.250561][ T5792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.285505][ T5792] usb 2-1: config 0 descriptor??
[  391.302685][ T5792] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  391.324509][   T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.342352][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.350125][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.376475][ T8703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.532662][   T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.628659][ T8703] hsr_slave_0: entered promiscuous mode
[  391.636086][ T8703] hsr_slave_1: entered promiscuous mode
[  391.650792][ T8703] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  391.660683][ T8703] Cannot create hsr debugfs directory
[  391.691710][   T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.693602][ T5802] Bluetooth: hci0: command tx timeout
[  391.933705][ T5802] Bluetooth: hci1: command tx timeout
[  392.081310][ T8698] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  392.106703][ T8698] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  392.208569][ T8698] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  392.278759][ T8698] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  392.898847][ T8703] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  392.926838][ T8703] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  392.952674][ T8703] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  393.033982][ T8698] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.043066][ T8703] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  393.262857][ T8698] 8021q: adding VLAN 0 to HW filter on device team0
[  393.305247][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.312516][ T8439] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.324861][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.332139][ T8439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.345551][ T5792] usb 2-1: USB disconnect, device number 15
[  393.502740][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'.
[  393.554626][ T8698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  393.691234][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'.
[  394.265653][ T8703] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.296976][ T8698] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.380410][ T8703] 8021q: adding VLAN 0 to HW filter on device team0
[  394.430681][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.437971][ T8439] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.505438][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.515350][ T8439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.664720][   T34] hsr_slave_0: left promiscuous mode
[  394.672456][   T34] hsr_slave_1: left promiscuous mode
[  394.689789][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.697462][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.715528][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.725738][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.734970][   T34] bridge_slave_1: left allmulticast mode
[  394.746832][   T34] bridge_slave_1: left promiscuous mode
[  394.753099][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.772447][   T34] bridge_slave_0: left allmulticast mode
[  394.796833][   T34] bridge_slave_0: left promiscuous mode
[  394.803694][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.915538][   T34] veth1_macvtap: left promiscuous mode
[  394.922060][   T34] veth0_macvtap: left promiscuous mode
[  394.928100][   T34] veth1_vlan: left promiscuous mode
[  394.933656][   T34] veth0_vlan: left promiscuous mode
[  395.628877][ T8945] 9pnet: p9_errstr2errno: server reported unknown error 0000000000,group_i00000000000000000000Š=H
[  396.406652][   T34] team0 (unregistering): Port device team_slave_1 removed
[  396.487707][   T34] team0 (unregistering): Port device team_slave_0 removed
[  396.579546][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  396.660510][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  396.670026][ T5846] infiniband syz1: ib_query_port failed (-19)
[  397.546549][   T34] bond0 (unregistering): Released all slaves
[  397.711078][ T8943] vxcan1: entered allmulticast mode
[  397.977286][   T28] audit: type=1326 audit(1755222574.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee78ebe9 code=0x7ffc0000
[  398.061058][   T28] audit: type=1326 audit(1755222574.480:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee78ebe9 code=0x7ffc0000
[  398.153237][   T28] audit: type=1326 audit(1755222574.500:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f56ee78ebe9 code=0x7ffc0000
[  398.250265][   T28] audit: type=1326 audit(1755222574.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee78ebe9 code=0x7ffc0000
[  398.377416][   T28] audit: type=1326 audit(1755222574.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee78ebe9 code=0x7ffc0000
[  398.486169][   T28] audit: type=1326 audit(1755222574.500:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f56ee78ebe9 code=0x7ffc0000
[  398.545402][ T8698] veth0_vlan: entered promiscuous mode
[  398.597399][   T28] audit: type=1326 audit(1755222574.500:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee78ebe9 code=0x7ffc0000
[  398.649734][ T8698] veth1_vlan: entered promiscuous mode
[  398.688229][   T28] audit: type=1326 audit(1755222574.500:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56ee78ebe9 code=0x7ffc0000
[  398.796135][ T8698] veth0_macvtap: entered promiscuous mode
[  398.805262][   T28] audit: type=1326 audit(1755222574.500:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee78ebe9 code=0x7ffc0000
[  398.819175][ T8698] veth1_macvtap: entered promiscuous mode
[  398.893016][ T8698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.908735][   T28] audit: type=1326 audit(1755222574.500:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.1.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ee78ebe9 code=0x7ffc0000
[  398.918142][ T8698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.960918][ T8698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.992945][ T8698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.022080][ T8698] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.068340][ T8698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.096013][ T8698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.131343][ T8698] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.184394][ T8698] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.202589][ T8698] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.224678][ T8698] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.240967][ T8698] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.283677][ T8703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.522554][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'.
[  399.549127][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.557220][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.649425][ T8439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.667431][ T9004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.797'.
[  399.707078][ T8439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.926052][ T9019] netlink: 'syz.0.799': attribute type 10 has an invalid length.
[  399.978201][ T9019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.799'.
[  400.154425][ T9019] team0: Port device geneve0 added
[  400.174882][ T9025] bridge0: port 4(erspan0) entered blocking state
[  400.186189][ T9025] bridge0: port 4(erspan0) entered disabled state
[  400.206010][ T9025] erspan0: entered allmulticast mode
[  400.228071][ T9025] erspan0: entered promiscuous mode
[  400.237216][ T9025] bridge0: port 4(erspan0) entered blocking state
[  400.246676][ T9025] bridge0: port 4(erspan0) entered forwarding state
[  400.287135][ T9027] erspan0: left allmulticast mode
[  400.303439][ T9027] erspan0: left promiscuous mode
[  400.318216][ T9027] bridge0: port 4(erspan0) entered disabled state
[  400.624732][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.801'.
[  400.726593][ T8703] veth0_vlan: entered promiscuous mode
[  400.802926][ T8703] veth1_vlan: entered promiscuous mode
[  400.902486][ T8703] veth0_macvtap: entered promiscuous mode
[  400.933958][ T8703] veth1_macvtap: entered promiscuous mode
[  401.000265][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.032815][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.061078][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.080248][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.094960][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.104975][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'.
[  401.118068][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.131503][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.168563][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.202655][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.248043][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.271506][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.284248][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.322583][ T8703] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.343608][ T8703] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.389425][ T8703] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.404284][ T8703] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.441769][ T9056] loop6: detected capacity change from 0 to 2048
[  401.562366][ T9056] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  401.596931][ T9056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  401.608599][ T9059] bridge0: port 3(erspan0) entered blocking state
[  401.615202][ T9059] bridge0: port 3(erspan0) entered disabled state
[  401.646017][ T9059] erspan0: entered allmulticast mode
[  401.669521][ T9059] erspan0: entered promiscuous mode
[  401.688702][ T9059] bridge0: port 3(erspan0) entered blocking state
[  401.695400][ T9059] bridge0: port 3(erspan0) entered forwarding state
[  401.788431][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.796328][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.948103][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.956365][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.418946][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'.
[  403.102048][ T9077] loop6: detected capacity change from 0 to 512
[  403.207220][ T9077] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.814: iget: bad i_size value: 38620345925642
[  403.234614][ T9077] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.814: couldn't read orphan inode 15 (err -117)
[  403.281550][ T9077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.844447][ T9093] fuse: Bad value for 'fd'
[  403.973314][ T8698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.037343][ T5841] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  404.176720][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.230649][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  404.285949][ T5841] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  404.318288][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.360520][ T5841] usb 2-1: config 0 descriptor??
[  404.376236][ T5841] pwc: Askey VC010 type 2 USB webcam detected.
[  404.428337][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.581706][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.687554][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.806627][ T5841] pwc: recv_control_msg error -32 req 02 val 2b00
[  404.829859][ T5841] pwc: recv_control_msg error -32 req 02 val 2700
[  404.860197][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'.
[  404.878643][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'.
[  404.898460][ T5841] pwc: recv_control_msg error -32 req 02 val 2c00
[  404.905001][ T9112] tipc: Started in network mode
[  404.926967][ T9112] tipc: Node identity c670d41768a9, cluster identity 4711
[  404.950285][ T9112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.980562][ T9114] syzkaller0: entered promiscuous mode
[  404.986144][ T9114] syzkaller0: entered allmulticast mode
[  405.113144][ T5841] pwc: recv_control_msg error -71 req 04 val 1300
[  405.129345][ T5841] pwc: recv_control_msg error -71 req 04 val 1400
[  405.164503][ T5841] pwc: recv_control_msg error -71 req 02 val 2000
[  405.182101][ T5841] pwc: recv_control_msg error -71 req 02 val 2100
[  405.202374][ T5841] pwc: recv_control_msg error -71 req 04 val 1500
[  405.231218][ T5841] pwc: recv_control_msg error -71 req 02 val 2500
[  405.261748][ T5841] pwc: recv_control_msg error -71 req 02 val 2400
[  405.279713][ T5841] pwc: recv_control_msg error -71 req 02 val 2600
[  405.285338][ T9114] tipc: Resetting bearer <eth:syzkaller0>
[  405.301525][ T5841] pwc: recv_control_msg error -71 req 02 val 2900
[  405.332696][ T5841] pwc: recv_control_msg error -71 req 02 val 2800
[  405.342349][ T5841] pwc: recv_control_msg error -71 req 04 val 1100
[  405.363664][ T5841] pwc: recv_control_msg error -71 req 04 val 1200
[  405.390663][ T9110] tipc: Resetting bearer <eth:syzkaller0>
[  405.428830][ T5841] pwc: Registered as video103.
[  405.481158][ T9110] tipc: Disabling bearer <eth:syzkaller0>
[  405.485950][ T5841] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7
[  405.666726][ T5841] usb 2-1: USB disconnect, device number 16
[  405.967583][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  406.000303][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  406.028515][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  406.040080][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  406.048975][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  406.057100][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  406.067726][ T9134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.232376][ T9129] lo speed is unknown, defaulting to 1000
[  407.847000][ T9129] chnl_net:caif_netlink_parms(): no params data found
[  407.915945][ T9182] netlink: 'syz.1.842': attribute type 12 has an invalid length.
[  408.168898][ T5802] Bluetooth: hci0: command tx timeout
[  408.377584][ T9199] fuse: Bad value for 'fd'
[  408.453495][   T11] hsr_slave_0: left promiscuous mode
[  408.460495][   T11] hsr_slave_1: left promiscuous mode
[  408.471313][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.485164][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  408.509485][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  408.524851][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  408.534257][   T11] bridge_slave_1: left allmulticast mode
[  408.546566][   T11] bridge_slave_1: left promiscuous mode
[  408.553358][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.570684][   T11] bridge_slave_0: left allmulticast mode
[  408.576466][   T11] bridge_slave_0: left promiscuous mode
[  408.594563][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.672595][   T11] veth1_macvtap: left promiscuous mode
[  408.698148][   T11] veth0_macvtap: left promiscuous mode
[  408.708249][   T11] veth1_vlan: left promiscuous mode
[  408.713772][   T11] veth0_vlan: left promiscuous mode
[  410.055622][   T11] team0 (unregistering): Port device team_slave_1 removed
[  410.141148][   T11] team0 (unregistering): Port device team_slave_0 removed
[  410.222846][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.253872][ T5802] Bluetooth: hci0: command tx timeout
[  410.318821][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  411.284274][   T11] bond0 (unregistering): Released all slaves
[  411.367479][ T9129] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.375106][ T9129] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.383097][ T9129] bridge_slave_0: entered allmulticast mode
[  411.392468][ T9129] bridge_slave_0: entered promiscuous mode
[  411.408133][ T9129] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.415803][ T9129] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.423464][ T9129] bridge_slave_1: entered allmulticast mode
[  411.431621][ T9129] bridge_slave_1: entered promiscuous mode
[  411.603755][ T9129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.663467][ T9129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.841014][ T9129] team0: Port device team_slave_0 added
[  411.874168][ T9129] team0: Port device team_slave_1 added
[  412.007406][ T9129] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.020597][ T9129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.052386][ T9129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.086493][ T9129] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.100835][ T9129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.132997][ T9129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.268388][ T9129] hsr_slave_0: entered promiscuous mode
[  412.275377][ T9129] hsr_slave_1: entered promiscuous mode
[  412.302087][ T9129] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  412.318303][ T9129] Cannot create hsr debugfs directory
[  412.330508][ T5802] Bluetooth: hci0: command tx timeout
[  412.692185][ T9236] syzkaller0: entered promiscuous mode
[  412.697755][ T9236] syzkaller0: entered allmulticast mode
[  412.824189][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  412.840602][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  412.855811][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  412.865421][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  412.875298][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  412.883985][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  413.425709][ T9249] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  414.429301][ T5802] Bluetooth: hci0: command tx timeout
[  414.970398][ T5802] Bluetooth: hci2: command tx timeout
[  417.049821][ T5802] Bluetooth: hci2: command tx timeout
[  417.097112][ T9238] lo speed is unknown, defaulting to 1000
[  417.377173][ T9129] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  417.427493][ T9129] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  417.478109][ T9129] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  417.545488][ T9129] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  417.909317][ T9129] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.059188][ T9129] 8021q: adding VLAN 0 to HW filter on device team0
[  418.156940][ T9283] loop7: detected capacity change from 0 to 8
[  418.699745][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.707097][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.725892][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.733659][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.038585][ T9283] SQUASHFS error: zlib decompression failed, data probably corrupt
[  419.046697][ T9283] SQUASHFS error: Failed to read block 0x9b: -5
[  419.053432][ T9283] SQUASHFS error: Unable to read metadata cache entry [99]
[  419.061036][ T9283] SQUASHFS error: Unable to read inode 0x127
[  419.128502][ T5802] Bluetooth: hci2: command tx timeout
[  419.493154][ T9238] chnl_net:caif_netlink_parms(): no params data found
[  420.039659][ T9238] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.047544][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.086495][ T9238] bridge_slave_0: entered allmulticast mode
[  420.103403][ T9238] bridge_slave_0: entered promiscuous mode
[  420.122274][ T9238] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.138108][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.145609][ T9238] bridge_slave_1: entered allmulticast mode
[  420.157494][ T9238] bridge_slave_1: entered promiscuous mode
[  420.271096][ T9309] loop7: detected capacity change from 0 to 512
[  420.275540][ T9238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.319331][ T9238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.355730][ T9309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.405425][ T9309] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  420.436533][ T9238] team0: Port device team_slave_0 added
[  420.447112][ T9238] team0: Port device team_slave_1 added
[  420.507225][ T9309] EXT4-fs error (device loop7): ext4_do_update_inode:5230: inode #2: comm syz.7.886: corrupted inode contents
[  420.559174][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.566451][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.614903][ T9309] EXT4-fs error (device loop7): ext4_dirty_inode:6106: inode #2: comm syz.7.886: mark_inode_dirty error
[  420.615936][ T9238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  420.705586][ T9309] EXT4-fs error (device loop7): ext4_do_update_inode:5230: inode #2: comm syz.7.886: corrupted inode contents
[  420.726237][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  420.738961][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.750953][ T9309] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #2: comm syz.7.886: mark_inode_dirty error
[  420.797945][ T9238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.828299][ T9309] EXT4-fs error (device loop7): ext4_lookup:1855: inode #19: comm syz.7.886: 'bus' linked to parent dir
[  420.929446][ T9129] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.972097][ T8703] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.210023][ T5802] Bluetooth: hci2: command tx timeout
[  457.608349][ T5798] Bluetooth: hci3: command 0x0406 tx timeout
[  508.810904][ T5798] Bluetooth: hci1: command 0x0406 tx timeout
[  526.197881][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  526.204924][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6662/1:b..l
[  526.213737][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=43041, q=324 ncpus=2)
[  526.221502][    C0] task:kworker/u4:10   state:R  running task     stack:22072 pid:6662  ppid:2      flags:0x00004000
[  526.234410][    C0] Workqueue: bat_events batadv_nc_worker
[  526.240165][    C0] Call Trace:
[  526.243484][    C0]  <TASK>
[  526.246456][    C0]  __schedule+0x14d2/0x44d0
[  526.251030][    C0]  ? __bfs+0x591/0x5c0
[  526.255158][    C0]  ? asan.module_dtor+0x20/0x20
[  526.260057][    C0]  ? mark_lock+0x94/0x320
[  526.264526][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  526.270581][    C0]  ? preempt_schedule_irq+0xaa/0x140
[  526.275947][    C0]  preempt_schedule_irq+0xb5/0x140
[  526.281170][    C0]  ? preempt_schedule_notrace+0x110/0x110
[  526.286953][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  526.292818][    C0]  irqentry_exit+0x67/0x70
[  526.297290][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  526.303417][    C0] RIP: 0010:lock_acquire+0x1f2/0x410
[  526.308756][    C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00
[  526.328589][    C0] RSP: 0018:ffffc90018da7a40 EFLAGS: 00000206
[  526.334711][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 24daf7d16630c300
[  526.343177][    C0] RDX: 0000000000000000 RSI: ffffffff8aaacbc0 RDI: ffffffff8afc6780
[  526.351207][    C0] RBP: ffffc90018da7b48 R08: dffffc0000000000 R09: 1ffffffff21b46a4
[  526.359232][    C0] R10: dffffc0000000000 R11: fffffbfff21b46a5 R12: 1ffff920031b4f54
[  526.367254][    C0] R13: ffffffff8cd2fba0 R14: 0000000000000246 R15: dffffc0000000000
[  526.375300][    C0]  ? batadv_nc_worker+0xd2/0x610
[  526.380295][    C0]  ? read_lock_is_recursive+0x20/0x20
[  526.385724][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  526.391943][    C0]  ? batadv_nc_worker+0xd2/0x610
[  526.396943][    C0]  batadv_nc_worker+0xef/0x610
[  526.402018][    C0]  ? batadv_nc_worker+0xd2/0x610
[  526.407006][    C0]  ? process_scheduled_works+0x957/0x15b0
[  526.412777][    C0]  process_scheduled_works+0xa45/0x15b0
[  526.418402][    C0]  ? assign_work+0x400/0x400
[  526.423045][    C0]  ? assign_work+0x39e/0x400
[  526.427694][    C0]  worker_thread+0xa55/0xfc0
[  526.432348][    C0]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  526.438295][    C0]  ? _raw_spin_unlock+0x40/0x40
[  526.443202][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  526.449259][    C0]  kthread+0x2fa/0x390
[  526.453377][    C0]  ? pr_cont_work+0x560/0x560
[  526.458103][    C0]  ? kthread_blkcg+0xd0/0xd0
[  526.462735][    C0]  ret_from_fork+0x48/0x80
[  526.467219][    C0]  ? kthread_blkcg+0xd0/0xd0
[  526.471884][    C0]  ret_from_fork_asm+0x11/0x20
[  526.476773][    C0]  </TASK>
[  526.480002][    C0] rcu: rcu_preempt kthread starved for 10344 jiffies! g43041 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  526.491241][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  526.501332][    C0] rcu: RCU grace-period kthread stack dump:
[  526.507249][    C0] task:rcu_preempt     state:R  running task     stack:27496 pid:17    ppid:2      flags:0x00004000
[  526.518082][    C0] Call Trace:
[  526.521394][    C0]  <TASK>
[  526.524362][    C0]  __schedule+0x14d2/0x44d0
[  526.528944][    C0]  ? asan.module_dtor+0x20/0x20
[  526.533846][    C0]  ? enqueue_timer+0x225/0x530
[  526.538664][    C0]  ? __mod_timer+0x984/0xdb0
[  526.543315][    C0]  schedule+0xbd/0x170
[  526.547438][    C0]  schedule_timeout+0x160/0x280
[  526.552343][    C0]  ? console_conditional_schedule+0x40/0x40
[  526.558292][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  526.564248][    C0]  ? update_process_times+0x1b0/0x1b0
[  526.569862][    C0]  ? prepare_to_swait_event+0x339/0x360
[  526.575463][    C0]  rcu_gp_fqs_loop+0x302/0x1560
[  526.580365][    C0]  ? rcu_gp_init+0x110e/0x1510
[  526.585195][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  526.591409][    C0]  ? rcu_gp_init+0x1510/0x1510
[  526.596266][    C0]  ? rcu_gp_cleanup+0xb4c/0xca0
[  526.601164][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  526.606427][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  526.611689][    C0]  rcu_gp_kthread+0x99/0x380
[  526.616430][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  526.621628][    C0]  ? __kthread_parkme+0x7a/0x1c0
[  526.626638][    C0]  ? __kthread_parkme+0x162/0x1c0
[  526.631817][    C0]  kthread+0x2fa/0x390
[  526.635931][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  526.641184][    C0]  ? kthread_blkcg+0xd0/0xd0
[  526.645903][    C0]  ret_from_fork+0x48/0x80
[  526.650371][    C0]  ? kthread_blkcg+0xd0/0xd0
[  526.655005][    C0]  ret_from_fork_asm+0x11/0x20
[  526.659833][    C0]  </TASK>
[  526.662885][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  526.669240][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.101-syzkaller #0
[  526.676996][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  526.687097][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  526.692878][    C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 16 3b 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
[  526.712579][    C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2
[  526.718709][    C0] RAX: 91d3e2995d345200 RBX: ffffffff81619a6b RCX: 91d3e2995d345200
[  526.726723][    C0] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780
[  526.734733][    C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9
[  526.742832][    C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a84e8
[  526.750848][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670
[  526.758857][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  526.767825][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  526.774449][    C0] CR2: 00007f155c887850 CR3: 0000000030e4c000 CR4: 00000000003506f0
[  526.782464][    C0] Call Trace:
[  526.785778][    C0]  <TASK>
[  526.788747][    C0]  default_idle+0x13/0x20
[  526.793132][    C0]  default_idle_call+0x6c/0xa0
[  526.797953][    C0]  do_idle+0x1eb/0x510
[  526.802071][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  526.807397][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  526.813608][    C0]  cpu_startup_entry+0x43/0x60
[  526.818427][    C0]  rest_init+0x2e2/0x300
[  526.822710][    C0]  ? time_init+0x40/0x40
[  526.826999][    C0]  arch_call_rest_init+0xe/0x10
[  526.831897][    C0]  start_kernel+0x459/0x4e0
[  526.836575][    C0]  x86_64_start_reservations+0x2a/0x30
[  526.842178][    C0]  x86_64_start_kernel+0x60/0x60
[  526.847200][    C0]  secondary_startup_64_no_verify+0x179/0x17b
[  526.853335][    C0]  </TASK>
[  529.290921][ T5798] Bluetooth: hci0: command 0x0406 tx timeout