last executing test programs:

4m7.473699774s ago: executing program 1 (id=919):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500), 0xfa0)
syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000180)='Mid', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='2\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='2', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8)

4m7.164795072s ago: executing program 1 (id=922):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
socket$inet(0x2, 0x2, 0x0)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000805"], 0x88)

4m6.878715009s ago: executing program 1 (id=924):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r0, &(0x7f0000000080)='<', 0xfffffffffffffda9, 0x4894, 0x0, 0xfe8d)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000540)={0x2, 0xe22, @remote}, 0x10)

4m6.528591569s ago: executing program 1 (id=925):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x6, r0, 0x0, 0x0, 0x97a4}])

4m6.188957247s ago: executing program 1 (id=928):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$kcm(0x2b, 0x1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080)
setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21)

4m5.653363921s ago: executing program 1 (id=930):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500), 0xfa0)
syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000180)='Mid', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='2\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='2', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8)

4m5.105586085s ago: executing program 32 (id=930):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500), 0xfa0)
syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000180)='Mid', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='2\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='2', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8)

3m6.147342363s ago: executing program 3 (id=1271):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xb8, 0x13, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {}, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c)

3m5.86896965s ago: executing program 3 (id=1273):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6d, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3m5.474725381s ago: executing program 3 (id=1274):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m5.290263745s ago: executing program 3 (id=1275):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4ef, &(0x7f00000016c0)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

3m4.828254897s ago: executing program 3 (id=1276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc04000000050101000000000000000002000003b50101"], 0x4bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

3m3.244245158s ago: executing program 3 (id=1283):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m2.76753153s ago: executing program 33 (id=1283):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

11.825573853s ago: executing program 0 (id=2314):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x5, [@datasec={0x3, 0x0, 0x0, 0xf, 0x1, [], '4'}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/143, 0x2d, 0x8f, 0x1}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_setup(0x4, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"})
syz_open_dev$tty1(0xc, 0x4, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x3, 0xfc, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x0, 0x0, [0x0, 0xfffffffe]}})

10.652182914s ago: executing program 0 (id=2317):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0)
preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4098, 0x1002}], 0x1, 0x16, 0xfffffff9)

10.40772213s ago: executing program 0 (id=2319):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$rtc(0xffffff9c, 0x0, 0xc2440, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$eJzs3E1rE0EYwPGnadOXlDY5iKAgPuhFL0sbP0GQFsSAUhtRD8LUbjRkTUo2RiJie/Pq5ygevQnWL9CLN+/ipQiClx6kK90Xsy3Bvth20+b/g7CTnXl2Zje74dmFnY0H755Xy65VNk1JjaqkRFZkUyS3XQoNhMuUXx6WuBW5Pv7r66V7Dx/dLhSLM3Oqs4X5G3lVnbz86eXr91c+N8fvf5j8OCLruccbP/Pf1s+vX9jYmo+2Xm+q0YV6vWkWHFsXK27VUr3r2Ma1tVJz7caO+rJTX1pqq6ktTmSWGrbrqqm1tWq3tVnXZqOt5qmp1NSyLJ3ISL8ZPHBEaXVuzhSOZTBIwli3lY1GwQx2rSytnsSgAABAb0kq/39WcbXiam2v/D8lR5P/j57I0Txt/Px/q2vSiLMhvX0DUDCZ8PrdifwfAAAAAAAAAAAAAAAAAAAAAIDTYNPzsp7nZaNl9BkJ35mJvic9ThyPQ/z+AwkOF0cs9uLeqIjztlVqlYJlUF8oS0UcsWUqLfLbPx9CQXn2VnFmSn05WXOWw3j/JcGRKD6S6x4/HcRrLH65VUpLJt5/XrJyrnt8fld8WkRapWG5djUWb0lWvjyRujiy6J/Xnfg306o37xR39T/mtwMAAAAA4Cyw9K/czvvfYDZJy9Jo2pBd9cHKzvMBye7xfEBlbVg68UNycSi5/QYAAAAAoJ+47VdV4zh2g8LBCv146KxwFuV/NvY8b3m70f93mhKRhPb0h4j0wAGPFdJHccF+fxFsZD+Nk/pHAgAAAHBcOkl/0iMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB/7XfysKj9YeYei3U3mMxeAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3hTwAAAP//Q1YX+Q==")
r3 = open(&(0x7f0000000100)='./file2\x00', 0x167842, 0x1fb)
preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7)

9.24957444s ago: executing program 0 (id=2321):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0x298, 0x298, 0xd0, 0x388, 0x388, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x820, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x388}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xffffff00], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x4a, 0x7}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x9, 0xfff2, 0x4, 0x2, 0x5, 0xe, 0x2, 0xc7b, 0x5, 0x1ff, 0x3, 0x8, 0xf25, 0x7, 0x1, 0xff6b], 0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)

8.86558538s ago: executing program 0 (id=2324):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014080000001080008400000000114"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

8.572825097s ago: executing program 5 (id=2325):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x100)
write$P9_RWALK(r0, &(0x7f0000000240)={0x9, 0x6f, 0x1}, 0x9)

8.506946869s ago: executing program 0 (id=2326):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0)
preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4098, 0x1002}], 0x1, 0x16, 0xfffffff9)

8.185340177s ago: executing program 5 (id=2327):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6)
fcntl$setpipe(r0, 0x407, 0x7000000)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$kcm(0x29, 0x2, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000)
sendmsg$kcm(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x40040)
write$cgroup_pressure(r2, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x4, 0x4, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x6, 0xc, 0xc, 0x0, 0x0, 0xffffffffffffffff, 0xa94, 0xfffffffffffffffc}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
accept4$unix(r0, &(0x7f00000000c0), 0x0, 0x800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

7.128024775s ago: executing program 5 (id=2334):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105e8, &(0x7f0000020c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c3341, 0x12b)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x8, 0x5, 0x3})

5.659886353s ago: executing program 4 (id=2338):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100))
rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x18f)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

5.259244523s ago: executing program 4 (id=2340):
syz_usb_connect$cdc_ecm(0x3, 0x6b, &(0x7f0000000140)={{0x12, 0x1, 0x10, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0xd, 0x10, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1}, [@mdlm_detail={0x9, 0x24, 0x13, 0x6, "df3321acd1"}, @mdlm={0x15, 0x24, 0x12, 0x400}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0)

4.62420403s ago: executing program 2 (id=2343):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
keyctl$revoke(0x3, r3)
add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="6a9031c2d2f647e6ee164e02c2832642a30098b7f46758361b920bb9b2a55d0493235ba354095f3d4ce94c24779bf3f0b2f453fec24ee7ebf228dbecf7d1652d6caa1a47a959c37378cca7273419243065f948fcaf053f6fe74e6238bb35f0db3a6fbf635152de78931f1d4b958ddc0df723", 0x72, r3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r4, 0x1)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c8, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628)
r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000880)={0x986, 0x75, 0x2, {0x97b, "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"}}, 0x986)
unshare(0x22020600)
syz_open_dev$usbfs(0x0, 0x9, 0x141301)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r7 = fsmount(r6, 0x0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c"], 0x20}, 0x4000004)
r9 = openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58)

3.506965109s ago: executing program 2 (id=2344):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd})
ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0)
creat(0x0, 0x268)

2.922731824s ago: executing program 2 (id=2345):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$rtc(0xffffff9c, 0x0, 0xc2440, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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")
r3 = open(&(0x7f0000000100)='./file2\x00', 0x167842, 0x1fb)
preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7)

2.856299085s ago: executing program 4 (id=2346):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

2.125443054s ago: executing program 4 (id=2347):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100))
rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x18f)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.571060429s ago: executing program 2 (id=2348):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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")
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

1.463745512s ago: executing program 5 (id=2349):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r2, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}})

1.462810692s ago: executing program 4 (id=2350):
r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92)
sendfile(r0, r1, 0x0, 0x0)

1.211491518s ago: executing program 5 (id=2351):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
keyctl$revoke(0x3, r3)
add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="6a9031c2d2f647e6ee164e02c2832642a30098b7f46758361b920bb9b2a55d0493235ba354095f3d4ce94c24779bf3f0b2f453fec24ee7ebf228dbecf7d1652d6caa1a47a959c37378cca7273419243065f948fcaf053f6fe74e6238bb35f0db3a6fbf635152de78931f1d4b958ddc0df723", 0x72, r3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r4, 0x1)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c8, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628)
r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000880)={0x990, 0x75, 0x2, {0x985, "d61beebfa5542d68638e436f2987b45c20ddc9b8032456354a36ebf51108a2c83e2d59825ef1c627bb06aa2cd098b180d941edc04a025195e9d5a6642e5ab450b79247a5ebe48c7788a2124298520ca42eac897947f0059ba303b959d8642c8380d4ee3f2d4103dd1f7063ebd37ef60f652c358790ba313d3b220a47493a4ae3b68aa26770c5939a2b88c6b22c3dd6c6f9182736a7a3c525f27368cb7c35071ef7fd7b1b2f084e1069d82932466618c8806365a4ece503605019e3689e0d612de42aab90beddebcc661cb707625912b56b2dae71ec570fff0fb696f509909dea12b24d405dbc10df7dbea36fbc7111050bfb049151ec6367214c23979b5ae8ed70f5e68a643fc38b10152def45ee124b875fea57601bf5636c101ea1332dbd1ecdf8c01b20ef5ba1c9dfee1559ee4395a6a6eb43a71aefe5711d8e08ed3687dc0e3777f8c40743ecde111e9f9663eae3b5547a0e9400f20ddaef74cdccab7f768f2dae0ca51f628c36821b27babe7b57c5f0892708d61eec067cef38ad77e464c489c4b6a5c413af8e5459e046d301d53551ffd99064ed95610895ff4f6a445d3ccbdfc77cbd36bea14f40c75ca1eaa42e5e8400f467d08a539c74fcc7dcf92edc14b8d2a7c9cf21617a568f375968c7407d5714d695544378a00683b53a3f816c6331a271714735cfb92dec0f11957c0e722acceb819afad3d5ced84f97dbf7c3034fd5a7508c31643ad75ea3c858d6b70e1b1a8990cdb6ee7b458e123db9f91e36982df2c3ef3e1070380e977288c5a115e5df4cafc4f23f2235c6b86f02cea204e22ba87a750981c9b791c3fae8a624e9cae2a85e2911fab68c00a9e3c5c1ffa3142063c268559c1d5f9e548107a05359e6b130fb54adc322772d2f5c86ba841e73e719cefed9f3b0a8c0d15ff8bea5b24a0eb8f65afc8535b9883afb23b9677df7eabe1cdb7637734b2e525c0f7309c64426b78159dac25aa8192c89256a781d9db142f845effbb688477abdeb5e5b119b498cd8070a436bc29fc9823d1f51e3e4c7da693080cc3e5232c18c003899949ad94637963aa83884aa2216308c7a898d5ad43a9103d2fc07153e67605b5a28a83cbaaab0dd4a48a2756b04f63c00639edaf7755d33d3a582a7e724f32426cca8848402c3fef4a765429f345d9a77ee55429c5d8f41b1e291f237ca740ec9a69634180be19656a56053ebabe7599c0a742e226be9392627a5d2efbb2e4c20e9fb743c5825d466babf92cb12a0d599147406a08c9d1e8cb137d01b73f22d606f621a0108b470f781b896f6593c07f51dab0f16fce3380ea3d44feb25dfd80de28b8beab02ab666ac4118dad1d29ea1b7d3ea461a0e905cdd8162d7a7e0ea5b0245a68860e54b6bebef36bf5e22b0e81fc7400d9f87955f9d4c0872ca57727050bd742bc8ff9189613ea19d06e93d04785b17967cf53889e9ffe04c0cbb5eeafe8a82c1a5c5e4a047f9cff137963c6f13fb4f0589cc1158a1d7d9cfd4cc37ba587875704cb9d5d3d92938e226a56088586f19f6cc3792b72293745334b16b0da2ba41c43657621680bae18912c13711197c3d84a43c46d12d03031b44829f67b825febff021d7b46bb5b710a8b54c83b917ed382b9736459fc9570453d741ea7ff4c0b5657fdc41c277f03f1d419432429b0a9477123639ae127c90de0060f1c000536d3f0dddee9ba37d33b1e6de7b2202ef4e5306c6d4c54b9599e27226f7876803e59bc7d1b3d30bb1bf5e616508cee95e748739d8fc14abc095b81dc863322e8037689c0cca182586039683beef683b7b91073e3705d49090fdac79f303499f1399f056b89231022b697177347c88b0cc7a0795c09a288f738ddc96f24d0b5c87280d93107d1a41a05b0cf31e1a9f1f53dfa0cc8514250beac5e35f3ff42331b5508c06dfcb3bccb58b84c12cf59afc8f7b553a2a5f1e95f949ea6e1c60b95536e83582878e73a26f081281830306931d731c23f57d37139ddb04cddc182b3e9beffb298cddabe1688c61ee4e2f40c2901e44a630bed3b4afbab42b0b3bc876b315760e68dc9a01fe2878379c6b65ef23be56793404946e923961fe07c876963e4873286d80945716a83ab70b3b6c8e099082ba5483eaa42624b18bc1d46be8eb6729f73159b5aaa119d2bf12e50e41447d1ba0aab09f6811abe26e91a07bf4252bbbbda5e446ec6a62d04b1aaad633e62da781b3951494dad34a5cd236c12e382d5f5200ab8a5e4ed2af8d7e12154c6a27b0a2f3adca22b46bb27e636ed7134b1cdf3255e652c7a8f0ae2064b7503ac83246c58fc9ca1c18c246e2ab2a801cbd35413ada7158ee8730e026de305b095bbfb447da29654c7243d4493cdb7c7c03692cf2f6cea66ff6c48164553588453467278ee0ae711f359d3ecdfbf0ea8186c675a7bdb079b43ec27ceb3d24b705fb5852bcdf95df9e1d43aa189f549163ae13e02e2ea0ba4b7e3aeeae81c0df64ce69dfa96d0c49eb5c6a807ba18a2f2d446e0f5ffb16fbdae3446646be0470757d63795f31df6c313b7f1a33b0d2e561ae848bf98f45531c9bc292c1eab4a36b42793282916a2fdc864dd4f742a212da1981f5793486a1c5533935af65a0201fa3bf67374f15564af407ef78f0b0409684d2c3bd6d0bd351264aee716ecca952a5525b17372a77e3c5556aa124ad5764d3b989fe57c1cbf6868a397a5f33da4d97c5ca01d50300cb7b63c7d274e98de3316953c4c5f46a06a87e36f364dbfbcf5ba436b1061cda9134d924c05978663d95c16e07591c7b26abb95e6ac396ec79fddc019f06dc4672fe2830994bf67aedee31dada4b52384fa630c52e1ba5e7aed7cb36d5ab65b458278307cac6adfe7a54ca936b8718eeb278be58cfaae24cbf4b89143f1dcecbaa9598707181867b238bf372e13bcce06b59b4b7b69e16c1082005fdbffe24b3e555fdc09989614ae2b3b6a19f0225c24584c005df32ae311c6a9b3b49fd1f2ac7e905c5f684d0890c87ccb7989104c0f764c6c6025dfff285139f736e6d0c73e4fc09b88012eac0cf7e610f00fb7d17e24595a0854cfbe03d927b3a3c946c55a6c9d0e70bb12062137af618cbad5f624f9e2bf145e48936f70ae10c46728f171f715bfc9a613cef46eb3ad68c9859e48282e3f98878aab22f70db86fdd0243894e8f29c0a9544b2aaaf3f16db115ecacda3de4f0ec9a7ffd6ada379b403b19faa927b7a010a9822eb1803bd2da451d5aa1ca9e75dff4ef233e27c58741af838244fb78b54bf9463d286c030d2f097830a6c1183ad96388c777cddb051771b6afeae04cd560b307a701c00332b60b86f322044ab425a68c5194c925f0fac4c111fb0053ca66a61db758a7afa3660f8f90e0c504b83fbf446076f002ce977fd35fc777ef977d54360a0099e9803b3c0290fa78fcaa234b5550249b1"}}, 0x990)
unshare(0x22020600)
syz_open_dev$usbfs(0x0, 0x9, 0x141301)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r7 = fsmount(r6, 0x0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c"], 0x20}, 0x4000004)
r9 = openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58)

968.190905ms ago: executing program 2 (id=2352):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000003c0))
ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0)
creat(0x0, 0x268)

202.129184ms ago: executing program 5 (id=2353):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

89.084837ms ago: executing program 4 (id=2354):
r0 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x1)
fchdir(r1)
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)

0s ago: executing program 2 (id=2355):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x22020400)
syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x81)
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000000)={[{@delalloc}]}, 0x1, 0x5a1, &(0x7f0000000bc0)="$eJzs3V9rHFUfB/DfmWzSpmmfpA8PPE+fXhgp2IKaNGlFEcEW650X/il4JRiTtJRu29BEsLViC/Ud6AsQvPNGvCwiRb3x1jvBFyDFIm1uvIvM7my6bXfzd5OJnc8HNpkzJ8M5s8t3z+zJzGwAlTWa/8giDkTEXIoYbqurRVE52vy7+/euTS/euzadYmnpnT9TpGJd6+9T8Xuo2Hh3RPzyQ4p/9z3e7vyVq+en6vXZy0V5fOHC3Pj8lavPn7swdXb27OzFyYkXJ144fmzy+NGe7Oe+iPhp7FTt5pnXDn4z/dX+T7/7+laKE7G3qG/fj14ZjdHl56Rd/ry+1OvGStJX7E/7S5xqJXaIdWm9fv0R8d8Yjr548OINx2dvldo5YEstpYgloKKS/ENFtY4D8s+/rUe5RyTAdrl7sjkBcD815/YWl/Nfa84Nxu7G3MCexRTt0zopInoxM5e3MfdMGs4fsUXzcEBn129ExP86jf+pkc2Rxix+nv/sofxnEfFm8Ttf//YG2x99pCz/sH02k//32/L/wQbbl38AAAAAAADondsnI+K5Tv//y5bP/4kO5/8MRcSJHrS/+v//sjs9aAbo4O7JiFcionXu32Jb/gsjfUVpX+N8gP505lx99mhE/CsijkT/rrw8sUIbowd/7u9a13b+X/7I22+dC9j09L7aroe3mZlamNrMPgNNd29E/L/WKf9pefxPHcb//P1gbo1tLJ169cdudavnH9gqS19GHO44/j+4c0Va+f4c443jgfHWUcHjPn7v1rfd2pd/KE8+/u9ZOf8jqf1+PfPrb+OTP37bRP6zO52O/wfS6cYtZwaKdR9NLSxcnogYSG88vn5y/X2GJ1ErD6285Pk/cqjz5/+Vjv8HI+L6Gts8/f3rN7vVteV/0PgP2yvP/8y6xv/1Lxx694u/urW/tvH/eGNMP1KsMf8HK1trQMvuJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8E2URsTdSNra8nGVjYxFDEfGf2JPVL80vPHvm0ocXZ/K6xvf/Z61v+h1ullPr+/9H2sqTj5SPRcT+iPi8b7BRHpu+VJ8pe+cBAAAAAAAAAAAAAAAAAABghxjqcv1/7ve+snsHbLla2R0ASiP/UF3yD9Ul/1Bd8g/VJf9QXfIP1SX/UF3yD9Ul/wAAAAAA8ETZ/9TtX1NEXH95sPHIDRR1/aX2DNhqbvEB1SX/UF1O/YHqSmV3ACjdau8Duze8JQAAAAAAAAAAAADQK4cPuP4fqioruwNAabpf/+/OAPCkc/0/VJfP+IDr/wEAAAAAAAAAAABg55u/cvX8VL0+e3mjC7s2t7mFtS1ERNoB3VhlIWJHdGNLFlp3xdjU85N6kLhtWij5jQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFj2dwAAAP//cnzvdA==")

kernel console output (not intermixed with test programs):

stem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.723262][ T7908] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.749823][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'.
[  255.950966][   T28] kauditd_printk_skb: 57 callbacks suppressed
[  255.950981][   T28] audit: type=1800 audit(1785981890.886:179): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.703" name="in_ports" dev="configfs" ino=13067 res=0 errno=0
[  255.985534][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.167281][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  256.177286][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.588232][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'.
[  256.758956][ T7941] loop0: detected capacity change from 0 to 512
[  256.857963][ T7941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.883465][ T7941] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.009330][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.577433][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'.
[  258.200323][ T7971] loop2: detected capacity change from 0 to 512
[  258.280448][ T7971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.336147][ T7971] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.460440][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.646650][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'.
[  258.907545][ T7992] loop1: detected capacity change from 0 to 1024
[  259.109289][ T7992] hfsplus: unable to load nls mapping "cp37"
[  259.138679][ T7992] hfsplus: unable to parse mount options
[  259.369012][ T7998] loop3: detected capacity change from 0 to 512
[  259.580731][ T7998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.663613][ T7998] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.829074][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.431282][ T8004] loop2: detected capacity change from 0 to 512
[  261.560354][ T8004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.607668][ T8004] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.816664][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.170196][ T8024] loop3: detected capacity change from 0 to 512
[  262.219886][ T8024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.246523][ T8024] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.660208][   T28] audit: type=1800 audit(1785981897.586:180): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.748" name="in_ports" dev="configfs" ino=14131 res=0 errno=0
[  262.711559][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.736932][ T8036] loop2: detected capacity change from 0 to 1024
[  262.977570][ T8036] hfsplus: unable to load nls mapping "cp37"
[  263.003061][ T8036] hfsplus: unable to parse mount options
[  264.113615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  264.523278][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  265.353702][ T8062] loop1: detected capacity change from 0 to 512
[  265.441500][ T8062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.543239][ T8062] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.859186][ T8069] loop3: detected capacity change from 0 to 1024
[  265.934188][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.021194][ T8069] hfsplus: unable to load nls mapping "cp37"
[  266.045334][ T8069] hfsplus: unable to parse mount options
[  266.104245][ T5793] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  268.292687][ T8090] loop2: detected capacity change from 0 to 512
[  268.343928][ T8090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.347821][ T8092] loop1: detected capacity change from 0 to 512
[  268.357819][ T8090] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.571709][ T8092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.595493][ T8092] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.704058][ T8101] loop0: detected capacity change from 0 to 1024
[  268.758305][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.766895][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.934964][ T8101] hfsplus: unable to load nls mapping "cp37"
[  268.941179][ T8101] hfsplus: unable to parse mount options
[  269.233181][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  270.053051][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  271.684192][   T28] audit: type=1800 audit(1785981906.626:181): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.781" name="in_ports" dev="configfs" ino=14381 res=0 errno=0
[  271.949827][ T8129] loop2: detected capacity change from 0 to 512
[  272.094877][ T8129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.108429][ T8129] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.411346][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.053221][ T8157] loop0: detected capacity change from 0 to 512
[  273.068071][ T8157] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  273.701033][ T8151] loop3: detected capacity change from 0 to 4096
[  273.795374][ T8151] EXT4-fs: inline encryption not supported
[  273.854736][   T28] audit: type=1800 audit(1785981908.766:182): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.792" name="in_ports" dev="configfs" ino=14411 res=0 errno=0
[  274.013175][ T8151] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  274.060276][ T8151] EXT4-fs (loop3): Test dummy encryption mode enabled
[  274.144063][ T8151] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003]
[  274.249029][ T8151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.292372][ T8168] loop1: detected capacity change from 0 to 512
[  274.491604][ T8168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.552534][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.602150][ T8168] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.919816][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.565745][   T28] audit: type=1800 audit(1785981910.506:183): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.803" name="in_ports" dev="configfs" ino=15409 res=0 errno=0
[  276.271600][ T8217] 
[  276.873510][ T8232] bond_slave_0: entered promiscuous mode
[  276.882157][ T8232] bond_slave_1: entered promiscuous mode
[  276.897670][ T8235] loop1: detected capacity change from 0 to 512
[  276.917627][ T8232] vlan2: entered promiscuous mode
[  276.941510][ T8235] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  276.951833][ T8232] bond0: entered promiscuous mode
[  276.969396][ T8235] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  277.304961][ T8241] RDS: rds_bind could not find a transport for 4600::, load rds_tcp or rds_rdma?
[  277.330692][ T8245] loop2: detected capacity change from 0 to 512
[  277.414252][ T8245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.488004][ T8245] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.547392][ T8253] program syz.1.830 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  277.768370][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.981144][ T8268] loop0: detected capacity change from 0 to 512
[  278.021199][ T8268] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  278.068128][ T8268] EXT4-fs (loop0): 1 truncate cleaned up
[  278.105378][ T8268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.580087][ T8282] TC_ACT_REPEAT abuse ?
[  279.348585][ T8285] loop1: detected capacity change from 0 to 4096
[  279.377598][ T8285] EXT4-fs: inline encryption not supported
[  279.518900][ T8285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  279.540753][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.566985][ T8285] EXT4-fs (loop1): Test dummy encryption mode enabled
[  279.626612][ T8285] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003]
[  279.701038][ T8285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.827176][   T28] audit: type=1800 audit(1785981914.766:184): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.844" name="in_ports" dev="configfs" ino=14631 res=0 errno=0
[  280.302641][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.848'.
[  280.326002][ T8312] netlink: 'syz.0.849': attribute type 3 has an invalid length.
[  280.334783][ T8312] netlink: 132 bytes leftover after parsing attributes in process `syz.0.849'.
[  280.443210][ T8317] bond1: entered promiscuous mode
[  280.448340][ T8317] bond1: entered allmulticast mode
[  280.627540][ T8319] loop0: detected capacity change from 0 to 512
[  280.658633][ T8319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  280.757196][ T8319] EXT4-fs (loop0): 1 truncate cleaned up
[  280.765114][ T8319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.794505][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.139176][   T28] audit: type=1800 audit(1785981917.076:185): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.855" name="in_ports" dev="configfs" ino=14683 res=0 errno=0
[  282.473517][ T8351] loop3: detected capacity change from 0 to 512
[  282.547815][ T8358] loop0: detected capacity change from 0 to 512
[  282.563733][ T8358] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  282.575279][ T8351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.588185][ T8351] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.630372][ T8358] EXT4-fs (loop0): 1 truncate cleaned up
[  282.638423][ T8358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.910937][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.778306][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.018224][ T8373] loop0: detected capacity change from 0 to 1764
[  284.584878][ T8391] loop3: detected capacity change from 0 to 512
[  284.665739][ T8391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.713378][ T8391] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.139684][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.824649][ T8430] loop3: detected capacity change from 0 to 512
[  285.860083][ T8430] EXT4-fs: Ignoring removed bh option
[  285.869566][ T8430] EXT4-fs: inline encryption not supported
[  285.919011][ T8430] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  286.035897][ T8430] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  286.059683][ T8430] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.887: bg 0: block 248: padding at end of block bitmap is not set
[  286.082104][ T8430] Quota error (device loop3): write_blk: dquota write failed
[  286.108728][ T8430] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  286.121340][ T8430] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.887: Failed to acquire dquot type 1
[  286.170851][ T8430] EXT4-fs (loop3): 1 truncate cleaned up
[  286.223872][ T8430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  286.459500][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  286.852142][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.158509][ T8492] loop2: detected capacity change from 0 to 4096
[  288.185409][ T8492] EXT4-fs: inline encryption not supported
[  288.217436][ T8492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  288.233859][ T8492] EXT4-fs (loop2): Test dummy encryption mode enabled
[  288.258065][ T8492] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003]
[  288.339772][ T8492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.818260][   T28] audit: type=1800 audit(1785981923.756:186): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.910" name="in_ports" dev="configfs" ino=14911 res=0 errno=0
[  290.265004][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout
[  291.667722][ T2923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.890194][ T2923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.102269][ T2923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.333201][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  292.360691][ T2923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.392466][ T8592] loop0: detected capacity change from 0 to 512
[  292.468658][ T8592] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  292.543958][ T8592] EXT4-fs (loop0): 1 truncate cleaned up
[  292.551029][ T8592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.894388][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.074445][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  293.095749][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  293.109242][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  293.122360][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  293.146071][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  293.155528][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  293.989814][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.403414][ T8644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.950'.
[  294.501845][ T8642] bond1: entered promiscuous mode
[  294.515664][ T8642] bond1: entered allmulticast mode
[  294.803846][ T8603] chnl_net:caif_netlink_parms(): no params data found
[  295.053406][ T8659] loop0: detected capacity change from 0 to 1024
[  295.214329][ T5791] Bluetooth: hci2: command tx timeout
[  295.331678][ T8659] hfsplus: unable to load nls mapping "cp37"
[  295.363337][ T8659] hfsplus: unable to parse mount options
[  295.398023][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.003158][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.010482][ T8603] bridge_slave_0: entered allmulticast mode
[  297.060499][ T8603] bridge_slave_0: entered promiscuous mode
[  297.165583][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.172805][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.193210][ T8603] bridge_slave_1: entered allmulticast mode
[  297.211251][ T8603] bridge_slave_1: entered promiscuous mode
[  297.269397][ T2923] hsr_slave_0: left promiscuous mode
[  297.283077][ T5791] Bluetooth: hci2: command tx timeout
[  297.324218][ T2923] hsr_slave_1: left promiscuous mode
[  297.343734][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.351288][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.384875][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.392375][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.445089][ T2923] bridge_slave_1: left allmulticast mode
[  297.450825][ T2923] bridge_slave_1: left promiscuous mode
[  297.483396][ T2923] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.531269][ T2923] bridge_slave_0: left allmulticast mode
[  297.543128][ T2923] bridge_slave_0: left promiscuous mode
[  297.549059][ T2923] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.655577][ T2923] veth0_macvtap: left promiscuous mode
[  297.661587][ T2923] veth1_vlan: left promiscuous mode
[  297.693747][ T2923] veth0_vlan: left promiscuous mode
[  299.139380][ T2923] team0 (unregistering): Port device team_slave_1 removed
[  299.184959][ T2923] team0 (unregistering): Port device team_slave_0 removed
[  299.249283][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.342998][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.374184][ T5791] Bluetooth: hci2: command tx timeout
[  299.765676][ T2923] bond0 (unregistering): Released all slaves
[  299.870635][ T8685] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  300.040227][ T8603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.111745][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.264147][ T8603] team0: Port device team_slave_0 added
[  300.287457][ T8729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.970'.
[  300.298199][ T8603] team0: Port device team_slave_1 added
[  300.453514][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.460543][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.508377][ T8733] loop2: detected capacity change from 0 to 512
[  300.541889][ T8733] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  300.564572][ T8603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.610786][ T8733] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  300.634396][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.644912][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.681939][ T8733] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  300.726811][ T8603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.738958][ T8733] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  300.770781][ T8733] System zones: 0-2, 18-18, 34-35
[  300.831822][ T8733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.913453][ T8603] hsr_slave_0: entered promiscuous mode
[  300.925967][ T8603] hsr_slave_1: entered promiscuous mode
[  300.932856][ T8603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  300.941517][ T8603] Cannot create hsr debugfs directory
[  301.067992][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.117161][ T8748] bond2: entered promiscuous mode
[  301.145251][ T8748] bond2: entered allmulticast mode
[  301.443313][ T5791] Bluetooth: hci2: command tx timeout
[  301.869328][ T8777] loop0: detected capacity change from 0 to 1764
[  302.121128][ T8603] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  302.152679][ T8603] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  302.236266][ T8603] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  302.286178][ T8603] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  302.469038][ T8789] netlink: 48 bytes leftover after parsing attributes in process `syz.3.981'.
[  302.577260][ T8603] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.660248][ T8603] 8021q: adding VLAN 0 to HW filter on device team0
[  302.689358][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.696601][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.753529][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.760728][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.214934][ T8807] loop2: detected capacity change from 0 to 1764
[  303.648798][ T8603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.609458][ T8603] veth0_vlan: entered promiscuous mode
[  304.711893][ T8603] veth1_vlan: entered promiscuous mode
[  304.830711][ T8603] veth0_macvtap: entered promiscuous mode
[  304.849959][ T8603] veth1_macvtap: entered promiscuous mode
[  304.934686][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.960864][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.989123][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.001119][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.017439][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.051925][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.085227][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.128045][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.169979][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.202521][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.232934][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.278492][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.299657][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.314010][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.340551][ T8603] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.356703][ T8603] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.387855][ T8603] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.433107][ T8603] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.676182][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.709853][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.818283][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.842939][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.551852][ T8903] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1006'.
[  308.135436][ T8928] loop5: detected capacity change from 0 to 7
[  308.193107][ T8928] Dev loop5: unable to read RDB block 7
[  308.224051][ T8928]  loop5: unable to read partition table
[  308.240345][ T8928] loop5: partition table beyond EOD, truncated
[  308.273434][ T8928] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  308.351467][ T5143] Dev loop5: unable to read RDB block 7
[  308.364347][ T5143]  loop5: unable to read partition table
[  308.385412][ T5143] loop5: partition table beyond EOD, truncated
[  308.968659][ T8950] loop0: detected capacity change from 0 to 1764
[  309.019976][ T8954] capability: warning: `syz.4.1023' uses 32-bit capabilities (legacy support in use)
[  309.944475][ T8983] loop3: detected capacity change from 0 to 1764
[  310.330586][ T8999] loop0: detected capacity change from 0 to 512
[  310.504613][ T8999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.543105][ T8999] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.620946][ T8999] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1039: corrupted xattr block 33: invalid header
[  310.686591][ T8999] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1039: corrupted xattr block 33: invalid header
[  310.752420][ T8999] fscrypt (loop0, inode 15): Error -117 getting encryption context
[  310.849360][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.078304][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1036'.
[  315.183268][ T9117] unsupported nlmsg_type 40
[  315.247383][ T9113] loop3: detected capacity change from 0 to 4096
[  315.309969][ T9113] EXT4-fs: inline encryption not supported
[  315.479150][ T9113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  315.571932][ T9113] EXT4-fs (loop3): Test dummy encryption mode enabled
[  315.695750][ T9113] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003]
[  315.785279][ T9113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.054547][ T9139] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1070'.
[  317.688940][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.698569][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  318.207673][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.677846][ T9163] bond3: entered promiscuous mode
[  318.709225][ T9163] bond3: entered allmulticast mode
[  320.513405][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1088'.
[  320.708132][   T28] audit: type=1800 audit(1785981955.646:187): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1090" name="in_ports" dev="configfs" ino=17181 res=0 errno=0
[  322.474273][ T9235] syzkaller0: entered promiscuous mode
[  322.507731][ T9235] syzkaller0: entered allmulticast mode
[  322.539805][ T9235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.864503][   T28] audit: type=1800 audit(1785981957.796:188): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1102" name="in_ports" dev="configfs" ino=17256 res=0 errno=0
[  322.957612][ T9233] tipc: Resetting bearer <eth:syzkaller0>
[  323.155469][ T9233] tipc: Disabling bearer <eth:syzkaller0>
[  324.084671][ T9272] netlink: 'syz.4.1110': attribute type 3 has an invalid length.
[  324.289420][   T28] audit: type=1800 audit(1785981959.206:189): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1111" name="in_ports" dev="configfs" ino=17319 res=0 errno=0
[  327.036066][   T28] audit: type=1800 audit(1785981961.976:190): pid=9333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1125" name="in_ports" dev="configfs" ino=18219 res=0 errno=0
[  331.663755][ T9405] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  333.652234][ T9440] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  334.346400][ T9455] loop2: detected capacity change from 0 to 512
[  334.514976][ T9455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.613242][ T9455] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.817462][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.857811][   T28] audit: type=1800 audit(1785981969.796:191): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1169" name="in_ports" dev="configfs" ino=19482 res=0 errno=0
[  335.094420][ T9475] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  337.682046][   T28] audit: type=1800 audit(1785981972.616:192): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1182" name="in_ports" dev="configfs" ino=18640 res=0 errno=0
[  338.674708][ T9550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1198'.
[  339.351584][ T9577] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1209'.
[  339.500009][ T9581] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1211'.
[  342.298745][ T9643] loop3: detected capacity change from 0 to 164
[  342.323994][ T9643] ISOFS: unable to read i-node block
[  342.333291][ T9643] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  346.947642][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'.
[  351.892217][ T9765] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.901526][ T9765] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.921554][ T9810] loop3: detected capacity change from 0 to 512
[  351.975898][ T9810] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1275: inode has both inline data and extents flags
[  352.001996][ T9810] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1275: couldn't read orphan inode 15 (err -117)
[  352.051870][ T9810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.624137][ T9765] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.672094][ T9765] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.145839][ T9765] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.155005][ T9765] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.164628][ T9765] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.173609][ T9765] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.687238][ T9814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.890034][   T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.057850][   T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.150826][   T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.279370][   T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.669343][   T59] tipc: Left network mode
[  355.251118][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  355.268014][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  355.277119][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  355.296933][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  355.306276][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  355.318249][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  355.408883][ T9872] loop2: detected capacity change from 0 to 736
[  355.973975][ T9889] loop4: detected capacity change from 0 to 128
[  357.365341][   T51] Bluetooth: hci3: command tx timeout
[  357.598938][ T9869] chnl_net:caif_netlink_parms(): no params data found
[  357.802752][   T59] hsr_slave_0: left promiscuous mode
[  357.899629][   T59] hsr_slave_1: left promiscuous mode
[  357.951708][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  357.999303][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.025991][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.053501][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.094690][   T59] bridge_slave_1: left allmulticast mode
[  358.102740][   T59] bridge_slave_1: left promiscuous mode
[  358.117449][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.150609][   T59] bridge_slave_0: left allmulticast mode
[  358.157007][   T59] bridge_slave_0: left promiscuous mode
[  358.168966][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.252793][   T59] veth1_macvtap: left promiscuous mode
[  358.261459][   T59] veth0_macvtap: left promiscuous mode
[  358.267449][   T59] veth1_vlan: left promiscuous mode
[  358.273454][   T59] veth0_vlan: left promiscuous mode
[  358.480763][   T59] bond3 (unregistering): Released all slaves
[  358.513777][   T59] bond2 (unregistering): Released all slaves
[  358.535330][   T59] bond1 (unregistering): Released all slaves
[  359.158826][   T59] team0 (unregistering): Port device team_slave_1 removed
[  359.246342][   T59] team0 (unregistering): Port device team_slave_0 removed
[  359.327357][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.386557][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.452087][   T51] Bluetooth: hci3: command tx timeout
[  359.812648][   T59] bond0 (unregistering): Released all slaves
[  360.100535][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.133165][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.160880][ T9869] bridge_slave_0: entered allmulticast mode
[  360.198898][ T9869] bridge_slave_0: entered promiscuous mode
[  360.244088][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.276540][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.293535][ T9869] bridge_slave_1: entered allmulticast mode
[  360.301227][ T9869] bridge_slave_1: entered promiscuous mode
[  360.420827][ T9869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.464906][ T9869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.492782][   T28] audit: type=1800 audit(1785981995.426:193): pid=9976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1312" name="in_ports" dev="configfs" ino=19297 res=0 errno=0
[  360.617293][ T9869] team0: Port device team_slave_0 added
[  360.646115][ T9869] team0: Port device team_slave_1 added
[  360.770770][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.806413][ T9986] loop0: detected capacity change from 0 to 1024
[  360.806456][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.915280][ T9993] loop2: detected capacity change from 0 to 128
[  361.036592][ T9869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.431177][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.524795][   T51] Bluetooth: hci3: command tx timeout
[  361.725062][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.793068][ T9986] hfsplus: unable to load nls mapping "cp37"
[  361.813039][ T9869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.820066][ T9986] hfsplus: unable to parse mount options
[  363.603284][   T51] Bluetooth: hci3: command tx timeout
[  363.839476][ T9869] hsr_slave_0: entered promiscuous mode
[  363.868900][ T9869] hsr_slave_1: entered promiscuous mode
[  363.890488][ T9869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.922651][ T9869] Cannot create hsr debugfs directory
[  364.749360][ T9869] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  364.865717][ T9869] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  364.906245][T10032] loop2: detected capacity change from 0 to 1024
[  364.921775][ T9869] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  364.984224][ T9869] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  364.996348][T10036] loop4: detected capacity change from 0 to 128
[  365.102308][T10036] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  365.129988][T10032] hfsplus: unable to load nls mapping "cp37"
[  365.165337][T10032] hfsplus: unable to parse mount options
[  365.174431][T10036] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.512913][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  366.795358][T10042] loop0: detected capacity change from 0 to 128
[  366.852156][   T28] audit: type=1800 audit(1785982001.786:194): pid=10045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1326" name="file1" dev="loop4" ino=12 res=0 errno=0
[  367.033696][ T8603] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  367.045716][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.096319][ T9869] 8021q: adding VLAN 0 to HW filter on device team0
[  367.144237][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.151450][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.207085][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.214342][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.614271][   T28] audit: type=1800 audit(1785982002.546:195): pid=10055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1330" name="in_ports" dev="configfs" ino=19366 res=0 errno=0
[  368.062961][   T28] audit: type=1800 audit(1785982002.996:196): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1332" name="in_ports" dev="configfs" ino=20595 res=0 errno=0
[  368.365816][ T9869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.865517][T10092] mount: server  not responding, timed out
[  368.980102][T10103] loop4: detected capacity change from 0 to 512
[  369.023394][T10103] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  369.099909][T10103] EXT4-fs (loop4): 1 truncate cleaned up
[  369.162822][T10103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  369.373551][T10114] loop0: detected capacity change from 0 to 1024
[  369.407051][T10114] EXT4-fs: Ignoring removed nomblk_io_submit option
[  369.416129][T10114] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  369.473017][T10114] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  369.493404][ T9869] veth0_vlan: entered promiscuous mode
[  369.499647][T10114] EXT4-fs (loop0): orphan cleanup on readonly fs
[  369.542699][ T9869] veth1_vlan: entered promiscuous mode
[  369.549263][T10114] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.1339: Invalid inode table block 0 in block_group 0
[  369.601885][T10114] EXT4-fs (loop0): Remounting filesystem read-only
[  369.609334][T10114] Quota error (device loop0): write_blk: dquota write failed
[  369.625039][T10114] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  369.661997][T10114] EXT4-fs (loop0): 1 truncate cleaned up
[  369.704704][T10114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  369.734950][ T9869] veth0_macvtap: entered promiscuous mode
[  369.755784][ T9869] veth1_macvtap: entered promiscuous mode
[  369.821741][ T9869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.887435][ T9869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.907993][ T9869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.932934][ T9869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.951998][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.952293][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.012613][ T9869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.049162][ T9869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.080927][ T9869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.121459][ T9869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.135699][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.169991][ T9869] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.210301][ T9869] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.256233][ T9869] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.275483][ T9869] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.315799][ T8603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.612723][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.656186][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.700658][T10142] loop2: detected capacity change from 0 to 128
[  371.726944][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.759526][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.242669][T10166] loop2: detected capacity change from 0 to 736
[  375.687042][T10251] loop2: detected capacity change from 0 to 128
[  375.946505][T10251] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  375.957173][T10251] FAT-fs (loop2): Filesystem has been set read-only
[  375.969609][   T28] audit: type=1800 audit(1785982010.876:197): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1381" name="file2" dev="loop2" ino=1048637 res=0 errno=0
[  378.786078][T10296] loop5: detected capacity change from 0 to 128
[  378.879656][T10296] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  378.889983][T10296] FAT-fs (loop5): Filesystem has been set read-only
[  378.901955][   T28] audit: type=1800 audit(1785982013.816:198): pid=10296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1393" name="file2" dev="loop5" ino=1048638 res=0 errno=0
[  379.048371][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  379.055711][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  379.806667][T10307] loop5: detected capacity change from 0 to 128
[  379.884473][T10307] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  379.899019][T10307] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.996291][   T28] audit: type=1800 audit(1785982014.936:199): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1397" name="file1" dev="loop5" ino=12 res=0 errno=0
[  380.294957][ T9869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  380.486412][T10325] loop5: detected capacity change from 0 to 128
[  381.399513][T10350] loop5: detected capacity change from 0 to 128
[  381.449813][T10350] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  381.543862][T10350] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.672978][   T28] audit: type=1800 audit(1785982016.606:200): pid=10350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1413" name="file1" dev="loop5" ino=12 res=0 errno=0
[  381.783980][ T9869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  382.518891][T10385] loop2: detected capacity change from 0 to 128
[  382.579632][T10385] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  382.596428][T10385] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  382.699349][   T28] audit: type=1800 audit(1785982017.636:201): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1426" name="file1" dev="loop2" ino=12 res=0 errno=0
[  382.912376][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  383.221723][T10403] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  383.334737][T10409] loop4: detected capacity change from 0 to 1024
[  383.384231][T10409] EXT4-fs: Ignoring removed orlov option
[  383.443467][T10409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  383.704509][ T8603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.953520][T10430] loop4: detected capacity change from 0 to 128
[  384.001754][T10430] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  384.058743][T10430] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  384.085985][  T172] kernel write not supported for file /snd/seq (pid: 172 comm: kworker/0:2)
[  384.165454][   T28] audit: type=1800 audit(1785982019.106:202): pid=10430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1438" name="file1" dev="loop4" ino=12 res=0 errno=0
[  384.317131][T10439] loop5: detected capacity change from 0 to 512
[  384.345500][T10439] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  384.383300][ T8603] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  384.410206][T10439] EXT4-fs (loop5): 1 truncate cleaned up
[  384.474265][T10439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.675801][ T9869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.685752][T10453] loop2: detected capacity change from 0 to 1024
[  384.760059][T10453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.967227][T10453] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[  384.991654][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1451'.
[  385.069298][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.366310][T10477] loop5: detected capacity change from 0 to 128
[  385.441934][T10477] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  385.462405][T10477] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  385.534456][   T28] audit: type=1800 audit(1785982020.476:203): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1454" name="file1" dev="loop5" ino=12 res=0 errno=0
[  385.697644][   T28] audit: type=1326 audit(1785982020.636:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  385.772982][   T28] audit: type=1326 audit(1785982020.636:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  385.797613][ T9869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  385.826889][   T28] audit: type=1326 audit(1785982020.636:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  385.960672][   T28] audit: type=1326 audit(1785982020.666:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  386.063132][   T28] audit: type=1326 audit(1785982020.666:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  386.092755][T10499] loop5: detected capacity change from 0 to 128
[  386.210509][   T28] audit: type=1326 audit(1785982020.666:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1457" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  386.289162][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1463'.
[  386.688186][T10521] loop0: detected capacity change from 0 to 128
[  386.754697][T10521] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  386.777074][T10521] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.800532][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  386.800575][   T28] audit: type=1800 audit(1785982021.736:219): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1467" name="file1" dev="loop0" ino=12 res=0 errno=0
[  386.850865][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'.
[  386.950379][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  387.068669][   T28] audit: type=1326 audit(1785982022.006:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe580f9e0d9 code=0x7ffc0000
[  387.153295][   T28] audit: type=1326 audit(1785982022.006:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe580f9e0d9 code=0x7ffc0000
[  387.213143][   T28] audit: type=1326 audit(1785982022.036:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe580f9e0d9 code=0x7ffc0000
[  387.274059][T10536] loop0: detected capacity change from 0 to 512
[  387.285826][   T28] audit: type=1326 audit(1785982022.036:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe580f9e0d9 code=0x7ffc0000
[  387.369972][   T28] audit: type=1326 audit(1785982022.036:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe580f9e0d9 code=0x7ffc0000
[  387.413793][T10536] EXT4-fs (loop0): orphan cleanup on readonly fs
[  387.447097][T10538] loop4: detected capacity change from 0 to 1024
[  387.464463][T10536] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  387.531680][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1474'.
[  387.541480][   T28] audit: type=1326 audit(1785982022.086:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe580f9e0d9 code=0x7ffc0000
[  387.601336][T10536] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  387.613350][   T28] audit: type=1326 audit(1785982022.086:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe580f9de42 code=0x7ffc0000
[  387.646010][T10536] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #13: comm syz.0.1469: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  387.702570][   T28] audit: type=1326 audit(1785982022.616:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe580f9ded7 code=0x7ffc0000
[  387.738406][T10538] hfsplus: unable to load nls mapping "cp37"
[  387.744796][T10536] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1469: couldn't read orphan inode 13 (err -117)
[  387.762322][T10538] hfsplus: unable to parse mount options
[  387.769336][   T28] audit: type=1326 audit(1785982022.626:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.2.1472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe580f5add1 code=0x7ffc0000
[  387.814874][T10536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  389.524728][T10536] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.1469: inode #15: comm syz.0.1469: iget: illegal inode #
[  389.784771][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.007724][T10563] loop0: detected capacity change from 0 to 128
[  390.101670][T10563] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  390.133639][T10563] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  390.200507][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  390.777036][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'.
[  390.952539][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1487'.
[  391.155481][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'.
[  391.199197][T10597] loop5: detected capacity change from 0 to 128
[  391.405642][T10597] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  391.472162][T10597] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.254726][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  392.254745][   T28] audit: type=1800 audit(1785982026.486:244): pid=10597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1490" name="file1" dev="loop5" ino=12 res=0 errno=0
[  392.348170][T10602] bond3: entered promiscuous mode
[  392.375071][T10602] bond3: entered allmulticast mode
[  392.489443][ T9869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  393.652382][   T28] audit: type=1800 audit(1785982028.586:245): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1500" name="out_ports" dev="configfs" ino=21396 res=0 errno=0
[  395.513387][T10662] xt_hashlimit: size too large, truncated to 1048576
[  396.221958][   T28] audit: type=1800 audit(1785982031.156:246): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1513" name="in_ports" dev="configfs" ino=22537 res=0 errno=0
[  396.621653][T10691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1515'.
[  398.775474][T10720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1525'.
[  399.724070][T10733] loop0: detected capacity change from 0 to 128
[  399.848027][T10733] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  399.858314][T10733] FAT-fs (loop0): Filesystem has been set read-only
[  399.866739][   T28] audit: type=1800 audit(1785982034.786:247): pid=10733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1527" name="file2" dev="loop0" ino=1048639 res=0 errno=0
[  400.642578][T10748] loop0: detected capacity change from 0 to 512
[  400.810986][T10748] EXT4-fs (loop0): 1 truncate cleaned up
[  400.855758][T10748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  400.952333][   T28] audit: type=1800 audit(1785982035.886:248): pid=10748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1533" name="file0" dev="loop0" ino=13 res=0 errno=0
[  401.013170][T10753] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  401.116972][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.310909][T10757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1535'.
[  401.597788][   T28] audit: type=1326 audit(1785982036.526:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.0.1537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c9f9e0d9 code=0x7ffc0000
[  401.652343][   T28] audit: type=1326 audit(1785982036.526:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.0.1537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c9f9e0d9 code=0x7ffc0000
[  401.683125][   T28] audit: type=1326 audit(1785982036.566:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.0.1537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c9f9e0d9 code=0x7ffc0000
[  402.463005][   T28] audit: type=1326 audit(1785982036.566:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.0.1537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c9f9e0d9 code=0x7ffc0000
[  402.683034][   T28] audit: type=1326 audit(1785982036.566:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.0.1537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fd2c9f9e0d9 code=0x7ffc0000
[  402.858673][   T28] audit: type=1326 audit(1785982036.566:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.0.1537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c9f9e0d9 code=0x7ffc0000
[  403.081431][   T28] audit: type=1326 audit(1785982036.566:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.0.1537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c9f9e0d9 code=0x7ffc0000
[  403.116714][   T28] audit: type=1326 audit(1785982036.576:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.0.1537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2c9f9e0d9 code=0x7ffc0000
[  403.659598][T10788] loop0: detected capacity change from 0 to 512
[  403.746916][T10788] EXT4-fs (loop0): inodes count not valid: 2 vs 32
[  403.754943][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1545'.
[  404.002289][T10799] loop0: detected capacity change from 0 to 128
[  404.073640][T10799] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  404.095756][T10799] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.382184][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  405.589673][T10828] loop0: detected capacity change from 0 to 128
[  405.612563][T10823] loop2: detected capacity change from 0 to 4096
[  405.628876][T10823] EXT4-fs: inline encryption not supported
[  405.656198][T10823] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  405.688476][T10823] EXT4-fs (loop2): Test dummy encryption mode enabled
[  405.735398][T10823] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003]
[  405.799686][T10823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.090278][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.216125][T10858] loop4: detected capacity change from 0 to 128
[  408.256373][T10858] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  408.310789][T10858] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.444623][T10865] loop2: detected capacity change from 0 to 128
[  408.485857][T10865] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  408.496174][T10865] FAT-fs (loop2): Filesystem has been set read-only
[  408.504472][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  408.504488][   T28] audit: type=1800 audit(1785982043.426:268): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1560" name="file2" dev="loop2" ino=1048640 res=0 errno=0
[  408.721218][   T28] audit: type=1800 audit(1785982043.476:269): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1559" name="file1" dev="loop4" ino=12 res=0 errno=0
[  408.785609][ T8603] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  409.790683][T10897] loop4: detected capacity change from 0 to 128
[  409.923179][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1569'.
[  410.464084][T10897] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  410.591551][T10897] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  410.706246][   T28] audit: type=1800 audit(1785982045.636:270): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1571" name="file1" dev="loop4" ino=12 res=0 errno=0
[  410.785031][ T8603] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  410.892982][   T28] audit: type=1800 audit(1785982045.826:271): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1574" name="in_ports" dev="configfs" ino=22819 res=0 errno=0
[  411.049025][T10922] loop0: detected capacity change from 0 to 128
[  411.079900][T10922] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  411.090212][T10922] FAT-fs (loop0): Filesystem has been set read-only
[  411.098506][   T28] audit: type=1800 audit(1785982046.016:272): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1575" name="file2" dev="loop0" ino=1048641 res=0 errno=0
[  411.951505][T10928] syz.5.1578 (10928) used greatest stack depth: 17896 bytes left
[  412.130082][T10947] loop0: detected capacity change from 0 to 128
[  412.557806][   T28] audit: type=1800 audit(1785982047.496:273): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1584" name="in_ports" dev="configfs" ino=23843 res=0 errno=0
[  413.026971][   T28] audit: type=1800 audit(1785982047.956:274): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1586" name="in_ports" dev="configfs" ino=22877 res=0 errno=0
[  413.122238][T10971] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  413.497805][T10983] loop4: detected capacity change from 0 to 1024
[  413.590034][T10983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.896462][T10983] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  414.023957][ T8603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.986938][T11034] loop4: detected capacity change from 0 to 4096
[  414.999007][T11034] EXT4-fs: inline encryption not supported
[  415.026652][T11039] netlink: 'syz.5.1607': attribute type 1 has an invalid length.
[  415.056453][T11034] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  415.071418][T11039] netlink: 'syz.5.1607': attribute type 1 has an invalid length.
[  415.092359][T11034] EXT4-fs (loop4): Test dummy encryption mode enabled
[  415.141708][T11034] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003]
[  415.201323][T11034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.103226][ T5791] Bluetooth: hci2: command 0x0406 tx timeout
[  417.579576][ T8603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.899034][T11068] loop5: detected capacity change from 0 to 512
[  417.968334][T11068] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.1617: corrupted in-inode xattr: invalid ea_ino
[  418.050169][T11068] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1617: couldn't read orphan inode 15 (err -117)
[  418.114338][T11068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.345066][ T9869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.411054][T11090] loop5: detected capacity change from 0 to 2048
[  419.517406][T11096] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  419.536003][T11090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.640544][T11090] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.766101][T11102] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  419.812813][T11102] EXT4-fs (loop5): Remounting filesystem read-only
[  420.109840][ T9869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.554016][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'.
[  424.569092][T11218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1660'.
[  425.376612][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'.
[  425.489855][T11226] loop4: detected capacity change from 0 to 1024
[  425.579173][T11226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  425.649479][T11233] loop2: detected capacity change from 0 to 4096
[  425.663792][T11233] EXT4-fs: inline encryption not supported
[  425.725809][T11233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  425.750579][T11233] EXT4-fs (loop2): Test dummy encryption mode enabled
[  425.785809][T11226] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  425.807445][T11233] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003]
[  425.855799][T11233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.931415][ T8603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.979635][T11239] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  427.314158][T11250] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1673'.
[  427.422643][T11251] loop4: detected capacity change from 0 to 512
[  427.565663][T11251] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  427.660281][T11251] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1672: bad orphan inode 131083
[  427.762409][T11251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.186654][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.220223][ T8603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.668895][T11285] xt_hashlimit: size too large, truncated to 1048576
[  429.776589][T11288] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1683'.
[  430.681580][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1690'.
[  430.703036][T11299] netlink: 'syz.0.1690': attribute type 7 has an invalid length.
[  430.710831][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'.
[  430.747386][T11299] gretap0: entered promiscuous mode
[  430.790209][T11299] gretap0: left promiscuous mode
[  431.690836][T11324] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1697'.
[  434.540995][T11348] loop5: detected capacity change from 0 to 1024
[  434.575406][T11348] EXT4-fs: inline encryption not supported
[  434.581334][T11348] EXT4-fs: Ignoring removed bh option
[  434.674482][T11348] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  434.776590][T11348] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #3: block 1: comm syz.5.1708: lblock 1 mapped to illegal pblock 1 (length 1)
[  434.875989][T11348] Quota error (device loop5): write_blk: dquota write failed
[  434.926557][T11348] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  434.991802][T11348] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.1708: Failed to acquire dquot type 0
[  435.039758][T11348] EXT4-fs error (device loop5): ext4_free_blocks:6694: comm syz.5.1708: Freeing blocks not in datazone - block = 0, count = 4096
[  435.109330][T11348] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1708: Invalid inode bitmap blk 0 in block_group 0
[  435.198313][T11348] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem
[  435.249355][T11348] EXT4-fs (loop5): 1 orphan inode deleted
[  435.261611][T11348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.274774][  T990] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  435.321385][  T990] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  435.375280][  T990] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0
[  435.529075][T11348] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  435.647360][ T9869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.685768][   T28] audit: type=1800 audit(1785982070.626:275): pid=11360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1713" name="in_ports" dev="configfs" ino=24410 res=0 errno=0
[  438.887562][   T28] audit: type=1800 audit(1785982073.826:276): pid=11410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1727" name="in_ports" dev="configfs" ino=23546 res=0 errno=0
[  439.224461][   T28] audit: type=1326 audit(1785982074.146:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11412 comm="syz.0.1731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2c9f9e0d9 code=0x0
[  439.431962][   T28] audit: type=1800 audit(1785982074.366:278): pid=11419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1732" name="in_ports" dev="configfs" ino=24594 res=0 errno=0
[  439.658734][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1734'.
[  441.253572][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  441.259965][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  443.640577][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1746'.
[  443.758995][T11469] loop4: detected capacity change from 0 to 128
[  444.069046][T11477] loop5: detected capacity change from 0 to 1024
[  444.101360][T11477] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  444.231800][T11477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.442151][ T9869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.974451][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'.
[  452.730134][   T28] audit: type=1800 audit(1785982087.656:279): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1778" name="in_ports" dev="configfs" ino=24782 res=0 errno=0
[  453.047521][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  453.103708][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  453.170694][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  453.199907][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  453.240935][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  453.293356][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  453.323392][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'.
[  453.343034][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  453.418886][    T9] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  453.523168][T11578] bond2: entered promiscuous mode
[  453.557051][T11578] bond2: entered allmulticast mode
[  453.700048][T11579] fido_id[11579]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  455.113233][   T28] audit: type=1800 audit(1785982090.036:280): pid=11600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1791" name="in_ports" dev="configfs" ino=25791 res=0 errno=0
[  455.961342][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1795'.
[  456.093317][T11615] bond3: entered promiscuous mode
[  456.103077][T11615] bond3: entered allmulticast mode
[  456.145836][T11614] netlink: 'syz.5.1797': attribute type 1 has an invalid length.
[  456.491345][T11621] syzkaller0: entered promiscuous mode
[  456.519565][T11621] syzkaller0: entered allmulticast mode
[  456.759846][   T28] audit: type=1800 audit(1785982091.696:281): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1803" name="in_ports" dev="configfs" ino=24893 res=0 errno=0
[  457.235783][T11646] netlink: 'syz.2.1810': attribute type 1 has an invalid length.
[  457.776566][   T28] audit: type=1326 audit(1785982092.716:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.2.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe580f9e0d9 code=0x0
[  458.213410][T11670] netlink: 'syz.5.1821': attribute type 1 has an invalid length.
[  459.375175][T11685] loop5: detected capacity change from 0 to 128
[  460.394475][T11704] netlink: 'syz.2.1832': attribute type 1 has an invalid length.
[  461.153322][T11724] netlink: 'syz.4.1841': attribute type 1 has an invalid length.
[  461.377697][T11731] loop4: detected capacity change from 0 to 128
[  461.863121][T11740] syzkaller0: entered promiscuous mode
[  461.868786][T11740] syzkaller0: entered allmulticast mode
[  461.885134][T11740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  461.908857][T11740] tipc: Resetting bearer <eth:syzkaller0>
[  461.920099][T11739] tipc: Resetting bearer <eth:syzkaller0>
[  461.945662][T11739] tipc: Disabling bearer <eth:syzkaller0>
[  462.111734][T11742] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  462.385364][T11748] netlink: 'syz.4.1850': attribute type 1 has an invalid length.
[  462.881973][T11772] loop2: detected capacity change from 0 to 128
[  463.433492][   T28] audit: type=1800 audit(1785982098.376:283): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1862" name="in_ports" dev="configfs" ino=25161 res=0 errno=0
[  463.715457][T11792] loop5: detected capacity change from 0 to 128
[  464.150461][T11808] loop2: detected capacity change from 0 to 1024
[  464.166945][T11808] EXT4-fs: Ignoring removed bh option
[  464.210610][T11808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  464.270726][   T28] audit: type=1800 audit(1785982099.206:284): pid=11808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1874" name="file2" dev="loop2" ino=16 res=0 errno=0
[  464.425643][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  464.986019][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'.
[  465.196649][T11843] loop2: detected capacity change from 0 to 512
[  465.230610][T11843] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  465.239134][T11843] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  465.247776][T11843] System zones: 0-1, 15-15, 18-18, 34-34
[  465.254337][T11843] EXT4-fs (loop2): orphan cleanup on readonly fs
[  465.260845][T11843] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  465.271524][T11843] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  465.327997][T11843] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  465.359013][T11843] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1890: bg 0: block 40: padding at end of block bitmap is not set
[  465.449395][T11843] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  465.480269][T11843] EXT4-fs (loop2): 1 truncate cleaned up
[  465.494260][T11843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  465.551314][T11843] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  465.619547][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.955520][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'.
[  466.634996][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'.
[  466.943184][T11899] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1915'.
[  467.307132][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1921'.
[  467.321227][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'.
[  467.357420][T11914] bond4: entered promiscuous mode
[  467.362543][T11914] bond4: entered allmulticast mode
[  467.747165][T11931] loop4: detected capacity change from 0 to 128
[  468.187618][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1932'.
[  468.256858][T11941] bond3: entered promiscuous mode
[  468.273888][T11941] bond3: entered allmulticast mode
[  468.393558][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'.
[  469.971853][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1943'.
[  470.104303][    T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  470.123085][T11965] bond5: entered promiscuous mode
[  470.138517][T11965] bond5: entered allmulticast mode
[  470.273279][    T8] usb 3-1: device descriptor read/64, error -71
[  470.503175][   T28] audit: type=1800 audit(1785982105.436:285): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1949" name="in_ports" dev="configfs" ino=26442 res=0 errno=0
[  470.543020][    T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  470.713594][    T8] usb 3-1: device descriptor read/64, error -71
[  470.833200][    T8] usb usb3-port1: attempt power cycle
[  470.932789][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1957'.
[  471.012716][T12004] bond4: entered promiscuous mode
[  471.028108][T12004] bond4: entered allmulticast mode
[  471.037147][T12005] loop5: detected capacity change from 0 to 4096
[  471.099870][T12005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.187348][   T28] audit: type=1800 audit(1785982106.126:286): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1960" name="file0" dev="loop5" ino=13 res=0 errno=0
[  471.282920][    T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  471.335858][ T9869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.365469][    T8] usb 3-1: device descriptor read/8, error -71
[  471.401177][   T28] audit: type=1800 audit(1785982106.336:287): pid=12010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1961" name="in_ports" dev="configfs" ino=25522 res=0 errno=0
[  471.633411][    T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  471.673584][    T8] usb 3-1: device descriptor read/8, error -71
[  471.795857][    T8] usb usb3-port1: unable to enumerate USB device
[  472.631236][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1970'.
[  472.804210][T12036] bond2: entered promiscuous mode
[  472.809473][T12036] bond2: entered allmulticast mode
[  474.079100][T12067] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  476.187665][T12094] loop2: detected capacity change from 0 to 128
[  476.494837][   T28] audit: type=1800 audit(1785982111.416:288): pid=12099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1992" name="in_ports" dev="configfs" ino=26598 res=0 errno=0
[  476.946974][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'.
[  478.424935][T12095] Bluetooth: hci3: command 0x0406 tx timeout
[  478.843156][T12131] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2003'.
[  479.802221][T12157] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2016'.
[  480.121647][T12169] loop0: detected capacity change from 0 to 512
[  480.203206][T12169] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  480.223618][T12169] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  480.231819][T12169] System zones: 0-1, 15-15, 18-18, 34-34
[  480.277161][T12169] EXT4-fs (loop0): orphan cleanup on readonly fs
[  480.303373][T12169] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  480.350255][T12169] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  480.365088][T12169] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  480.400320][T12168] 9pnet_fd: Insufficient options for proto=fd
[  480.407328][T12169] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2022: bg 0: block 40: padding at end of block bitmap is not set
[  480.432472][T12169] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  480.446588][T12169] EXT4-fs (loop0): 1 truncate cleaned up
[  480.460075][   T28] audit: type=1800 audit(1785982115.396:289): pid=12185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2027" name="in_ports" dev="configfs" ino=26872 res=0 errno=0
[  480.467554][T12169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  481.074730][T12187] loop2: detected capacity change from 0 to 1024
[  481.089433][T12187] EXT4-fs: Ignoring removed bh option
[  481.096488][T12169] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  481.241282][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.268386][T12187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  481.323262][T12191] syzkaller1: entered promiscuous mode
[  481.345480][T12191] syzkaller1: entered allmulticast mode
[  481.374037][   T28] audit: type=1800 audit(1785982116.316:290): pid=12187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2029" name="file2" dev="loop2" ino=16 res=0 errno=0
[  481.545264][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  481.810817][T12205] loop4: detected capacity change from 0 to 512
[  481.836941][T12205] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  481.848149][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2036'.
[  481.918910][T12205] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5
[  481.939377][T12205] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  481.954814][T12205] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2035: Failed to acquire dquot type 1
[  481.979914][T12205] EXT4-fs (loop4): 1 truncate cleaned up
[  482.002102][T12214] loop2: detected capacity change from 0 to 512
[  482.010161][T12212] bond6: entered promiscuous mode
[  482.016386][T12205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  482.035727][T12212] bond6: entered allmulticast mode
[  482.109645][T12205] EXT4-fs (loop4): shut down requested (0)
[  482.121589][T12214] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  482.156934][T12214] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  482.169928][T12214] System zones: 0-1, 15-15, 18-18, 34-34
[  482.176417][T12214] EXT4-fs (loop2): orphan cleanup on readonly fs
[  482.193857][T12214] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  482.244654][ T8603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  482.255146][T12214] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  482.270990][T12214] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  482.287325][T12214] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2038: bg 0: block 40: padding at end of block bitmap is not set
[  482.303899][T12214] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  482.335127][T12214] EXT4-fs (loop2): 1 truncate cleaned up
[  482.362710][T12214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  482.478528][T12225] loop4: detected capacity change from 0 to 1024
[  482.485644][T12214] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  482.516838][T12225] EXT4-fs: Ignoring removed bh option
[  482.589558][T12225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  482.647416][   T28] audit: type=1800 audit(1785982117.576:291): pid=12225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2041" name="file2" dev="loop4" ino=16 res=0 errno=0
[  482.694049][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.880455][ T8603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  483.017493][T12244] syzkaller0: entered promiscuous mode
[  483.029389][T12244] syzkaller0: entered allmulticast mode
[  483.061645][T12244] tipc: Started in network mode
[  483.071341][T12244] tipc: Node identity 86c3b3b17b3f, cluster identity 4711
[  483.090361][T12244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  483.290842][T12252] loop0: detected capacity change from 0 to 512
[  483.311246][T12252] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  483.337990][T12252] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  483.354507][T12252] System zones: 0-1, 15-15, 18-18, 34-34
[  483.360667][T12252] EXT4-fs (loop0): orphan cleanup on readonly fs
[  483.388070][T12252] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  483.405348][T12252] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  483.437296][T12252] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  483.469473][T12252] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2052: bg 0: block 40: padding at end of block bitmap is not set
[  483.521269][T12252] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  483.548353][T12252] EXT4-fs (loop0): 1 truncate cleaned up
[  483.556479][T12252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  483.660136][T12252] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  483.660149][T12243] tipc: Resetting bearer <eth:syzkaller0>
[  483.770383][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.781357][T12243] tipc: Disabling bearer <eth:syzkaller0>
[  483.913344][T12255] loop2: detected capacity change from 0 to 256
[  484.075512][T12262] loop5: detected capacity change from 0 to 1024
[  484.089647][T12262] EXT4-fs: Ignoring removed bh option
[  484.168936][T12262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  484.274519][   T28] audit: type=1800 audit(1785982119.216:292): pid=12262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2056" name="file2" dev="loop5" ino=16 res=0 errno=0
[  484.419449][ T9869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  484.676674][T12283] syzkaller0: entered promiscuous mode
[  484.692946][T12283] syzkaller0: entered allmulticast mode
[  484.708203][T12283] tipc: Started in network mode
[  484.713599][T12283] tipc: Node identity de177ab1b18b, cluster identity 4711
[  484.721352][T12283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  484.731187][T12282] tipc: Resetting bearer <eth:syzkaller0>
[  484.787360][T12282] tipc: Disabling bearer <eth:syzkaller0>
[  484.968769][T12290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2067'.
[  484.981147][T12290] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2067'.
[  485.022530][   T28] audit: type=1326 audit(1785982119.956:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.4.2068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  485.080290][   T28] audit: type=1326 audit(1785982119.956:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.4.2068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  485.139909][   T28] audit: type=1326 audit(1785982119.956:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.4.2068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  485.220854][   T28] audit: type=1326 audit(1785982119.956:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.4.2068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  485.444031][T12302] loop2: detected capacity change from 0 to 1024
[  485.484144][T12302] EXT4-fs: Ignoring removed bh option
[  485.547697][T12302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  485.747690][T12314] syzkaller0: entered promiscuous mode
[  485.762469][T12314] syzkaller0: entered allmulticast mode
[  485.806269][T12314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  485.837279][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  485.850401][T12313] tipc: Resetting bearer <eth:syzkaller0>
[  485.935511][T12313] tipc: Disabling bearer <eth:syzkaller0>
[  486.816307][T12344] loop2: detected capacity change from 0 to 1024
[  486.829360][T12344] EXT4-fs: Ignoring removed bh option
[  486.864212][T12344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  487.096427][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  487.210883][T12352] syzkaller0: entered promiscuous mode
[  487.220028][T12352] syzkaller0: entered allmulticast mode
[  487.246480][T12352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  487.299642][T12351] tipc: Resetting bearer <eth:syzkaller0>
[  487.385000][T12351] tipc: Disabling bearer <eth:syzkaller0>
[  487.741670][T12370] loop0: detected capacity change from 0 to 128
[  487.824257][T12370] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  487.834549][T12370] FAT-fs (loop0): Filesystem has been set read-only
[  487.847432][   T28] kauditd_printk_skb: 52 callbacks suppressed
[  487.847473][   T28] audit: type=1800 audit(1785982122.756:349): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2097" name="file2" dev="loop0" ino=1048648 res=0 errno=0
[  488.546820][T12372] loop4: detected capacity change from 0 to 1024
[  488.604327][T12372] EXT4-fs: Ignoring removed bh option
[  488.689385][T12372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  488.722730][T12380] loop5: detected capacity change from 0 to 512
[  488.765907][T12380] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  488.996807][ T8603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  489.106901][ T1133] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  489.230544][T12390] syzkaller0: entered promiscuous mode
[  489.250764][T12390] syzkaller0: entered allmulticast mode
[  489.270574][T12390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  489.289983][T12389] tipc: Resetting bearer <eth:syzkaller0>
[  489.377601][T12389] tipc: Disabling bearer <eth:syzkaller0>
[  489.521278][T12400] loop2: detected capacity change from 0 to 128
[  489.575241][T12400] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  489.585529][T12400] FAT-fs (loop2): Filesystem has been set read-only
[  489.633047][   T28] audit: type=1800 audit(1785982124.506:350): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2109" name="file2" dev="loop2" ino=1048651 res=0 errno=0
[  490.938271][T12423] syzkaller0: entered promiscuous mode
[  490.960133][T12423] syzkaller0: entered allmulticast mode
[  490.978571][T12423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  491.053069][T12430] loop5: detected capacity change from 0 to 128
[  491.085446][T12430] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  491.095723][T12430] FAT-fs (loop5): Filesystem has been set read-only
[  491.168469][   T28] audit: type=1800 audit(1785982126.016:351): pid=12430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2120" name="file2" dev="loop5" ino=1048652 res=0 errno=0
[  491.207953][T12421] tipc: Resetting bearer <eth:syzkaller0>
[  491.872705][T12421] tipc: Disabling bearer <eth:syzkaller0>
[  492.597429][T12450] loop4: detected capacity change from 0 to 1024
[  492.670995][T12450] EXT4-fs: quotafile must be on filesystem root
[  493.967717][T12468] syzkaller0: entered promiscuous mode
[  493.990177][T12468] syzkaller0: entered allmulticast mode
[  494.035458][T12470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  494.063490][T12467] tipc: Resetting bearer <eth:syzkaller0>
[  494.177204][T12467] tipc: Disabling bearer <eth:syzkaller0>
[  495.465551][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'.
[  495.659800][T12500] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2147'.
[  497.151241][T12529] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2160'.
[  497.290311][T12537] loop5: detected capacity change from 0 to 128
[  497.887856][T12552] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  498.611004][T12559] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2170'.
[  499.089575][T12580] loop4: detected capacity change from 0 to 128
[  499.244964][T12582] loop0: detected capacity change from 0 to 128
[  499.290883][   T28] audit: type=1800 audit(1785982134.226:352): pid=12582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2178" name="file2" dev="loop0" ino=1048653 res=0 errno=0
[  499.322430][T12582] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  499.345881][T12582] FAT-fs (loop0): Filesystem has been set read-only
[  499.708221][T12589] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2181'.
[  501.413406][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'.
[  501.591137][T12610] loop4: detected capacity change from 0 to 128
[  501.676236][   T28] audit: type=1800 audit(1785982136.606:353): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2189" name="file2" dev="loop4" ino=1048654 res=0 errno=0
[  501.716427][T12610] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  501.803238][T12610] FAT-fs (loop4): Filesystem has been set read-only
[  501.825690][T12610] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  501.853576][T12610] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  501.902510][T12610] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  501.946168][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.954876][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  501.995305][T12610] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  502.029047][T12615] sg_write: data in/out 200860/136 bytes for SCSI command 0x0-- guessing data in;
[  502.029047][T12615]    program syz.0.2191 not setting count and/or reply_len properly
[  502.063027][T12610] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  502.100083][T12610] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  502.129759][T12610] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  502.156577][T12610] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  502.230904][T12612] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  502.354648][T12613] 9pnet_fd: Insufficient options for proto=fd
[  502.540457][T12624] loop0: detected capacity change from 0 to 256
[  502.579571][T12624] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  503.962375][T12639] loop5: detected capacity change from 0 to 128
[  504.020707][T12640] loop2: detected capacity change from 0 to 128
[  504.036563][T12640] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  504.046866][T12640] FAT-fs (loop2): Filesystem has been set read-only
[  504.077532][   T28] audit: type=1800 audit(1785982138.976:354): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2199" name="file2" dev="loop2" ino=1048655 res=0 errno=0
	o
[  504.873014][T12649] loop0: detected capacity change from 0 to 256
[  504.894554][T12649] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  505.203484][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2208'.
[  506.322049][T12656] 9pnet_fd: Insufficient options for proto=fd
[  506.553079][   T28] audit: type=1800 audit(1785982141.396:355): pid=12673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2210" name="in_ports" dev="configfs" ino=28705 res=0 errno=0
[  507.510446][T12692] netlink: 'syz.0.2218': attribute type 1 has an invalid length.
[  507.524338][T12692] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.2218'.
[  508.779572][T12709] 9pnet_fd: Insufficient options for proto=fd
[  508.932891][   T28] audit: type=1800 audit(1785982143.756:356): pid=12708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2223" name="in_ports" dev="configfs" ino=28791 res=0 errno=0
[  509.005116][T12713] GUP no longer grows the stack in syz.4.2225 (12713): 200000004000-20000000a000 (200000002000)
[  509.092588][T12713] CPU: 0 PID: 12713 Comm: syz.4.2225 Not tainted syzkaller #0
[  509.100153][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  509.110298][T12713] Call Trace:
[  509.113706][T12713]  <TASK>
[  509.116743][T12713]  dump_stack_lvl+0x18c/0x250
[  509.121641][T12713]  ? show_regs_print_info+0x20/0x20
[  509.126945][T12713]  ? load_image+0x420/0x420
[  509.131551][T12713]  ? find_vma+0x134/0x1b0
[  509.136010][T12713]  __get_user_pages+0xfe7/0x1580
[  509.141036][T12713]  ? populate_vma_page_range+0x380/0x380
[  509.146744][T12713]  get_user_pages_remote+0x39e/0xb90
[  509.152101][T12713]  ? get_dump_page+0x200/0x200
[  509.156940][T12713]  __access_remote_vm+0x1fc/0x570
[  509.162036][T12713]  ? generic_access_phys+0x650/0x650
[  509.167392][T12713]  ? alloc_pages+0x4e1/0x740
[  509.172076][T12713]  ? do_raw_spin_unlock+0x121/0x230
[  509.177350][T12713]  proc_pid_cmdline_read+0x44b/0x830
[  509.182719][T12713]  ? schedule+0xc7/0x170
[  509.187106][T12713]  ? comm_show+0x150/0x150
[  509.191577][T12713]  ? common_file_perm+0x180/0x1f0
[  509.196694][T12713]  ? fsnotify_perm+0x271/0x5e0
[  509.201527][T12713]  do_iter_read+0x4fb/0xcb0
[  509.206101][T12713]  ? comm_show+0x150/0x150
[  509.210572][T12713]  ? vfs_iter_read+0xa0/0xa0
[  509.215216][T12713]  ? __import_iovec+0x5f2/0x850
[  509.220182][T12713]  ? import_iovec+0x73/0xa0
[  509.224757][T12713]  do_preadv+0x237/0x390
[  509.229045][T12713]  ? do_writev+0x480/0x480
[  509.233523][T12713]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  509.239558][T12713]  ? lock_chain_count+0x20/0x20
[  509.244465][T12713]  ? lockdep_hardirqs_on+0x98/0x150
[  509.249717][T12713]  do_syscall_64+0x55/0xb0
[  509.254184][T12713]  ? clear_bhb_loop+0x40/0x90
[  509.259076][T12713]  ? clear_bhb_loop+0x40/0x90
[  509.263804][T12713]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  509.269755][T12713] RIP: 0033:0x7fd76919e0d9
[  509.274290][T12713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.294017][T12713] RSP: 002b:00007fd769fac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  509.302569][T12713] RAX: ffffffffffffffda RBX: 00007fd769425fa0 RCX: 00007fd76919e0d9
[  509.310607][T12713] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003
[  509.318663][T12713] RBP: 00007fd769235024 R08: 00000000fffffff9 R09: 0000000000000000
[  509.326694][T12713] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  509.334713][T12713] R13: 00007fd769426038 R14: 00007fd769425fa0 R15: 00007ffd5d707298
[  509.342748][T12713]  </TASK>
[  510.809031][T12729] loop5: detected capacity change from 0 to 128
[  510.959543][T12729] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  511.085333][T12729] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  511.465634][T12095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  511.476012][T12095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  511.494022][T12095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  511.503752][T12095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  511.512317][T12095] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  511.520228][T12095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  512.054006][ T9869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  512.142379][T12748] loop5: detected capacity change from 0 to 256
[  512.179001][T12748] FAT-fs (loop5): Directory bread(block 64) failed
[  512.186464][T12748] FAT-fs (loop5): Directory bread(block 65) failed
[  512.194742][T12748] FAT-fs (loop5): Directory bread(block 66) failed
[  512.201460][T12748] FAT-fs (loop5): Directory bread(block 67) failed
[  512.209791][T12748] FAT-fs (loop5): Directory bread(block 68) failed
[  512.217233][T12748] FAT-fs (loop5): Directory bread(block 69) failed
[  512.225540][T12748] FAT-fs (loop5): Directory bread(block 70) failed
[  512.235215][T12748] FAT-fs (loop5): Directory bread(block 71) failed
[  512.242001][T12748] FAT-fs (loop5): Directory bread(block 72) failed
[  512.253802][T12748] FAT-fs (loop5): Directory bread(block 73) failed
[  512.455355][T12748] syz.5.2236: attempt to access beyond end of device
[  512.455355][T12748] loop5: rw=524288, sector=1768, nr_sectors = 4 limit=256
[  512.574451][T12748] syz.5.2236: attempt to access beyond end of device
[  512.574451][T12748] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256
[  512.600389][   T28] audit: type=1800 audit(1785982147.526:357): pid=12748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2236" name="file1" dev="loop5" ino=1048657 res=0 errno=0
[  513.870961][T12095] Bluetooth: hci4: command tx timeout
[  514.423763][T12773] loop4: detected capacity change from 0 to 512
[  514.699616][T12739] chnl_net:caif_netlink_parms(): no params data found
[  515.046231][T12739] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.072414][T12739] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.089287][T12739] bridge_slave_0: entered allmulticast mode
[  515.099310][T12739] bridge_slave_0: entered promiscuous mode
[  515.133467][T12739] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.140672][T12739] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.153664][T12739] bridge_slave_1: entered allmulticast mode
[  515.161296][T12739] bridge_slave_1: entered promiscuous mode
[  515.215725][   T42] tipc: Left network mode
[  515.285914][T12739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.342531][T12739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.371748][T12793] loop0: detected capacity change from 0 to 128
[  515.922959][T12095] Bluetooth: hci4: command tx timeout
[  516.074737][T12739] team0: Port device team_slave_0 added
[  516.104931][T12739] team0: Port device team_slave_1 added
[  516.306933][T12739] batman_adv: batadv0: Adding interface: batadv_slave_0
[  516.343033][T12739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.431713][T12739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.598410][T12739] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.647546][T12739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.753631][T12739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.850280][T12832] loop4: detected capacity change from 0 to 256
[  516.874356][T12831] loop5: detected capacity change from 0 to 128
[  516.929739][T12831] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  517.026310][T12831] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  517.147053][T12739] hsr_slave_0: entered promiscuous mode
[  517.169561][T12739] hsr_slave_1: entered promiscuous mode
[  517.194977][T12739] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  517.275762][T12739] Cannot create hsr debugfs directory
[  517.421575][ T9869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  518.002928][T12095] Bluetooth: hci4: command tx timeout
[  518.677079][T12869] loop0: detected capacity change from 0 to 256
[  518.699967][T12868] nft_compat: unsupported protocol 0
[  519.206150][   T42] hsr_slave_0: left promiscuous mode
[  519.234583][   T42] hsr_slave_1: left promiscuous mode
[  519.316891][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  519.377333][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  519.408929][   T42] bridge_slave_1: left allmulticast mode
[  519.427658][   T42] bridge_slave_1: left promiscuous mode
[  519.452371][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.477433][   T42] bridge_slave_0: left allmulticast mode
[  519.502994][   T42] bridge_slave_0: left promiscuous mode
[  519.508861][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.650958][   T42] bond3 (unregistering): Released all slaves
[  519.707046][   T42] bond2 (unregistering): Released all slaves
[  519.946310][   T42] bond1 (unregistering): Released all slaves
[  520.085315][T12095] Bluetooth: hci4: command tx timeout
	o
[  521.742221][   T42] team0 (unregistering): Port device team_slave_1 removed
[  521.839521][   T42] team0 (unregistering): Port device team_slave_0 removed
[  521.945493][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  521.960911][   T42] bond_slave_1 (unregistering): left promiscuous mode
[  522.052552][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  522.073633][   T42] bond_slave_0 (unregistering): left promiscuous mode
[  522.647047][   T42] bond0 (unregistering): Released all slaves
[  522.658566][T12954] loop4: detected capacity change from 0 to 256
[  522.670427][T12954] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  523.712464][T12739] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  523.731039][T12739] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  523.779408][T12739] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  523.822971][T12739] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  524.118080][T12739] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.184792][T12739] 8021q: adding VLAN 0 to HW filter on device team0
[  524.238086][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.245349][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.357502][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.364779][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.510011][T12739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  524.621811][T12983] loop0: detected capacity change from 0 to 256
[  524.645099][T12983] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  524.866688][T12988] loop5: detected capacity change from 0 to 256
[  525.321056][T12739] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.610986][T13009] 
: renamed from bond_slave_0 (while UP)
[  526.111482][T12739] veth0_vlan: entered promiscuous mode
[  526.310171][T12739] veth1_vlan: entered promiscuous mode
[  526.545058][T12739] veth0_macvtap: entered promiscuous mode
[  526.581476][T12739] veth1_macvtap: entered promiscuous mode
[  526.655776][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.694590][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.704697][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.715411][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.729754][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.742186][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.761070][T12739] batman_adv: batadv0: Interface activated: batadv_slave_0
[  526.816043][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  526.839894][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.860488][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  526.949065][T13028] loop0: detected capacity change from 0 to 128
[  526.964768][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.095231][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.129642][T13028] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  527.140077][T13028] FAT-fs (loop0): Filesystem has been set read-only
[  527.154351][   T28] audit: type=1800 audit(1785982162.066:358): pid=13028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2319" name="file2" dev="loop0" ino=1048674 res=0 errno=0
[  527.436734][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.747409][T12739] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.790976][T13031] loop5: detected capacity change from 0 to 256
[  527.817965][T12739] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.827031][T12739] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.835825][T12739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.845128][T12739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.115890][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.125750][   T28] audit: type=1326 audit(1785982163.066:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.4.2322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  528.156050][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.247538][   T28] audit: type=1326 audit(1785982163.066:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.4.2322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  528.297862][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.324519][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.370179][   T28] audit: type=1326 audit(1785982163.066:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.4.2322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  528.432127][   T28] audit: type=1326 audit(1785982163.066:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.4.2322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd76919e0d9 code=0x7ffc0000
[  528.493691][   T28] audit: type=1326 audit(1785982163.186:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.4.2322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd76915e90e code=0x7ffc0000
[  528.628390][   T28] audit: type=1326 audit(1785982163.186:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.4.2322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd76915e90e code=0x7ffc0000
[  528.691587][   T28] audit: type=1326 audit(1785982163.216:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.4.2322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd76915e90e code=0x7ffc0000
[  528.743213][   T28] audit: type=1326 audit(1785982163.216:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.4.2322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd76915e90e code=0x7ffc0000
[  528.840221][   T28] audit: type=1326 audit(1785982163.216:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.4.2322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd76915e90e code=0x7ffc0000
[  530.123014][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  530.148805][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  530.157520][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  530.179831][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  530.193488][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  530.204012][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  530.666158][T13095] loop4: detected capacity change from 0 to 128
[  530.795990][T13095] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  530.863465][T13095] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  531.109759][T13084] chnl_net:caif_netlink_parms(): no params data found
[  531.152590][T13095] 
@0Ù: renamed from bond_slave_1 (while UP)
[  531.198421][T13095] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 7 (only 1 groups)
[  531.422439][T13084] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.462252][ T8603] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  531.486513][T13084] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.503121][T13084] bridge_slave_0: entered allmulticast mode
[  531.534384][T13084] bridge_slave_0: entered promiscuous mode
[  531.572133][T13084] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.613173][T13084] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.620747][T13084] bridge_slave_1: entered allmulticast mode
[  531.654117][T13084] bridge_slave_1: entered promiscuous mode
[  531.724512][T13117] loop2: detected capacity change from 0 to 256
[  531.751566][T13117] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  531.875276][T13084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  531.937585][T13084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  532.037635][T13084] team0: Port device team_slave_0 added
[  532.048752][T13084] team0: Port device team_slave_1 added
[  532.144009][T13084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  532.151206][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.209538][T13084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.222975][  T172] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  532.229173][T13084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.243011][   T51] Bluetooth: hci0: command tx timeout
[  532.260896][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.319891][T13084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.398279][T13084] hsr_slave_0: entered promiscuous mode
[  532.414410][T13084] hsr_slave_1: entered promiscuous mode
[  532.427210][  T172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  532.453308][  T172] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  532.472930][  T172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  532.499621][  T172] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  532.545258][  T172] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  532.560358][  T172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.583248][  T172] usb 5-1: Product: syz
[  532.587503][  T172] usb 5-1: Manufacturer: syz
[  532.592141][  T172] usb 5-1: SerialNumber: syz
[  533.882548][T13084] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.257026][  T172] cdc_ether: probe of 5-1:1.0 failed with error -22
[  534.273703][  T172] usb 5-1: USB disconnect, device number 2
[  534.322936][   T51] Bluetooth: hci0: command tx timeout
[  534.797480][T13143] loop2: detected capacity change from 0 to 128
[  534.969997][T13143] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  534.980301][T13143] FAT-fs (loop2): Filesystem has been set read-only
[  534.997530][   T28] kauditd_printk_skb: 66 callbacks suppressed
[  534.997573][   T28] audit: type=1800 audit(1785982169.906:434): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2345" name="file2" dev="loop2" ino=1048683 res=0 errno=0
[  535.502283][T13084] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.646344][T13147] loop2: detected capacity change from 0 to 256
[  535.672750][T13147] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  535.706326][T13149] loop4: detected capacity change from 0 to 128
[  535.728601][T13084] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.736693][T13149] EXT4-fs: Ignoring removed orlov option
[  535.856024][T13149] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  535.946811][T13149] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  536.831279][   T51] Bluetooth: hci0: command tx timeout
[  537.237857][ T8603] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  537.258311][T13084] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.889115][T13173] loop2: detected capacity change from 0 to 1024
[  538.485132][T13173] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  538.495890][T13173] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  538.505451][T13173] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2355: Failed to acquire dquot type 0
[  538.540096][T13173] EXT4-fs (loop2): 1 truncate cleaned up
[  538.556667][T13173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  538.894216][   T51] Bluetooth: hci0: command tx timeout
[  539.843127][    C1] 
[  539.845525][    C1] ================================
[  539.850684][    C1] WARNING: inconsistent lock state
[  539.855849][    C1] syzkaller #0 Not tainted
[  539.860305][    C1] --------------------------------
[  539.865485][    C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  539.872369][    C1] syz.2.2355/13171 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  539.878834][    C1] ffff888026f6c130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250
[  539.888460][    C1] {SOFTIRQ-ON-W} state was registered at:
[  539.894222][    C1]   lock_acquire+0x19e/0x420
[  539.898874][    C1]   lock_sock_nested+0x48/0x100
[  539.903829][    C1]   x25_connect+0x5c/0x890
[  539.908404][    C1]   __sys_connect+0x3da/0x470
[  539.913213][    C1]   __x64_sys_connect+0x7a/0x90
[  539.918112][    C1]   do_syscall_64+0x55/0xb0
[  539.922676][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  539.928729][    C1] irq event stamp: 539630
[  539.933092][    C1] hardirqs last  enabled at (539630): [<ffffffff8152ccba>] __local_bh_enable_ip+0x13a/0x1c0
[  539.943254][    C1] hardirqs last disabled at (539629): [<ffffffff8152cc5b>] __local_bh_enable_ip+0xdb/0x1c0
[  539.953292][    C1] softirqs last  enabled at (535912): [<ffffffff8152d8f3>] __irq_exit_rcu+0xd3/0x190
[  539.962802][    C1] softirqs last disabled at (539551): [<ffffffff8152d8f3>] __irq_exit_rcu+0xd3/0x190
[  539.972319][    C1] 
[  539.972319][    C1] other info that might help us debug this:
[  539.980392][    C1]  Possible unsafe locking scenario:
[  539.980392][    C1] 
[  539.987865][    C1]        CPU0
[  539.991170][    C1]        ----
[  539.994470][    C1]   lock(sk_lock-AF_X25);
[  539.998827][    C1]   <Interrupt>
[  540.002293][    C1]     lock(sk_lock-AF_X25);
[  540.006817][    C1] 
[  540.006817][    C1]  *** DEADLOCK ***
[  540.006817][    C1] 
[  540.015011][    C1] 1 lock held by syz.2.2355/13171:
[  540.020142][    C1]  #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230
[  540.030266][    C1] 
[  540.030266][    C1] stack backtrace:
[  540.036169][    C1] CPU: 1 PID: 13171 Comm: syz.2.2355 Not tainted syzkaller #0
[  540.043647][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  540.053735][    C1] Call Trace:
[  540.057043][    C1]  <IRQ>
[  540.059912][    C1]  dump_stack_lvl+0x18c/0x250
[  540.064664][    C1]  ? show_regs_print_info+0x20/0x20
[  540.069891][    C1]  ? __kernel_text_address+0xd/0x30
[  540.075115][    C1]  ? unwind_get_return_address+0x91/0xc0
[  540.080801][    C1]  valid_state+0x13b/0x1d0
[  540.085258][    C1]  mark_lock_irq+0xad/0x900
[  540.089812][    C1]  ? stack_trace_save+0xaa/0x100
[  540.094774][    C1]  ? save_trace+0xcd0/0xcd0
[  540.099310][    C1]  ? mark_lock+0x94/0x320
[  540.103671][    C1]  ? save_trace+0x5d/0xcd0
[  540.108120][    C1]  mark_lock+0x208/0x320
[  540.112387][    C1]  __lock_acquire+0xcfc/0x7d80
[  540.117196][    C1]  ? verify_lock_unused+0x140/0x140
[  540.122419][    C1]  ? verify_lock_unused+0x140/0x140
[  540.127672][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  540.133681][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  540.138732][    C1]  ? lock_chain_count+0x20/0x20
[  540.143632][    C1]  lock_acquire+0x19e/0x420
[  540.148155][    C1]  ? x25_kill_by_neigh+0x10d/0x250
[  540.153296][    C1]  ? read_lock_is_recursive+0x20/0x20
[  540.158692][    C1]  ? __local_bh_enable_ip+0x13a/0x1c0
[  540.164085][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  540.169312][    C1]  ? __local_bh_enable_ip+0x13a/0x1c0
[  540.174708][    C1]  ? _local_bh_enable+0xa0/0xa0
[  540.179583][    C1]  lock_sock_nested+0x48/0x100
[  540.184376][    C1]  ? x25_kill_by_neigh+0x10d/0x250
[  540.189526][    C1]  x25_kill_by_neigh+0x10d/0x250
[  540.194502][    C1]  x25_lapb_receive_frame+0x1a7/0xef0
[  540.199899][    C1]  ? netif_receive_skb_core+0x34/0x230
[  540.205388][    C1]  ? netif_receive_skb_core+0x34/0x230
[  540.210873][    C1]  ? x25_device_event+0x280/0x280
[  540.215922][    C1]  netif_receive_skb_core+0x16a/0x230
[  540.221330][    C1]  lapbeth_napi_poll+0x42/0x80
[  540.226250][    C1]  __napi_poll+0xbb/0x460
[  540.230654][    C1]  net_rx_action+0x65f/0xcc0
[  540.235301][    C1]  ? net_tx_action+0x950/0x950
[  540.240092][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  540.246106][    C1]  ? lock_chain_count+0x20/0x20
[  540.250998][    C1]  handle_softirqs+0x27d/0x820
[  540.255799][    C1]  ? read_tsc+0x9/0x20
[  540.259895][    C1]  ? ktime_get+0x24b/0x280
[  540.264342][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  540.269284][    C1]  ? do_softirq+0x1a0/0x1a0
[  540.273855][    C1]  __irq_exit_rcu+0xd3/0x190
[  540.278485][    C1]  ? irq_exit_rcu+0x20/0x20
[  540.283015][    C1]  irq_exit_rcu+0x9/0x20
[  540.287280][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  540.292954][    C1]  </IRQ>
[  540.295915][    C1]  <TASK>
[  540.298892][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  540.304909][    C1] RIP: 0010:__kasan_check_read+0x0/0x20
[  540.310492][    C1] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 59 58 a4 8c 4c 89 e6 eb 0a 48 c7 c7 bf ed 85 8c 48 89 de e8 d5 6d a1 08 31 ed eb d4 cc <f3> 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 ff ea ff ff 66 2e 0f 1f 84
[  540.330143][    C1] RSP: 0018:ffffc90004edf7f8 EFLAGS: 00000286
[  540.336239][    C1] RAX: 0000000000000100 RBX: 1ffff1100ef1d616 RCX: ffffffff8167ed69
[  540.344235][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880778eb0b8
[  540.352220][    C1] RBP: ffffc90004edf8a8 R08: ffff8880778eb0b7 R09: 1ffff1100ef1d616
[  540.360217][    C1] R10: dffffc0000000000 R11: ffffed100ef1d617 R12: ffff8880778eb118
[  540.368216][    C1] R13: 1ffff920009dbf04 R14: 1ffff1100ef1d623 R15: ffff8880778eb0b8
[  540.376215][    C1]  ? __up_read+0x109/0x6b0
[  540.380658][    C1]  __up_read+0x140/0x6b0
[  540.384924][    C1]  ? up_read+0x20/0x20
[  540.389048][    C1]  do_user_addr_fault+0xcef/0x12d0
[  540.394202][    C1]  exc_page_fault+0x64/0x100
[  540.398905][    C1]  asm_exc_page_fault+0x26/0x30
[  540.403777][    C1] RIP: 0010:rep_movs_alternative+0x30/0x90
[  540.409612][    C1] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08
[  540.429239][    C1] RSP: 0018:ffffc90004edfa50 EFLAGS: 00050206
[  540.435440][    C1] RAX: ffffffff84320801 RBX: 0000000000000038 RCX: 0000000000000038
[  540.443436][    C1] RDX: 0000000000000001 RSI: 0000200000991000 RDI: ffffc90004edfae0
[  540.451429][    C1] RBP: ffffc90004edfc70 R08: ffffc90004edfb17 R09: 1ffff920009dbf62
[  540.459422][    C1] R10: dffffc0000000000 R11: fffff520009dbf63 R12: 0000200000991038
[  540.467417][    C1] R13: ffffc90004edfae0 R14: ffffc90004edfae0 R15: 0000200000991000
[  540.475450][    C1]  ? rcuref_put_slowpath+0x101/0x150
[  540.480792][    C1]  _copy_from_user+0x8b/0xe0
[  540.485412][    C1]  ___sys_recvmsg+0x174/0x590
[  540.490142][    C1]  ? __sys_recvmsg+0x2a0/0x2a0
[  540.494952][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  540.500006][    C1]  ? __might_fault+0x9c/0x120
[  540.504724][    C1]  ? __might_fault+0xc6/0x120
[  540.509426][    C1]  ? __might_fault+0xaa/0x120
[  540.514215][    C1]  do_recvmmsg+0x377/0x810
[  540.518658][    C1]  ? __sys_recvmmsg+0x290/0x290
[  540.523536][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  540.529498][    C1]  __x64_sys_recvmmsg+0x199/0x250
[  540.534550][    C1]  ? do_recvmmsg+0x810/0x810
[  540.539168][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  540.544416][    C1]  do_syscall_64+0x55/0xb0
[  540.548967][    C1]  ? clear_bhb_loop+0x40/0x90
[  540.553694][    C1]  ? clear_bhb_loop+0x40/0x90
[  540.558396][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  540.564332][    C1] RIP: 0033:0x7f1277b9e0d9
[  540.568773][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.588409][    C1] RSP: 002b:00007f1278aca028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  540.596852][    C1] RAX: ffffffffffffffda RBX: 00007f1277e26090 RCX: 00007f1277b9e0d9
[  540.604850][    C1] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000003
[  540.612854][    C1] RBP: 00007f1277c35024 R08: 0000000000000000 R09: 0000000000000000
[  540.620846][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  540.628836][    C1] R13: 00007f1277e26128 R14: 00007f1277e26090 R15: 00007ffebf3cb958
[  540.636841][    C1]  </TASK>
[  540.639964][    C1] BUG: sleeping function called from invalid context at net/core/sock.c:3546
[  540.648805][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 13171, name: syz.2.2355
[  540.657996][    C1] preempt_count: 100, expected: 0
[  540.663088][    C1] RCU nest depth: 1, expected: 0
[  540.668070][    C1] INFO: lockdep is turned off.
[  540.672901][    C1] Preemption disabled at:
[  540.672912][    C1] [<ffffffff8152cfe1>] handle_softirqs+0x101/0x820
[  540.683942][    C1] CPU: 1 PID: 13171 Comm: syz.2.2355 Not tainted syzkaller #0
[  540.691443][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  540.701549][    C1] Call Trace:
[  540.704874][    C1]  <IRQ>
[  540.707759][    C1]  dump_stack_lvl+0x18c/0x250
[  540.712522][    C1]  ? show_regs_print_info+0x20/0x20
[  540.717783][    C1]  ? load_image+0x420/0x420
[  540.722374][    C1]  ? handle_softirqs+0x101/0x820
[  540.727484][    C1]  __might_resched+0x48d/0x5f0
[  540.732298][    C1]  ? handle_softirqs+0x101/0x820
[  540.737282][    C1]  ? __might_sleep+0xe0/0xe0
[  540.741945][    C1]  ? read_lock_is_recursive+0x20/0x20
[  540.747370][    C1]  ? __local_bh_enable_ip+0x13a/0x1c0
[  540.752800][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  540.758059][    C1]  ? __local_bh_enable_ip+0x13a/0x1c0
[  540.763493][    C1]  ? _local_bh_enable+0xa0/0xa0
[  540.768408][    C1]  lock_sock_nested+0x5d/0x100
[  540.773228][    C1]  x25_kill_by_neigh+0x10d/0x250
[  540.778230][    C1]  x25_lapb_receive_frame+0x1a7/0xef0
[  540.783655][    C1]  ? netif_receive_skb_core+0x34/0x230
[  540.789178][    C1]  ? netif_receive_skb_core+0x34/0x230
[  540.794704][    C1]  ? x25_device_event+0x280/0x280
[  540.799779][    C1]  netif_receive_skb_core+0x16a/0x230
[  540.805220][    C1]  lapbeth_napi_poll+0x42/0x80
[  540.810039][    C1]  __napi_poll+0xbb/0x460
[  540.814436][    C1]  net_rx_action+0x65f/0xcc0
[  540.819096][    C1]  ? net_tx_action+0x950/0x950
[  540.823924][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  540.829963][    C1]  ? lock_chain_count+0x20/0x20
[  540.834878][    C1]  handle_softirqs+0x27d/0x820
[  540.839693][    C1]  ? read_tsc+0x9/0x20
[  540.843813][    C1]  ? ktime_get+0x24b/0x280
[  540.848303][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  540.853121][    C1]  ? do_softirq+0x1a0/0x1a0
[  540.857676][    C1]  __irq_exit_rcu+0xd3/0x190
[  540.862316][    C1]  ? irq_exit_rcu+0x20/0x20
[  540.866873][    C1]  irq_exit_rcu+0x9/0x20
[  540.871154][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  540.876849][    C1]  </IRQ>
[  540.879824][    C1]  <TASK>
[  540.882697][T13084] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  540.882781][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  540.882810][    C1] RIP: 0010:__kasan_check_read+0x0/0x20
[  540.901100][    C1] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 59 58 a4 8c 4c 89 e6 eb 0a 48 c7 c7 bf ed 85 8c 48 89 de e8 d5 6d a1 08 31 ed eb d4 cc <f3> 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 ff ea ff ff 66 2e 0f 1f 84
[  540.914443][T13179] loop5: detected capacity change from 0 to 512
[  540.920733][    C1] RSP: 0018:ffffc90004edf7f8 EFLAGS: 00000286
[  540.920757][    C1] RAX: 0000000000000100 RBX: 1ffff1100ef1d616 RCX: ffffffff8167ed69
[  540.920774][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880778eb0b8
[  540.949128][    C1] RBP: ffffc90004edf8a8 R08: ffff8880778eb0b7 R09: 1ffff1100ef1d616
[  540.957166][    C1] R10: dffffc0000000000 R11: ffffed100ef1d617 R12: ffff8880778eb118
[  540.965189][    C1] R13: 1ffff920009dbf04 R14: 1ffff1100ef1d623 R15: ffff8880778eb0b8
[  540.973210][    C1]  ? __up_read+0x109/0x6b0
[  540.977692][    C1]  __up_read+0x140/0x6b0
[  540.981993][    C1]  ? up_read+0x20/0x20
[  540.986117][    C1]  do_user_addr_fault+0xcef/0x12d0
[  540.991293][    C1]  exc_page_fault+0x64/0x100
[  540.995949][    C1]  asm_exc_page_fault+0x26/0x30
[  541.000849][    C1] RIP: 0010:rep_movs_alternative+0x30/0x90
[  541.006712][    C1] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08
[  541.026366][    C1] RSP: 0018:ffffc90004edfa50 EFLAGS: 00050206
[  541.032484][    C1] RAX: ffffffff84320801 RBX: 0000000000000038 RCX: 0000000000000038
[  541.040502][    C1] RDX: 0000000000000001 RSI: 0000200000991000 RDI: ffffc90004edfae0
[  541.048528][    C1] RBP: ffffc90004edfc70 R08: ffffc90004edfb17 R09: 1ffff920009dbf62
[  541.056548][    C1] R10: dffffc0000000000 R11: fffff520009dbf63 R12: 0000200000991038
[  541.064553][    C1] R13: ffffc90004edfae0 R14: ffffc90004edfae0 R15: 0000200000991000
[  541.072553][    C1]  ? rcuref_put_slowpath+0x101/0x150
[  541.077888][    C1]  _copy_from_user+0x8b/0xe0
[  541.082499][    C1]  ___sys_recvmsg+0x174/0x590
[  541.087203][    C1]  ? __sys_recvmsg+0x2a0/0x2a0
[  541.091995][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  541.097046][    C1]  ? __might_fault+0x9c/0x120
[  541.101747][    C1]  ? __might_fault+0xc6/0x120
[  541.106450][    C1]  ? __might_fault+0xaa/0x120
[  541.111153][    C1]  do_recvmmsg+0x377/0x810
[  541.115599][    C1]  ? __sys_recvmmsg+0x290/0x290
[  541.120480][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  541.126422][    C1]  __x64_sys_recvmmsg+0x199/0x250
[  541.131501][    C1]  ? do_recvmmsg+0x810/0x810
[  541.136123][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  541.141371][    C1]  do_syscall_64+0x55/0xb0
[  541.145814][    C1]  ? clear_bhb_loop+0x40/0x90
[  541.150522][    C1]  ? clear_bhb_loop+0x40/0x90
[  541.155226][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.161170][    C1] RIP: 0033:0x7f1277b9e0d9
[  541.165606][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.185261][    C1] RSP: 002b:00007f1278aca028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  541.193711][    C1] RAX: ffffffffffffffda RBX: 00007f1277e26090 RCX: 00007f1277b9e0d9
[  541.201711][    C1] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000003
[  541.209736][    C1] RBP: 00007f1277c35024 R08: 0000000000000000 R09: 0000000000000000
[  541.217735][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  541.225732][    C1] R13: 00007f1277e26128 R14: 00007f1277e26090 R15: 00007ffebf3cb958
[  541.233750][    C1]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  541.335181][T13084] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  541.771967][T10176] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  541.850775][T13171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.288339][  T990] hsr_slave_0: left promiscuous mode
[  543.296616][  T990] hsr_slave_1: left promiscuous mode
[  543.302710][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  543.311015][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  543.319243][  T990] bridge_slave_1: left allmulticast mode
[  543.325216][  T990] bridge_slave_1: left promiscuous mode
[  543.330982][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.340676][  T990] bridge_slave_0: left allmulticast mode
[  543.346834][  T990] bridge_slave_0: left promiscuous mode
[  543.352618][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.559563][  T990] team0 (unregistering): Port device team_slave_1 removed
[  543.604489][  T990] team0 (unregistering): Port device team_slave_0 removed
[  543.637979][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  543.675331][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  543.745256][  T990] bond0 (unregistering): Released all slaves
[  544.165395][  T990] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.212467][  T990] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.270595][  T990] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.341879][  T990] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.468934][  T990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.570163][  T990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.620127][  T990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.679759][  T990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.814341][  T990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.871477][  T990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.931260][  T990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.972483][  T990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.131155][  T990] tipc: Left network mode
[  545.139635][  T990] tipc: Left network mode
[  546.389503][  T990] hsr_slave_0: left promiscuous mode
[  546.397965][  T990] hsr_slave_1: left promiscuous mode
[  546.408468][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.417577][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.426420][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.435971][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.446820][  T990] bridge_slave_1: left allmulticast mode
[  546.452515][  T990] bridge_slave_1: left promiscuous mode
[  546.460006][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.469387][  T990] bridge_slave_0: left allmulticast mode
[  546.477022][  T990] bridge_slave_0: left promiscuous mode
[  546.482862][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.501118][  T990] hsr_slave_0: left promiscuous mode
[  546.507872][  T990] hsr_slave_1: left promiscuous mode
[  546.521430][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.529116][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.541105][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.548826][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.560897][  T990] bridge_slave_1: left allmulticast mode
[  546.566860][  T990] bridge_slave_1: left promiscuous mode
[  546.572617][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.583995][  T990] bridge_slave_0: left allmulticast mode
[  546.589761][  T990] bridge_slave_0: left promiscuous mode
[  546.597508][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.611328][  T990] hsr_slave_0: left promiscuous mode
[  546.619218][  T990] hsr_slave_1: left promiscuous mode
[  546.625555][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.635651][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.644017][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.651477][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.662742][  T990] bridge_slave_1: left allmulticast mode
[  546.671235][  T990] bridge_slave_1: left promiscuous mode
[  546.678888][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.688502][  T990] bridge_slave_0: left allmulticast mode
[  546.696304][  T990] bridge_slave_0: left promiscuous mode
[  546.702069][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.721665][  T990] veth1_macvtap: left promiscuous mode
[  546.727455][  T990] veth0_macvtap: left promiscuous mode
[  546.735188][  T990] veth1_vlan: left promiscuous mode
[  546.741198][  T990] veth0_vlan: left promiscuous mode
[  546.748648][  T990] veth1_macvtap: left promiscuous mode
[  546.757303][  T990] veth0_macvtap: left promiscuous mode
[  546.763303][  T990] veth1_vlan: left promiscuous mode
[  546.768739][  T990] veth0_vlan: left promiscuous mode
[  546.781092][  T990] veth1_macvtap: left promiscuous mode
[  546.786967][  T990] veth0_macvtap: left promiscuous mode
[  546.792684][  T990] veth1_vlan: left promiscuous mode
[  546.799798][  T990] veth0_vlan: left promiscuous mode
[  547.102296][  T990] bond2 (unregistering): Released all slaves
[  547.117084][  T990] bond1 (unregistering): Released all slaves
[  547.263703][  T990] team0 (unregistering): Port device team_slave_1 removed
[  547.295865][  T990] team0 (unregistering): Port device team_slave_0 removed
[  547.328107][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  547.361049][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.462936][  T990] bond0 (unregistering): Released all slaves
[  547.526758][  T990] bond4 (unregistering): Released all slaves
[  547.540379][  T990] bond3 (unregistering): Released all slaves
[  547.552540][  T990] bond2 (unregistering): Released all slaves
[  547.568994][  T990] bond1 (unregistering): Released all slaves
[  547.728924][  T990] team0 (unregistering): Port device team_slave_1 removed
[  547.756659][  T990] team0 (unregistering): Port device team_slave_0 removed
[  547.774683][  T990] bond0 (unregistering): (slave 
4
@0Ù): Releasing backup interface
[  547.789078][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.880772][  T990] bond0 (unregistering): Released all slaves
[  548.036162][  T990] team0 (unregistering): Port device team_slave_1 removed
[  548.050330][  T990] team0 (unregistering): Port device team_slave_0 removed
[  548.080576][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.115245][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.199170][  T990] bond0 (unregistering): Released all slaves