last executing test programs:

10m11.406439009s ago: executing program 32 (id=249):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0093d84f10fc3e1ec648b776cb7f8081d09ad0cc63a23840b824f920b21981285520a35f491e6934193661e8f46d"], 0x1, 0xd99, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$FITRIM(r0, 0x40086e8b, &(0x7f00000000c0)={0x1ffffd, 0xfffffffffffffff7, 0x1})

8m24.09529759s ago: executing program 33 (id=533):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = syz_io_uring_setup(0xb, &(0x7f0000000240)={0x0, 0x1200002f, 0x0, 0x0, 0x362}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

7m31.584143065s ago: executing program 34 (id=632):
socket$inet(0x2, 0x3, 0x8d)
getpid()
syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0xffffffff, 0x89}, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000002640)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_PARAM={{0x10}}}}, 0x7)

5m35.453522976s ago: executing program 35 (id=898):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, <r3=>0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc})
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300})

5m17.675553568s ago: executing program 36 (id=938):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)

5m4.331729976s ago: executing program 7 (id=969):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x30004}], 0x2)
close(0x4)
close(0x3)

5m3.512725706s ago: executing program 7 (id=971):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1c2789bd018bf77308ae7ed990e4b63b8cf1cf4ae822f1f84abd5420339c722aa7f6d87f5926c484455c67b7a9259ac3f36154b6526320d83fe72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245dce1a721576750f3f592ce4ac96010bf3ce1d9ee389c83a39827b4d9f231ad23f382e2f3d86880", 0x84}, {&(0x7f0000000640)="52f8380baae8e668551434e8e52993134696bf3c1070a44f8ceb3f19887414681b93293f0d2708000000a3d8cd2f44c13665c2b7b19ccc306f2564a04b723aca12", 0x41}], 0x2}}], 0x2, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m2.573869863s ago: executing program 7 (id=974):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1})
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)

5m1.597542122s ago: executing program 7 (id=976):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96)
pwrite64(r0, &(0x7f0000000140)='2', 0x155c2, 0x8000c64)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x6, 0x10001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r2, 0x20, 0x4000, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1})

4m59.935518352s ago: executing program 7 (id=978):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

4m57.674547572s ago: executing program 7 (id=983):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x4}, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0)
shutdown(r0, 0x1)

4m42.223966731s ago: executing program 37 (id=983):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x4}, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0)
shutdown(r0, 0x1)

4m19.971869637s ago: executing program 9 (id=1047):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

4m18.161850895s ago: executing program 9 (id=1051):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x102)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x8000000000000000, 0xc0002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000, 0x65, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r2, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)

4m17.115453821s ago: executing program 9 (id=1054):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r0, r1, 0x0)

4m16.193102747s ago: executing program 9 (id=1056):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x1309801, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1)

4m15.380497223s ago: executing program 9 (id=1059):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000640)=<r3=>0x0)
socket$packet(0x11, 0x2, 0x300)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0)

4m14.722304471s ago: executing program 9 (id=1062):
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x80011}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d42, 0x2, 0x60, 0x0, 0x0)

4m11.278235453s ago: executing program 38 (id=1062):
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x80011}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d42, 0x2, 0x60, 0x0, 0x0)

3m52.194580354s ago: executing program 0 (id=1100):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

3m50.941329568s ago: executing program 0 (id=1103):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000009ac0)={@broadcast, @local}, &(0x7f0000009b00)=0xc)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c23004923f7779ccd9606613089b740e01af8b422a04ea9e9c2e65e081c183f2283700c3bad0f9af818f4c6c2151fa1829480e9212644c17193f4e978c3c43133a3b29546754a2845fd8cc1b", 0x75, 0xe044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

3m50.058236886s ago: executing program 0 (id=1105):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}}}}}}, 0x0)

3m49.099486978s ago: executing program 0 (id=1108):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
umount2(&(0x7f0000000040)='.\x00', 0x2)

3m46.608604283s ago: executing program 0 (id=1113):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @private=0xa010102}, {0x1, @multicast}, 0x4, {0x2, 0x4e20, @private=0xa010101}, 'veth1_to_bridge\x00'})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008})

3m45.189296442s ago: executing program 0 (id=1116):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0})

3m41.177672785s ago: executing program 39 (id=1116):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0})

3m0.030734689s ago: executing program 2 (id=1198):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x9, 0x8, 0x7c}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m58.118798557s ago: executing program 2 (id=1202):
syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
fsopen(&(0x7f0000000000)='msdos\x00', 0x0)
pipe(&(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0)

2m55.578671599s ago: executing program 2 (id=1207):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r8}, 0x18)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)

2m53.978828665s ago: executing program 2 (id=1214):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")

2m51.739799774s ago: executing program 2 (id=1220):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x5, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$can_j1939(0x1d, 0x2, 0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x5, 0x0, &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

2m47.127793257s ago: executing program 2 (id=1228):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a3000000000080004400000000014000000110001000000000000000000"], 0x68}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2], 0x44}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))

2m44.069923595s ago: executing program 40 (id=1228):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a3000000000080004400000000014000000110001000000000000000000"], 0x68}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2], 0x44}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))

1m34.018895527s ago: executing program 5 (id=1480):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000480)={0x7, 0xffffffffffffffff, 0x1})

1m33.062065896s ago: executing program 5 (id=1484):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20)

1m32.153005728s ago: executing program 5 (id=1488):
unshare(0x2c020400)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0)

1m31.255109271s ago: executing program 5 (id=1492):
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f0000000280)=ANY=[], 0xbe, 0x1e6, &(0x7f0000000940)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1m30.43441303s ago: executing program 5 (id=1496):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="001306000000ec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

1m28.707787342s ago: executing program 5 (id=1500):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x0, @empty, 0x4e23, 0x2, 'sh\x00', 0xc, 0x6, 0xffffdbfc}, 0x2c)

1m25.32968055s ago: executing program 41 (id=1500):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x0, @empty, 0x4e23, 0x2, 'sh\x00', 0xc, 0x6, 0xffffdbfc}, 0x2c)

13.169557804s ago: executing program 3 (id=1718):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0x0, 0x9, 0x10, '\x00', 0xa3})

10.58676035s ago: executing program 3 (id=1725):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000240)={0x10000001})

10.155087228s ago: executing program 8 (id=1727):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x11, 0x0, @opaque="c4e349a5c7407bebfb"}}}}}}, 0x0)

9.778588937s ago: executing program 3 (id=1729):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x40000012})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000940)=[0x1], &(0x7f0000000200), 0x0, 0x0, 0x7f})

9.298774011s ago: executing program 8 (id=1730):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvfrom(r0, 0x0, 0x0, 0x141, 0x0, 0x0)

9.079546878s ago: executing program 3 (id=1731):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@user_xattr}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')

8.892157109s ago: executing program 1 (id=1732):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200010, &(0x7f0000000000)={[{@data_err_ignore}, {@errors_remount}]}, 0xfe, 0x591, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8001, 0x0, 0x9, 0x1, 0x1000000})

7.710637609s ago: executing program 4 (id=1735):
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0)

7.63620928s ago: executing program 8 (id=1736):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000300)={[{@numtail}, {@utf8}, {@utf8no}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@shortname_win95}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@shortname_win95}, {@rodir}]}, 0x22, 0x365, &(0x7f0000000800)="$eJzs3T9onGUYAPDn+iW5JFhzg1B0Ot0EKU3EQaeEUqGYQSuH/xYPm/ondxZyeBCHXG5RipPiIujk1kHHzuIg4ubgagWpiovdCg1+cnff/b9rE/Bipb/fEB6e932+9/m+fOS+O5I3rzdi++J8XLp580YsLuZibv3setzKRSFORBId+zHRRwuT8wDAPe5WmsZfacfdZ3+y3I289gPA/1f79f/Nk/1E/gjFVx6YRUsAwIz13//n7vT+//mJ2cszawsAmKGxz/8fGxoe+Zh/rvc7AR1Ls28QAPjXvfjKq89tbEZcKBYXI6of1kv1UjzTH9+4FG9HJbbiTKzEQUTnQaHztND6+uz5zXNnii2/FaLUqqiXIqqNeqnzpLCRtOvzsRorUcjq01590qpfbdcXI2K/0V4/qrl6aT6Ws/V/Xo6tWIuVeGisPuL85rm1YnaAUrVb34hoxmL3JFr9n46V+PGNuByVuBit2n7/e6vF4tl0c6i+fjXfngcAAAAAAAAAAAAAAAAAAAAAALNwuthT6O1/k1Yb9Q8ujE4oDO2PU+oMZ/sDNTv7A6X57u48V5LR/YGG9+epl+bixH965gAAAAAAAAAAAAAAAAAAAHDvqO0uRLlS2dqp7b6/PRg0BjLvfv/Vt0vRHZrLSt9J+lXRSuYiho7TnThw5CR6S6S98jQZmpMFSUR38n756rVex4Nz8r2zGCtvBfmxoVzWU7lSOfnor59Pqvq7Fey3M0mMXZbhIJetPzBUfbCVWIyIg2lV04O1u8y5nqbptPK9z0Yz2VYMjSO3cYjguxtvPfxk7dRT7cw32UqPP7Hy0vVPv/xju1yJZufKVCoLO7WD9BBHbt0+vUyaZkEycP/ksuucm3AnTA6a/Uxzp7ZbTn768+VHPv5hZHIy+f5JBzPvTV/r69HMQifIRRS6F+FOrc5PuPknB6/d7t29R//GnfpivXxt75ffD1s18EPCRh0AAAAAAAAAAAAAAAAAAHAs+n/0OzKQpmljatXTL8y8MQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Rv3//z8QNMcyWVCI8cm94HYjxofyWzu1qYsvHeupAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwH/snAAD//1pcfGk=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat$cgroup_ro(r0, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)

6.867354449s ago: executing program 3 (id=1737):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

6.229844904s ago: executing program 1 (id=1738):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10)

6.224111539s ago: executing program 6 (id=1739):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc)

6.034684016s ago: executing program 4 (id=1740):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r1, 0xffffffffffffffff, 0x0)

5.339100921s ago: executing program 6 (id=1741):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="842a0e65090000000304000e0580a7b6070d63e298a5cefe", 0x18)

4.662364671s ago: executing program 4 (id=1742):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000006c0)={@val, @void, @eth={@random="ad65d0fc00", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x2, 0x20, 0x64, 0x0, 0x1, 0x11, 0x0, @rand_addr=0x64010102, @empty=0xe0000001}, {0x4e22, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xff, 0x0, @void}}}}}}}}, 0x32)

4.562311227s ago: executing program 1 (id=1743):
r0 = openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98)
fallocate(r0, 0x10, 0x160483b7, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000020601020001000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e657400000000050005000b0000000500010006"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
futex(0x0, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0)
unshare(0x42000000)
syz_clone3(&(0x7f00000003c0)={0x44084000, &(0x7f00000000c0), &(0x7f0000000100), 0x0, {0x3}, 0x0, 0x0, &(0x7f0000000240)=""/9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, {r0}}, 0x58)

4.477302055s ago: executing program 6 (id=1744):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x6, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0)

4.224074491s ago: executing program 8 (id=1745):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2.606925357s ago: executing program 4 (id=1746):
r0 = gettid()
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
read$ptp(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

2.460605248s ago: executing program 8 (id=1747):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0)

2.346016392s ago: executing program 6 (id=1748):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.945351803s ago: executing program 1 (id=1749):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)

1.647186653s ago: executing program 4 (id=1750):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
ioctl$TIOCL_PASTESEL(r1, 0x541c, 0x0)

1.387829104s ago: executing program 1 (id=1751):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffffffffffffffe, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @val={0x5, 0x3, {0x58, 0xe0, 0x7}}, @val={0x25, 0x3, {0x1, 0x64}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random={0x1}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000045}, 0x0)

1.29731533s ago: executing program 6 (id=1752):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
lseek(r0, 0x9b03000000000000, 0x3)

1.04707375s ago: executing program 4 (id=1753):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

961.107903ms ago: executing program 8 (id=1754):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESHEX], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
write$char_usb(r0, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)

696.889782ms ago: executing program 3 (id=1755):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0xfffffff6, @dev={0xfe, 0x80, '\x00', 0x19}, 0x6}, 0x1c)

110.67045ms ago: executing program 1 (id=1756):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x4c, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}, {"c7d4"}}}}}}}, 0x0)

0s ago: executing program 6 (id=1757):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@arm64={0x6c, 0xe, 0x1, '\x00', 0x6})
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0x3, 0x0, 0x3]})

kernel console output (not intermixed with test programs):

e. Setting the MTU to 1560 would solve the problem.
[  694.335018][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.973389][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1
[  694.980817][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  695.011381][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  695.553963][T10159] syz_tun: entered allmulticast mode
[  695.582642][T10059] hsr_slave_0: entered promiscuous mode
[  695.599604][T10059] hsr_slave_1: entered promiscuous mode
[  695.612737][T10059] debugfs: 'hsr0' already exists in 'hsr'
[  695.618976][T10059] Cannot create hsr debugfs directory
[  695.933549][T10159] lo: entered allmulticast mode
[  695.955290][T10158] syz_tun: left allmulticast mode
[  696.887894][T10177] kvm: pic: single mode not supported
[  696.894805][T10177] kvm: pic: level sensitive irq not supported
[  698.578532][T10059] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  698.652479][T10059] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  698.784701][T10059] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  698.869009][T10059] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  699.522071][T10203] loop8: detected capacity change from 0 to 16
[  699.659155][T10203] erofs (device loop8): mounted with root inode @ nid 36.
[  700.471994][T10059] 8021q: adding VLAN 0 to HW filter on device bond0
[  700.595131][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.603365][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  700.849348][T10059] 8021q: adding VLAN 0 to HW filter on device team0
[  700.959883][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.967546][ T8520] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.050864][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.059555][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.121968][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.129626][ T8520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  702.030131][T10228] loop2: detected capacity change from 0 to 1024
[  702.060984][T10228] EXT4-fs: Ignoring removed nomblk_io_submit option
[  702.228756][T10228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  703.086074][ T9849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.513536][T10245] netlink: 'syz.8.1101': attribute type 1 has an invalid length.
[  703.636190][T10245] 8021q: adding VLAN 0 to HW filter on device bond1
[  703.792582][T10251] bond1: (slave geneve2): making interface the new active one
[  703.812793][T10251] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  704.036356][T10059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  704.295858][T10252] syzkaller0: entered promiscuous mode
[  704.301736][T10252] syzkaller0: entered allmulticast mode
[  705.365599][T10267] loop8: detected capacity change from 0 to 512
[  705.447120][T10267] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  705.501561][T10267] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended
[  705.518996][T10265] overlayfs: failed to clone upperpath
[  705.606350][T10267] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  705.680381][T10267] System zones: 0-2, 18-18, 34-34
[  705.724736][T10267] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1106: iget: bad i_size value: 360287970189639680
[  705.734524][T10265] Invalid ELF header magic: != ELF
[  705.818340][T10267] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1106: couldn't read orphan inode 15 (err -117)
[  705.959110][T10267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  706.092571][T10277] loop0: detected capacity change from 0 to 512
[  706.134723][T10267] EXT4-fs (loop8): shut down requested (2)
[  706.351438][T10277] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1108: corrupted in-inode xattr: invalid ea_ino
[  706.481943][T10277] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1108: couldn't read orphan inode 15 (err -117)
[  706.549542][T10277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  706.726122][ T9346] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  707.473419][T10277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  707.973884][T10059] veth0_vlan: entered promiscuous mode
[  708.026237][T10289] loop8: detected capacity change from 0 to 32768
[  708.036313][T10289] XFS: ikeep mount option is deprecated.
[  708.236893][T10059] veth1_vlan: entered promiscuous mode
[  708.303400][T10289] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  708.725320][T10059] veth0_macvtap: entered promiscuous mode
[  708.853558][T10059] veth1_macvtap: entered promiscuous mode
[  709.128017][T10059] batman_adv: batadv0: Interface activated: batadv_slave_0
[  709.202400][T10059] batman_adv: batadv0: Interface activated: batadv_slave_1
[  709.310255][T10289] XFS (loop8): Ending clean mount
[  709.344019][T10289] XFS (loop8): Quotacheck needed: Please wait.
[  709.464873][ T4261] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  709.489511][T10289] XFS (loop8): Quotacheck: Done.
[  710.341674][ T3889] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  710.507863][ T8520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  710.518319][ T8520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  710.665726][T10322] loop2: detected capacity change from 0 to 256
[  711.716874][ T9346] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  713.937259][T10344] loop8: detected capacity change from 0 to 512
[  714.137718][T10344] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  714.198510][ T9266] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  714.235333][T10344] EXT4-fs (loop8): orphan cleanup on readonly fs
[  714.303932][T10344] Quota error (device loop8): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  714.315001][T10344] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  714.426140][T10344] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  714.467062][ T9266] usb 3-1: Using ep0 maxpacket: 32
[  714.489642][T10344] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1120: bg 0: block 40: padding at end of block bitmap is not set
[  714.500996][ T9266] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  714.512822][ T9266] usb 3-1: config 0 has no interface number 0
[  714.519525][ T9266] usb 3-1: config 0 interface 184 has no altsetting 0
[  714.549400][T10344] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  714.608356][T10344] EXT4-fs (loop8): 1 truncate cleaned up
[  714.616653][T10344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  714.703444][ T9266] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  714.713325][ T9266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.721742][ T9266] usb 3-1: Product: syz
[  714.726142][ T9266] usb 3-1: Manufacturer: syz
[  714.731097][ T9266] usb 3-1: SerialNumber: syz
[  714.806715][T10344] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  714.843423][ T9266] usb 3-1: config 0 descriptor??
[  714.893198][T10344] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1120'.
[  714.907778][ T9266] smsc75xx v1.0.0
[  714.951598][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  714.978490][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  714.992557][T10359] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1120'.
[  715.007709][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  715.040593][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  715.099562][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  715.527471][ T9346] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  715.731356][ T9266] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  715.745304][ T9266] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  716.775508][T10356] chnl_net:caif_netlink_parms(): no params data found
[  717.189478][ T5824] Bluetooth: hci2: command tx timeout
[  717.431153][ T9266] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71
[  717.442596][ T9266] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71
[  717.453650][ T9266] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  717.463557][ T9266] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  717.474246][ T9266] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  717.677306][ T9266] usb 3-1: USB disconnect, device number 4
[  719.160354][T10400] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1127'.
[  719.278191][ T5824] Bluetooth: hci2: command tx timeout
[  719.789347][T10404] syz_tun: entered promiscuous mode
[  719.797554][T10404] vlan2: entered promiscuous mode
[  720.617469][T10356] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.625115][T10356] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.633515][T10356] bridge_slave_0: entered allmulticast mode
[  720.643290][T10356] bridge_slave_0: entered promiscuous mode
[  720.721368][ T3781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.729652][ T3781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.822793][T10356] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.830698][T10356] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.838859][T10356] bridge_slave_1: entered allmulticast mode
[  720.848855][T10356] bridge_slave_1: entered promiscuous mode
[  721.085539][ T4261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  721.093998][ T4261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.221058][T10356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  721.268962][T10356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  721.357058][ T5824] Bluetooth: hci2: command tx timeout
[  721.628198][T10356] team0: Port device team_slave_0 added
[  721.674896][T10356] team0: Port device team_slave_1 added
[  722.047521][ T9266] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  722.129451][ T9671] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  722.167912][T10356] batman_adv: batadv0: Adding interface: batadv_slave_0
[  722.175124][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  722.201562][T10356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  722.256994][ T9266] usb 6-1: Using ep0 maxpacket: 8
[  722.311766][ T9266] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  722.324021][ T9266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  722.342523][ T9671] usb 9-1: Using ep0 maxpacket: 16
[  722.381138][ T9266] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  722.382123][ T9671] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  722.391999][ T9266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.401560][ T9671] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  722.409929][ T9266] usb 6-1: Product: syz
[  722.423546][ T9266] usb 6-1: Manufacturer: syz
[  722.428451][ T9266] usb 6-1: SerialNumber: syz
[  722.467426][T10356] batman_adv: batadv0: Adding interface: batadv_slave_1
[  722.475168][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  722.501668][T10356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  722.565411][ T9671] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  722.575267][ T9671] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.583741][ T9671] usb 9-1: Product: syz
[  722.588247][ T9671] usb 9-1: Manufacturer: syz
[  722.589424][ T9266] usb 6-1: config 0 descriptor??
[  722.593006][ T9671] usb 9-1: SerialNumber: syz
[  723.055445][ T9671] usb 9-1: 0:2 : does not exist
[  723.198190][ T9671] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  723.286911][ T9266] rc_core: IR keymap rc-streamzap not found
[  723.293144][ T9266] Registered IR keymap rc-empty
[  723.300304][ T9266] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  723.314599][ T9266] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19
[  723.378758][T10356] hsr_slave_0: entered promiscuous mode
[  723.389499][T10356] hsr_slave_1: entered promiscuous mode
[  723.398478][T10356] debugfs: 'hsr0' already exists in 'hsr'
[  723.404393][T10356] Cannot create hsr debugfs directory
[  723.427436][ T5824] Bluetooth: hci2: command tx timeout
[  723.440805][ T9671] usb 9-1: USB disconnect, device number 3
[  723.752184][ T9266] usb 6-1: USB disconnect, device number 3
[  723.935323][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  724.804657][ T9671] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  725.055872][ T9671] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  725.066659][ T9671] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  725.075980][ T9671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.231058][ T9671] usb 6-1: config 0 descriptor??
[  725.313512][ T9671] pwc: Askey VC010 type 2 USB webcam detected.
[  725.683940][ T9671] pwc: recv_control_msg error -32 req 02 val 2b00
[  725.781878][ T9671] pwc: recv_control_msg error -32 req 02 val 2700
[  725.853061][ T9671] pwc: recv_control_msg error -32 req 02 val 2c00
[  725.930650][ T9671] pwc: recv_control_msg error -32 req 04 val 1000
[  725.978328][ T9671] pwc: recv_control_msg error -32 req 04 val 1300
[  726.044674][ T9671] pwc: recv_control_msg error -32 req 04 val 1400
[  726.088046][ T9671] pwc: recv_control_msg error -32 req 02 val 2000
[  726.141632][ T9671] pwc: recv_control_msg error -32 req 02 val 2100
[  726.184154][ T9671] pwc: recv_control_msg error -32 req 04 val 1500
[  726.242509][ T9671] pwc: recv_control_msg error -32 req 02 val 2500
[  726.284216][ T9671] pwc: recv_control_msg error -32 req 02 val 2400
[  726.331964][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  726.339042][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  726.356051][ T1287] clip:clip_start_xmit: skb_dst(skb) == NULL
[  726.517133][ T9671] pwc: recv_control_msg error -71 req 02 val 2900
[  726.547371][ T9671] pwc: recv_control_msg error -71 req 02 val 2800
[  726.568012][ T9671] pwc: recv_control_msg error -71 req 04 val 1100
[  726.588794][ T9671] pwc: recv_control_msg error -71 req 04 val 1200
[  726.657063][ T9671] pwc: Registered as video103.
[  726.682090][ T9671] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20
[  726.785378][ T9671] usb 6-1: USB disconnect, device number 4
[  728.487638][ T5823] Bluetooth: hci1: command 0x0406 tx timeout
[  728.521970][T10356] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  728.820123][T10356] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  729.308262][T10356] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  729.405735][T10356] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  729.449448][T10474] loop2: detected capacity change from 0 to 1024
[  729.588248][T10474] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  729.913705][T10474] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.1147: lblock 1 mapped to illegal pblock 1 (length 1)
[  730.017379][T10474] Quota error (device loop2): write_blk: dquota write failed
[  730.025295][T10474] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  730.035979][T10474] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1147: Failed to acquire dquot type 0
[  730.277734][T10474] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1147: Freeing blocks not in datazone - block = 0, count = 4096
[  730.486031][T10474] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1147: Invalid inode bitmap blk 0 in block_group 0
[  730.577719][ T4202] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1)
[  730.704920][T10474] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  730.759521][ T4202] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  730.768608][ T4202] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 0
[  730.837768][T10474] EXT4-fs (loop2): 1 orphan inode deleted
[  730.845806][T10474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  731.189205][T10474] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  732.145356][T10356] 8021q: adding VLAN 0 to HW filter on device bond0
[  732.607390][T10356] 8021q: adding VLAN 0 to HW filter on device team0
[  732.884595][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.892306][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state
[  733.216201][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.223859][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state
[  733.379564][T10498] loop2: detected capacity change from 0 to 32768
[  733.392953][T10498] XFS: ikeep mount option is deprecated.
[  733.558546][T10498] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  734.399615][T10498] XFS (loop2): Ending clean mount
[  734.421408][T10498] XFS (loop2): Quotacheck needed: Please wait.
[  734.541128][T10498] XFS (loop2): Quotacheck: Done.
[  735.576919][ T5862] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  735.929161][ T5862] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  735.940904][ T5862] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  735.953174][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.163291][ T5862] usb 9-1: config 0 descriptor??
[  736.264631][ T5862] pwc: Askey VC010 type 2 USB webcam detected.
[  736.470485][ T9849] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  736.747719][ T5862] pwc: recv_control_msg error -32 req 02 val 2b00
[  736.798233][ T5862] pwc: recv_control_msg error -32 req 02 val 2700
[  736.837045][ T5862] pwc: recv_control_msg error -32 req 02 val 2c00
[  736.890198][ T5862] pwc: recv_control_msg error -32 req 04 val 1000
[  736.917280][ T5862] pwc: recv_control_msg error -32 req 04 val 1300
[  736.982510][ T5862] pwc: recv_control_msg error -32 req 04 val 1400
[  737.021143][ T5862] pwc: recv_control_msg error -32 req 02 val 2000
[  737.048209][ T5862] pwc: recv_control_msg error -32 req 02 val 2100
[  737.104134][ T5862] pwc: recv_control_msg error -32 req 04 val 1500
[  737.130270][ T5862] pwc: recv_control_msg error -32 req 02 val 2500
[  737.205536][T10539] tipc: Started in network mode
[  737.211093][T10539] tipc: Node identity 4, cluster identity 4711
[  737.217703][T10539] tipc: Node number set to 4
[  737.354225][ T5862] pwc: recv_control_msg error -71 req 02 val 2600
[  737.378031][ T5862] pwc: recv_control_msg error -71 req 02 val 2900
[  737.410732][ T5862] pwc: recv_control_msg error -71 req 02 val 2800
[  737.443268][ T5862] pwc: recv_control_msg error -71 req 04 val 1100
[  737.474355][ T5862] pwc: recv_control_msg error -71 req 04 val 1200
[  737.566267][ T5862] pwc: Registered as video103.
[  737.575458][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input21
[  737.603129][T10356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  737.630232][T10542] loop5: detected capacity change from 0 to 64
[  737.750094][T10543] binder_alloc: 10541: binder_alloc_buf size 12280 failed, no address space
[  737.762180][T10543] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184)
[  737.858661][ T5862] usb 9-1: USB disconnect, device number 4
[  738.571610][T10550] bond_slave_0: entered promiscuous mode
[  738.577727][T10550] bond_slave_1: entered promiscuous mode
[  738.583853][T10550] vlan2: entered promiscuous mode
[  738.589375][T10550] bond0: entered promiscuous mode
[  738.828783][T10356] veth0_vlan: entered promiscuous mode
[  739.007237][T10356] veth1_vlan: entered promiscuous mode
[  739.602569][T10356] veth0_macvtap: entered promiscuous mode
[  739.743786][T10356] veth1_macvtap: entered promiscuous mode
[  740.000603][T10356] batman_adv: batadv0: Interface activated: batadv_slave_0
[  740.134022][T10356] batman_adv: batadv0: Interface activated: batadv_slave_1
[  740.287340][ T8520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  740.312318][ T3889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  740.386253][ T3889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  740.416657][ T3889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  742.764043][T10592] program syz.2.1173 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  742.847831][ T5824] Bluetooth: Unknown BR/EDR signaling command 0x0c
[  742.854948][ T5824] Bluetooth: Wrong link type (-22)
[  742.861627][ T5824] Bluetooth: Unknown BR/EDR signaling command 0x0c
[  742.868731][ T5824] Bluetooth: Wrong link type (-22)
[  742.874446][ T5824] Bluetooth: Unexpected continuation frame (len 24)
[  742.882035][ T5824] Bluetooth: hci5: link tx timeout
[  742.889322][ T5824] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  743.298555][T10597] loop8: detected capacity change from 0 to 128
[  743.397204][T10597] FAT-fs (loop8): Invalid FSINFO signature: 0x4161ffff, 0x61417272 (sector = 1)
[  743.557188][ T9540] Process accounting resumed
[  743.562260][ T9540] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512)
[  743.570929][ T9540] FAT-fs (loop8): Filesystem has been set read-only
[  744.542064][ T9346] FAT-fs (loop8): Invalid FSINFO signature: 0x4161ffff, 0x61417272 (sector = 1)
[  744.979215][ T5824] Bluetooth: hci5: command 0x0406 tx timeout
[  745.339169][T10605] raw_sendmsg: syz.4.1176 forgot to set AF_INET. Fix it!
[  745.475125][T10615] loop8: detected capacity change from 0 to 1024
[  745.588632][T10615] EXT4-fs: Ignoring removed orlov option
[  745.594708][T10615] EXT4-fs: Ignoring removed nomblk_io_submit option
[  745.762708][T10615] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  746.539463][ T9346] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  747.851445][T10636] loop5: detected capacity change from 0 to 32768
[  747.861826][T10636] btrfs: Deprecated parameter 'usebackuproot'
[  747.868339][T10636] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  747.892899][T10636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1183 (10636)
[  748.018124][T10636] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  748.028810][T10636] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  748.041402][T10636] BTRFS info (device loop5): disk space caching is enabled
[  748.049096][T10636] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  748.227753][ T4202] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  748.244674][T10636] BTRFS error (device loop5): failed to load root extent
[  748.252862][T10636] BTRFS warning (device loop5): try to load backup roots slot 1
[  748.392380][ T4202] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  748.407611][T10636] BTRFS warning (device loop5): couldn't read tree root
[  748.414808][T10636] BTRFS warning (device loop5): try to load backup roots slot 2
[  748.547236][ T4202] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  748.558638][T10636] BTRFS warning (device loop5): couldn't read tree root
[  748.565823][T10636] BTRFS warning (device loop5): try to load backup roots slot 3
[  748.659000][T10637] bridge0: port 2(bridge_slave_1) entered disabled state
[  748.669217][T10637] bridge0: port 1(bridge_slave_0) entered disabled state
[  749.099298][T10637] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  749.106261][T10663] netlink: 'syz.4.1187': attribute type 10 has an invalid length.
[  749.121807][T10636] BTRFS info (device loop5): rebuilding free space tree
[  749.140857][T10637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  749.393679][T10636] BTRFS info (device loop5): disabling free space tree
[  749.401089][T10636] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  749.411249][T10636] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  749.802581][T10059] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  750.392138][   T57] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  750.402103][T10663] bridge0: port 3(team0) entered blocking state
[  750.409862][T10663] bridge0: port 3(team0) entered disabled state
[  750.417285][T10663] team0: entered allmulticast mode
[  750.422901][T10663] team_slave_0: entered allmulticast mode
[  750.429245][T10663] team_slave_1: entered allmulticast mode
[  750.441238][T10663] team0: entered promiscuous mode
[  750.447259][T10663] team_slave_0: entered promiscuous mode
[  750.454199][T10663] team_slave_1: entered promiscuous mode
[  750.464292][T10663] bridge0: port 3(team0) entered blocking state
[  750.471292][T10663] bridge0: port 3(team0) entered forwarding state
[  750.479800][ T3889] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  750.534879][ T3889] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  750.605113][ T3889] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  750.638685][ T9671] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  750.854161][ T9671] usb 3-1: config 0 has no interfaces?
[  750.860435][ T9671] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  750.870169][ T9671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.007375][ T9671] usb 3-1: config 0 descriptor??
[  751.272436][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  751.283008][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  751.434264][ T9540] usb 3-1: USB disconnect, device number 5
[  752.128562][ T9540] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  752.307281][ T9540] usb 3-1: Using ep0 maxpacket: 16
[  752.388139][ T9540] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  752.400612][ T9540] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  752.518805][ T9540] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  752.529359][ T9540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.539304][ T9540] usb 3-1: Product: syz
[  752.543694][ T9540] usb 3-1: Manufacturer: syz
[  752.549106][ T9540] usb 3-1: SerialNumber: syz
[  752.917300][ T5889] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  752.954144][ T4053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.962658][ T4053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.087011][ T5889] usb 9-1: Using ep0 maxpacket: 16
[  753.125527][ T9540] usb 3-1: 0:2 : does not exist
[  753.148295][ T5889] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  753.160930][ T5889] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  753.207554][ T4053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  753.215870][ T4053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.256211][ T5889] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  753.266852][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.275326][ T5889] usb 9-1: Product: syz
[  753.280097][ T5889] usb 9-1: Manufacturer: syz
[  753.285072][ T5889] usb 9-1: SerialNumber: syz
[  753.884304][ T9540] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  753.992356][ T9540] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[  754.101098][ T9540] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  754.148860][ T5889] usb 9-1: 0:2 : does not exist
[  754.201947][ T9540] usb 3-1: USB disconnect, device number 6
[  754.227638][ T5889] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  754.499631][ T5889] usb 9-1: USB disconnect, device number 5
[  755.068410][T10707] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.196133][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  755.361127][T10718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  755.374145][T10711] syzkaller0: entered promiscuous mode
[  755.385933][T10711] syzkaller0: entered allmulticast mode
[  755.718008][T10707] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.782642][T10725] tipc: Resetting bearer <eth:syzkaller0>
[  755.992701][T10707] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.125717][T10708] tipc: Resetting bearer <eth:syzkaller0>
[  756.159115][T10708] tipc: Disabling bearer <eth:syzkaller0>
[  756.245618][T10707] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.732772][ T3889] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  756.799378][T10733] loop5: detected capacity change from 0 to 128
[  756.866242][ T3889] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  756.872727][T10733] EXT4-fs: Ignoring removed nobh option
[  756.978830][ T3889] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  757.051192][ T4053] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  757.081630][T10733] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  757.128814][T10733] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  757.397051][ T5862] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  757.607527][ T5862] usb 3-1: Using ep0 maxpacket: 16
[  757.691964][ T5862] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  757.703110][ T5862] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  757.777010][ T5862] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  757.797845][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.806202][ T5862] usb 3-1: Product: syz
[  757.811019][ T5862] usb 3-1: Manufacturer: syz
[  757.815825][ T5862] usb 3-1: SerialNumber: syz
[  757.825085][T10059] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  757.870238][T10742] tipc: Started in network mode
[  757.876852][T10742] tipc: Node identity 4e07856f8d89, cluster identity 4711
[  757.886095][T10742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  757.978206][T10742] syzkaller0: entered promiscuous mode
[  757.983928][T10742] syzkaller0: entered allmulticast mode
[  758.182300][T10745] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  758.248320][ T5862] usb 3-1: 0:2 : does not exist
[  758.332133][T10742] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  758.343957][ T5862] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  758.452277][T10741] tipc: Resetting bearer <eth:syzkaller0>
[  758.560132][ T5862] usb 3-1: USB disconnect, device number 7
[  758.585596][T10741] tipc: Disabling bearer <eth:syzkaller0>
[  758.941372][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  759.585536][T10760] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  759.659713][T10757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  759.713604][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1208'.
[  759.724797][T10765] syzkaller0: entered promiscuous mode
[  759.730860][T10765] syzkaller0: entered allmulticast mode
[  759.760819][T10763] loop5: detected capacity change from 0 to 47
[  759.784335][T10764] vlan2: entered promiscuous mode
[  759.789822][T10764] team0: entered promiscuous mode
[  759.795048][T10764] team_slave_0: entered promiscuous mode
[  759.802316][T10764] team_slave_1: entered promiscuous mode
[  759.892645][T10763] MINIX-fs: bad superblock or unable to read bitmaps
[  760.020133][T10757] tipc: Resetting bearer <eth:syzkaller0>
[  760.109283][T10756] tipc: Resetting bearer <eth:syzkaller0>
[  760.159010][T10756] tipc: Disabling bearer <eth:syzkaller0>
[  761.659965][T10786] loop2: detected capacity change from 0 to 512
[  761.863295][T10786] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1214: corrupted in-inode xattr: invalid ea_ino
[  761.939609][T10786] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1214: couldn't read orphan inode 15 (err -117)
[  762.079065][T10786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  762.447754][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'.
[  762.457295][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'.
[  763.229264][ T9849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  767.177406][T10821] loop1: detected capacity change from 0 to 512
[  767.411805][T10787] Set syz1 is full, maxelem 65536 reached
[  767.521445][T10821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  767.535334][T10821] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  767.624915][ T3555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.798000][T10821] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1226: corrupted inode contents
[  767.889023][T10821] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1226: mark_inode_dirty error
[  767.937897][ T3555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.054258][T10821] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1226: corrupted inode contents
[  768.186622][T10821] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1226: mark_inode_dirty error
[  768.294424][ T3555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.582064][ T3555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.010262][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.177724][ T3555] bridge_slave_1: left allmulticast mode
[  769.183652][ T3555] bridge_slave_1: left promiscuous mode
[  769.192832][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.319823][ T3555] bridge_slave_0: left allmulticast mode
[  769.325827][ T3555] bridge_slave_0: left promiscuous mode
[  769.337589][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.908314][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  769.958265][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  769.992669][ T3555] bond0 (unregistering): Released all slaves
[  770.153492][ T3555] tipc: Left network mode
[  770.538712][ T3555] hsr_slave_0: left promiscuous mode
[  770.549776][ T3555] hsr_slave_1: left promiscuous mode
[  770.561222][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  770.570703][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0
[  770.582213][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  770.590059][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1
[  770.649084][ T3555] veth1_macvtap: left promiscuous mode
[  770.654952][ T3555] veth0_macvtap: left promiscuous mode
[  770.663937][ T3555] veth1_vlan: left promiscuous mode
[  770.670000][ T3555] veth0_vlan: left promiscuous mode
[  771.702235][T10854] openvswitch: netlink: IPv6 tunnel dst address is zero
[  771.847487][ T5823] Bluetooth: hci3: unexpected event for opcode 0x0c38
[  771.868137][ T3555] team0 (unregistering): Port device team_slave_1 removed
[  771.910987][ T3555] team0 (unregistering): Port device team_slave_0 removed
[  772.381071][T10857] loop1: detected capacity change from 0 to 32768
[  772.477962][T10857] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  772.532326][T10850] batadv0: entered promiscuous mode
[  772.538419][T10850] vlan2: entered promiscuous mode
[  772.660292][T10857] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  773.158661][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  773.174865][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  773.206678][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  773.226461][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  773.251262][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  773.793236][T10356] ocfs2: Unmounting device (7,1) on (node local)
[  774.034268][T10869] loop8: detected capacity change from 0 to 2048
[  774.096081][   T30] audit: type=1326 audit(1754717066.274:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328ff8ebe9 code=0x7ffc0000
[  774.227599][   T30] audit: type=1326 audit(1754717066.334:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328ff8ebe9 code=0x7ffc0000
[  774.253116][   T30] audit: type=1326 audit(1754717066.374:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f328ff8ebe9 code=0x7ffc0000
[  774.276750][   T30] audit: type=1326 audit(1754717066.374:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328ff8ebe9 code=0x7ffc0000
[  774.299843][   T30] audit: type=1326 audit(1754717066.444:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f328ff8ebe9 code=0x7ffc0000
[  774.420757][   T30] audit: type=1326 audit(1754717066.544:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328ff8ebe9 code=0x7ffc0000
[  774.443792][   T30] audit: type=1326 audit(1754717066.554:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f328ff8ebe9 code=0x7ffc0000
[  774.448562][T10869] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  774.469148][   T30] audit: type=1326 audit(1754717066.554:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328ff8ebe9 code=0x7ffc0000
[  774.469404][   T30] audit: type=1326 audit(1754717066.554:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f328ff8ebe9 code=0x7ffc0000
[  774.469653][   T30] audit: type=1326 audit(1754717066.554:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328ff8ebe9 code=0x7ffc0000
[  774.864238][T10869] syz.8.1236 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  775.147168][T10890] wlan0 speed is unknown, defaulting to 1000
[  775.153822][T10890] wlan0 speed is unknown, defaulting to 1000
[  775.161525][T10890] wlan0 speed is unknown, defaulting to 1000
[  775.183579][T10890] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  775.228270][T10890] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  775.346807][ T5823] Bluetooth: hci4: command tx timeout
[  775.393006][T10890] wlan0 speed is unknown, defaulting to 1000
[  775.500240][T10890] wlan0 speed is unknown, defaulting to 1000
[  775.509379][T10890] wlan0 speed is unknown, defaulting to 1000
[  775.519246][T10890] wlan0 speed is unknown, defaulting to 1000
[  775.528395][T10890] wlan0 speed is unknown, defaulting to 1000
[  775.537787][T10890] wlan0 speed is unknown, defaulting to 1000
[  775.546955][T10890] wlan0 speed is unknown, defaulting to 1000
[  775.663138][ T9346] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  775.769347][T10864] chnl_net:caif_netlink_parms(): no params data found
[  776.153356][T10900] veth0_virt_wifi: renamed from vlan0
[  777.428288][ T5823] Bluetooth: hci4: command tx timeout
[  777.507984][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1247'.
[  778.303867][T10864] bridge0: port 1(bridge_slave_0) entered blocking state
[  778.314771][T10864] bridge0: port 1(bridge_slave_0) entered disabled state
[  778.323256][T10864] bridge_slave_0: entered allmulticast mode
[  778.419590][T10864] bridge_slave_0: entered promiscuous mode
[  778.451100][T10935] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  778.591851][T10864] bridge0: port 2(bridge_slave_1) entered blocking state
[  778.599774][T10864] bridge0: port 2(bridge_slave_1) entered disabled state
[  778.607760][T10864] bridge_slave_1: entered allmulticast mode
[  778.617921][T10864] bridge_slave_1: entered promiscuous mode
[  778.714350][T10931] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  779.224300][T10864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  779.359670][T10864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  779.508498][ T5823] Bluetooth: hci4: command tx timeout
[  779.740060][T10864] team0: Port device team_slave_0 added
[  779.853794][T10954] loop8: detected capacity change from 0 to 256
[  779.949633][T10864] team0: Port device team_slave_1 added
[  779.972718][T10950] syzkaller0: create flow: hash 3519860031 index 1
[  779.981022][T10954] exFAT-fs (loop8): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x4119abd0)
[  779.991964][T10954] exFAT-fs (loop8): invalid boot region
[  780.003673][T10954] exFAT-fs (loop8): failed to recognize exfat type
[  780.299868][T10945] syzkaller0: delete flow: hash 3519860031 index 1
[  780.726021][T10960] syz_tun: entered allmulticast mode
[  780.740847][T10864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  780.748166][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  780.774547][T10864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  780.999163][T10864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  781.009276][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  781.037307][T10864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  781.588977][ T5824] Bluetooth: hci4: command tx timeout
[  781.678005][T10864] hsr_slave_0: entered promiscuous mode
[  781.688732][T10864] hsr_slave_1: entered promiscuous mode
[  781.703518][T10864] debugfs: 'hsr0' already exists in 'hsr'
[  781.709704][T10864] Cannot create hsr debugfs directory
[  782.541126][ T5824] Bluetooth: hci1: unexpected event for opcode 0x0c23
[  783.040306][T10990] loop5: detected capacity change from 0 to 1024
[  783.585547][T10990] trusted_key: syz.5.1268 sent an empty control message without MSG_MORE.
[  785.237466][T10864] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  785.268863][T10864] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  785.389965][T10864] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  785.499232][T10864] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  786.955335][ T5824] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  786.965019][ T5824] Bluetooth: hci2: Injecting HCI hardware error event
[  786.974316][ T5824] Bluetooth: hci2: hardware error 0x00
[  787.227888][T10864] 8021q: adding VLAN 0 to HW filter on device bond0
[  787.430370][ T9671] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  787.468055][T10864] 8021q: adding VLAN 0 to HW filter on device team0
[  787.538222][T10321] bridge0: port 1(bridge_slave_0) entered blocking state
[  787.545800][T10321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  787.683322][T10321] bridge0: port 2(bridge_slave_1) entered blocking state
[  787.690835][ T9671] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  787.691102][T10321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  787.701616][ T9671] usb 9-1: config 0 has no interfaces?
[  787.803502][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  787.810763][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  787.827770][ T1287] clip:clip_start_xmit: skb_dst(skb) == NULL
[  787.885179][ T9671] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  787.895921][ T9671] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  787.904411][ T9671] usb 9-1: Manufacturer: syz
[  787.999444][ T5823] Bluetooth: hci3: unexpected event for opcode 0x1003
[  788.107141][ T9671] usb 9-1: config 0 descriptor??
[  788.322764][T11048] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  788.773438][ T5823] Bluetooth: hci1: unexpected Set CIG Parameters response data
[  788.794518][ T5823] Bluetooth: hci1: unexpected event for opcode 0x2062
[  789.039342][ T5824] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  789.694848][T11053] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1283'.
[  790.489116][T10864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  790.566645][ T9367] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  790.746685][ T9367] usb 6-1: Using ep0 maxpacket: 16
[  791.005134][T10864] veth0_vlan: entered promiscuous mode
[  791.253841][T10864] veth1_vlan: entered promiscuous mode
[  791.476670][ T9367] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  791.487270][ T9367] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  791.693865][ T9367] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  791.703492][ T9367] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.712132][ T9367] usb 6-1: Product: syz
[  791.718760][ T9367] usb 6-1: Manufacturer: syz
[  791.723566][ T9367] usb 6-1: SerialNumber: syz
[  791.890073][T10864] veth0_macvtap: entered promiscuous mode
[  791.997865][T10864] veth1_macvtap: entered promiscuous mode
[  792.021817][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'.
[  792.058352][T11082] vlan0: entered promiscuous mode
[  792.067079][ T5824] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  792.067265][ T5824] Bluetooth: hci3: Injecting HCI hardware error event
[  792.067875][ T5824] Bluetooth: hci3: hardware error 0x00
[  792.089337][T11082] batadv0: entered promiscuous mode
[  792.408324][ T9367] usb 6-1: 0:2 : does not exist
[  792.497210][ T9367] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  792.509727][T10864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  792.616111][T10864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  792.703838][ T9367] usb 6-1: USB disconnect, device number 5
[  792.794746][ T9671] usb 9-1: USB disconnect, device number 6
[  792.819359][ T3555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  792.872667][ T5823] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  792.884428][ T5823] Bluetooth: hci1: Injecting HCI hardware error event
[  792.894453][ T5823] Bluetooth: hci1: hardware error 0x00
[  792.977231][ T3555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.084708][   T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.241744][   T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.749520][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  794.057625][T11090] Bluetooth: hci1: unexpected event for opcode 0x0c05
[  794.159615][ T5824] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  794.604292][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1303'.
[  794.613838][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1303'.
[  794.640750][T11113] team0: entered promiscuous mode
[  794.645971][T11113] team_slave_0: entered promiscuous mode
[  794.652713][T11113] team_slave_1: entered promiscuous mode
[  794.665913][T11113] bond0: entered promiscuous mode
[  794.671405][T11113] bond_slave_0: entered promiscuous mode
[  794.678544][T11113] bond_slave_1: entered promiscuous mode
[  794.694231][T11113] 8021q: adding VLAN 0 to HW filter on device hsr1
[  794.952706][ T5823] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  796.576945][T11140] loop5: detected capacity change from 0 to 128
[  796.642076][T11140] zonefs: Bad value for 'errors'
[  798.379146][T11156] loop5: detected capacity change from 0 to 4096
[  798.614576][T11172] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  798.704682][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  798.704766][   T30] audit: type=1800 audit(1754717090.894:72): pid=11156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1316" name="file1" dev="loop5" ino=15 res=0 errno=0
[  799.275475][T11181] loop8: detected capacity change from 0 to 128
[  799.618816][T11187] syz.8.1322: attempt to access beyond end of device
[  799.618816][T11187] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128
[  799.747408][T11187] syz.8.1322: attempt to access beyond end of device
[  799.747408][T11187] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128
[  799.761897][T11187] syz.8.1322: attempt to access beyond end of device
[  799.761897][T11187] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128
[  799.776289][T11187] syz.8.1322: attempt to access beyond end of device
[  799.776289][T11187] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128
[  800.009118][T11187] syz.8.1322: attempt to access beyond end of device
[  800.009118][T11187] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128
[  801.846996][ T9367] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  802.651538][ T9367] usb 2-1: unable to get BOS descriptor or descriptor too short
[  802.692446][ T9367] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  802.702446][ T9367] usb 2-1: config 1 has no interface number 1
[  802.712122][ T9367] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  802.788498][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  802.796813][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  802.911980][ T9367] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  802.924532][ T9367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.933585][ T9367] usb 2-1: Product: syz
[  802.938089][ T9367] usb 2-1: Manufacturer: syz
[  802.942905][ T9367] usb 2-1: SerialNumber: syz
[  803.204508][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.213482][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.392933][ T9367] usb 2-1: found format II with max.bitrate = 26774, frame size=2
[  803.401627][ T9367] usb 2-1: found format II with max.bitrate = 26774, frame size=2
[  803.519240][ T9367] usb 2-1: failed to enable PITCH for EP 0x82
[  803.774156][ T9367] usb 2-1: USB disconnect, device number 6
[  804.135559][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  804.460548][T11236] loop8: detected capacity change from 0 to 2048
[  804.631814][T11236] Alternate GPT is invalid, using primary GPT.
[  804.640498][T11236]  loop8: p2 p3 p7
[  805.055028][T11242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  805.092791][T11245] syzkaller0: entered promiscuous mode
[  805.098767][T11245] syzkaller0: entered allmulticast mode
[  805.188706][T11239] tipc: Resetting bearer <eth:syzkaller0>
[  805.280443][T11239] tipc: Disabling bearer <eth:syzkaller0>
[  805.607344][T11250] netlink: 'syz.4.1342': attribute type 21 has an invalid length.
[  805.762252][T11254] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1343'.
[  809.065683][T11296] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  809.147304][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1361'.
[  809.237272][T11302] Driver unsupported XDP return value 0 on prog  (id 191) dev N/A, expect packet loss!
[  810.578843][T11327] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  811.149263][T11333] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  812.043949][T11351] syz.3.1383 uses old SIOCAX25GETINFO
[  812.696872][T11358] loop5: detected capacity change from 0 to 256
[  812.755346][T11358] exfat: Deprecated parameter 'utf8'
[  812.761500][T11358] exfat: Deprecated parameter 'namecase'
[  812.769671][T11358] exfat: Deprecated parameter 'namecase'
[  812.775606][T11358] exfat: Deprecated parameter 'utf8'
[  812.948370][T11358] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  813.013310][T11366] loop1: detected capacity change from 0 to 16
[  813.153134][T11366] erofs (device loop1): mounted with root inode @ nid 36.
[  813.651855][T11373] netlink: 'syz.8.1392': attribute type 21 has an invalid length.
[  813.660563][T11373] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1392'.
[  813.674176][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1392'.
[  815.229841][T11395] tipc: Started in network mode
[  815.235093][T11395] tipc: Node identity dea1972cd2cc, cluster identity 4711
[  815.243865][T11395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  815.292085][T11400] syzkaller0: entered promiscuous mode
[  815.297955][T11400] syzkaller0: entered allmulticast mode
[  815.503328][T11395] tipc: Resetting bearer <eth:syzkaller0>
[  815.592447][T11393] tipc: Resetting bearer <eth:syzkaller0>
[  815.659625][T11393] tipc: Disabling bearer <eth:syzkaller0>
[  815.698710][ T5868] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  815.747295][T11408] loop5: detected capacity change from 0 to 256
[  815.917199][ T5868] usb 2-1: Using ep0 maxpacket: 8
[  815.987569][ T5868] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  815.997263][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.005599][ T5868] usb 2-1: Product: syz
[  816.010208][ T5868] usb 2-1: Manufacturer: syz
[  816.015010][ T5868] usb 2-1: SerialNumber: syz
[  816.187000][ T5868] usb 2-1: config 0 descriptor??
[  816.208016][T11408] FAT-fs (loop5): Directory bread(block 64) failed
[  816.215091][T11408] FAT-fs (loop5): Directory bread(block 65) failed
[  816.222243][T11408] FAT-fs (loop5): Directory bread(block 66) failed
[  816.237326][T11408] FAT-fs (loop5): Directory bread(block 67) failed
[  816.247879][T11408] FAT-fs (loop5): Directory bread(block 68) failed
[  816.254632][T11408] FAT-fs (loop5): Directory bread(block 69) failed
[  816.261907][T11408] FAT-fs (loop5): Directory bread(block 70) failed
[  816.269131][T11408] FAT-fs (loop5): Directory bread(block 71) failed
[  816.276037][T11408] FAT-fs (loop5): Directory bread(block 72) failed
[  816.282886][T11408] FAT-fs (loop5): Directory bread(block 73) failed
[  816.519780][ T5868] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  817.435516][ T5868] usb write operation failed. (-71)
[  817.464276][ T5868] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  817.477065][ T5868] dvbdev: DVB: registering new adapter (Terratec H7)
[  817.483999][ T5868] usb 2-1: media controller created
[  817.498904][ T5868] usb read operation failed. (-71)
[  817.506844][ T5868] usb write operation failed. (-71)
[  817.585523][T11417] wlan0 speed is unknown, defaulting to 1000
[  817.711428][T11424] wlan0 speed is unknown, defaulting to 1000
[  817.811832][ T5868] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  817.930103][ T5868] usb 2-1: USB disconnect, device number 7
[  818.235969][T11429] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1412'.
[  819.437009][T11441] loop5: detected capacity change from 0 to 2048
[  819.540346][T11441] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  819.652284][T11441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  819.749413][T11448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  819.803924][T11449] syzkaller0: entered promiscuous mode
[  819.810059][T11449] syzkaller0: entered allmulticast mode
[  819.927638][T11448] tipc: Resetting bearer <eth:syzkaller0>
[  820.037402][T11445] tipc: Resetting bearer <eth:syzkaller0>
[  820.097509][T11445] tipc: Disabling bearer <eth:syzkaller0>
[  820.973840][T11463] loop8: detected capacity change from 0 to 64
[  821.923003][T11471] wlan0 speed is unknown, defaulting to 1000
[  822.118593][T11469] wlan0 speed is unknown, defaulting to 1000
[  822.284105][T11472] wlan0 speed is unknown, defaulting to 1000
[  822.351241][ T5868] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  822.382441][T11473] wlan0 speed is unknown, defaulting to 1000
[  822.708752][ T5868] usb 2-1: Using ep0 maxpacket: 8
[  822.755833][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  822.767490][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  822.777735][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  822.793514][ T5868] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  822.803606][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.929400][ T5868] usb 2-1: config 0 descriptor??
[  823.503264][ T5868] cypress 0003:04B4:0001.0018: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0
[  823.713530][ T5868] usb 2-1: USB disconnect, device number 8
[  824.107574][T11485] loop8: detected capacity change from 0 to 1024
[  824.234899][T11485] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  825.008731][T11488] loop5: detected capacity change from 0 to 1024
[  825.264187][T11493] loop1: detected capacity change from 0 to 256
[  825.369435][T11493] exfat: Deprecated parameter 'namecase'
[  825.375890][T11493] exfat: Deprecated parameter 'utf8'
[  825.426061][T11496] loop3: detected capacity change from 0 to 64
[  825.663961][T11493] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  825.709090][T11498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  825.746794][T11498] syzkaller0: entered promiscuous mode
[  825.758991][T11498] syzkaller0: entered allmulticast mode
[  825.933785][T11498] tipc: Resetting bearer <eth:syzkaller0>
[  826.007337][T11495] tipc: Resetting bearer <eth:syzkaller0>
[  826.055959][T11492] fido_id[11492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  826.097850][T11495] tipc: Disabling bearer <eth:syzkaller0>
[  826.723724][T11506] loop5: detected capacity change from 0 to 1024
[  827.829177][T11510] loop1: detected capacity change from 0 to 32768
[  827.887997][T11510] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  827.899355][T11510] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  827.970005][T11510] gfs2: fsid=syz:syz.s: fatal: invalid metadata block - bh = 1536 (type: exp=4, found=8), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499
[  827.986845][T11510] gfs2: fsid=syz:syz.s: about to withdraw this file system
[  827.995416][T11510] gfs2: fsid=syz:syz.s: File system withdrawn
[  828.002061][T11510] CPU: 1 UID: 0 PID: 11510 Comm: syz.1.1440 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[  828.002225][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  828.002327][T11510] Call Trace:
[  828.002385][T11510]  <TASK>
[  828.002439][T11510]  __dump_stack+0x26/0x30
[  828.002624][T11510]  dump_stack_lvl+0x1df/0x270
[  828.002818][T11510]  dump_stack+0x1e/0x25
[  828.002985][T11510]  gfs2_withdraw+0x1182/0x2050
[  828.003236][T11510]  gfs2_metatype_check_ii+0x11e/0x160
[  828.003446][T11510]  gfs2_meta_buffer+0x4c7/0x600
[  828.003635][T11510]  inode_go_instantiate+0xda/0x1e90
[  828.003826][T11510]  ? queue_delayed_work_on+0x21d/0x350
[  828.003997][T11510]  ? kmsan_get_metadata+0xfb/0x160
[  828.004177][T11510]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  828.004416][T11510]  ? kmsan_get_metadata+0xfb/0x160
[  828.004577][T11510]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  828.004761][T11510]  ? __pfx_inode_go_instantiate+0x10/0x10
[  828.004962][T11510]  gfs2_instantiate+0x24c/0x4b0
[  828.005178][T11510]  gfs2_glock_wait+0x26a/0x3b0
[  828.005407][T11510]  gfs2_glock_nq+0x28cf/0x34a0
[  828.005662][T11510]  gfs2_lookupi+0x57e/0x990
[  828.005859][T11510]  ? gfs2_lookup_meta+0x101/0x280
[  828.006088][T11510]  gfs2_lookup_meta+0x101/0x280
[  828.006303][T11510]  init_journal+0x1b5/0x3a30
[  828.006513][T11510]  ? snprintf+0x1d2/0x210
[  828.006728][T11510]  ? kmsan_get_metadata+0xfb/0x160
[  828.006893][T11510]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  828.007090][T11510]  init_inodes+0x124/0x510
[  828.007286][T11510]  gfs2_fill_super+0x384d/0x3f50
[  828.007489][T11510]  ? init_locking+0xed/0x500
[  828.007715][T11510]  get_tree_bdev_flags+0x6e3/0x920
[  828.007893][T11510]  ? __pfx_gfs2_fill_super+0x10/0x10
[  828.008087][T11510]  ? __pfx_gfs2_fill_super+0x10/0x10
[  828.008271][T11510]  ? __pfx_gfs2_get_tree+0x10/0x10
[  828.008470][T11510]  get_tree_bdev+0x38/0x50
[  828.008645][T11510]  gfs2_get_tree+0x57/0x350
[  828.008834][T11510]  ? __pfx_gfs2_get_tree+0x10/0x10
[  828.009030][T11510]  vfs_get_tree+0xb0/0x5c0
[  828.009202][T11510]  ? mount_capable+0x99/0x100
[  828.009373][T11510]  do_new_mount+0x733/0x1420
[  828.009544][T11510]  ? apparmor_capable+0x32d/0x410
[  828.009716][T11510]  ? kmsan_get_metadata+0xfb/0x160
[  828.009914][T11510]  path_mount+0x6db/0x1e90
[  828.010089][T11510]  ? user_path_at+0x32d/0x3d0
[  828.010250][T11510]  __se_sys_mount+0x6eb/0x7d0
[  828.010470][T11510]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  828.010726][T11510]  __x64_sys_mount+0xe4/0x150
[  828.010911][T11510]  x64_sys_call+0x3604/0x3e20
[  828.011113][T11510]  do_syscall_64+0xd9/0x210
[  828.011283][T11510]  ? irqentry_exit+0x16/0x60
[  828.011423][T11510]  ? clear_bhb_loop+0x40/0x90
[  828.011577][T11510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.011735][T11510] RIP: 0033:0x7f328ff9038a
[  828.011845][T11510] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  828.011981][T11510] RSP: 002b:00007f3290de3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  828.012121][T11510] RAX: ffffffffffffffda RBX: 00007f3290de3ef0 RCX: 00007f328ff9038a
[  828.012230][T11510] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f3290de3eb0
[  828.012349][T11510] RBP: 0000200000000400 R08: 00007f3290de3ef0 R09: 0000000000200001
[  828.012449][T11510] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500
[  828.012543][T11510] R13: 00007f3290de3eb0 R14: 00000000000125eb R15: 0000200000000080
[  828.012680][T11510]  </TASK>
[  828.362262][T11510] gfs2: fsid=syz:syz.s: can't lookup journal index: 0
[  828.507238][T11518] loop3: detected capacity change from 0 to 64
[  828.520013][T10321] hfsplus: b-tree write err: -5, ino 4
[  828.771679][T11518] syz.3.1442: attempt to access beyond end of device
[  828.771679][T11518] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  828.786956][T11518] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  828.872818][T11518] syz.3.1442: attempt to access beyond end of device
[  828.872818][T11518] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  828.887396][T11518] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  829.895986][T11528] wlan0 speed is unknown, defaulting to 1000
[  830.119874][T11530] wlan0 speed is unknown, defaulting to 1000
[  830.269256][T11532] wlan0 speed is unknown, defaulting to 1000
[  830.382293][T11533] wlan0 speed is unknown, defaulting to 1000
[  830.610771][ T5868] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  830.873922][ T5868] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  830.885260][ T5868] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  830.895506][ T5868] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping
[  830.907718][ T5868] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  831.140266][ T5868] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  831.151308][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.159934][ T5868] usb 9-1: Product: syz
[  831.164330][ T5868] usb 9-1: Manufacturer: syz
[  831.169334][ T5868] usb 9-1: SerialNumber: syz
[  831.596981][ T5868] usb 9-1: 0:2 : does not exist
[  832.190791][ T5868] usb 9-1: USB disconnect, device number 7
[  833.000450][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  834.278505][T11554] loop3: detected capacity change from 0 to 4096
[  834.397989][T11554] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  834.406641][T11554] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  834.414816][T11554] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  834.423186][T11554] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  834.431477][T11554] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00
[  834.440324][T11554] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00
[  834.448658][T11554] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00
[  834.460344][T11554] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00
[  834.469408][T11554] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00
[  834.477859][T11554] ntfs3(loop3): try to read out of volume at offset 0x3fffffe0c00
[  834.877694][ T5868] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  835.068883][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  835.082737][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  835.093519][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  835.105123][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  835.115489][ T5868] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  835.125096][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.166235][ T5868] usb 2-1: config 0 descriptor??
[  836.243881][T11580] loop5: detected capacity change from 0 to 32768
[  836.254483][T11580] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  836.442178][T11585] loop8: detected capacity change from 0 to 1024
[  836.449349][ T5868] hid-u2fzero 0003:10C4:8ACF.0019: unknown main item tag 0x0
[  836.457237][ T5868] hid-u2fzero 0003:10C4:8ACF.0019: unknown main item tag 0x0
[  836.464947][ T5868] hid-u2fzero 0003:10C4:8ACF.0019: unknown main item tag 0x0
[  836.473630][ T5868] hid-u2fzero 0003:10C4:8ACF.0019: unknown main item tag 0x0
[  836.481453][ T5868] hid-u2fzero 0003:10C4:8ACF.0019: unknown main item tag 0x0
[  836.775337][ T5868] hid-u2fzero 0003:10C4:8ACF.0019: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0
[  836.791129][ T5868] hid-u2fzero 0003:10C4:8ACF.0019: U2F Zero LED initialised
[  836.799962][ T5868] hid-u2fzero 0003:10C4:8ACF.0019: U2F Zero RNG initialised
[  836.917815][ T5868] usb 2-1: USB disconnect, device number 9
[  838.342480][T11596] fido_id[11596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  840.250879][T11615] bridge0: port 2(bridge_slave_1) entered disabled state
[  840.260793][T11615] bridge0: port 1(bridge_slave_0) entered disabled state
[  840.531000][T11615] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  840.565533][T11615] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  840.789800][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'.
[  841.707146][ T9671] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  841.725470][   T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  841.761198][   T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  841.804224][   T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  841.867802][   T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  841.963229][ T9671] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  841.974032][ T9671] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  841.984293][ T9671] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  841.993871][ T9671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.144746][ T9671] usb 2-1: config 0 descriptor??
[  842.177432][ T9671] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  842.184483][ T9671] dvb-usb: bulk message failed: -22 (3/0)
[  842.245571][ T9671] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  842.311196][ T9671] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  842.319594][ T9671] usb 2-1: media controller created
[  842.375251][ T9671] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  842.388688][T11636] dvb-usb: bulk message failed: -22 (2/0)
[  842.489518][ T9671] dvb-usb: bulk message failed: -22 (6/0)
[  842.495972][ T9671] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  842.586191][ T9671] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22
[  842.701700][T11649] loop3: detected capacity change from 0 to 1024
[  842.705327][ T9671] dvb-usb: schedule remote query interval to 150 msecs.
[  842.715775][ T9671] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  842.837517][ T9671] usb 2-1: USB disconnect, device number 10
[  843.004940][ T9671] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  843.743890][T11665] loop5: detected capacity change from 0 to 64
[  843.969375][T11664] loop1: detected capacity change from 0 to 1024
[  844.416077][T10059] Bad inode number on dev loop5: 4160749571 is out of range
[  844.464626][T10059] Bad inode number on dev loop5: 4160749571 is out of range
[  845.488558][ T9671] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  845.771389][ T9671] usb 9-1: too many configurations: 17, using maximum allowed: 8
[  846.866970][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  846.878294][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.895737][ T3555] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.167859][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.179267][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.211785][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.223775][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.269866][ T3555] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.291651][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.303292][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.378604][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.390823][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.494602][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.506132][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.558904][ T3555] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.583957][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.597030][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.624284][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.640589][ T9671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.651964][ T9671] usb 9-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  847.662459][ T9671] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.693729][ T9671] usb 9-1: config 0 descriptor??
[  847.715145][ T3555] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.230982][ T3555] bridge_slave_1: left allmulticast mode
[  848.237387][ T3555] bridge_slave_1: left promiscuous mode
[  848.244086][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.253915][ T9671] hid-led 0003:04D8:F372.001A: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.8-1/input0
[  848.439406][ T3555] bridge_slave_0: left allmulticast mode
[  848.445358][ T3555] bridge_slave_0: left promiscuous mode
[  848.452323][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.514649][ T9671] hid-led 0003:04D8:F372.001A: Greynut Luxafor initialized
[  848.638145][ T9671] usb 9-1: USB disconnect, device number 8
[  848.712915][ T4202] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  848.756015][T10321] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  848.892494][ T4202] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  848.953910][ T3889] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  848.980866][ T3889] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  849.037546][T11690] fido_id[11690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  849.068967][ T3889] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  849.114369][ T3555] bond0 (unregistering): left promiscuous mode
[  849.121329][ T3555] bond_slave_0: left promiscuous mode
[  849.128138][ T3555] bond_slave_1: left promiscuous mode
[  849.139570][ T4202] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  849.165772][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  849.172868][ T3889] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  849.220094][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  849.227056][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  849.243588][ T1287] clip:clip_start_xmit: skb_dst(skb) == NULL
[  849.249680][ T3889] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  849.254255][ T3889] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  849.274412][ T3889] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  849.285288][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  849.341011][ T3889] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  849.347988][ T3555] bond0 (unregistering): Released all slaves
[  849.380010][ T4454] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  849.391669][ T4454] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  849.431087][ T4454] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  849.495342][ T4454] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  849.590070][ T4454] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  849.654148][T10321] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  850.257344][ T5889] wlan0 speed is unknown, defaulting to 1000
[  850.263623][ T5889] infiniband syz2: ib_query_port failed (-19)
[  850.418360][ T3555] team0: left promiscuous mode
[  850.423384][ T3555] team_slave_0: left promiscuous mode
[  850.434115][ T3555] team_slave_1: left promiscuous mode
[  850.599046][ T3555] hsr_slave_0: left promiscuous mode
[  850.647825][ T3555] hsr_slave_1: left promiscuous mode
[  850.658760][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  850.668292][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0
[  850.731894][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  850.741212][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1
[  850.782731][T11708] loop1: detected capacity change from 0 to 512
[  850.889943][ T3555] veth1_macvtap: left promiscuous mode
[  850.895852][ T3555] veth0_macvtap: left promiscuous mode
[  850.902032][ T3555] veth1_vlan: left promiscuous mode
[  850.907761][ T3555] veth0_vlan: left promiscuous mode
[  850.913646][T11711] loop8: detected capacity change from 0 to 1024
[  850.930721][T11708] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  850.967284][T11708] System zones: 0-2, 18-18, 34-34
[  851.077607][T11708] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1506: bg 0: block 248: padding at end of block bitmap is not set
[  851.099705][T11711] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  851.110115][T11711] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  851.120746][T11711] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  851.195091][T11708] Quota error (device loop1): write_blk: dquota write failed
[  851.203405][T11708] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  851.214257][T11708] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1506: Failed to acquire dquot type 1
[  851.414662][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  851.425237][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  851.451003][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  851.459505][T11708] EXT4-fs (loop1): 1 truncate cleaned up
[  851.461855][T11708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  851.480491][T11708] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  851.526733][T11711] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: inode #5: comm syz.8.1508: unexpected bad inode w/o EXT4_IGET_BAD
[  851.560266][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  851.607376][T11711] EXT4-fs (loop8): no journal found
[  851.612817][T11711] EXT4-fs (loop8): can't get journal size
[  851.646720][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  851.721921][T11711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  852.217085][ T3555] team0 (unregistering): Port device team_slave_1 removed
[  852.318789][ T9346] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  852.374600][ T3555] team0 (unregistering): Port device team_slave_0 removed
[  852.513958][T11728] loop3: detected capacity change from 0 to 1024
[  852.629116][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.162795][T11742] loop1: detected capacity change from 0 to 764
[  853.329011][T11733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  853.455305][T11742] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  853.698528][T11730] tipc: Disabling bearer <eth:syzkaller0>
[  853.828081][ T5824] Bluetooth: hci0: command tx timeout
[  855.907413][ T5824] Bluetooth: hci0: command tx timeout
[  855.998105][T11715] chnl_net:caif_netlink_parms(): no params data found
[  856.308302][T11766] loop3: detected capacity change from 0 to 512
[  856.410314][T11756] loop8: detected capacity change from 0 to 8192
[  856.472989][T11766] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  856.517083][T11766] EXT4-fs (loop3): orphan cleanup on readonly fs
[  856.530709][T11766] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1521: Block bitmap for bg 0 marked uninitialized
[  856.587797][T11766] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  856.659408][T11756] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000ff00)
[  856.668140][   T30] audit: type=1800 audit(1754717148.844:73): pid=11756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1519" name="file0" dev="loop8" ino=1048661 res=0 errno=0
[  856.695425][T11756] FAT-fs (loop8): Filesystem has been set read-only
[  856.728545][T11766] EXT4-fs (loop3): 1 orphan inode deleted
[  856.737459][T11766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  856.764446][T11766] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  856.796207][T11766] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  856.800716][T11756] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000ff00)
[  856.860416][T11766] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1521: Block bitmap for bg 0 marked uninitialized
[  857.527078][T10864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.563088][T11715] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.570990][T11715] bridge0: port 1(bridge_slave_0) entered disabled state
[  857.578983][T11715] bridge_slave_0: entered allmulticast mode
[  857.588763][T11715] bridge_slave_0: entered promiscuous mode
[  857.706546][T11715] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.714132][T11715] bridge0: port 2(bridge_slave_1) entered disabled state
[  857.723570][T11715] bridge_slave_1: entered allmulticast mode
[  857.733403][T11715] bridge_slave_1: entered promiscuous mode
[  857.987586][ T5824] Bluetooth: hci0: command tx timeout
[  858.162831][T11715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  858.235630][T11715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  858.637214][T11715] team0: Port device team_slave_0 added
[  858.706208][T11715] team0: Port device team_slave_1 added
[  859.077053][T11715] batman_adv: batadv0: Adding interface: batadv_slave_0
[  859.084323][T11715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  859.111569][T11715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  859.127675][ T5868] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  859.315993][T11715] batman_adv: batadv0: Adding interface: batadv_slave_1
[  859.323432][T11715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  859.351583][T11715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  859.358398][ T5868] usb 2-1: Using ep0 maxpacket: 32
[  859.431456][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.445177][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  859.456514][ T5868] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  859.465830][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.596935][ T5868] usb 2-1: config 0 descriptor??
[  859.639390][ T5868] hub 2-1:0.0: USB hub found
[  859.836201][ T5868] hub 2-1:0.0: 1 port detected
[  859.927696][T11715] hsr_slave_0: entered promiscuous mode
[  859.938540][T11715] hsr_slave_1: entered promiscuous mode
[  859.947752][T11715] debugfs: 'hsr0' already exists in 'hsr'
[  859.954279][T11715] Cannot create hsr debugfs directory
[  860.068417][ T5824] Bluetooth: hci0: command tx timeout
[  860.277538][ T5868] usb 2-1: USB disconnect, device number 11
[  860.781202][T11809] loop3: detected capacity change from 0 to 512
[  860.835437][T11809] EXT4-fs: Ignoring removed i_version option
[  860.935541][T11809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  860.949010][T11809] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  861.279615][T11816] program syz.8.1538 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  861.434776][T10864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  861.992759][T11818] loop1: detected capacity change from 0 to 4096
[  862.037720][T11825] loop3: detected capacity change from 0 to 512
[  862.077008][ T9671] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  862.150876][T11825] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  862.167669][T11825] System zones: 0-2, 18-18, 34-34
[  862.204057][T11818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  862.275545][T11825] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1540: bg 0: block 248: padding at end of block bitmap is not set
[  862.442769][T11825] Quota error (device loop3): write_blk: dquota write failed
[  862.451154][T11825] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  862.461655][T11825] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1540: Failed to acquire dquot type 1
[  862.484304][T11818] fs-verity (loop1, inode 16): Unknown hash algorithm number: 3
[  862.489124][ T9671] usb 9-1: Using ep0 maxpacket: 8
[  862.579015][ T9671] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  862.588691][ T9671] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.597539][ T9671] usb 9-1: Product: syz
[  862.601917][ T9671] usb 9-1: Manufacturer: syz
[  862.606825][ T9671] usb 9-1: SerialNumber: syz
[  862.617776][T11825] EXT4-fs (loop3): 1 truncate cleaned up
[  862.625826][T11825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  862.639279][T11825] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  862.675428][ T9671] usb 9-1: config 0 descriptor??
[  862.711080][ T9671] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  862.720294][ T9671] usb 9-1: setting power ON
[  862.725000][ T9671] dvb-usb: bulk message failed: -22 (2/0)
[  862.753534][T11715] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  862.834486][T11715] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  862.871413][ T9671] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  862.910502][ T9671] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  862.919414][ T9671] usb 9-1: media controller created
[  862.927422][T11715] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  863.000411][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  863.000687][ T9671] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  863.013821][T11823] dvb-usb: bulk message failed: -22 (3/0)
[  863.024452][T11823] dvb-usb: bulk message failed: -22 (4/0)
[  863.033242][T11823] cxusb: i2c read failed
[  863.085264][T11715] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  863.440834][T10864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  863.523318][ T9671] usb 9-1: selecting invalid altsetting 6
[  863.530915][ T9671] usb 9-1: digital interface selection failed (-22)
[  863.538959][ T9671] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  863.588793][T11839] loop1: detected capacity change from 0 to 512
[  863.655199][T11839] EXT4-fs: Ignoring removed oldalloc option
[  863.668998][ T9671] usb 9-1: setting power OFF
[  863.673829][ T9671] dvb-usb: bulk message failed: -22 (2/0)
[  863.681495][ T9671] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  863.693269][ T9671] (NULL device *): no alternate interface
[  863.764618][T11839] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  863.958306][T11839] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #11: comm syz.1.1544: corrupted in-inode xattr: invalid ea_ino
[  863.976118][T11839] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1544: couldn't read orphan inode 11 (err -117)
[  864.055337][T11839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  864.642997][ T9671] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  864.725565][T11715] 8021q: adding VLAN 0 to HW filter on device bond0
[  864.901131][ T9671] usb 9-1: USB disconnect, device number 9
[  864.975335][T11851] loop3: detected capacity change from 0 to 512
[  865.100877][T11715] 8021q: adding VLAN 0 to HW filter on device team0
[  865.148936][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  865.232597][T10321] bridge0: port 1(bridge_slave_0) entered blocking state
[  865.240353][T10321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  865.393697][T10321] bridge0: port 2(bridge_slave_1) entered blocking state
[  865.401373][T10321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  865.984481][T11859] loop1: detected capacity change from 0 to 1024
[  866.228475][T11866] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1554'.
[  866.238086][T11866] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1554'.
[  867.432906][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1556'.
[  867.665539][T11877] loop8: detected capacity change from 0 to 47
[  868.289842][T11883] usb usb5: usbfs: process 11883 (syz.3.1558) did not claim interface 0 before use
[  868.892004][T11893] 9pnet_fd: Insufficient options for proto=fd
[  868.923092][T11715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  870.249134][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'.
[  870.455381][T11900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  870.493870][T11906] syzkaller0: entered promiscuous mode
[  870.503464][T11906] syzkaller0: entered allmulticast mode
[  870.533923][T11913] loop3: detected capacity change from 0 to 128
[  870.551029][T11896] tipc: Resetting bearer <eth:syzkaller0>
[  870.607206][T11896] tipc: Disabling bearer <eth:syzkaller0>
[  870.648907][T11913] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  870.756632][T11913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  870.850565][T11913] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  870.861128][T11913] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null.
[  871.775917][T11924] loop1: detected capacity change from 0 to 256
[  872.161336][T11927] loop8: detected capacity change from 0 to 512
[  872.169861][T11924] FAT-fs (loop1): Directory bread(block 64) failed
[  872.177080][T11924] FAT-fs (loop1): Directory bread(block 65) failed
[  872.183991][T11924] FAT-fs (loop1): Directory bread(block 66) failed
[  872.191077][T11924] FAT-fs (loop1): Directory bread(block 67) failed
[  872.198319][T11924] FAT-fs (loop1): Directory bread(block 68) failed
[  872.205182][T11924] FAT-fs (loop1): Directory bread(block 69) failed
[  872.212229][T11924] FAT-fs (loop1): Directory bread(block 70) failed
[  872.219092][T11924] FAT-fs (loop1): Directory bread(block 71) failed
[  872.226018][T11924] FAT-fs (loop1): Directory bread(block 72) failed
[  872.234022][T11924] FAT-fs (loop1): Directory bread(block 73) failed
[  872.401192][T11930] loop3: detected capacity change from 0 to 1024
[  872.432671][T11927] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  872.479372][T11934] syz.1.1567: attempt to access beyond end of device
[  872.479372][T11934] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256
[  872.494878][T11934] syz.1.1567: attempt to access beyond end of device
[  872.494878][T11934] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256
[  872.530479][T11927] System zones: 0-2, 18-18, 34-34
[  872.621374][T11927] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1570: bg 0: block 248: padding at end of block bitmap is not set
[  872.725645][T11927] Quota error (device loop8): write_blk: dquota write failed
[  872.734710][T11927] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  872.745367][T11927] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.1570: Failed to acquire dquot type 1
[  873.233741][T11927] EXT4-fs (loop8): 1 truncate cleaned up
[  873.244383][T11927] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  873.258325][T11927] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  873.580617][T11715] veth0_vlan: entered promiscuous mode
[  873.862277][T11715] veth1_vlan: entered promiscuous mode
[  873.953988][T11946] loop1: detected capacity change from 0 to 512
[  874.096952][T11946] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  874.232919][T11715] veth0_macvtap: entered promiscuous mode
[  874.256758][T11946] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1572: invalid indirect mapped block 4294967295 (level 0)
[  874.311284][T11715] veth1_macvtap: entered promiscuous mode
[  874.362028][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'.
[  874.389364][T11946] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1572: invalid indirect mapped block 4294967295 (level 1)
[  874.503451][T11946] EXT4-fs (loop1): 1 orphan inode deleted
[  874.509790][T11946] EXT4-fs (loop1): 1 truncate cleaned up
[  874.517874][T11946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  874.565174][T11715] batman_adv: batadv0: Interface activated: batadv_slave_0
[  874.660593][T11715] batman_adv: batadv0: Interface activated: batadv_slave_1
[  874.680214][ T9346] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  874.745991][ T4202] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  874.885003][ T4202] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  874.976648][ T3555] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  874.989264][   T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  875.234295][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  878.452107][T11985] loop8: detected capacity change from 0 to 512
[  878.773839][T11985] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  879.374730][T11996] loop3: detected capacity change from 0 to 1024
[  879.496812][ T9367] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  879.687520][ T9367] usb 2-1: Using ep0 maxpacket: 8
[  879.767523][ T9367] usb 2-1: config 150 has an invalid interface number: 203 but max is 1
[  879.776156][ T9367] usb 2-1: config 150 has no interface number 1
[  879.782922][ T9367] usb 2-1: config 150 interface 203 has no altsetting 0
[  879.791272][ T9367] usb 2-1: config 150 interface 0 has no altsetting 0
[  879.905106][ T9367] usb 2-1: New USB device found, idVendor=15b8, idProduct=6002, bcdDevice= 5.00
[  879.918541][ T9367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.927974][ T9367] usb 2-1: Product: syz
[  879.932338][ T9367] usb 2-1: Manufacturer: syz
[  879.937516][ T9367] usb 2-1: SerialNumber: syz
[  880.090073][ T3889] hfsplus: b-tree write err: -5, ino 4
[  880.358732][ T9367] gspca_main: vc032x-2.14.0 probing 15b8:6002
[  880.425274][ T9367] gspca_vc032x: reg_r err -71
[  880.430840][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.437360][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.442820][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.448551][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.454003][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.459573][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.472582][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.478287][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.483742][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.489313][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.494852][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.500500][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.505951][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.511743][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.517270][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.522719][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.529733][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.536679][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.542127][ T9367] gspca_vc032x: I2c Bus Busy Wait 00
[  880.549454][ T9367] gspca_vc032x: Unknown sensor...
[  880.554921][ T9367] vc032x 2-1:150.0: probe with driver vc032x failed with error -22
[  880.628147][ T9367] usb 2-1: USB disconnect, device number 12
[  880.850976][T12010] loop8: detected capacity change from 0 to 1024
[  881.506011][T12024] loop1: detected capacity change from 0 to 16
[  881.592155][T12024] erofs (device loop1): algorithm 1 isn't enabled on this kernel
[  884.420390][ T4202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  884.429422][ T4202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  884.694414][ T4202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  884.703558][ T4202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  886.492475][T12075] loop3: detected capacity change from 0 to 256
[  886.600279][T12075] exfat: Deprecated parameter 'namecase'
[  886.606741][T12075] exfat: Deprecated parameter 'utf8'
[  886.761664][T12075] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  886.947478][T12077] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  888.008070][T12085] loop8: detected capacity change from 0 to 32768
[  888.053645][T12085] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  888.193706][T12091] loop6: detected capacity change from 0 to 1024
[  889.310478][T12085] XFS (loop8): Ending clean mount
[  889.336094][T12085] XFS (loop8): Quotacheck needed: Please wait.
[  889.551029][T12085] XFS (loop8): Quotacheck: Done.
[  889.878675][ T9346] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  890.075451][T12107] loop3: detected capacity change from 0 to 512
[  890.273842][T12107] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  890.347838][T12107] System zones: 0-2, 18-18, 34-34
[  890.461541][T12107] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1610: bg 0: block 248: padding at end of block bitmap is not set
[  890.756702][T12107] Quota error (device loop3): write_blk: dquota write failed
[  890.764809][T12107] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  890.779767][T12107] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1610: Failed to acquire dquot type 1
[  891.026645][T12119] loop8: detected capacity change from 0 to 256
[  891.199010][T12107] EXT4-fs (loop3): 1 truncate cleaned up
[  891.207913][T12107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  891.221289][T12107] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  891.260698][T12114] loop1: detected capacity change from 0 to 32768
[  891.680647][T12123] loop6: detected capacity change from 0 to 256
[  891.777769][T12123] exfat: Deprecated parameter 'utf8'
[  891.783341][T12123] exfat: Deprecated parameter 'utf8'
[  891.789854][T12123] exfat: Deprecated parameter 'utf8'
[  892.009901][T12123] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  892.298889][T10864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  892.459201][T12114] lmLogOpen: exit(-6)
[  892.463504][T12114] jfs_mount_rw failed, return code = -6
[  892.488948][T12130] loop8: detected capacity change from 0 to 256
[  892.625544][T12130] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  892.637746][T12130] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  892.957369][T12130] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  893.021466][T12135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1617'.
[  893.930576][T12147] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1623'.
[  894.464208][T12150] loop6: detected capacity change from 0 to 1024
[  895.071258][T12160] loop3: detected capacity change from 0 to 512
[  895.325457][T12160] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  895.397326][T12160] System zones: 0-2, 18-18, 34-34
[  895.507019][ T5823] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  895.515828][ T5823] Bluetooth: hci4: Injecting HCI hardware error event
[  895.545737][T12160] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1627: bg 0: block 248: padding at end of block bitmap is not set
[  895.666804][T12160] Quota error (device loop3): write_blk: dquota write failed
[  895.674987][T12160] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  895.685755][T12160] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1627: Failed to acquire dquot type 1
[  896.125777][T12160] EXT4-fs (loop3): 1 truncate cleaned up
[  896.136108][T12160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  896.149748][T12160] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  896.679586][ T5823] Bluetooth: hci4: unexpected event for opcode 0x1003
[  897.355423][ T5824] Bluetooth: hci4: hardware error 0x00
[  897.600862][T10864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  899.103572][T12204] loop8: detected capacity change from 0 to 512
[  899.286185][T12204] EXT4-fs (loop8): orphan cleanup on readonly fs
[  899.353652][T12204] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  899.365502][T12204] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  899.375717][T12204] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.1640: Failed to acquire dquot type 1
[  899.439497][ T5824] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  899.521643][T12204] EXT4-fs (loop8): 1 truncate cleaned up
[  899.550447][T12204] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  899.612467][T12210] loop3: detected capacity change from 0 to 256
[  899.740968][T12204] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  899.878299][T12210] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  899.893656][T12210] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  900.043136][T12210] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  900.067554][   T30] audit: type=1800 audit(1754717192.244:74): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1642" name="file1" dev="loop3" ino=1048673 res=0 errno=0
[  900.145321][ T9346] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  900.802608][T12228] loop6: detected capacity change from 0 to 8
[  901.354733][T12225] loop8: detected capacity change from 0 to 32768
[  901.530130][ T7294] udevd[7294]: incorrect cramfs checksum on /dev/loop6
[  901.564833][T12225] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  901.565002][T12225]   allowing incompatible features above 0.0: (unknown version)
[  901.565102][T12225]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  901.610960][T12225] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  901.619534][T12225] bcachefs (loop8): initializing new filesystem
[  901.641846][T12225] bcachefs (loop8): going read-write
[  901.748671][T12225] bcachefs (loop8): marking superblocks
[  901.810477][T12225] bcachefs (loop8): initializing freespace
[  901.843880][T12225] bcachefs (loop8): done initializing freespace
[  901.864989][T12225] bcachefs (loop8): reading snapshots table
[  901.871758][T12225] bcachefs (loop8): reading snapshots done
[  902.021981][T12225] bcachefs (loop8): done starting filesystem
[  902.089476][ T7294] udevd[7294]: incorrect cramfs checksum on /dev/loop6
[  902.269505][T12247] loop6: detected capacity change from 0 to 256
[  902.543294][ T9346] bcachefs (loop8): shutting down
[  902.548897][ T9346] bcachefs (loop8): going read-only
[  902.557851][ T9346] bcachefs (loop8): finished waiting for writes to stop
[  902.854270][ T9346] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3
[  903.361434][ T9346] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  903.456238][ T9346] bcachefs (loop8): clean shutdown complete, journal seq 4
[  903.550788][ T9346] bcachefs (loop8): marking filesystem clean
[  904.008042][ T9346] bcachefs (loop8): shutdown complete
[  904.960410][ T9367] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  905.137087][ T9367] usb 4-1: Using ep0 maxpacket: 16
[  905.145821][ T9367] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  905.145994][ T9367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  905.183462][ T9367] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  905.216189][ T9367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.216891][ T9367] usb 4-1: Product: syz
[  905.216997][ T9367] usb 4-1: Manufacturer: syz
[  905.217104][ T9367] usb 4-1: SerialNumber: syz
[  905.396253][ T9367] usb 4-1: config 0 descriptor??
[  905.439259][ T9367] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  905.439443][ T9367] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  906.049750][ T9367] em28xx 4-1:0.0: chip ID is em2870
[  906.268414][ T5868] usb 4-1: USB disconnect, device number 20
[  906.276931][ T5868] em28xx 4-1:0.0: Disconnecting em28xx
[  906.280194][ T5868] em28xx 4-1:0.0: Freeing device
[  907.152941][T12293] loop1: detected capacity change from 0 to 1024
[  907.301694][T12293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  907.779106][   T30] audit: type=1800 audit(1754717199.874:75): pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1669" name="file1" dev="loop1" ino=15 res=0 errno=0
[  908.364428][T12304] loop6: detected capacity change from 0 to 32768
[  908.374554][T12304] btrfs: Deprecated parameter 'usebackuproot'
[  908.381206][T12304] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  908.431025][T12304] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1672 (12304)
[  908.473864][T12304] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  908.479761][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  908.484800][T12304] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  908.507013][T12304] BTRFS info (device loop6): using free-space-tree
[  908.808639][T12304] BTRFS info (device loop6): rebuilding free space tree
[  909.374717][T11715] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  909.499870][T12332] loop3: detected capacity change from 0 to 512
[  909.730366][T12332] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  909.810410][T12332] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  909.819424][T12332] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.1675: iget: bad i_size value: 12154757448730
[  909.887228][T12332] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1675: couldn't read orphan inode 13 (err -117)
[  909.973043][T12332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  910.554239][T12339] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  910.660563][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  910.668047][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  910.684994][ T1287] clip:clip_start_xmit: skb_dst(skb) == NULL
[  910.831249][T10864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  912.110324][T12358] loop8: detected capacity change from 0 to 32768
[  912.931417][T12366] loop1: detected capacity change from 0 to 32768
[  913.079215][T12366] JBD2: Ignoring recovery information on journal
[  913.173198][T12366] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  913.472239][T10356] ocfs2: Unmounting device (7,1) on (node local)
[  915.090233][T12391] loop8: detected capacity change from 0 to 1024
[  915.220202][T12391] EXT4-fs: Ignoring removed orlov option
[  915.430012][T12392] loop6: detected capacity change from 0 to 32768
[  915.437892][T12391] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  915.520281][T12391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  915.670660][T12391] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  916.169470][ T9346] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  916.608935][T12409] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1699'.
[  917.026959][ T9368] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  917.224107][ T9368] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  917.235438][ T9368] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  917.249017][ T9368] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  917.258482][ T9368] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.792119][ T9368] usb 9-1: usb_control_msg returned -32
[  917.799765][ T9368] usbtmc 9-1:16.0: can't read capabilities
[  920.019594][T12457] nbd1: detected capacity change from 0 to 7
[  920.111178][ T9367] usb 9-1: USB disconnect, device number 10
[  920.128156][ T5824] block nbd1: Receive control failed (result -32)
[  920.640715][T12456] loop3: detected capacity change from 0 to 32768
[  920.652961][T12456] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1712 (12456)
[  920.681866][T12456] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  920.692616][T12456] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  920.703000][T12456] BTRFS info (device loop3): using free-space-tree
[  921.154608][   T30] audit: type=1800 audit(1754717213.324:76): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1712" name="bus" dev="loop3" ino=263 res=0 errno=0
[  921.294404][ T7294] block nbd1: Dead connection, failed to find a fallback
[  921.301824][ T7294] block nbd1: shutting down sockets
[  921.307419][ T7294] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.316814][ T7294] Buffer I/O error on dev nbd1, logical block 0, async page read
[  921.324994][ T7294] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.334569][ T7294] Buffer I/O error on dev nbd1, logical block 1, async page read
[  921.342828][ T7294] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.353106][ T7294] Buffer I/O error on dev nbd1, logical block 2, async page read
[  921.361240][ T7294] Buffer I/O error on dev nbd1, logical block 3, async page read
[  921.369612][ T7294] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.379117][ T7294] Buffer I/O error on dev nbd1, logical block 0, async page read
[  921.389842][ T7294] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.400129][ T7294] Buffer I/O error on dev nbd1, logical block 1, async page read
[  921.408378][ T7294] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.417802][ T7294] Buffer I/O error on dev nbd1, logical block 2, async page read
[  921.426103][ T7294] Buffer I/O error on dev nbd1, logical block 3, async page read
[  921.434682][ T7294] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.444071][ T7294] Buffer I/O error on dev nbd1, logical block 0, async page read
[  921.452286][ T7294] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.461702][ T7294] Buffer I/O error on dev nbd1, logical block 1, async page read
[  921.469969][ T7294] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.479734][ T7294] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  921.491394][ T7294] ldm_validate_partition_table(): Disk read failed.
[  921.501166][ T7294] Dev nbd1: unable to read RDB block 0
[  921.509361][ T7294]  nbd1: unable to read partition table
[  921.643828][T12464] loop8: detected capacity change from 0 to 32768
[  921.656929][T12464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1714 (12464)
[  921.682955][ T7294] nbd1: partition table beyond EOD, truncated
[  921.746803][ T7294] ldm_validate_partition_table(): Disk read failed.
[  921.755980][ T7294] Dev nbd1: unable to read RDB block 0
[  921.763787][ T7294]  nbd1: unable to read partition table
[  921.822182][ T7294] nbd1: partition table beyond EOD, truncated
[  921.909495][T10864] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  922.011223][T12464] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  922.022161][T12464] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  922.031237][T12464] BTRFS info (device loop8): using free-space-tree
[  922.767392][ T9346] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  923.409769][T12516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input23
[  926.562053][T12554] loop1: detected capacity change from 0 to 1024
[  926.970327][T12554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  927.098782][T12550] loop3: detected capacity change from 0 to 40427
[  927.139709][T12550] F2FS-fs (loop3): build fault injection rate: 14
[  927.146562][T12550] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  927.157803][T12550] F2FS-fs (loop3): invalid crc value
[  927.260230][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xe27/0xf80
[  927.304984][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xe27/0xf80
[  927.583544][T12550] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  927.593669][T12550] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  927.634846][T12550] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  927.683986][T12550] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0
[  927.738089][T12550] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_symlink+0x316/0xfc0
[  927.819304][T12567] loop8: detected capacity change from 0 to 256
[  927.881289][T10864] syz-executor: attempt to access beyond end of device
[  927.881289][T10864] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  927.895931][T10864] CPU: 1 UID: 0 PID: 10864 Comm: syz-executor Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[  927.896090][T10864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  927.896170][T10864] Call Trace:
[  927.896226][T10864]  <TASK>
[  927.896279][T10864]  __dump_stack+0x26/0x30
[  927.896464][T10864]  dump_stack_lvl+0x1df/0x270
[  927.896652][T10864]  dump_stack+0x1e/0x25
[  927.896815][T10864]  f2fs_handle_critical_error+0xa6f/0xc20
[  927.897034][T10864]  f2fs_stop_checkpoint+0x65/0x80
[  927.897225][T10864]  f2fs_write_end_io+0x101c/0x1bc0
[  927.897469][T10864]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  927.897654][T10864]  bio_endio+0xe27/0xf80
[  927.897858][T10864]  submit_bio_noacct+0x214/0x2710
[  927.898110][T10864]  submit_bio+0x5a9/0x5d0
[  927.898336][T10864]  f2fs_submit_write_bio+0x92/0x250
[  927.898520][T10864]  __submit_merged_bio+0x16f/0x6a0
[  927.898690][T10864]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  927.898878][T10864]  __submit_merged_write_cond+0x458/0x9a0
[  927.899076][T10864]  f2fs_write_data_pages+0x4bb2/0x5480
[  927.899351][T10864]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  927.899573][T10864]  ? kmsan_get_metadata+0xfb/0x160
[  927.899740][T10864]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  927.899919][T10864]  ? free_unref_folios+0x29ad/0x2a20
[  927.900129][T10864]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  927.900348][T10864]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  927.900584][T10864]  ? kmsan_get_metadata+0xfb/0x160
[  927.900751][T10864]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  927.900923][T10864]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  927.901105][T10864]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  927.901290][T10864]  do_writepages+0x3f2/0x860
[  927.901460][T10864]  ? _raw_spin_unlock+0x30/0x50
[  927.901654][T10864]  ? wbc_attach_and_unlock_inode+0x131/0x680
[  927.901887][T10864]  filemap_fdatawrite+0x207/0x260
[  927.902146][T10864]  f2fs_sync_dirty_inodes+0x2ab/0x9e0
[  927.902394][T10864]  f2fs_write_checkpoint+0xfe2/0x2b00
[  927.902730][T10864]  kill_f2fs_super+0x2ff/0x970
[  927.902956][T10864]  ? __pfx_kill_f2fs_super+0x10/0x10
[  927.903151][T10864]  deactivate_locked_super+0xcb/0x3c0
[  927.903326][T10864]  deactivate_super+0x12f/0x140
[  927.903496][T10864]  cleanup_mnt+0x6fb/0x780
[  927.903688][T10864]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  927.903931][T10864]  ? __pfx___cleanup_mnt+0x10/0x10
[  927.904127][T10864]  __cleanup_mnt+0x22/0x30
[  927.904319][T10864]  task_work_run+0x209/0x2b0
[  927.904504][T10864]  exit_to_user_mode_loop+0x2a6/0x330
[  927.904679][T10864]  do_syscall_64+0x1e3/0x210
[  927.904846][T10864]  ? irqentry_exit+0x16/0x60
[  927.904987][T10864]  ? clear_bhb_loop+0x40/0x90
[  927.905147][T10864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  927.905304][T10864] RIP: 0033:0x7ff48ab8ff17
[  927.905476][T10864] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  927.905604][T10864] RSP: 002b:00007ffd4685e288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  927.905746][T10864] RAX: 0000000000000000 RBX: 00007ff48ac11c05 RCX: 00007ff48ab8ff17
[  927.905849][T10864] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4685e340
[  927.905939][T10864] RBP: 00007ffd4685e340 R08: 0000000000000000 R09: 0000000000000000
[  927.906034][T10864] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd4685f3d0
[  927.906131][T10864] R13: 00007ff48ac11c05 R14: 00000000000e27f5 R15: 00007ffd4685f410
[  927.906267][T10864]  </TASK>
[  928.254575][T10864] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  928.505872][T10356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  929.221839][T12567] FAT-fs (loop8): Directory bread(block 64) failed
[  929.229157][T12567] FAT-fs (loop8): Directory bread(block 65) failed
[  929.236070][T12567] FAT-fs (loop8): Directory bread(block 66) failed
[  929.243233][T12567] FAT-fs (loop8): Directory bread(block 67) failed
[  929.250377][T12567] FAT-fs (loop8): Directory bread(block 68) failed
[  929.257301][T12567] FAT-fs (loop8): Directory bread(block 69) failed
[  929.264238][T12567] FAT-fs (loop8): Directory bread(block 70) failed
[  929.271251][T12567] FAT-fs (loop8): Directory bread(block 71) failed
[  929.279925][T12567] FAT-fs (loop8): Directory bread(block 72) failed
[  929.287441][T12567] FAT-fs (loop8): Directory bread(block 73) failed
[  934.469525][T12608] loop6: detected capacity change from 0 to 32768
[  934.525717][T12608] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  934.558451][ T9367] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  934.560802][T12608] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  934.701609][T12613] =====================================================
[  934.711314][T12613] BUG: KMSAN: uninit-value in sctp_inq_pop+0x14dc/0x19e0
[  934.721936][T12613]  sctp_inq_pop+0x14dc/0x19e0
[  934.727622][T12613]  sctp_assoc_bh_rcv+0x1a0/0xbc0
[  934.732879][T12613]  sctp_inq_push+0x2a6/0x350
[  934.738295][T12613]  sctp_backlog_rcv+0x3c7/0xda0
[  934.743352][T12613]  sk_backlog_rcv+0x142/0x420
[  934.751713][T12613]  __release_sock+0x1d3/0x330
[  934.760220][T12613]  release_sock+0x6b/0x270
[  934.764866][T12613]  sctp_sendmsg+0x3a2b/0x49f0
[  934.770748][T12613]  inet_sendmsg+0x26c/0x2a0
[  934.775440][T12613]  __sock_sendmsg+0x278/0x3d0
[  934.780623][T12613]  __sys_sendto+0x593/0x720
[  934.785361][T12613]  __x64_sys_sendto+0x130/0x200
[  934.794331][T12613]  x64_sys_call+0x3910/0x3e20
[  934.799460][T12613]  do_syscall_64+0xd9/0x210
[  934.804151][T12613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.811836][T12613] 
[  934.814254][T12613] Uninit was stored to memory at:
[  934.819932][T12613]  sctp_inq_pop+0x144a/0x19e0
[  934.824875][T12613]  sctp_assoc_bh_rcv+0x1a0/0xbc0
[  934.831922][T12613]  sctp_inq_push+0x2a6/0x350
[  934.837005][T12613]  sctp_backlog_rcv+0x3c7/0xda0
[  934.842055][T12613]  sk_backlog_rcv+0x142/0x420
[  934.847160][T12613]  __release_sock+0x1d3/0x330
[  934.852190][T12613]  release_sock+0x6b/0x270
[  934.857010][T12613]  sctp_sendmsg+0x3a2b/0x49f0
[  934.861849][T12613]  inet_sendmsg+0x26c/0x2a0
[  934.866712][T12613]  __sock_sendmsg+0x278/0x3d0
[  934.871589][T12613]  __sys_sendto+0x593/0x720
[  934.876494][T12613]  __x64_sys_sendto+0x130/0x200
[  934.881581][T12613]  x64_sys_call+0x3910/0x3e20
[  934.887064][T12613]  do_syscall_64+0xd9/0x210
[  934.891772][T12613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.898754][T12613] 
[  934.901350][T12613] Uninit was created at:
[  934.905867][T12613]  __kmalloc_node_track_caller_noprof+0x96d/0x12f0
[  934.914211][T12613]  kmalloc_reserve+0x22f/0x4b0
[  934.919790][T12613]  __alloc_skb+0x347/0x7d0
[  934.924455][T12613]  sctp_packet_transmit+0x18a1/0x46d0
[  934.930117][T12613]  sctp_outq_flush+0x1c7d/0x67c0
[  934.935335][T12613]  sctp_outq_uncork+0x9e/0xc0
[  934.940480][T12613]  sctp_do_sm+0x8c8e/0x9720
[  934.945184][T12613]  sctp_assoc_bh_rcv+0x88b/0xbc0
[  934.951845][T12613]  sctp_inq_push+0x2a6/0x350
[  934.956871][T12613]  sctp_backlog_rcv+0x3c7/0xda0
[  934.961901][T12613]  sk_backlog_rcv+0x142/0x420
[  934.967002][T12613]  __release_sock+0x1d3/0x330
[  934.971861][T12613]  release_sock+0x6b/0x270
[  934.977231][T12613]  sctp_sendmsg+0x3a2b/0x49f0
[  934.982079][T12613]  inet_sendmsg+0x26c/0x2a0
[  934.986204][T11715] ocfs2: Unmounting device (7,6) on (node local)
[  934.986873][T12613]  __sock_sendmsg+0x278/0x3d0
[  934.998143][T12613]  __sys_sendto+0x593/0x720
[  935.002865][T12613]  __x64_sys_sendto+0x130/0x200
[  935.008166][T12613]  x64_sys_call+0x3910/0x3e20
[  935.014657][T12613]  do_syscall_64+0xd9/0x210
[  935.019904][T12613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.025989][T12613] 
[  935.028583][T12613] CPU: 0 UID: 0 PID: 12613 Comm: syz.4.1753 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[  935.040652][T12613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  935.051012][T12613] =====================================================
[  935.058618][T12613] Disabling lock debugging due to kernel taint
[  935.064900][T12613] Kernel panic - not syncing: kmsan.panic set ...
[  935.071528][T12613] CPU: 0 UID: 0 PID: 12613 Comm: syz.4.1753 Tainted: G    B               6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[  935.085046][T12613] Tainted: [B]=BAD_PAGE
[  935.089311][T12613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  935.099518][T12613] Call Trace:
[  935.102919][T12613]  <TASK>
[  935.105976][T12613]  __dump_stack+0x26/0x30
[  935.110546][T12613]  dump_stack_lvl+0x53/0x270
[  935.115377][T12613]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  935.121405][T12613]  dump_stack+0x1e/0x25
[  935.125777][T12613]  vpanic+0x361/0xc50
[  935.129991][T12613]  panic+0x15d/0x160
[  935.134234][T12613]  kmsan_report+0x31c/0x320
[  935.139021][T12613]  ? __msan_warning+0x1b/0x30
[  935.143862][T12613]  ? sctp_inq_pop+0x14dc/0x19e0
[  935.148896][T12613]  ? sctp_assoc_bh_rcv+0x1a0/0xbc0
[  935.154188][T12613]  ? sctp_inq_push+0x2a6/0x350
[  935.159111][T12613]  ? sctp_backlog_rcv+0x3c7/0xda0
[  935.164301][T12613]  ? sk_backlog_rcv+0x142/0x420
[  935.169345][T12613]  ? __release_sock+0x1d3/0x330
[  935.174363][T12613]  ? release_sock+0x6b/0x270
[  935.179142][T12613]  ? sctp_sendmsg+0x3a2b/0x49f0
[  935.184148][T12613]  ? inet_sendmsg+0x26c/0x2a0
[  935.188961][T12613]  ? __sock_sendmsg+0x278/0x3d0
[  935.193980][T12613]  ? __sys_sendto+0x593/0x720
[  935.198861][T12613]  ? __x64_sys_sendto+0x130/0x200
[  935.204124][T12613]  ? x64_sys_call+0x3910/0x3e20
[  935.209175][T12613]  ? do_syscall_64+0xd9/0x210
[  935.214212][T12613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.220534][T12613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.226782][T12613]  ? kmsan_get_metadata+0xfb/0x160
[  935.232112][T12613]  ? kmsan_get_metadata+0xfb/0x160
[  935.237399][T12613]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  935.243981][T12613]  ? kmsan_get_metadata+0xfb/0x160
[  935.249263][T12613]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  935.255260][T12613]  ? kmsan_get_metadata+0xfb/0x160
[  935.260708][T12613]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  935.266710][T12613]  ? kmsan_get_metadata+0xfb/0x160
[  935.272022][T12613]  __msan_warning+0x1b/0x30
[  935.276690][T12613]  sctp_inq_pop+0x14dc/0x19e0
[  935.281560][T12613]  sctp_assoc_bh_rcv+0x1a0/0xbc0
[  935.286684][T12613]  ? kmsan_get_metadata+0xfb/0x160
[  935.291988][T12613]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  935.297977][T12613]  ? __pfx_sctp_assoc_bh_rcv+0x10/0x10
[  935.303606][T12613]  sctp_inq_push+0x2a6/0x350
[  935.308371][T12613]  sctp_backlog_rcv+0x3c7/0xda0
[  935.313395][T12613]  ? kmsan_get_metadata+0xfb/0x160
[  935.318710][T12613]  ? __pfx_sctp_backlog_rcv+0x10/0x10
[  935.324244][T12613]  sk_backlog_rcv+0x142/0x420
[  935.329126][T12613]  __release_sock+0x1d3/0x330
[  935.333987][T12613]  release_sock+0x6b/0x270
[  935.338604][T12613]  sctp_sendmsg+0x3a2b/0x49f0
[  935.343425][T12613]  ? kmsan_save_stack_with_flags+0x20/0x60
[  935.349549][T12613]  ? __pfx_sctp_sendmsg+0x10/0x10
[  935.354721][T12613]  inet_sendmsg+0x26c/0x2a0
[  935.359377][T12613]  __sock_sendmsg+0x278/0x3d0
[  935.364335][T12613]  __sys_sendto+0x593/0x720
[  935.369053][T12613]  ? do_futex+0x3a1/0x480
[  935.373563][T12613]  ? kmsan_get_metadata+0xfb/0x160
[  935.378845][T12613]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  935.384873][T12613]  __x64_sys_sendto+0x130/0x200
[  935.389958][T12613]  x64_sys_call+0x3910/0x3e20
[  935.394843][T12613]  do_syscall_64+0xd9/0x210
[  935.399519][T12613]  ? irqentry_exit+0x16/0x60
[  935.404258][T12613]  ? clear_bhb_loop+0x40/0x90
[  935.409104][T12613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.415172][T12613] RIP: 0033:0x7f82cf98ebe9
[  935.419704][T12613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  935.439574][T12613] RSP: 002b:00007f82d076a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  935.448168][T12613] RAX: ffffffffffffffda RBX: 00007f82cfbb5fa0 RCX: 00007f82cf98ebe9
[  935.456294][T12613] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  935.464402][T12613] RBP: 00007f82cfa11e19 R08: 000020000005ffe4 R09: 000000000000001c
[  935.472507][T12613] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000000
[  935.480674][T12613] R13: 00007f82cfbb6038 R14: 00007f82cfbb5fa0 R15: 00007ffe55d6ac08
[  935.488824][T12613]  </TASK>
[  935.492327][T12613] Kernel Offset: disabled
[  935.496722][T12613] Rebooting in 86400 seconds..