last executing test programs:

2m50.141654169s ago: executing program 0 (id=1):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000100)={[{@errors_continue}, {@nodiscard}, {@errors_continue}, {@order_relaxed}, {@order_relaxed}, {@order_relaxed}, {@discard}, {@norecovery}, {@nobarrier}]}, 0x1, 0xd99, &(0x7f0000000e80)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
getdents(r1, &(0x7f0000000200)=""/76, 0x4c)

2m49.431632753s ago: executing program 0 (id=10):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_create1(0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

2m34.284550925s ago: executing program 32 (id=10):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_create1(0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

2m9.164519913s ago: executing program 4 (id=135):
creat(&(0x7f0000000080)='./file0\x00', 0x248)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
creat(&(0x7f0000000380)='./file0\x00', 0x2000000)

2m7.713874734s ago: executing program 4 (id=140):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x8, 0x1011, 0x0, 0x0}], 0x1})

2m1.73209641s ago: executing program 4 (id=151):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}], 0x6, 0x20, 0x0)

1m58.50720223s ago: executing program 4 (id=166):
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x7}}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x12b)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r1, &(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f0000000040)='./file0/../file0\x00', 0x0)
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)

1m58.178512961s ago: executing program 4 (id=169):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x1, 0x0)
cachestat(r0, &(0x7f0000000100)={0x86de, 0x4}, &(0x7f0000000500), 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0)
ftruncate(r2, 0x8800000)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0xffffffff, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1m56.766028136s ago: executing program 4 (id=177):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)

1m54.334553184s ago: executing program 33 (id=177):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)

15.85923254s ago: executing program 5 (id=354):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x4004)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1a, 0xc9, 0x80}}}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x4000)

12.562877155s ago: executing program 5 (id=359):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a918d9678f0c14dceff81869199bbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d", 0xa6}, {&(0x7f00000004c0)="d3e955810cc890ed04c8917c975b7617062049e4d95030c4e4293924fedf7de74876c6d350c0a534858dce18fc2264ada02a300f146da94b489da57913fed449b5e3b1d723edd45d94ccd7c2192590ae9c2731af6f782779a54184faf25dbff145eb6d7924b19fa4450be6ad522a44c920ef6908484c31fa1fee8f43bb05e17e1312ebb68fb6bb832d0ec84e85d55c0c1b6272d65de01ef8a110e7", 0x9b}], 0x2}}], 0x1, 0x0)
sendto$inet(r3, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

12.544040498s ago: executing program 3 (id=360):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='barrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f626172726965722c63726561746f723dff60f3832c666f726363696e7569742c756d61736b3d30303030303030303030303030303030303030303030352c747970653db0dbd4672c669f554aa23e3a"], 0x1, 0x6e8, &(0x7f0000001f80)="$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")
mkdir(0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x14}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
close(r6)

12.421918336s ago: executing program 2 (id=361):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
syz_open_dev$sg(0x0, 0x0, 0x8002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)

11.320528126s ago: executing program 5 (id=362):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000002640)=""/4107, 0x100b, 0x535)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x0, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x0, 0x5a}, 0x28)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r4, &(0x7f0000000040), 0x10)

9.784567216s ago: executing program 1 (id=363):
fchown(0xffffffffffffffff, 0x0, 0xee01)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f00002f7000/0x2000)=nil, 0x2000, 0x3)
socket$inet6(0xa, 0x3, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xca)
socket$inet_tcp(0x2, 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x33)

9.772242637s ago: executing program 2 (id=364):
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
socket(0x2b, 0x1, 0x0)
r6 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
pread64(r6, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004)

7.831011453s ago: executing program 3 (id=365):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000600)=""/102400, 0x19000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8000)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0)
pipe2$watch_queue(&(0x7f00000001c0), 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x300000000000000)
setrlimit(0xe, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = open(0x0, 0x48141, 0x8)
fcntl$setlease(r3, 0x400, 0x1)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

7.827295293s ago: executing program 5 (id=366):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2ee480, 0x0)
r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xe713, 0x8, 0x0, 0x140})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0)
r1 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r4, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0)
mount(&(0x7f0000000040)=@md0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000000)='pvfs2\x00', 0x480, 0x0)
close_range(r1, 0xffffffffffffffff, 0x200000000000000)

7.76202023s ago: executing program 2 (id=367):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12)
r1 = syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000002c0))
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.393151791s ago: executing program 2 (id=368):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$phonet(0x23, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$tipc(0x1e, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet(0x2, 0x80001, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

6.378419977s ago: executing program 1 (id=369):
r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
close(r0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r6=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x13, r4}, 0x10)

6.273842672s ago: executing program 3 (id=370):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f00000005c0)="f4", 0x0}, 0x20)

5.642497183s ago: executing program 2 (id=371):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
open(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x201008, 0x0)
chdir(0x0)

5.631473596s ago: executing program 3 (id=372):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x3, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x3, 0x7f)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r3], 0x20}}, 0x0)

5.408174412s ago: executing program 5 (id=373):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setrlimit(0x6, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8000000000101040000000000000000020000002400018014000180080001006401010208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200000000000800074000000800440005800800024000000081080001"], 0xa8}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40805)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)

4.438261172s ago: executing program 2 (id=374):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4, 0x0, 0x1}, 0x20)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYRES32, @ANYBLOB="08003500000000000a000600080211000000000005000800050000000a00340001010101010100"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

3.788943739s ago: executing program 3 (id=375):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='barrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f626172726965722c63726561746f723dff60f3832c666f726363696e7569742c756d61736b3d30303030303030303030303030303030303030303030352c747970653db0dbd4672c669f554aa23e3a"], 0x1, 0x6e8, &(0x7f0000001f80)="$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")
mkdir(0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x14}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
close(r6)

3.662239805s ago: executing program 1 (id=376):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x52cd, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000024c0), 0x0, 0x0)

3.358917653s ago: executing program 5 (id=377):
socket(0x15, 0x5, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

1.543700547s ago: executing program 1 (id=378):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
socket$inet6_sctp(0xa, 0x1, 0x84)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))

1.185877222s ago: executing program 1 (id=379):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00')
read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020)
lseek(r5, 0xfffffffffffffffd, 0x1)
r6 = syz_pidfd_open(0x0, 0x0)
setns(r6, 0x24020000)

21.97677ms ago: executing program 3 (id=380):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES64=r0], 0xfd, 0x5a7a, &(0x7f0000006680)="$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")
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r4=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"])

0s ago: executing program 1 (id=381):
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
fsopen(&(0x7f0000000140)='nfsd\x00', 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4$unix(r2, 0x0, 0x0, 0x0)
recvfrom$unix(r3, &(0x7f0000001040)=""/259, 0x103, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts.
[   85.622792][ T5808] cgroup: Unknown subsys name 'net'
[   85.756747][ T5808] cgroup: Unknown subsys name 'cpuset'
[   85.766138][ T5808] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   87.416416][ T5808] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   90.869470][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.880418][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.888792][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.897318][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.900264][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.906479][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.912429][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.920309][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.933067][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.934753][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.947506][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.948548][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.969847][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.977692][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.986692][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.016055][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   91.023657][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   91.031319][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.039204][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   91.040030][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   91.046459][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   91.058111][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   91.068702][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   91.076872][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   91.086990][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   91.095170][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   91.121419][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   91.130994][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.138864][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.147198][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.178936][    T9] cfg80211: failed to load regulatory.db
[   91.775546][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   92.014996][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   92.133598][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   92.146024][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   92.191100][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.198441][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.206764][ T5836] bridge_slave_0: entered allmulticast mode
[   92.215474][ T5836] bridge_slave_0: entered promiscuous mode
[   92.307534][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.314880][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.322744][ T5836] bridge_slave_1: entered allmulticast mode
[   92.330358][ T5836] bridge_slave_1: entered promiscuous mode
[   92.484597][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.493924][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   92.508324][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.515596][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.523342][ T5825] bridge_slave_0: entered allmulticast mode
[   92.530777][ T5825] bridge_slave_0: entered promiscuous mode
[   92.566227][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   92.581032][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.597976][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.605575][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.613202][ T5825] bridge_slave_1: entered allmulticast mode
[   92.620998][ T5825] bridge_slave_1: entered promiscuous mode
[   92.720939][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.728176][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.735600][ T5827] bridge_slave_0: entered allmulticast mode
[   92.743291][ T5827] bridge_slave_0: entered promiscuous mode
[   92.794601][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.808375][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.833678][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.840825][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.848851][ T5827] bridge_slave_1: entered allmulticast mode
[   92.856471][ T5827] bridge_slave_1: entered promiscuous mode
[   92.897880][ T5836] team0: Port device team_slave_0 added
[   92.906825][ T5836] team0: Port device team_slave_1 added
[   93.013229][ T5831] Bluetooth: hci2: command tx timeout
[   93.024589][ T5825] team0: Port device team_slave_0 added
[   93.030748][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.038243][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.045541][ T5826] bridge_slave_0: entered allmulticast mode
[   93.053352][ T5826] bridge_slave_0: entered promiscuous mode
[   93.064199][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.078041][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.093374][ T5831] Bluetooth: hci0: command tx timeout
[   93.138063][ T5825] team0: Port device team_slave_1 added
[   93.159002][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.166743][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.172630][ T5840] Bluetooth: hci5: command tx timeout
[   93.174658][ T5846] Bluetooth: hci4: command tx timeout
[   93.179541][ T5840] Bluetooth: hci3: command tx timeout
[   93.185977][ T5826] bridge_slave_1: entered allmulticast mode
[   93.190968][ T5831] Bluetooth: hci1: command tx timeout
[   93.203471][ T5826] bridge_slave_1: entered promiscuous mode
[   93.241455][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.248888][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.256543][ T5828] bridge_slave_0: entered allmulticast mode
[   93.264582][ T5828] bridge_slave_0: entered promiscuous mode
[   93.273497][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.280460][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.307061][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.393616][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.400841][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.408107][ T5828] bridge_slave_1: entered allmulticast mode
[   93.415644][ T5828] bridge_slave_1: entered promiscuous mode
[   93.440247][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.447297][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.474007][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.485304][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.492973][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.500168][ T5829] bridge_slave_0: entered allmulticast mode
[   93.507841][ T5829] bridge_slave_0: entered promiscuous mode
[   93.517422][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.524817][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.550826][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.579932][ T5827] team0: Port device team_slave_0 added
[   93.609992][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.617576][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.625800][ T5829] bridge_slave_1: entered allmulticast mode
[   93.633433][ T5829] bridge_slave_1: entered promiscuous mode
[   93.640910][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.648170][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.674223][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.695550][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.706952][ T5827] team0: Port device team_slave_1 added
[   93.734320][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.747271][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.792483][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.808364][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.835203][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.842156][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.868184][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.915001][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.977546][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.985366][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.012340][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.034582][ T5828] team0: Port device team_slave_0 added
[   94.094132][ T5825] hsr_slave_0: entered promiscuous mode
[   94.101140][ T5825] hsr_slave_1: entered promiscuous mode
[   94.146643][ T5836] hsr_slave_0: entered promiscuous mode
[   94.153519][ T5836] hsr_slave_1: entered promiscuous mode
[   94.159817][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.167623][ T5836] Cannot create hsr debugfs directory
[   94.175661][ T5828] team0: Port device team_slave_1 added
[   94.185266][ T5829] team0: Port device team_slave_0 added
[   94.195703][ T5826] team0: Port device team_slave_0 added
[   94.205161][ T5826] team0: Port device team_slave_1 added
[   94.257023][ T5829] team0: Port device team_slave_1 added
[   94.328087][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.335178][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.362031][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.497328][ T5827] hsr_slave_0: entered promiscuous mode
[   94.504671][ T5827] hsr_slave_1: entered promiscuous mode
[   94.510938][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.519176][ T5827] Cannot create hsr debugfs directory
[   94.543880][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.550860][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.577017][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.618843][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.625890][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.652324][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.678516][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.685678][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.711823][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.744616][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.751600][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.778154][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.797392][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.804473][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.830692][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.028146][ T5828] hsr_slave_0: entered promiscuous mode
[   95.035177][ T5828] hsr_slave_1: entered promiscuous mode
[   95.041373][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.049004][ T5828] Cannot create hsr debugfs directory
[   95.081702][ T5826] hsr_slave_0: entered promiscuous mode
[   95.088327][ T5826] hsr_slave_1: entered promiscuous mode
[   95.094698][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.102268][ T5826] Cannot create hsr debugfs directory
[   95.102439][ T5831] Bluetooth: hci2: command tx timeout
[   95.154291][ T5829] hsr_slave_0: entered promiscuous mode
[   95.160931][ T5829] hsr_slave_1: entered promiscuous mode
[   95.167390][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.176273][ T5829] Cannot create hsr debugfs directory
[   95.182492][ T5831] Bluetooth: hci0: command tx timeout
[   95.253336][ T5840] Bluetooth: hci4: command tx timeout
[   95.258813][ T5841] Bluetooth: hci3: command tx timeout
[   95.258828][ T5846] Bluetooth: hci5: command tx timeout
[   95.264556][ T5831] Bluetooth: hci1: command tx timeout
[   95.713496][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.759742][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.785424][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.825085][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.888372][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.915114][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.949826][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.971812][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.015039][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.039378][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.051737][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.081444][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.201212][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.225639][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.245114][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.281569][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.299411][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.359912][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   96.395144][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.417669][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.424925][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.447988][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.461657][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.485901][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.493056][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.516651][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.645912][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.660475][ T5829] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   96.689188][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.703199][ T5829] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   96.717774][ T5829] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   96.730132][ T5829] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   96.780287][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   96.834775][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.841915][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.858693][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   96.898174][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.905383][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.915584][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.922749][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.958816][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.965993][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.071854][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.157489][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.172998][ T5831] Bluetooth: hci2: command tx timeout
[   97.204431][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   97.242200][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.249424][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.252817][ T5831] Bluetooth: hci0: command tx timeout
[   97.271750][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   97.311595][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.318803][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.339560][ T5831] Bluetooth: hci1: command tx timeout
[   97.339581][ T5846] Bluetooth: hci4: command tx timeout
[   97.345193][ T5831] Bluetooth: hci3: command tx timeout
[   97.345245][ T5831] Bluetooth: hci5: command tx timeout
[   97.412125][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.419348][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.510517][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.520235][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.527859][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.623276][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.676386][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   97.744401][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.751549][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.813654][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.820798][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.870915][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.933911][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.070283][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   98.084116][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.227369][ T5836] veth0_vlan: entered promiscuous mode
[   98.270711][ T5827] veth0_vlan: entered promiscuous mode
[   98.373532][ T5827] veth1_vlan: entered promiscuous mode
[   98.384986][ T5836] veth1_vlan: entered promiscuous mode
[   98.401880][ T5825] veth0_vlan: entered promiscuous mode
[   98.425377][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.488288][ T5825] veth1_vlan: entered promiscuous mode
[   98.551416][ T5836] veth0_macvtap: entered promiscuous mode
[   98.577680][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.587030][ T5836] veth1_macvtap: entered promiscuous mode
[   98.605718][ T5827] veth0_macvtap: entered promiscuous mode
[   98.632108][ T5827] veth1_macvtap: entered promiscuous mode
[   98.679215][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.728038][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.781883][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.800993][ T5825] veth0_macvtap: entered promiscuous mode
[   98.828771][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.866671][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.903416][ T5825] veth1_macvtap: entered promiscuous mode
[   98.928051][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.959980][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.970174][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.979214][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.999478][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.011205][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.029925][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.038956][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.056928][ T5826] veth0_vlan: entered promiscuous mode
[   99.219768][ T5826] veth1_vlan: entered promiscuous mode
[   99.248014][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.255557][ T5846] Bluetooth: hci2: command tx timeout
[   99.298669][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.334515][ T5846] Bluetooth: hci0: command tx timeout
[   99.344748][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.353596][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.363479][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.372188][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.412685][ T5846] Bluetooth: hci4: command tx timeout
[   99.412751][ T5840] Bluetooth: hci5: command tx timeout
[   99.418128][ T5846] Bluetooth: hci3: command tx timeout
[   99.423617][ T5831] Bluetooth: hci1: command tx timeout
[   99.446720][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.457257][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.465734][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.466427][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.538935][ T5828] veth0_vlan: entered promiscuous mode
[   99.553803][ T5826] veth0_macvtap: entered promiscuous mode
[   99.589434][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.593797][ T5826] veth1_macvtap: entered promiscuous mode
[   99.612811][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.615728][ T5829] veth0_vlan: entered promiscuous mode
[   99.655950][ T5828] veth1_vlan: entered promiscuous mode
[   99.684946][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.741769][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.745702][ T5829] veth1_vlan: entered promiscuous mode
[   99.753976][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   99.771376][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.781128][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.817580][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.830264][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.861736][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.890055][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.912707][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.921439][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.997155][ T5829] veth0_macvtap: entered promiscuous mode
[  100.044853][ T5829] veth1_macvtap: entered promiscuous mode
[  100.061336][ T5828] veth0_macvtap: entered promiscuous mode
[  100.062443][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.107155][ T5828] veth1_macvtap: entered promiscuous mode
[  100.108609][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.262629][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.311285][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.320309][ T5976] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[  100.410479][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  100.512883][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  100.935663][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.950562][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.981319][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.050962][ T5829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.087387][ T5829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.111358][ T5829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.132344][ T5829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.160334][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.169261][ T5985] loop0: detected capacity change from 0 to 4096
[  101.184576][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.237682][ T5988] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.301604][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.313789][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.322877][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.332840][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.374007][ T5985] loop0: detected capacity change from 4096 to 64
[  101.378721][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.425814][ T5985] NILFS error (device loop0): nilfs_readdir: zero-length directory entry
[  101.449808][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.458542][ T5985] syz.0.1: attempt to access beyond end of device
[  101.458542][ T5985] loop0: rw=2049, sector=4088, nr_sectors = 2 limit=64
[  101.505907][ T5985] Buffer I/O error on dev loop0, logical block 2044, lost sync page write
[  101.691151][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.704867][ T5825] syz-executor: attempt to access beyond end of device
[  101.704867][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  101.733435][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.733773][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  101.762018][ T5825] syz-executor: attempt to access beyond end of device
[  101.762018][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  101.785481][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  101.794584][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  101.804960][ T5825] syz-executor: attempt to access beyond end of device
[  101.804960][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  101.842636][   T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  101.870516][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.892644][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.917487][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  101.934950][ T5825] syz-executor: attempt to access beyond end of device
[  101.934950][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  101.978667][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  101.998409][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  102.006994][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.025589][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.029134][ T5825] syz-executor: attempt to access beyond end of device
[  102.029134][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  102.046391][   T43] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  102.066947][   T43] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  102.092128][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.112442][   T43] usb 2-1: Product: syz
[  102.116637][   T43] usb 2-1: Manufacturer: syz
[  102.130259][ T5825] syz-executor: attempt to access beyond end of device
[  102.130259][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  102.143959][   T43] usb 2-1: SerialNumber: syz
[  102.177208][   T43] usb 2-1: config 0 descriptor??
[  102.184331][ T5994] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4'.
[  102.198326][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.210479][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.228691][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.248225][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  102.261274][ T5825] syz-executor: attempt to access beyond end of device
[  102.261274][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  102.303740][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.320967][ T5825] syz-executor: attempt to access beyond end of device
[  102.320967][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  102.444318][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.504938][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  102.533577][ T5825] syz-executor: attempt to access beyond end of device
[  102.533577][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  102.592519][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.606087][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6'.
[  102.624351][   T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  102.659111][ T6005] 8021q: VLANs not supported on gre0
[  102.670509][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.671849][   T43] asix 2-1:0.0: probe with driver asix failed with error -32
[  102.718069][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  102.782828][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.824031][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.882158][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  102.897893][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.918864][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.948045][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  102.967268][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  102.999356][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.031063][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  103.080170][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.096246][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.136245][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  103.146486][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.156991][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.168037][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  103.179961][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.189492][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.323332][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  103.521176][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.778537][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.787645][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  103.797066][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.822966][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.849853][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  103.903754][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  103.983050][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  104.008478][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  104.039865][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  104.105829][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  104.160593][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  104.169489][ T6025] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  104.202961][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  104.284791][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  104.392753][ T5918] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  104.559553][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  104.822964][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  104.828611][ T5918] usb 5-1: Using ep0 maxpacket: 8
[  104.856579][ T5918] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  104.863553][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  104.882338][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  104.891768][ T5918] usb 5-1: config 179 has no interface number 0
[  104.908112][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  104.909403][ T5904] usb 2-1: USB disconnect, device number 2
[  104.949862][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  104.954148][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  104.979194][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  105.022462][ T5918] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  105.037120][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.086020][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  105.102652][ T5918] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  105.113369][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.152440][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.163841][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.193081][ T6026] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  105.234892][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.271562][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  105.296244][ T6033] xt_hashlimit: size too large, truncated to 1048576
[  105.316782][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.362450][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'.
[  105.366412][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.417636][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  105.449366][   T30] audit: type=1326 audit(1751323999.342:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b158e929 code=0x7ffc0000
[  105.493799][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.534672][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.563687][ T2147] usb 5-1: USB disconnect, device number 2
[  105.569572][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  105.569657][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  105.595180][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  105.602821][   T30] audit: type=1326 audit(1751323999.342:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b158e929 code=0x7ffc0000
[  105.643238][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.662689][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.678866][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  105.706651][   T30] audit: type=1326 audit(1751323999.342:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f26b158e929 code=0x7ffc0000
[  105.744075][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.756810][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.767925][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  105.779169][ T6041] loop1: detected capacity change from 0 to 256
[  105.784906][   T30] audit: type=1326 audit(1751323999.342:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b158e929 code=0x7ffc0000
[  105.800515][ T6019] loop5: detected capacity change from 0 to 32768
[  105.829042][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.830518][ T6041] exfat: Deprecated parameter 'utf8'
[  105.874344][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.891004][ T6019] btrfs: Deprecated parameter 'usebackuproot'
[  105.927454][   T30] audit: type=1326 audit(1751323999.342:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b158e929 code=0x7ffc0000
[  105.946820][ T6019] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  105.959543][   T30] audit: type=1326 audit(1751323999.342:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f26b158e929 code=0x7ffc0000
[  105.982244][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  105.990520][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  105.994747][   T30] audit: type=1326 audit(1751323999.342:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b158e929 code=0x7ffc0000
[  106.021559][ T6041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d)
[  106.022483][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  106.057312][ T6019] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.16 (6019)
[  106.072535][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  106.088616][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  106.128371][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  106.139842][ T6019] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.161963][   T30] audit: type=1326 audit(1751323999.342:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f26b158e929 code=0x7ffc0000
[  106.197547][ T6019] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  106.210119][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  106.240871][ T6019] BTRFS info (device loop5): using free-space-tree
[  106.251996][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  106.272995][   T30] audit: type=1326 audit(1751323999.342:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b158e929 code=0x7ffc0000
[  106.298770][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  106.299761][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  106.311075][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  106.334357][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  106.335754][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  106.351089][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  106.360108][   T30] audit: type=1326 audit(1751323999.342:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26b158e929 code=0x7ffc0000
[  106.373241][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  106.436597][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  106.442829][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  106.524107][ T5825] bio_check_eod: 45 callbacks suppressed
[  106.524128][ T5825] syz-executor: attempt to access beyond end of device
[  106.524128][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  106.569692][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  106.570173][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  106.653373][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  106.726801][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  106.742925][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  106.763929][ T5825] syz-executor: attempt to access beyond end of device
[  106.763929][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  106.777731][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  106.787632][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  106.795426][ T5825] syz-executor: attempt to access beyond end of device
[  106.795426][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  106.810174][ T6046] loop4: detected capacity change from 0 to 32768
[  106.819073][ T6019] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  106.820186][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  106.852262][ T5825] syz-executor: attempt to access beyond end of device
[  106.852262][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  106.873101][ T6019] BTRFS error (device loop5): open_ctree failed: -12
[  106.927967][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  106.949168][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  106.977549][ T5825] syz-executor: attempt to access beyond end of device
[  106.977549][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  107.011293][ T6069] overlayfs: failed to clone upperpath
[  107.027065][ T6046] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  107.027087][ T6046]   allowing incompatible features above 0.0: (unknown version)
[  107.027098][ T6046]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  107.044309][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  107.047652][ T6046] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  107.077786][ T5825] syz-executor: attempt to access beyond end of device
[  107.077786][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  107.080428][ T6046] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  107.109960][ T6046] bcachefs (loop4): Version upgrade required:
[  107.109960][ T6046] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  107.109960][ T6046] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  107.109960][ T6046]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  107.195722][ T6046] bcachefs (loop4): dropping and reconstructing all alloc info
[  107.200789][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  107.231348][ T6046] bcachefs (loop4): accounting_read...
[  107.243883][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  107.258883][ T6046]  done
[  107.261670][ T6046] bcachefs (loop4): alloc_read...
[  107.263016][ T5825] syz-executor: attempt to access beyond end of device
[  107.263016][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  107.300154][ T6046]  done
[  107.303037][ T6046] bcachefs (loop4): snapshots_read... done
[  107.315856][ T6046] bcachefs (loop4): check_allocations... done
[  107.369125][ T6046] bcachefs (loop4): going read-write
[  107.392994][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  107.446435][ T5825] syz-executor: attempt to access beyond end of device
[  107.446435][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  107.473441][ T6046] bcachefs (loop4): done starting filesystem
�½0=Ò k"0c³CÞ;å.ÀºEÈ@ÞÝw÷ÉÔ…H
iò=¼Rv©™[s;ݧõ8[�†µUxR©ª@å¾Þõ]u+¸'¯Þò“,]u²¨�”ÖÐg‡ª‰›(²¤ë£ÒÍ0ÜwèÀeÍ…z�$aá¹’ãu§b9›yû˜ç¯YE)&Oþ)�Ÿ‹6ø“b;æÁ©¡yg¾Uü4>´rÉ“´Žt€_Æ�œàʘÚG‚†Ã0µØ0Hö”ŽÑVpẑEŠ=N©
OeÝ¢Ï2ûæ�"y�ÄJ½I�[  107.526730][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
ª†èÝz‰F°<@MS0êQ¥¤up¥øQ¯�ʃ’´¥ølƒ’~™�ñ7¿çMüžÂؤZGõk½›×í�φÈÛwðW·§›_F•°‹cã1×�`LÞéŠÏ챈*‘]Ðä°kjF‡U�)B–6Ñ=xŒ}³í<˜úiä&vÛ5@½‰3£ûw]+ú‹ÏÎáÇ$Ì6´_§)¦s½\ç( 
µH˜‘co bxz$!/	Î*ǽû	ˆM3…ËG‡¼¦v[Ȁ¥mތ˖VP§CHØ\«üiÎ>€[4OÑñö<r½m=”ƒºÚˆšýxÆÍÇjæ�†›1ÝìÓ�ù3`³É%¬{dæ‰çtç÷yzµ†¼MÓa�A¥lþÜùÏãËqýTb 8†À¬¾[kµ˜mp/>wùO_ÑÆ;�þø¨öÕ½†a,µÃaÓxÏ02a0ˆs¹1œ¼=Ï*¤*Š$þ»S8 ŽÆ+èW1E$”Æ�mCK-�ÁX_É^y—b1²À9õúQs�Ùîü'ê°CŒ9ÁñÓwBà°x(›„Ñ›‰ö·…"¯ÐuƒÏ›B«ÑI.XÕïOÚW¸­Zétp»0ÚÇ\PÖ‚ŒòXÎ�l¥fw;hB²?ŸÂe�Þ#`!ödܱ
Œo7¥ZlÇ‚¾©`¹
:[  107.581732][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
‰“ýÅ[Ì!vHDÒVû€‘â.MŸgŽ“¹`	hZ
q­ƒØC�Î>Ô–’E8ĵôq©Ê%SËS·å§*vÔiü#yIWg�¢ΙrÞ#ƒ…-¨
¦�Ô>6�lÚc~cà‚²×× .k
à7‡Áa#ßJ#÷'�NÑN¹·&G]BÂVŸ3È^“"ûô7·ïI+|£Æ�¬¡ž±¹ nŸ‡ŠÎášÐî^F/’8£¹ù'U잦"ïh7&¬1x}O¦Չ܌sQ"‘:oêLÇf…æƒz}öonùŠ˜<sG?R34xÊ]ÅlFìôÊ:wJ„æfS%pÈ	É*ú9Í‚èØePQÀeUoªÎÄ�qÿÇŸ¾¥¨gèQ8'?•3ð`ÂTHž!o;˨¢Ô¡N‡•¦ë­¶<ãÀ	ç;÷aþog”Ãð@´>ø=Lò»±Fl>¶åàÄËÌ=O£�I„áêÒÝø¹éœÐ…9gâ6vß8€�DïQHwYǺԒ_fÎ’ü·„‰|q
Í™ƒ'0Y^˜}íW_å³é“ÝÏ{S¼q*‰Ñ{ÒéºWUÓJ¸ªŒ+-TZ7c.Ý÷â¨% ,l6PŽXò6Å?|’ñ9eJ5ì<°›)œ �\ˆ8[  107.631366][ T5825] syz-executor: attempt to access beyond end of device
[  107.631366][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
÷ûVóò–Y©Í%v59C%ªwYzÕí2˾¨~Àò�šúáúi5îgšR÷Œ‚Ð(\?ņ�«;ˆ1!†Jq+tôŒ¹+øŒ5¶Ô�·°bNþu£ ÓaY=ã�ñH©Ìö	*9 3Zä\—Pˆ‹¦åWªð'À¶œ�_n\‚I¶2×OWE„GR^…�Y^—»2æn« I¸Ú¤Ë­üoÖ+Ó…âJ¶˜º¤\
ò0©ü{còŒÜT,—‡ÐgbJMÝãÆ%îýðºKÑìÊ{;. �u�iT-©Á[…ÀÞ+ðÉì�x:‚†%y1zsY<$]cp¥qo4ùß@Dñ„\a[  107.667332][ T6046] syz.4.24 (6046) used greatest stack depth: 19592 bytes left
Ê)#óŸåGÈ­‘@Ó�	·'걜Œz!'‹è?C	1ƒñ¦ë³y§Y «(f€1ýGà˜©¡ž™WZ©Ï‘ç¼Ks~èìe÷˜îq�°šg…ÀO
þï´‚3îmý™Ím„ÐŽåä×zAŠŸóXË­e`]²†ß³ÙáAxÔv
ÖÏ+F¼»¶ùñîê¬ë0£—¬Üï?Oø}†.Ì<{„ƒ‚GñÞNJ÷kÒ¿2˜‡šYÃŒ;Tc÷.c&âÍ�’&jäzŒRΉc“ȧé¹Ê-	îÕzj
ýz/w$²â(>¼ÒT
”|Ôh‹ÊýÍ3ÓÀ7ð`(*ûì¦úéxÃk"ÞºùGzR…òú±AoOäź™:m@dcÜ~້Éî–]°F
#§„ø<ÉÐÈHÓKœS¿_	}å ¥&4�Ò½¥:–Bƒ@Y»a‹èH{€I�êȃ¢1À/Žt‡683Ù-ªHèÓ‡ÕŸOŽ6dÓÖg;ü„zÕá¿æG·Xê4WÐ6BÛg‘í³\¨"\‹V[1¯C³ç¡ cÀ½[H+í´ó™QçˆK°¾lÍ,NJçèTt0ôêáO3 «~ÿ7ÄT7æ˜iò†‚ìÃBJ*[  107.716675][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  107.724879][ T5828] bcachefs (loop4): shutting down
à©—Mï<OËbù4Ï2Ù¬…x/àÉÏ­Ö:+¨€Þ‰ãß3l"0ËZ�¿d®O#ýÃ̵G<'„-ÊP„%¶p»žÀmxB?=ÌžêKÏå;¢¤Âm$8¡™µ¹·ªI@¿;¥�ÍŠrmDD"…÷©ÿÄeÑ€>w
ÿåj&/oc¹ÿáiˆ!iòP_yQ2¨3@†�Sèºv³—yAe][  107.744777][ T5828] bcachefs (loop4): going read-only
Q3œL.Õùp9^€:êèl[  107.750446][ T5828] bcachefs (loop4): finished waiting for writes to stop
‚‘
Ÿ~ðXöƒŒ±zÔÂ~MÿÏ&
H~‚hó !Ôc·N'á²Ð¾Z8í £a–êµõÏ€LRß%Å(Þ…Ðÿ]åÃZG”ÖÓ…�Ô–°ºjçÁŸ®3¿ùDõ“C9à°ü§R8„M¹2æxZ
ý²bÀŒ%„#Rž»|fÍÅ漮䷓Èl_Ià�\G_b‘h§Vi×ô?ÓNfgV¾BpI+¢ëh9ãµ?ªæ ïMvÀsîÀ½¹>Å'Çp›MX¥sQâ�.™`ì�Ìläqëx©ÖIóê¶z4Rg[ƒÒªa_®^íAHzôÎz/fš2=ah×ÂeRW³ô³Î5:
&É6„k,c’š›æÀ#�‡VIVHF¿¦Ã`à²ó�ù±‚
éWèVo&Wõ’l�ÚËëIirŠ•‚·³æ�Údÿcÿ¦áËØ2È-¤»Äðeƒd¸ŒDÛ*Žñ.=÷8ó—´¦ùÝ;øÓ?íw¤ž¡»1)nÊß±[§uyøS W¸Òq…·¦5ï'Zb·ÊŒÀ—0yùm:åå}kk™´
 |æ´V“×’;¬%×+îlÀ
;·HŠ°ï�#°ìoŸFœù€J÷;öÎ
!YgŽòe4Ëóð<;ýÏ�¹®ˆØ#~­•¦™OpµLª}qü(Qê¶;‡¤gj<Ìó�N%ŽüQÁ=@£~NHNß„0‘4Ùè¿	‚³›†gÅ«Êø¯GÇ,S0lâ,«åÃ�wm";öæÚïoÓÑûù涠`Ž�Hà7íÑ[  107.811691][ T5825] syz-executor: attempt to access beyond end of device
[  107.811691][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
vòÐå‘Ãâ½Iüj϶Uß(Á˜³þ³‹cçÞ—ŒY­m�O[ïA¾•YÉœ•0Ï€`‘Ø;‰W±
©dÀªð×!ÐxX~# µ�–Ëÿ;ûàäÌâ`VHëˆdUü„“°+ê“ø*íus‡�ãþ^[6;מù9[<µûíÁ¯*I41Á=„ÆE0´A¥²Ï�êÆÆPn‚Á]“-„Y¹’¥ÔÃÍŒýï@z=ðïÅò‰Õ8·†àÞ�É�[wñÝ+¯»´ØØ¿ÑbMUlì•æÐe*ß4xå ½ƒÓ8³Xü�p€|&ÿd_ÊšÖµ�ÀËùì->…Eè¡k]«Pת”	_pvš«S.ÄÊR
úû^üfx,^É}m÷VŸ5p/Ó¯ù¾YNÄÇ�ŠS°9i`ØP€!‘(œm[,|"¥ûáF ¸çw]×eü4w¼~É
Òh¡ÜÜ29 œ¨½bÅÚ¬@ñ™×¯˜?ÐðT­ÄÑæR¯›¶>KÒÛÚyZ+bt«ÚžW Â-bQõÕŠ	~ìf£i†hv‡^€ç|/˜xÅ$,YÕÕí	㣖ƒAœêÉ´ÃVÊGáHLSMK�Ì*SuÝÊã—L§ãÝ­ð8*Ì1m&ÞúQìópÏ¿5ƒæµ=ùXŸ¥­ú¤
Œ:==öB>];�oFÒÈçåjö+ X„þsëm‘ogI OP瀎Ž›‹p±=w•«ñ“ûú姩!z÷¢÷[È­±×‚G$ë[ûniUJœ\œBÔ°
ǯJ¨Ûïz¢�ä�²žG«èYE¿]Apaxeê‰&1]Á/hâKDRkZ*°îE°k7ŸÜªcÐ,Ùk*Êu?'«†rÏ“kV}'r¦eàùSJÖÞ¦kpá„”ý¦³ð¿Ròó��œ$šH$ëÿ.Ä�<WýG@ú?^Â'ýë‘!Ža‘)Èéˆ�}Ž"ð“�Ü© XäxɉR´	G³B;è™â�ÿöj“a:NõÃÖ!Ï&ØÝç8°ó– ÀBÏërºÒSßØ|'V~z04`e«¯›Ãô„u*î¨�‡wBùJµÑ»Q͇bÂù™H12÷¿$¥Ïsaئr´º¢ðq˜{SαE±ÖM
á<ë® ±?õøN¶î1ðjÒ³Õ±°D„%ÆK¢K¬£_ªÑ€mLØ’ËYͼ_²QMÄÀ㇡Ú;\�×*Pt¢û3ë¯+¬Ã|¢­œ¸Sn±Òl­?ò(�CG°ßÞv_0®ÚØ”÷ÇÙ§xðã±}"ß-Rß!ð‰O‡÷k/¤Sˆ¤[  107.914016][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
ö™wñ
Ã&Ïð]-z�®~[  107.923241][ T5828] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
ß¡L‹/'÷ A’TÖH%�ÍÀ
·;gz&(üM=cÊaDÉ=ži ‡»YÕG¶CÓ«�[>`ü›�{“´“«­Ô^¾ýàç¦DYëÆÝÏ ÿïÛ†Idmy/kQm¶ëÌÏÒ£Ê9¹†�t�àÄô
F˜VÜ�|¦A\`K—Gëô‰ÿJÓè˜%ô.í©RDh)ŽøT"/0ê¤Kâ�h»BçöÕûô&ýƈ“ÒJ¶+a
z9ÝY2®«z—˜…Å	ÄÚã�dXÑ[E�
E³<�r�‹V9	'NuÌxq¢Þ=xƒðŠm§íTlzø=œÁÔcpzŒ>¢J¸ižVAoU˜m4T„[Ó-½>`Ѥg-;¨“3e-�ú4$¾ë…‹ô’¯º6#<¬[  107.982775][ T5828] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  107.994441][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  108.038453][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.069009][ T5828] bcachefs (loop4): unclean shutdown complete, journal seq 11
[  108.093738][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.118488][ T6089] =======================================================
[  108.118488][ T6089] WARNING: The mand mount option has been deprecated and
[  108.118488][ T6089]          and is ignored by this kernel. Remove the mand
[  108.118488][ T6089]          option from the mount to silence this warning.
[  108.118488][ T6089] =======================================================
[  108.163414][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  108.171702][ T5828] bcachefs (loop4): done going read-only, filesystem not clean
[  108.199488][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.253153][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.261876][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  108.282647][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  108.356323][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.379253][ T5828] bcachefs (loop4): shutdown complete
[  108.390128][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.423170][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  108.456657][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.490189][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.506788][ T5813] usb 3-1: Using ep0 maxpacket: 32
[  108.538484][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  108.547222][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.565218][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.579657][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.588679][ T5813] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  108.598500][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.611449][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.620768][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  108.664086][ T5813] usb 3-1: config 0 descriptor??
[  108.678302][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.707331][ T5813] hub 3-1:0.0: USB hub found
[  108.723394][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.742437][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  108.762944][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.774976][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.814944][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  108.863429][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.883472][ T5813] hub 3-1:0.0: 1 port detected
[  108.888628][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.905869][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  108.928868][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.952828][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  108.969524][ T6101] overlayfs: failed to clone upperpath
[  108.982479][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.005449][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.040752][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.071777][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.083319][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.119795][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.137242][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.156876][ T6106] loop2: detected capacity change from 0 to 164
[  109.165053][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.175918][ T6106] iso9660: Unknown parameter 'ÿÿ'
[  109.190727][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.204610][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.213152][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.246349][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.270158][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.293072][  T970] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  109.316087][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.331554][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.352541][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.360674][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.370850][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.379847][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.388131][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.397917][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.406909][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.448354][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.510296][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.591155][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.609230][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.630806][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.636725][ T6111] netlink: 'syz.5.41': attribute type 3 has an invalid length.
[  109.647550][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.653488][ T6111] netlink: 'syz.5.41': attribute type 3 has an invalid length.
[  109.663496][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.675763][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.692656][  T970] usb 4-1: Using ep0 maxpacket: 8
[  109.707597][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.717918][  T970] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  109.736661][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.751040][  T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.760129][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.769946][  T970] usb 4-1: Product: syz
[  109.774456][  T970] usb 4-1: Manufacturer: syz
[  109.784695][  T970] usb 4-1: SerialNumber: syz
[  109.790282][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.802428][  T970] usb 4-1: config 0 descriptor??
[  109.817352][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.829260][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.850165][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  109.887640][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  109.935196][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  109.958414][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.015368][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  110.042387][ T5813] hub 3-1:0.0: hub_hub_status failed (err = -32)
[  110.086743][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.207282][ T5813] hub 3-1:0.0: config failed, can't get hub status (err -32)
[  110.236717][  T970] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  110.272078][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.363991][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  110.446486][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  110.471057][ T5813] usbhid 3-1:0.0: can't add hid device: -71
[  110.513106][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.516179][ T5813] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  110.572449][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  110.577311][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.603501][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  110.637584][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.691706][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.701856][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  110.747770][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.764289][ T5813] usb 3-1: USB disconnect, device number 2
[  110.770141][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.770173][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  110.818242][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.869440][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.931699][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  110.958844][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  110.998791][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.032373][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  111.051520][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.073825][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.102722][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  111.133827][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.137080][ T6120] binder: 6119:6120 ioctl c0306201 200000000240 returned -14
[  111.158203][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.188229][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  111.202897][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.232009][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.281014][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  111.322965][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.343921][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.373887][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  111.381726][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.446554][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.472192][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  111.500577][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.526357][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.552352][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  111.580007][ T5825] bio_check_eod: 68 callbacks suppressed
[  111.580027][ T5825] syz-executor: attempt to access beyond end of device
[  111.580027][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  111.632693][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.649161][ T5825] syz-executor: attempt to access beyond end of device
[  111.649161][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  111.695910][  T970] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  111.823478][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  111.892414][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  111.902679][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  111.927631][  T970] usb 4-1: USB disconnect, device number 2
[  111.952658][ T5825] syz-executor: attempt to access beyond end of device
[  111.952658][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  112.022551][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  112.065712][ T5825] syz-executor: attempt to access beyond end of device
[  112.065712][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  112.135562][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  112.160435][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  112.184356][ T5825] syz-executor: attempt to access beyond end of device
[  112.184356][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  112.198744][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  112.246300][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.251910][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  112.453502][ T5825] syz-executor: attempt to access beyond end of device
[  112.453502][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  112.540475][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  112.799501][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  112.983329][ T5825] syz-executor: attempt to access beyond end of device
[  112.983329][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  113.042540][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  113.072885][ T5825] syz-executor: attempt to access beyond end of device
[  113.072885][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  113.174460][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  113.262387][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  113.270171][ T5825] syz-executor: attempt to access beyond end of device
[  113.270171][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  113.354758][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  113.427892][ T6141] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[6141]
[  113.468580][ T5825] syz-executor: attempt to access beyond end of device
[  113.468580][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  113.704517][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  113.891276][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  114.334199][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.346701][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.355760][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  114.372957][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.383366][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.392073][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  114.400308][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.491044][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.511039][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  114.520619][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.531638][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.547413][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  114.565094][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.584441][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.598003][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  114.609634][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.625148][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.636512][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  114.645301][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.675903][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.691890][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  114.700891][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.716533][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.767848][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  114.798257][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.905239][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.922372][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  114.932189][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  114.942894][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'.
[  114.983112][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.001241][ T6151] vlan2: entered allmulticast mode
[  115.002375][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  115.042534][ T6151] veth0_to_bridge: entered allmulticast mode
[  115.063894][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.138755][ T6148] loop4: detected capacity change from 0 to 4096
[  115.146724][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.160759][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  115.206917][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.219695][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.230475][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  115.239255][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.275959][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.315232][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  115.336622][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.354276][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.412409][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  115.451438][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.543355][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.552190][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  115.600913][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.862894][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  115.949346][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  116.057895][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  116.164516][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  116.176837][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  116.186708][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  116.346832][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  116.422384][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  116.495768][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  116.535598][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  116.597243][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  116.628365][ T5825] bio_check_eod: 38 callbacks suppressed
[  116.628385][ T5825] syz-executor: attempt to access beyond end of device
[  116.628385][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  116.732722][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  116.741913][ T5825] syz-executor: attempt to access beyond end of device
[  116.741913][ T5825] loop0: rw=0, sector=90, nr_sectors = 2 limit=64
[  116.869080][ T5825] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  116.901389][ T5825] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  117.670056][ T6176] loop6: detected capacity change from 0 to 1
[  117.681103][ T6176]  loop6: [POWERTEC] p1 p2
[  117.695202][ T6176] loop6: p1 size 20971520 extends beyond EOD, truncated
[  117.726084][ T6177] loop4: detected capacity change from 0 to 1024
[  117.738789][ T6176] loop6: p2 start 536870912 is beyond EOD, truncated
[  117.856142][ T6177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.285569][ T5897] udevd[5897]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  118.625617][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.803122][ T6188] loop5: detected capacity change from 0 to 1024
[  119.004759][ T6188] hfsplus: request for non-existent node 40 in B*Tree
[  119.040555][ T6188] hfsplus: request for non-existent node 40 in B*Tree
[  119.345765][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.361123][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.406335][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.416303][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.424769][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.859814][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  119.859833][   T30] audit: type=1804 audit(1751324013.752:72): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.70" name="file0" dev="ramfs" ino=9365 res=1 errno=0
[  119.950284][ T6194] chnl_net:caif_netlink_parms(): no params data found
[  120.353703][ T6211] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  120.444381][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.467401][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'.
[  120.654753][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.73'.
[  121.492941][ T5846] Bluetooth: hci6: command tx timeout
[  121.502788][ T6225] loop5: detected capacity change from 0 to 8
[  121.541860][ T6225] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  121.933784][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.971973][ T5897] udevd[5897]: incorrect cramfs checksum on /dev/loop5
[  122.053383][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.060561][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.183118][ T6194] bridge_slave_0: entered allmulticast mode
[  122.237031][ T6194] bridge_slave_0: entered promiscuous mode
[  122.294773][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.311404][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.386732][ T6194] bridge_slave_1: entered allmulticast mode
[  122.397032][ T6194] bridge_slave_1: entered promiscuous mode
[  122.543895][   T30] audit: type=1804 audit(1751324016.432:73): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.78" name="/newroot/15/file1" dev="fuse" ino=1 res=1 errno=0
[  122.648969][   T30] audit: type=1800 audit(1751324016.432:74): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.78" name="/" dev="fuse" ino=1 res=0 errno=0
[  122.687198][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.702153][ T6239] loop5: detected capacity change from 0 to 1024
[  122.771018][ T6237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.79'.
[  122.780599][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.79'.
[  122.797786][ T6237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.79'.
[  122.798797][ T6239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.815776][ T6237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.79'.
[  123.577785][ T5846] Bluetooth: hci6: command tx timeout
[  123.806293][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.971871][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.047339][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.144457][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.653350][ T5846] Bluetooth: hci6: command tx timeout
[  125.969074][ T6194] team0: Port device team_slave_0 added
[  126.150218][ T6194] team0: Port device team_slave_1 added
[  126.576875][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.587994][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.613959][    C0] vkms_vblank_simulate: vblank timer overrun
[  126.676193][ T6194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.787692][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.793929][ T6287] overlayfs: failed to clone upperpath
[  126.828044][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.874639][ T6288] loop5: detected capacity change from 0 to 1024
[  126.901284][ T6194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.930078][ T6288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.475537][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.555335][   T13] bridge_slave_1: left allmulticast mode
[  127.575056][   T13] bridge_slave_1: left promiscuous mode
[  127.600248][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.659626][   T13] bridge_slave_0: left allmulticast mode
[  127.683329][   T13] bridge_slave_0: left promiscuous mode
[  127.716187][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.732983][ T5846] Bluetooth: hci6: command tx timeout
[  127.752792][   T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  127.763225][ T6300] fuse: Bad value for 'fd'
[  127.934982][   T43] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  127.983059][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.030025][   T43] usb 5-1: config 0 descriptor??
[  128.071695][   T43] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  129.229266][   T30] audit: type=1326 audit(1751324023.122:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.5.105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79f858e929 code=0x0
[  129.860323][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.874800][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.656058][   T13] bond0 (unregistering): Released all slaves
[  130.778525][ T6328] loop3: detected capacity change from 0 to 1024
[  130.860395][   T43] usb 5-1: USB disconnect, device number 3
[  130.900150][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.920288][ T6313] warning: `syz.2.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  131.021525][ T6194] hsr_slave_0: entered promiscuous mode
[  131.074477][ T6194] hsr_slave_1: entered promiscuous mode
[  131.080852][ T6194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.169248][ T6194] Cannot create hsr debugfs directory
[  132.229631][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  132.236211][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  132.511360][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.708276][ T6361] loop5: detected capacity change from 0 to 1024
[  135.473849][ T6376] netlink: 'syz.4.118': attribute type 11 has an invalid length.
[  137.361136][ T6391] loop3: detected capacity change from 0 to 256
[  137.450044][   T30] audit: type=1800 audit(1751324031.342:76): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.124" name="/" dev="9p" ino=2 res=0 errno=0
[  137.550114][ T6398] netlink: 'syz.2.122': attribute type 1 has an invalid length.
[  137.748407][   T13] hsr_slave_0: left promiscuous mode
[  138.459763][   T13] hsr_slave_1: left promiscuous mode
[  138.592388][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.658572][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.963860][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.971686][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.079854][ T6407] fuse: Invalid rootmode
[  139.891261][   T13] veth1_macvtap: left promiscuous mode
[  139.943385][   T13] veth0_macvtap: left promiscuous mode
[  140.192511][   T13] veth1_vlan: left promiscuous mode
[  140.198246][   T13] veth0_vlan: left promiscuous mode
[  145.284176][ T6457] loop5: detected capacity change from 0 to 1024
[  145.360019][ T6457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.642035][ T5830] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  146.276271][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.302973][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.334158][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.361938][ T5830] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  146.408698][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.483503][ T5830] usb 5-1: config 0 descriptor??
[  147.607110][ T5830] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  148.236471][ T5830] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  149.363480][ T5830] cp2112 0003:10C4:EA90.0001: error requesting version
[  149.394656][ T5830] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71
[  149.502523][ T5830] usb 5-1: USB disconnect, device number 4
[  149.854382][ T6488] fido_id[6488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  150.878285][   T13] team0 (unregistering): Port device team_slave_1 removed
[  150.888650][ T6510] evm: overlay not supported
[  150.897151][ T6512] loop5: detected capacity change from 0 to 128
[  151.011475][ T6512] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  151.132580][ T6512] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  151.248331][   T13] team0 (unregistering): Port device team_slave_0 removed
[  151.751161][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'.
[  152.450249][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.553596][ T6512] bridge_slave_1 (unregistering): left allmulticast mode
[  152.566030][ T6512] bridge_slave_1 (unregistering): left promiscuous mode
[  152.598433][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.735536][ T6524] bridge_slave_0: left allmulticast mode
[  152.751063][ T6535] loop4: detected capacity change from 0 to 512
[  152.760737][ T6524] bridge_slave_0: left promiscuous mode
[  152.772137][ T6535] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  152.791363][ T6535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  152.810905][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.826604][ T6524] bridge_slave_1: left allmulticast mode
[  152.836941][ T6524] bridge_slave_1: left promiscuous mode
[  152.844691][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.864829][ T6535] EXT4-fs (loop4): 1 truncate cleaned up
[  152.888791][ T6535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.938703][ T5828] EXT4-fs error (device loop4): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[  152.957669][ T6524] bond0: (slave bond_slave_0): Releasing backup interface
[  152.973365][ T5828] EXT4-fs error (device loop4): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[  153.027115][ T6524] bond0: (slave bond_slave_1): Releasing backup interface
[  153.154668][ T6524] team0: Port device team_slave_0 removed
[  153.197159][ T6524] team0: Port device team_slave_1 removed
[  153.211597][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.230617][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.294599][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.487026][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.506200][ T5829] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  153.625666][ T6525] team0: Mode changed to "loadbalance"
[  153.974717][ T6194] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  154.015391][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.035215][ T6518] syz.3.157 (6518): drop_caches: 2
[  154.104928][ T6194] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  154.134173][ T6553] capability: warning: `syz.5.174' uses deprecated v2 capabilities in a way that may be insecure
[  154.261894][ T6194] netdevsim netdevsim6 netdevsim2: renamed from eth2
			


syzkaller
syzkaller login: [  156.566807][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.640691][ T6194] 8021q: adding VLAN 0 to HW filter on device team0
[  156.715716][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.722944][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.916752][ T6587] mmap: syz.2.182 (6587) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  156.937659][ T1103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.898633][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.905928][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.193630][ T5830] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  158.411635][ T6602] ubi0: attaching mtd0
[  158.435793][ T6602] ubi0: scanning is finished
[  158.440574][ T6602] ubi0: empty MTD device detected
[  159.052373][ T5830] usb 6-1: Using ep0 maxpacket: 32
[  159.065402][ T6602] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  159.097677][ T5830] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  159.126632][ T5830] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  159.190762][ T1103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.206142][ T5830] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  159.288331][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  159.327364][ T5830] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  159.382895][ T5830] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  159.430097][ T6612] loop3: detected capacity change from 0 to 512
[  159.450646][ T6194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  159.467843][ T5830] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  159.512422][ T6612] EXT4-fs (loop3): ea_inode feature is not supported for Hurd
[  159.548521][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.604685][ T5830] usb 6-1: config 0 descriptor??
[  159.665497][ T1103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.846149][ T5830] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  160.180560][ T1103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.219635][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  160.229223][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  160.238544][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  160.249122][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  160.257486][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  160.608257][    C1] usblp0: nonzero read bulk status received: -71
[  160.608723][ T5926] usb 6-1: USB disconnect, device number 2
[  161.691364][ T5926] usblp0: removed
[  162.193858][ T6636] ceph: No source
[  162.312313][ T5846] Bluetooth: hci0: command tx timeout
[  163.064494][ T6194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.372805][ T5846] Bluetooth: hci0: command tx timeout
[  164.466528][ T1103] bridge_slave_1: left allmulticast mode
[  164.476685][ T1103] bridge_slave_1: left promiscuous mode
[  164.492499][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.619934][ T1103] bridge_slave_0: left allmulticast mode
[  164.750630][ T1103] bridge_slave_0: left promiscuous mode
[  164.762653][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.359121][ T6667] overlayfs: failed to clone upperpath
[  166.457241][ T5846] Bluetooth: hci0: command tx timeout
[  168.819630][ T5846] Bluetooth: hci0: command tx timeout
[  170.069239][ T6715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.212'.
[  170.184200][ T6716] netlink: 32 bytes leftover after parsing attributes in process `syz.2.212'.
[  170.274481][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.297272][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.324039][ T1103] bond0 (unregistering): Released all slaves
[  170.630182][ T6716] Zero length message leads to an empty skb
[  171.088450][ T6620] chnl_net:caif_netlink_parms(): no params data found
[  171.363037][   T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  171.507486][ T6731] 9pnet_virtio: no channels available for device 
[  172.283969][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.344121][   T43] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  172.419507][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.659775][   T43] usb 4-1: config 0 descriptor??
[  173.535264][   T43] pwc: Askey VC010 type 2 USB webcam detected.
[  174.221608][   T43] pwc: recv_control_msg error -32 req 02 val 2b00
[  174.238089][   T43] pwc: recv_control_msg error -32 req 02 val 2700
[  174.253091][   T43] pwc: recv_control_msg error -32 req 02 val 2c00
[  174.271049][   T43] pwc: recv_control_msg error -32 req 04 val 1000
[  174.279078][   T43] pwc: recv_control_msg error -32 req 04 val 1300
[  174.293144][   T43] pwc: recv_control_msg error -32 req 04 val 1400
[  174.503208][   T43] pwc: recv_control_msg error -32 req 02 val 2100
[  174.515513][   T43] pwc: recv_control_msg error -32 req 04 val 1500
[  174.535230][ T1103] hsr_slave_0: left promiscuous mode
[  174.552866][   T43] pwc: recv_control_msg error -32 req 02 val 2500
[  174.676771][ T1103] hsr_slave_1: left promiscuous mode
[  174.687795][   T43] pwc: recv_control_msg error -32 req 02 val 2400
[  174.702510][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.682663][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.721434][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.730714][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.807632][   T43] pwc: recv_control_msg error -71 req 02 val 2900
[  175.868872][   T43] pwc: recv_control_msg error -71 req 02 val 2800
[  175.886598][ T1103] veth1_macvtap: left promiscuous mode
[  175.892908][ T1103] veth0_macvtap: left promiscuous mode
[  175.940114][ T1103] veth1_vlan: left promiscuous mode
[  175.945500][   T43] pwc: recv_control_msg error -71 req 04 val 1100
[  175.961343][ T1103] veth0_vlan: left promiscuous mode
[  175.974466][   T43] pwc: recv_control_msg error -71 req 04 val 1200
[  176.423488][   T43] pwc: Registered as video103.
[  176.441060][   T43] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[  176.652627][   T43] usb 4-1: USB disconnect, device number 3
[  177.924946][ T6787] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  181.508120][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.530356][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.549082][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.583905][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.614510][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.604023][ T6829] loop5: detected capacity change from 0 to 4096
[  183.625592][ T6829] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  183.745345][ T5840] Bluetooth: hci3: command tx timeout
[  185.921339][ T5840] Bluetooth: hci3: command tx timeout
[  186.549272][ T1103] team0 (unregistering): Port device team_slave_1 removed
[  187.193568][ T1103] team0 (unregistering): Port device team_slave_0 removed
[  187.972356][ T5840] Bluetooth: hci3: command tx timeout
[  188.326496][ T6846] loop5: detected capacity change from 0 to 1024
[  188.335239][ T6846] hfsplus: Unknown parameter 'forccinuit'
[  188.854175][ T6620] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.871856][ T6620] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.879498][ T6620] bridge_slave_0: entered allmulticast mode
[  188.896818][ T6620] bridge_slave_0: entered promiscuous mode
[  188.920630][   T30] audit: type=1326 audit(1751324082.812:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.2.246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26b158e929 code=0x0
[  189.265626][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.303191][ T6620] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.330896][ T6620] bridge_slave_1: entered allmulticast mode
[  189.809179][ T6620] bridge_slave_1: entered promiscuous mode
[  190.262741][ T5840] Bluetooth: hci3: command tx timeout
[  192.209478][ T6875] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  192.369930][ T6620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.426605][ T6620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.224444][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  194.230094][ T6620] team0: Port device team_slave_0 added
[  194.231155][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.240736][ T6620] team0: Port device team_slave_1 added
[  194.782681][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.789701][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.394910][ T6899] loop3: detected capacity change from 0 to 1024
[  195.409052][ T6899] hfsplus: Unknown parameter 'forccinuit'
[  195.812311][ T6620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.054740][ T6891] tipc: Started in network mode
[  197.103177][ T6891] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  197.480476][ T6891] tipc: Enabled bearer <eth:vlan0>, priority 10
[  197.623306][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.636907][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.707914][ T6620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.670286][ T6911] xt_CT: No such helper "netbios-ns"
[  198.834037][ T5911] tipc: Node number set to 10005162
[  199.200692][ T6620] hsr_slave_0: entered promiscuous mode
[  200.049347][ T6620] hsr_slave_1: entered promiscuous mode
[  201.168691][ T6813] chnl_net:caif_netlink_parms(): no params data found
[  201.172724][ T6929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.265'.
[  203.062219][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'.
[  203.295196][ T6946] loop5: detected capacity change from 0 to 128
[  203.423613][ T6946] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401)
[  203.462656][ T6946] FAT-fs (loop5): Filesystem has been set read-only
[  205.969384][ T6965] loop5: detected capacity change from 0 to 512
[  206.052726][ T6965] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  206.479970][ T6975] fuse: Invalid rootmode
[  207.244682][ T6965] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.274: corrupted xattr entries
[  207.287877][ T6965] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  207.334219][ T6965] EXT4-fs (loop5): 1 truncate cleaned up
[  207.363960][ T6965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.525698][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.240487][ T6988] netlink: 'syz.3.278': attribute type 1 has an invalid length.
[  209.244329][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.251509][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.345105][ T6998] loop5: detected capacity change from 0 to 512
[  209.358044][ T6998] EXT4-fs: Ignoring removed bh option
[  211.323944][ T6998] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  212.293577][ T6813] bridge_slave_0: entered allmulticast mode
[  212.306967][ T6998] EXT4-fs (loop5): 1 truncate cleaned up
[  212.314156][ T6998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.418655][ T6813] bridge_slave_0: entered promiscuous mode
[  212.745254][ T6988] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  212.810044][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.018171][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.595405][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.626817][ T6813] bridge_slave_1: entered allmulticast mode
[  214.350949][ T6813] bridge_slave_1: entered promiscuous mode
[  215.097651][ T6813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.135940][ T5142] Bluetooth: hci1: command 0x0406 tx timeout
[  216.142021][ T5142] Bluetooth: hci2: command 0x0406 tx timeout
[  216.148322][ T5831] Bluetooth: hci5: command 0x0406 tx timeout
[  216.193596][ T6813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.628466][ T6813] team0: Port device team_slave_0 added
[  217.654263][ T6813] team0: Port device team_slave_1 added
[  218.141308][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.746654][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.773893][ T6813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.953468][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.960474][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.623160][ T6813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.707475][ T1103] bridge_slave_1: left allmulticast mode
[  219.753949][ T1103] bridge_slave_1: left promiscuous mode
[  219.759832][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.563669][ T1103] bridge_slave_0: left allmulticast mode
[  221.569369][ T1103] bridge_slave_0: left promiscuous mode
[  221.612548][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.186040][ T7071] fuse: Invalid rootmode
[  222.942884][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  223.037224][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  223.287388][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  223.297984][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  223.305656][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  225.035807][ T7082] loop5: detected capacity change from 0 to 8
[  225.158194][ T7084] No such timeout policy "syz0"
[  225.418204][ T5846] Bluetooth: hci6: command tx timeout
[  225.551516][ T7082] SQUASHFS error: zlib decompression failed, data probably corrupt
[  225.581699][ T7082] SQUASHFS error: Failed to read block 0x9b: -5
[  225.606794][ T7082] SQUASHFS error: Unable to read metadata cache entry [99]
[  225.640890][ T7082] SQUASHFS error: Unable to read inode 0x127
[  226.378894][   T30] audit: type=1326 audit(1751324120.272:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.5.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f858e929 code=0x7fc00000
[  227.592432][ T5846] Bluetooth: hci6: command tx timeout
[  229.456365][ T7104] loop3: detected capacity change from 0 to 1024
[  229.655570][ T5846] Bluetooth: hci6: command tx timeout
[  231.525425][ T7113] syz.3.307: attempt to access beyond end of device
[  231.525425][ T7113] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  231.586450][ T7113] Buffer I/O error on dev loop3, logical block 100663296, async page read
[  231.610475][ T7113] syz.3.307: attempt to access beyond end of device
[  231.610475][ T7113] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  231.816227][ T5846] Bluetooth: hci6: command tx timeout
[  231.847857][ T7113] Buffer I/O error on dev loop3, logical block 100663296, async page read
[  231.866104][ T7116] autofs: Unknown parameter 'fd0x0000000000000000'
[  233.043488][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.274247][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.348737][ T1103] bond0 (unregistering): Released all slaves
[  233.825763][ T1103] hsr_slave_0: left promiscuous mode
[  233.842790][ T1103] hsr_slave_1: left promiscuous mode
[  233.848834][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.934820][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.833323][ T7131] loop3: detected capacity change from 0 to 32768
[  235.992929][ T7131] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  236.274917][ T7131] XFS (loop3): Ending clean mount
[  236.442138][ T5826] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  237.012699][ T7172] loop5: detected capacity change from 0 to 64
[  237.475308][ T7172] hfs: inconsistency in B*Tree (2,1,255,1,0)
[  237.481427][ T7172] hfs: get root inode failed
[  237.592049][ T7177] process 'syz.2.324' launched '/dev/fd/5' with NULL argv: empty string added
[  238.383620][ T7171] loop5: detected capacity change from 0 to 8
[  238.390309][ T7171] squashfs: Unknown parameter '000003'
[  238.671182][ T1103] team0 (unregistering): Port device team_slave_1 removed
[  240.394590][ T7194] netlink: 'syz.2.327': attribute type 11 has an invalid length.
[  240.676609][ T7197] loop5: detected capacity change from 0 to 32768
[  240.750558][ T7197] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  240.769457][ T1103] team0 (unregistering): Port device team_slave_0 removed
[  241.609368][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  241.625140][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  241.647564][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  241.667438][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  241.670751][ T5829] ocfs2: Unmounting device (7,5) on (node local)
[  241.682724][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  243.742320][ T5846] Bluetooth: hci0: command tx timeout
[  245.813692][ T5846] Bluetooth: hci0: command tx timeout
[  247.514517][ T7243] loop5: detected capacity change from 0 to 8192
[  247.525880][ T7069] chnl_net:caif_netlink_parms(): no params data found
[  247.892554][ T5846] Bluetooth: hci0: command tx timeout
[  247.899212][ T7243] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  247.932269][ T7243] FAT-fs (loop5): Filesystem has been set read-only
[  248.121807][ T7243] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  248.231060][ T7268] loop3: detected capacity change from 0 to 256
[  248.244901][ T7268] vfat: Bad value for 'dmask'
[  248.904493][ T7243] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  249.004029][ T7243] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  249.972353][ T5846] Bluetooth: hci0: command tx timeout
[  250.152570][ T7205] chnl_net:caif_netlink_parms(): no params data found
[  255.083594][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  255.090061][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.569059][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.390104][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.409039][ T7069] bridge_slave_0: entered allmulticast mode
[  257.424404][ T7069] bridge_slave_0: entered promiscuous mode
[  258.591537][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.607223][ T7338] overlayfs: failed to clone upperpath
[  258.668690][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.736496][ T7069] bridge_slave_1: entered allmulticast mode
[  259.674414][ T7069] bridge_slave_1: entered promiscuous mode
[  260.215558][ T7353] loop3: detected capacity change from 0 to 1024
[  260.230412][ T7353] hfsplus: Unknown parameter 'forccinuit'
[  263.394103][ T7069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.758378][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.802425][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.809662][ T7205] bridge_slave_0: entered allmulticast mode
[  264.850596][ T7205] bridge_slave_0: entered promiscuous mode
[  264.879629][ T7384] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  264.925200][ T7069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.382537][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.389718][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.522521][ T7205] bridge_slave_1: entered allmulticast mode
[  265.530468][ T7205] bridge_slave_1: entered promiscuous mode
[  265.542281][ T7378] orangefs_mount: mount request failed with -4
[  266.609518][ T7069] team0: Port device team_slave_0 added
[  266.807486][ T7406] netlink: 48 bytes leftover after parsing attributes in process `syz.5.373'.
[  267.422697][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.460107][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.739380][ T7069] team0: Port device team_slave_1 added
[  267.894221][ T7420] loop3: detected capacity change from 0 to 1024
[  267.908139][ T7420] hfsplus: Unknown parameter 'forccinuit'
[  269.961757][ T7205] team0: Port device team_slave_0 added
[  270.011634][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.040270][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.110691][ T7069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.160581][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.197709][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.072443][   T31] INFO: task syz-executor:5825 blocked for more than 144 seconds.
[  271.080319][   T31]       Not tainted 6.16.0-rc4-syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  271.117770][ T7069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.149491][   T31]       Blocked by coredump.
[  271.154390][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  271.158527][ T7205] team0: Port device team_slave_1 added
[  271.163682][   T31] task:syz-executor    state:D stack:21096 pid:5825  tgid:5825  ppid:1      task_flags:0x40054c flags:0x00004006
[  271.181227][   T31] Call Trace:
[  271.184746][   T31]  <TASK>
[  271.187696][   T31]  __schedule+0x16f5/0x4d00
[  271.192586][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  271.198262][   T31]  ? schedule+0x165/0x360
[  271.202979][   T31]  ? __pfx___schedule+0x10/0x10
[  271.207880][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  271.273386][   T31]  ? schedule+0x91/0x360
[  271.294565][   T31]  schedule+0x165/0x360
[  271.298848][   T31]  wb_wait_for_completion+0x15f/0x260
[  271.379456][   T31]  ? __pfx_wb_wait_for_completion+0x10/0x10
[  271.412467][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  271.419645][   T31]  sync_inodes_sb+0x1bb/0xa10
[  271.473987][   T31]  ? __pfx_sync_inodes_sb+0x10/0x10
[  271.479275][   T31]  ? __pfx_nilfs_sync_fs+0x10/0x10
[  271.634034][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  271.667694][ T7445] loop3: detected capacity change from 0 to 32768
[  271.697608][   T31]  ? __dentry_kill+0x53d/0x660
[  271.741599][   T31]  ? get_nr_dirty_inodes+0x1c4/0x210
[  271.790010][   T31]  sync_filesystem+0x17a/0x230
[  271.801492][   T31]  generic_shutdown_super+0x6f/0x2c0
[  271.836586][   T31]  kill_block_super+0x44/0x90
[  271.841311][   T31]  deactivate_locked_super+0xbc/0x130
[  271.880255][   T31]  cleanup_mnt+0x425/0x4c0
[  271.900749][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  271.919429][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.952372][   T31]  task_work_run+0x1d4/0x260
[  271.957013][   T31]  ? __pfx_task_work_run+0x10/0x10
[  271.962154][   T31]  ? kmem_cache_free+0x18f/0x400
[  272.005755][   T31]  do_exit+0x6b5/0x22e0
[  272.009959][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  272.052675][   T31]  ? do_raw_spin_lock+0x121/0x290
[  272.057805][   T31]  ? __pfx_do_exit+0x10/0x10
[  272.086259][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  272.092016][   T31]  do_group_exit+0x21c/0x2d0
[  272.150746][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  272.182384][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.187672][   T31]  get_signal+0x1286/0x1340
[  272.216165][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  272.221815][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  272.258466][   T31]  ? __se_sys_getdents64+0x1ee/0x260
[  272.283747][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  272.289287][   T31]  exit_to_user_mode_loop+0x75/0x110
[  272.328047][   T31]  do_syscall_64+0x2bd/0x3b0
[  272.354179][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.360321][   T31]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  272.394634][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.400590][   T31] RIP: 0033:0x7f975abc1293
[  272.427181][   T31] RSP: 002b:00007fff50dd5c58 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  272.463670][   T31] RAX: fffffffffffffffb RBX: 0000555562e34640 RCX: 00007f975abc1293
[  272.471695][   T31] RDX: 0000000000008000 RSI: 0000555562e34640 RDI: 0000000000000006
[  272.512303][   T31] RBP: 0000555562e34614 R08: 0000000000000000 R09: 0000000000000000
[  272.520408][   T31] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  272.552488][   T31] R13: 0000000000000016 R14: 0000555562e34610 R15: 00007fff50dd9000
[  272.560671][   T31]  </TASK>
[  272.572432][   T31] 
[  272.572432][   T31] Showing all locks held in the system:
[  272.580499][ T7445] workqueue: Failed to create a rescuer kthread for wq "bcachefs_btree_read_complete": -EINTR
[  272.580626][ T7445] bcachefs (loop3): shutdown complete
[  272.612412][   T31] 1 lock held by rcu_exp_gp_kthr/18:
[  272.617753][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[  272.709822][   T31] 1 lock held by khungtaskd/31:
[  272.732256][   T31]  #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  272.773492][   T31] 3 locks held by kworker/0:2/970:
[  272.778846][   T31] 4 locks held by kworker/u8:5/1078:
[  272.816655][   T31]  #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  272.858478][   T31]  #1: ffffc90003a5fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  272.887528][   T31]  #2: ffffffff8f502bd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  272.917334][   T31]  #3: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
[  272.926918][   T31] 3 locks held by kworker/u8:6/1103:
[  272.932549][   T31]  #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  272.944673][   T31]  #1: ffffc90003a8fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  272.956988][   T31]  #2: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  272.966523][   T31] 2 locks held by dhcpcd/5487:
[  272.971369][   T31]  #0: ffff88805a3096d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  272.982299][   T31]  #1: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[  272.991284][   T31] 3 locks held by kworker/0:3/5813:
[  272.997065][   T31]  #0: ffff88801a478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  273.008572][   T31]  #1: ffffc90003d0fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  273.019546][   T31]  #2: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  273.030943][   T31] 2 locks held by syz-executor/5825:
[  273.036573][   T31]  #0: ffff8880758820e0 (&type->s_umount_key#69){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  273.047361][   T31]  #1: ffff888142f167d0 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x19f/0xa10
[  273.058856][   T31] 2 locks held by kworker/u8:8/5981:
[  273.064493][   T31]  #0: ffff88801f6c6948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  273.076288][   T31]  #1: ffffc900031a7bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  273.089225][   T31] 2 locks held by getty/6579:
[  273.094206][   T31]  #0: ffff8880300f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  273.104592][   T31]  #1: ffffc90003d992f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  273.115165][   T31] 2 locks held by syz-executor/7069:
[  273.120587][   T31]  #0: ffffffff8fa2c210 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  273.130682][   T31]  #1: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  273.140113][   T31] 3 locks held by syz-executor/7205:
[  273.145537][   T31]  #0: ffffffff8eca3ec0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  273.155283][   T31]  #1: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  273.165360][   T31]  #2: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  273.182159][   T31] 4 locks held by syz.2.374/7428:
[  273.187317][   T31]  #0: ffff888033688dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  273.197426][   T31]  #1: ffff8880336880b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  273.207365][   T31]  #2: ffffffff8f677828 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  273.217847][   T31]  #3: ffff8880265e9338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  273.227483][   T31] 1 lock held by syz.3.380/7445:
[  273.232715][   T31]  #0: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  273.242941][   T31] 1 lock held by dhcpcd/7458:
[  273.247626][   T31]  #0: ffff888048d74258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  273.258189][   T31] 
[  273.260530][   T31] =============================================
[  273.260530][   T31] 
[  273.333511][ T7445] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc
[  273.386957][   T31] NMI backtrace for cpu 1
[  273.386977][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  273.387005][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  273.387020][   T31] Call Trace:
[  273.387037][   T31]  <TASK>
[  273.387047][   T31]  dump_stack_lvl+0x189/0x250
[  273.387091][   T31]  ? __wake_up_klogd+0xd9/0x110
[  273.387120][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.387151][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.387191][   T31]  ? __pfx__printk+0x10/0x10
[  273.387233][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  273.387267][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  273.387294][   T31]  ? _printk+0xcf/0x120
[  273.387325][   T31]  ? __pfx__printk+0x10/0x10
[  273.387354][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  273.387390][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  273.387424][   T31]  watchdog+0xfee/0x1030
[  273.387459][   T31]  ? watchdog+0x1de/0x1030
[  273.387502][   T31]  kthread+0x711/0x8a0
[  273.387533][   T31]  ? __pfx_watchdog+0x10/0x10
[  273.387565][   T31]  ? __pfx_kthread+0x10/0x10
[  273.387589][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.387621][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  273.387653][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.387681][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.387713][   T31]  ? __pfx_kthread+0x10/0x10
[  273.387742][   T31]  ret_from_fork+0x3fc/0x770
[  273.387781][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  273.387824][   T31]  ? __switch_to_asm+0x39/0x70
[  273.387849][   T31]  ? __switch_to_asm+0x33/0x70
[  273.387873][   T31]  ? __pfx_kthread+0x10/0x10
[  273.387903][   T31]  ret_from_fork_asm+0x1a/0x30
[  273.387947][   T31]  </TASK>
[  273.387956][   T31] Sending NMI from CPU 1 to CPUs 0:
[  273.561594][    C0] NMI backtrace for cpu 0
[  273.561612][    C0] CPU: 0 UID: 0 PID: 5988 Comm: segctord Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  273.561638][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  273.561651][    C0] RIP: 0010:unwind_next_frame+0x17df/0x2390
[  273.561691][    C0] Code: 24 48 01 c6 4c 89 f7 48 89 da e8 4c 0e 00 00 84 c0 0f 84 47 01 00 00 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 20 0f b6 04 28 <84> c0 0f 85 f4 08 00 00 b3 01 8b 84 24 84 00 00 00 41 39 06 4c 8b
[  273.561709][    C0] RSP: 0018:ffffc90003197178 EFLAGS: 00000202
[  273.561729][    C0] RAX: 0000000000000000 RBX: ffffffff90561d32 RCX: 0000000000000001
[  273.561743][    C0] RDX: ffffc90003197288 RSI: dffffc0000000000 RDI: ffffc90003197b50
[  273.561760][    C0] RBP: dffffc0000000000 R08: ffffc90003197b50 R09: ffffc90003197298
[  273.561776][    C0] R10: dffffc0000000000 R11: fffff52000632e55 R12: ffffc90003197b50
[  273.561793][    C0] R13: ffffc90003197298 R14: ffffc90003197248 R15: 1ffffffff20ac3a6
[  273.561813][    C0] FS:  0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000
[  273.561831][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  273.561846][    C0] CR2: 000055ecb7b6e950 CR3: 000000000df38000 CR4: 0000000000350ef0
[  273.561863][    C0] Call Trace:
[  273.561871][    C0]  <TASK>
[  273.561884][    C0]  ? unwind_next_frame+0xa5/0x2390
[  273.561921][    C0]  ? nilfs_segctor_construct+0x17b/0x690
[  273.561952][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  273.561978][    C0]  arch_stack_walk+0x11c/0x150
[  273.562004][    C0]  ? nilfs_segctor_thread+0x6f7/0xe00
[  273.562040][    C0]  stack_trace_save+0x9c/0xe0
[  273.562064][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  273.562096][    C0]  kasan_save_track+0x3e/0x80
[  273.562130][    C0]  ? kasan_save_track+0x3e/0x80
[  273.562163][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  273.562182][    C0]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  273.562222][    C0]  ? nilfs_segbuf_new+0x4c/0x250
[  273.562257][    C0]  ? nilfs_segctor_do_construct+0xb33/0x6a40
[  273.562283][    C0]  ? nilfs_segctor_construct+0x17b/0x690
[  273.562343][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.562372][    C0]  __kasan_slab_alloc+0x6c/0x80
[  273.562393][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  273.562429][    C0]  ? nilfs_segbuf_new+0x4c/0x250
[  273.562465][    C0]  nilfs_segbuf_new+0x4c/0x250
[  273.562500][    C0]  nilfs_segctor_do_construct+0xb33/0x6a40
[  273.562526][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.562554][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.562580][    C0]  ? sched_clock+0x3f/0x60
[  273.562608][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.562645][    C0]  ? __lock_acquire+0xab9/0xd20
[  273.562729][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  273.562762][    C0]  ? __pfx_nilfs_segctor_do_construct+0x10/0x10
[  273.562790][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.562816][    C0]  ? __lock_acquire+0xab9/0xd20
[  273.562853][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.562879][    C0]  ? do_raw_spin_lock+0x121/0x290
[  273.562908][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.562937][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.562962][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  273.562990][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.563015][    C0]  ? _raw_spin_unlock+0x28/0x50
[  273.563046][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.563072][    C0]  ? nilfs_segctor_confirm+0x24e/0x2d0
[  273.563105][    C0]  nilfs_segctor_construct+0x17b/0x690
[  273.563133][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.563164][    C0]  nilfs_segctor_thread+0x6f7/0xe00
[  273.563189][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.563214][    C0]  ? __lock_acquire+0xab9/0xd20
[  273.563265][    C0]  ? __pfx_nilfs_segctor_thread+0x10/0x10
[  273.563290][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  273.563325][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  273.563353][    C0]  ? __kthread_parkme+0x7b/0x200
[  273.563374][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.563400][    C0]  ? __kthread_parkme+0x1a1/0x200
[  273.563426][    C0]  kthread+0x711/0x8a0
[  273.563453][    C0]  ? __pfx_nilfs_segctor_thread+0x10/0x10
[  273.563479][    C0]  ? __pfx_kthread+0x10/0x10
[  273.563502][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.563530][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  273.563559][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.563584][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.563616][    C0]  ? __pfx_kthread+0x10/0x10
[  273.563641][    C0]  ret_from_fork+0x3fc/0x770
[  273.563676][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  273.563713][    C0]  ? __switch_to_asm+0x39/0x70
[  273.563736][    C0]  ? __switch_to_asm+0x33/0x70
[  273.563758][    C0]  ? __pfx_kthread+0x10/0x10
[  273.563784][    C0]  ret_from_fork_asm+0x1a/0x30
[  273.563819][    C0]  </TASK>
[  274.206880][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  274.213763][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  274.223821][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.233865][   T31] Call Trace:
[  274.237132][   T31]  <TASK>
[  274.240076][   T31]  dump_stack_lvl+0x99/0x250
[  274.244672][   T31]  ? __asan_memcpy+0x40/0x70
[  274.249259][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.254456][   T31]  ? __pfx__printk+0x10/0x10
[  274.259050][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.264679][   T31]  panic+0x2db/0x790
[  274.268579][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.274213][   T31]  ? __pfx_panic+0x10/0x10
[  274.278626][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.284252][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  274.290068][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.295694][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  274.301061][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  274.307212][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.312850][   T31]  watchdog+0x102d/0x1030
[  274.317186][   T31]  ? watchdog+0x1de/0x1030
[  274.321603][   T31]  kthread+0x711/0x8a0
[  274.325666][   T31]  ? __pfx_watchdog+0x10/0x10
[  274.330334][   T31]  ? __pfx_kthread+0x10/0x10
[  274.334914][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.340537][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.345730][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.351361][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.356565][   T31]  ? __pfx_kthread+0x10/0x10
[  274.361161][   T31]  ret_from_fork+0x3fc/0x770
[  274.365765][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  274.370888][   T31]  ? __switch_to_asm+0x39/0x70
[  274.375645][   T31]  ? __switch_to_asm+0x33/0x70
[  274.380403][   T31]  ? __pfx_kthread+0x10/0x10
[  274.384996][   T31]  ret_from_fork_asm+0x1a/0x30
[  274.389773][   T31]  </TASK>
[  274.392999][   T31] Kernel Offset: disabled
[  274.397321][   T31] Rebooting in 86400 seconds..