last executing test programs:

3m53.273521781s ago: executing program 0 (id=46):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x0, 0x5c8c, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0x0, 0x1ff}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_coalesce={0x26, 0x4, 0x0, 0x4000003, 0x2, 0x0, 0x0, 0x9, 0x81, 0xfffffff5, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x820000}})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x12000)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0})
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, 0x0)
write$binfmt_script(r6, &(0x7f0000005e80)={'#! ', './file0'}, 0xb)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)
ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000000)={{0x7, 0x2}, {0x7fffffffffffffff, 0xe}, 0xf})
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
bind$bt_hci(r7, 0x0, 0x14)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)

3m51.748484012s ago: executing program 0 (id=57):
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x20000, 0x3, 0x215}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}})
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r8, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m50.493409317s ago: executing program 0 (id=51):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)

3m49.150346839s ago: executing program 0 (id=61):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)

3m48.13547232s ago: executing program 0 (id=54):
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$binfmt_script(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

3m42.736742493s ago: executing program 0 (id=62):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_procfs(0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
sendmsg$IPSET_CMD_SAVE(r2, 0x0, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000280)={0x1, 0x0, 0x27f})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001b000)=""/102400, 0x19000)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000002c0), 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)

3m27.49216263s ago: executing program 32 (id=62):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_procfs(0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
sendmsg$IPSET_CMD_SAVE(r2, 0x0, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000280)={0x1, 0x0, 0x27f})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001b000)=""/102400, 0x19000)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000002c0), 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)

14.316978355s ago: executing program 2 (id=500):
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x199d, 0x0, 0x1, 0x0, 0x8, <r0=>0x0})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200"], 0x5c}}, 0x0)

13.098499465s ago: executing program 2 (id=503):
fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8000c62)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00007a3000/0x4000)=nil, &(0x7f0000514000/0x1000)=nil, &(0x7f00009af000/0x3000)=nil, &(0x7f0000651000/0x1000)=nil, &(0x7f00002e5000/0x3000)=nil, &(0x7f0000854000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000061e000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000001b000/0x3000)=nil, &(0x7f0000060000/0x1000)=nil, 0x0, 0x0, r4}, 0x68)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}})
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x4000)

11.273260566s ago: executing program 3 (id=507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x800018, &(0x7f00000000c0)={[{@autodefrag}, {@clear_cache}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500", @ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x4, 0x9, &(0x7f0000000340)="0c99e594ef97f3266a064ad5ea06be9d2059a9dca82321fe0da574657fffebea675fc024ae34e2da9afd34540e97257ad1f47f65fc6a5ee565569ad594738eee64054389948500df1ebb6f86cd4fd3d06c7cecf38029fe912c85d62d33aa7ab623c3b452c7af067d2572131c3721a4711d022b0fd23857114adb5e34"})
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000000)={0x12f, &(0x7f0000000080)=[{}, {}, {}]})

8.943177616s ago: executing program 4 (id=512):
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x199d, 0x0, 0x1, 0x0, 0x8, <r0=>0x0})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200"], 0x5c}}, 0x0)

8.860850214s ago: executing program 3 (id=513):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

8.712628149s ago: executing program 2 (id=514):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x890)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0xa08803, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRESHEX=0x0, @ANYRES64=r1], 0x1, 0x6aa, &(0x7f0000000b00)="$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")
llistxattr(&(0x7f0000000040)='./file3\x00', 0x0, 0xffffffd3)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080), 0x4)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001600010000000000000000000a0000", @ANYRES32=0x0, @ANYBLOB="140001"], 0x64}}, 0x24008818)

7.737600666s ago: executing program 4 (id=516):
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)

7.497940979s ago: executing program 3 (id=517):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x1a, &(0x7f0000000dc0)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x0, 0x0, 0x148, 0x118, 0x148, 0x1f8, 0x240, 0x240, 0x1f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x54}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x4, 0x6}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220)

7.051500713s ago: executing program 3 (id=519):
syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[], 0xfe, 0x223, &(0x7f00000002c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0)
fadvise64(r0, 0x20006fff, 0x400000000000003, 0x3)

6.467723711s ago: executing program 4 (id=521):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x27fe, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

5.96737716s ago: executing program 3 (id=523):
fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8000c62)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00007a3000/0x4000)=nil, &(0x7f0000514000/0x1000)=nil, &(0x7f00009af000/0x3000)=nil, &(0x7f0000651000/0x1000)=nil, &(0x7f00002e5000/0x3000)=nil, &(0x7f0000854000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000061e000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000001b000/0x3000)=nil, &(0x7f0000060000/0x1000)=nil, 0x0, 0x0, r4}, 0x68)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}})
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x4000)

5.457038061s ago: executing program 4 (id=524):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1})
r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x20, 0x3, 0x5cc}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r3, 0x40045109, &(0x7f00000000c0)=0x7f)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0})
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getgroups(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=")
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffed}, {0x4, 0xb}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4000000)

3.959236449s ago: executing program 4 (id=525):
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x199d, 0x0, 0x1, 0x0, 0x8, <r0=>0x0})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200"], 0x5c}}, 0x0)

3.563264368s ago: executing program 2 (id=526):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
syz_pidfd_open(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(0x0, 0x0)
dup(0xffffffffffffffff)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)

2.671601206s ago: executing program 4 (id=527):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0})

2.501081883s ago: executing program 2 (id=529):
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, 0x0, 0x0)

1.731520659s ago: executing program 1 (id=530):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = getpid()
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, r1, 0x0, 0x1ff, 'syz0\x00', 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

1.446043737s ago: executing program 1 (id=531):
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x5, 0x8, 0x1, 0x4})

1.377455294s ago: executing program 1 (id=532):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
getgroups(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94)
syz_pidfd_open(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
futex(0x0, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0)

1.295521322s ago: executing program 2 (id=533):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f001, 0x4})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180))

1.089624133s ago: executing program 1 (id=534):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20b}, &(0x7f0000000240)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x4000, @fd=r0, 0xfff, 0x0, 0x0, 0x8, 0x0, {0x1}})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

726.747018ms ago: executing program 1 (id=535):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000e91000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ca2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000f85000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

155.303075ms ago: executing program 1 (id=536):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x1ff)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

0s ago: executing program 3 (id=537):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x800018, &(0x7f00000000c0)={[{@autodefrag}, {@clear_cache}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500", @ANYBLOB, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x4, 0x9, &(0x7f0000000340)="0c99e594ef97f3266a064ad5ea06be9d2059a9dca82321fe0da574657fffebea675fc024ae34e2da9afd34540e97257ad1f47f65fc6a5ee565569ad594738eee64054389948500df1ebb6f86cd4fd3d06c7cecf38029fe912c85d62d33aa7ab623c3b452c7af067d2572131c3721a4711d022b0fd23857114adb5e34"})
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r7 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000000)={0x12f, &(0x7f0000000080)=[{}, {}, {}]})

kernel console output (not intermixed with test programs):

ing VLAN 0 to HW filter on device team0
[   87.999451][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.006734][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.023668][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.030864][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.043259][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.050447][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.107774][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.114981][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.170837][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.206151][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.217717][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.236225][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.314593][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[   88.342537][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[   88.377393][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.384621][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.422119][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.429339][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.483125][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.490372][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.515763][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.522998][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.622236][ T5789] Bluetooth: hci0: command tx timeout
[   88.724725][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.764713][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.779212][ T5789] Bluetooth: hci3: command tx timeout
[   88.784683][ T5789] Bluetooth: hci1: command tx timeout
[   88.859244][ T5789] Bluetooth: hci2: command tx timeout
[   88.887432][ T5786] veth0_vlan: entered promiscuous mode
[   88.903931][ T5786] veth1_vlan: entered promiscuous mode
[   88.932936][ T5791] veth0_vlan: entered promiscuous mode
[   88.976289][ T5791] veth1_vlan: entered promiscuous mode
[   89.024985][ T5791] veth0_macvtap: entered promiscuous mode
[   89.053554][ T5791] veth1_macvtap: entered promiscuous mode
[   89.065002][ T5786] veth0_macvtap: entered promiscuous mode
[   89.102158][ T5786] veth1_macvtap: entered promiscuous mode
[   89.154391][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.176980][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.190250][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.202787][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.224245][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.237057][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.246504][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.255923][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.265628][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.289590][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.300184][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.312299][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.337353][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.351780][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.360868][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.369994][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.405026][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.416358][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.569887][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.578336][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.620635][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.628489][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.643061][ T5790] veth0_vlan: entered promiscuous mode
[   89.702489][ T5790] veth1_vlan: entered promiscuous mode
[   89.744052][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.746072][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.770861][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.771421][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.804494][ T5796] veth0_vlan: entered promiscuous mode
[   89.818630][ T5796] veth1_vlan: entered promiscuous mode
[   89.857599][ T5790] veth0_macvtap: entered promiscuous mode
[   89.882629][ T5790] veth1_macvtap: entered promiscuous mode
[   89.927346][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.946215][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.969054][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.990696][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.011222][ T5879] syz.1.2[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   90.014916][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.074061][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.111965][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.131503][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.143898][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.156018][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.215269][ T5796] veth0_macvtap: entered promiscuous mode
[   90.227843][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.248409][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.263646][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.274052][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.296794][ T5796] veth1_macvtap: entered promiscuous mode
[   90.436100][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.526297][ T5879] loop1: detected capacity change from 0 to 32768
[   90.545743][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.687658][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.699725][ T5789] Bluetooth: hci0: command tx timeout
[   90.706241][ T5879] (syz.1.2,5879,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   90.722294][ T5879] (syz.1.2,5879,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   90.734988][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.754147][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.765572][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.778042][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.797733][ T5879] JBD2: Ignoring recovery information on journal
[   90.859414][ T5798] Bluetooth: hci3: command tx timeout
[   90.864992][ T5789] Bluetooth: hci1: command tx timeout
[   90.948985][ T5789] Bluetooth: hci2: command tx timeout
[   90.958163][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.969740][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.979834][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.991050][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.001206][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.011921][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.023890][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.050984][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.069058][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.094265][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.118326][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.140161][ T5879] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   91.254751][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.304403][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.506772][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.519113][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.629625][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.637480][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.772166][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.791726][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.072805][   T27] cfg80211: failed to load regulatory.db
[   92.787920][ T5789] Bluetooth: hci0: command tx timeout
[   92.940651][ T5789] Bluetooth: hci1: command tx timeout
[   92.946125][ T5798] Bluetooth: hci3: command tx timeout
[   93.020231][ T5789] Bluetooth: hci2: command tx timeout
[   93.229668][ T5888] (syz.1.2,5888,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -4
[   93.393280][ T5896] loop0: detected capacity change from 0 to 32768
[   93.554347][ T5888] syz.1.2 (5888) used greatest stack depth: 17712 bytes left
[   93.847386][ T5791] ocfs2: Unmounting device (7,1) on (node local)
[   94.032919][ T5901] ceph: No source
[   94.136050][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   94.379205][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   94.701192][ T5903] loop2: detected capacity change from 0 to 4096
[   94.765320][ T5903] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[   94.801036][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   95.740855][ T5876] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   95.970307][ T5876] usb 1-1: config 8 has an invalid interface number: 78 but max is 0
[   95.989034][ T5876] usb 1-1: config 8 has no interface number 0
[   96.001820][ T5876] usb 1-1: config 8 interface 78 has no altsetting 0
[   96.051469][ T5876] usb 1-1: New USB device found, idVendor=0421, idProduct=03cd, bcdDevice=51.ef
[   96.124380][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.169018][ T5876] usb 1-1: Product: syz
[   96.173250][ T5876] usb 1-1: Manufacturer: syz
[   96.208972][ T5876] usb 1-1: SerialNumber: syz
[   96.485344][ T5876] usb 1-1: bad CDC descriptors
[   96.503292][ T5876] usb 1-1: bad CDC descriptors
[   96.555236][ T5876] usb 1-1: USB disconnect, device number 2
[   97.257954][ T5924] loop2: detected capacity change from 0 to 1024
[   97.739374][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.822732][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.925204][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.979295][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   98.027514][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   98.059334][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   98.274226][   T11] hfsplus: b-tree write err: -5, ino 4
[   98.442591][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.496523][ T5918] loop1: detected capacity change from 0 to 32768
[   98.520598][ T5918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.11 (5918)
[   98.625554][ T5918] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   98.668691][ T5918] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   98.729149][ T5918] BTRFS info (device loop1): setting nodatacow, compression disabled
[   98.762987][ T5918] BTRFS info (device loop1): enabling disk space caching
[   98.783117][ T5918] BTRFS info (device loop1): turning off barriers
[   98.809079][ T5918] BTRFS info (device loop1): turning on flush-on-commit
[   98.841516][ T5918] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[   98.915432][ T5918] BTRFS info (device loop1): force lzo compression, level 0
[   98.968750][ T5918] BTRFS info (device loop1): max_inline at 0
[   98.988290][ T5918] BTRFS info (device loop1): force clearing of disk cache
[   99.009765][ T5918] BTRFS info (device loop1): using default commit interval 30s
[   99.030912][ T5918] BTRFS info (device loop1): enabling ssd optimizations
[   99.063310][ T5918] BTRFS info (device loop1): max_inline at 868
[   99.100454][ T5918] BTRFS info (device loop1): disk space caching is enabled
[   99.223869][ T5922] loop0: detected capacity change from 0 to 32768
[   99.280001][ T5922] =======================================================
[   99.280001][ T5922] WARNING: The mand mount option has been deprecated and
[   99.280001][ T5922]          and is ignored by this kernel. Remove the mand
[   99.280001][ T5922]          option from the mount to silence this warning.
[   99.280001][ T5922] =======================================================
[   99.600975][ T5918] BTRFS info (device loop1): auto enabling async discard
[   99.700045][ T5918] BTRFS info (device loop1): rebuilding free space tree
[   99.799877][ T5922] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   99.835021][ T5918] BTRFS info (device loop1): disabling free space tree
[   99.850030][ T5918] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   99.860870][ T5918] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  100.044995][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  101.912533][ T5956] ceph: No mds server is up or the cluster is laggy
[  101.920678][   T27] libceph: connect (1)[c::]:6789 error -101
[  101.921337][   T27] libceph: mon0 (1)[c::]:6789 connect error
[  102.172284][ T5950] loop2: detected capacity change from 0 to 40427
[  102.276226][ T5796] ocfs2: Unmounting device (7,0) on (node local)
[  102.431568][ T5950] F2FS-fs (loop2): LFS is not compatible with checkpoint=disable
[  103.202822][ T5963] Zero length message leads to an empty skb
[  103.724543][ T5890] Set syz1 is full, maxelem 65536 reached
[  104.089568][ T5979] loop3: detected capacity change from 0 to 4096
[  104.142745][ T5979] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  104.252205][   T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  104.450775][   T27] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  104.489814][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.497888][   T27] usb 3-1: Product: syz
[  104.532686][   T27] usb 3-1: Manufacturer: syz
[  104.537347][   T27] usb 3-1: SerialNumber: syz
[  104.569531][   T27] usb 3-1: config 0 descriptor??
[  104.588446][   T27] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 002
[  104.642781][ T5974] loop1: detected capacity change from 0 to 32768
[  104.654235][ T5974] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.23 (5974)
[  104.950213][ T5974] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.991112][ T5974] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  105.131492][ T5974] BTRFS info (device loop1): using free space tree
[  105.628743][   T27] i2c i2c-1: failure reading functionality
[  105.640365][   T27] i2c i2c-1: connected i2c-tiny-usb device
[  105.648958][   T27] usb 3-1: USB disconnect, device number 2
[  105.815283][ T5974] BTRFS info (device loop1): enabling ssd optimizations
[  105.856666][ T5974] BTRFS info (device loop1): auto enabling async discard
[  106.080576][   T28] audit: type=1800 audit(1760342009.904:2): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.23" name="file1" dev="loop1" ino=260 res=0 errno=0
[  106.176718][   T28] audit: type=1800 audit(1760342010.004:3): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.23" name="file1" dev="loop1" ino=260 res=0 errno=0
[  107.386667][   T28] audit: type=1800 audit(1760342011.214:4): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.23" name="file1" dev="loop1" ino=260 res=0 errno=0
[  107.484020][ T6002] loop3: detected capacity change from 0 to 32768
[  107.500900][ T6002] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (6002)
[  107.582500][ T6002] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  107.624416][ T6002] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  107.649131][ T6002] BTRFS info (device loop3): enabling auto defrag
[  107.656536][ T6002] BTRFS info (device loop3): force clearing of disk cache
[  107.675702][ T6002] BTRFS info (device loop3): max_inline at 0
[  107.689797][ T6002] BTRFS info (device loop3): turning on sync discard
[  107.696572][ T6002] BTRFS info (device loop3): using free space tree
[  107.864107][ T6002] BTRFS info (device loop3): enabling ssd optimizations
[  107.919536][ T6002] BTRFS info (device loop3): rebuilding free space tree
[  107.982484][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  108.751809][ T5790] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  108.797992][ T6015] loop0: detected capacity change from 0 to 32768
[  108.898801][ T6015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.30 (6015)
[  109.008453][ T6015] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.087776][ T6015] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  109.131125][ T6015] BTRFS info (device loop0): using free space tree
[  109.495350][ T6015] BTRFS info (device loop0): enabling ssd optimizations
[  109.528442][ T6015] BTRFS info (device loop0): auto enabling async discard
[  109.996708][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'.
[  110.741868][ T5796] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.569296][ T6091] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  117.415398][ T6097] loop0: detected capacity change from 0 to 32768
[  117.442640][ T6097] 
[  117.442640][ T6097]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.442640][ T6097] 
[  117.862482][ T5796] 
[  117.862482][ T5796]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.862482][ T5796] 
[  117.883327][ T5796] 
[  117.883327][ T5796]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.883327][ T5796] 
[  121.165786][ T6117] loop1: detected capacity change from 0 to 32768
[  121.268473][ T6117] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  121.321812][ T6119] loop3: detected capacity change from 0 to 32768
[  121.436406][ T6119] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  121.918576][ T6024] Set syz1 is full, maxelem 65536 reached
[  121.955415][ T6119] XFS (loop3): Ending clean mount
[  121.982928][ T6119] XFS (loop3): Quotacheck needed: Please wait.
[  122.095759][ T6119] XFS (loop3): Quotacheck: Done.
[  123.072983][ T5791] ocfs2: Unmounting device (7,1) on (node local)
[  124.063235][ T5790] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.316739][ T6156] loop2: detected capacity change from 0 to 1024
[  128.288573][ T3479] hfsplus: b-tree write err: -5, ino 4
[  128.709086][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  129.826281][  T785] libceph: connect (1)[c::]:6789 error -101
[  129.839182][  T785] libceph: mon0 (1)[c::]:6789 connect error
[  129.882502][ T6174] ceph: No mds server is up or the cluster is laggy
[  129.960386][    T8] usb 4-1: Using ep0 maxpacket: 32
[  130.362739][    T8] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  130.461167][    T8] usb 4-1: config 0 has no interface number 0
[  130.468168][    T8] usb 4-1: config 0 interface 12 has no altsetting 0
[  130.475401][  T785] libceph: connect (1)[c::]:6789 error -101
[  130.486747][  T785] libceph: mon0 (1)[c::]:6789 connect error
[  130.616602][    T8] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  130.629032][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.659072][    T8] usb 4-1: Product: syz
[  130.663920][    T8] usb 4-1: Manufacturer: syz
[  130.676363][    T8] usb 4-1: SerialNumber: syz
[  130.685906][    T8] usb 4-1: config 0 descriptor??
[  131.117479][    T8] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  131.154603][    T8] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  131.173246][    T8] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  131.184312][    T8] f81534: probe of 4-1:0.12 failed with error -71
[  131.204191][    T8] usb 4-1: USB disconnect, device number 2
[  131.896623][ T6187] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  132.617845][ T6195] loop2: detected capacity change from 0 to 1024
[  133.000762][ T6198] loop1: detected capacity change from 0 to 8
[  133.031588][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  133.038600][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  133.718005][ T3479] hfsplus: b-tree write err: -5, ino 4
[  133.751585][   T28] audit: type=1800 audit(1760342037.584:5): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.70" name="bus" dev="overlay" ino=115 res=0 errno=0
[  135.752465][ T6203] loop3: detected capacity change from 0 to 32768
[  135.791417][ T6203] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.73 (6203)
[  135.871720][ T6203] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.904370][ T6203] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  135.949415][ T6203] BTRFS info (device loop3): using free space tree
[  136.107387][ T6212] loop1: detected capacity change from 0 to 32768
[  136.139065][ T6203] BTRFS info (device loop3): enabling ssd optimizations
[  136.157731][ T6212] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.83 (6212)
[  136.180842][ T6203] BTRFS info (device loop3): auto enabling async discard
[  136.301518][   T28] audit: type=1800 audit(1760342040.124:6): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name="file1" dev="loop3" ino=260 res=0 errno=0
[  136.342631][ T6212] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  136.428616][   T28] audit: type=1800 audit(1760342040.154:7): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name="file1" dev="loop3" ino=260 res=0 errno=0
[  136.439191][ T6212] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  136.494674][ T6212] BTRFS info (device loop1): enabling auto defrag
[  136.520989][ T6212] BTRFS info (device loop1): force clearing of disk cache
[  136.569589][ T6212] BTRFS info (device loop1): max_inline at 0
[  136.619333][ T6212] BTRFS info (device loop1): turning on sync discard
[  136.626123][ T6212] BTRFS info (device loop1): using free space tree
[  136.878075][   T28] audit: type=1800 audit(1760342040.704:8): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name="file1" dev="loop3" ino=260 res=0 errno=0
[  136.963599][ T6212] BTRFS info (device loop1): enabling ssd optimizations
[  137.038096][ T6212] BTRFS info (device loop1): rebuilding free space tree
[  137.661477][ T5790] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.734426][ T5791] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  139.099969][ T5831] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  139.176782][ T6269] loop2: detected capacity change from 0 to 1024
[  139.706669][ T5831] usb 2-1: Using ep0 maxpacket: 8
[  139.719691][ T5831] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  139.740200][ T5831] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  139.749531][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.762776][ T5831] usb 2-1: Product: syz
[  139.766988][ T5831] usb 2-1: Manufacturer: syz
[  139.774263][ T5831] usb 2-1: SerialNumber: syz
[  139.786129][ T5831] usb 2-1: config 0 descriptor??
[  140.417344][ T1143] hfsplus: b-tree write err: -5, ino 4
[  140.431926][ T5831] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  140.501012][ T6275] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  141.157902][ T5831] usb 2-1: setting power ON
[  141.188395][ T5831] dvb-usb: bulk message failed: -22 (2/0)
[  141.200815][ T5173] IPVS: starting estimator thread 0...
[  141.255406][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  141.291918][ T5831] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  141.303261][ T6276] IPVS: using max 18 ests per chain, 43200 per kthread
[  141.310469][ T5831] usb 2-1: media controller created
[  141.329478][ T6278] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  141.551293][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  141.699577][ T5831] usb 2-1: selecting invalid altsetting 6
[  141.705936][ T5831] usb 2-1: digital interface selection failed (-22)
[  142.398968][ T5831] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  142.420113][ T5831] usb 2-1: setting power OFF
[  142.425254][ T5831] dvb-usb: bulk message failed: -22 (2/0)
[  142.461399][ T5831] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  142.506934][ T5831] (NULL device *): no alternate interface
[  142.671441][ T5831] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  142.810033][ T5831] usb 2-1: USB disconnect, device number 2
[  142.859202][  T785] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  142.972181][ T6295] loop1: detected capacity change from 0 to 4096
[  143.013045][ T6295] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  143.081128][  T785] usb 3-1: Using ep0 maxpacket: 32
[  143.100077][  T785] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  143.122075][  T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.153661][  T785] usb 3-1: config 0 descriptor??
[  143.378975][  T785] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  143.422330][  T785] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  143.438997][  T785] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  143.740732][ T5789] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  143.750174][ T5789] Bluetooth: hci2: Injecting HCI hardware error event
[  143.758568][ T5789] Bluetooth: hci2: hardware error 0x00
[  143.831552][ T6167] Set syz1 is full, maxelem 65536 reached
[  143.990092][ T6288] loop3: detected capacity change from 0 to 32768
[  144.108667][ T6288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.86 (6288)
[  144.212145][ T6288] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.249058][ T6288] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  144.299025][ T6288] BTRFS info (device loop3): using free space tree
[  144.559071][ T6288] BTRFS info (device loop3): enabling ssd optimizations
[  144.607872][ T6288] BTRFS info (device loop3): auto enabling async discard
[  144.623799][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  144.633599][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  144.641792][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  144.665268][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  144.682901][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  144.700353][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  144.899149][   T28] audit: type=1800 audit(1760342048.714:9): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.86" name="file1" dev="loop3" ino=260 res=0 errno=0
[  144.996734][   T28] audit: type=1800 audit(1760342048.794:10): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.86" name="file1" dev="loop3" ino=260 res=0 errno=0
[  145.357547][ T6326] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  146.210136][ T5789] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  146.244810][  T786] IPVS: starting estimator thread 0...
[  146.408288][ T6327] IPVS: using max 19 ests per chain, 45600 per kthread
[  146.574521][ T1116] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.578343][ T6306] loop2: detected capacity change from 0 to 32768
[  146.817414][ T6306] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.926501][   T28] audit: type=1800 audit(1760342050.704:11): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.86" name="file1" dev="loop3" ino=260 res=0 errno=0
[  147.019076][ T5789] Bluetooth: hci4: command tx timeout
[  147.479362][ T1116] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.541772][ T6306] XFS (loop2): Ending clean mount
[  147.557269][ T6306] XFS (loop2): Quotacheck needed: Please wait.
[  147.617441][ T6306] XFS (loop2): Quotacheck: Done.
[  147.671783][ T5790] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.693990][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  147.751959][ T1116] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.968475][ T1116] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.053845][ T6318] chnl_net:caif_netlink_parms(): no params data found
[  149.021483][ T5789] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  149.032120][ T5789] Bluetooth: hci1: Injecting HCI hardware error event
[  149.040579][ T5795] Bluetooth: hci1: hardware error 0x00
[  149.100379][ T5789] Bluetooth: hci4: command tx timeout
[  149.188942][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.196133][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.209158][ T6318] bridge_slave_0: entered allmulticast mode
[  149.216689][ T6318] bridge_slave_0: entered promiscuous mode
[  149.225862][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.247097][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.254610][ T6318] bridge_slave_1: entered allmulticast mode
[  149.262624][ T6318] bridge_slave_1: entered promiscuous mode
[  149.554953][ T6318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.579077][ T6318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.593663][   T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  149.862982][ T6318] team0: Port device team_slave_0 added
[  149.872877][ T6318] team0: Port device team_slave_1 added
[  149.950275][   T27] usb 2-1: Using ep0 maxpacket: 32
[  149.957990][   T27] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  149.969313][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.985282][   T27] usb 2-1: config 0 descriptor??
[  149.995771][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.014248][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.053368][ T6318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.079765][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.087908][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.115361][ T6318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.286342][ T6368] loop2: detected capacity change from 0 to 1764
[  150.296070][ T6318] hsr_slave_0: entered promiscuous mode
[  150.305056][   T27] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  150.325556][ T6318] hsr_slave_1: entered promiscuous mode
[  150.332666][ T6318] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.340330][ T6318] Cannot create hsr debugfs directory
[  150.381970][ T5787] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  151.179222][ T5789] Bluetooth: hci4: command tx timeout
[  151.185936][ T5795] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  152.103769][ T6377] loop2: detected capacity change from 0 to 32768
[  152.194327][ T6377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.104 (6377)
[  152.296759][ T6379] loop3: detected capacity change from 0 to 32768
[  152.306500][ T6318] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  152.330546][ T6377] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.341164][ T6379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.105 (6379)
[  152.366264][ T6318] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  152.379422][ T6377] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  152.388178][ T6377] BTRFS info (device loop2): using free space tree
[  152.442679][ T6318] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  152.450629][ T6379] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.491399][ T6379] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  152.531535][ T6379] BTRFS info (device loop3): using free space tree
[  152.681204][ T6377] BTRFS info (device loop2): enabling ssd optimizations
[  152.688376][ T6377] BTRFS info (device loop2): auto enabling async discard
[  152.704487][ T6318] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  152.712820][ T6379] BTRFS info (device loop3): enabling ssd optimizations
[  152.721814][ T6379] BTRFS info (device loop3): auto enabling async discard
[  152.874620][   T28] audit: type=1800 audit(1760342056.694:12): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.104" name="file1" dev="loop2" ino=260 res=0 errno=0
[  152.960857][   T28] audit: type=1800 audit(1760342056.724:13): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.104" name="file1" dev="loop2" ino=260 res=0 errno=0
[  153.260034][ T5795] Bluetooth: hci4: command tx timeout
[  153.316930][   T28] audit: type=1800 audit(1760342057.144:14): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.104" name="file1" dev="loop2" ino=260 res=0 errno=0
[  153.931985][ T5786] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.015635][ T6425] loop1: detected capacity change from 0 to 32768
[  154.382748][ T1116] hsr_slave_0: left promiscuous mode
[  154.441938][ T1116] hsr_slave_1: left promiscuous mode
[  154.690258][ T6452] loop1: detected capacity change from 0 to 512
[  154.722600][ T6452] EXT4-fs: Ignoring removed oldalloc option
[  154.766335][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.778552][ T6452] EXT4-fs: Mount option(s) incompatible with ext2
[  154.820321][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.886552][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.917080][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.018021][ T1116] bridge_slave_1: left allmulticast mode
[  155.039624][ T5790] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.054279][ T1116] bridge_slave_1: left promiscuous mode
[  155.087210][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.146259][ T1116] bridge_slave_0: left allmulticast mode
[  155.152553][ T1116] bridge_slave_0: left promiscuous mode
[  155.158552][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.429490][ T6459] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  155.816104][ T1116] veth1_macvtap: left promiscuous mode
[  155.841826][ T1116] veth0_macvtap: left promiscuous mode
[  155.873943][ T1116] veth1_vlan: left promiscuous mode
[  155.893607][ T1116] veth0_vlan: left promiscuous mode
[  156.347796][ T6466] loop3: detected capacity change from 0 to 4096
[  156.379092][ T6466] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  157.055775][ T1116] team0 (unregistering): Port device team_slave_1 removed
[  157.106460][ T1116] team0 (unregistering): Port device team_slave_0 removed
[  157.150770][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.200206][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.219224][    T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  157.409085][    T8] usb 4-1: Using ep0 maxpacket: 32
[  157.416982][    T8] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  157.433387][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.446814][    T8] usb 4-1: config 0 descriptor??
[  157.664894][    T8] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  157.778135][ T1116] bond0 (unregistering): Released all slaves
[  157.903059][ T6318] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.956531][ T6318] 8021q: adding VLAN 0 to HW filter on device team0
[  158.016165][ T6318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  158.026627][ T6318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.093425][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.100670][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.116469][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.123698][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.883943][ T6318] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.340564][ T6501] loop3: detected capacity change from 0 to 4096
[  160.390748][ T6501] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  161.091983][ T6318] veth0_vlan: entered promiscuous mode
[  161.116000][ T6490] loop1: detected capacity change from 0 to 32768
[  161.156113][ T6318] veth1_vlan: entered promiscuous mode
[  161.167496][ T6490] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.118 (6490)
[  161.244787][ T6490] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  161.283386][ T6490] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  161.291365][ T6318] veth0_macvtap: entered promiscuous mode
[  161.320107][ T6490] BTRFS info (device loop1): using free space tree
[  161.345414][ T6318] veth1_macvtap: entered promiscuous mode
[  161.474238][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.485139][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.495374][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.506156][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.517013][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.527678][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.540802][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.553989][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.564710][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.574798][ T6490] BTRFS info (device loop1): enabling ssd optimizations
[  161.575212][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.593032][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.604398][ T6318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.612744][ T6490] BTRFS info (device loop1): auto enabling async discard
[  161.615450][ T6318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.646348][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.691080][ T6318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.719044][ T6318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.741661][ T6318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.764067][ T6318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.775360][ T5791] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  161.938757][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.993858][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.103863][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.149123][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.546283][ T6552] loop4: detected capacity change from 0 to 1024
[  162.587714][ T6552] EXT4-fs: Ignoring removed nobh option
[  162.607573][ T6552] EXT4-fs: Ignoring removed oldalloc option
[  162.638780][ T6552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  162.728142][ T6552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.832946][ T6552] process 'syz.4.90' launched '/dev/fd/4' with NULL argv: empty string added
[  163.142640][ T6550] loop2: detected capacity change from 0 to 32768
[  163.473610][ T6318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.819584][ T6584] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  164.842834][ T6584] overlayfs: missing 'lowerdir'
[  165.496342][ T6572] loop2: detected capacity change from 0 to 32768
[  167.236066][ T6592] loop4: detected capacity change from 0 to 32768
[  167.491800][ T6592] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.131 (6592)
[  168.562683][ T6592] BTRFS error (device loop4): open_ctree failed: -4
[  168.743663][ T5792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (5792)
[  169.002183][ T6607] loop3: detected capacity change from 0 to 32768
[  169.030767][ T6607] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.137 (6607)
[  169.095011][ T6607] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  169.129440][ T6607] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  169.154829][ T6607] BTRFS info (device loop3): enabling auto defrag
[  169.169400][ T6607] BTRFS info (device loop3): force clearing of disk cache
[  169.192304][ T6607] BTRFS info (device loop3): max_inline at 0
[  169.209479][ T6607] BTRFS info (device loop3): turning on sync discard
[  169.228905][ T6607] BTRFS info (device loop3): using free space tree
[  169.377402][ T6607] BTRFS info (device loop3): enabling ssd optimizations
[  169.423371][ T6607] BTRFS info (device loop3): rebuilding free space tree
[  169.662914][ T5790] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  170.183526][ T6667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'.
[  170.587085][ T5787] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (5787)
[  171.477306][  T786] libceph: connect (1)[c::]:6789 error -101
[  171.760649][  T786] libceph: mon0 (1)[c::]:6789 connect error
[  172.071460][ T6681] ceph: No mds server is up or the cluster is laggy
[  173.334954][ T6694] loop2: detected capacity change from 0 to 4096
[  173.419109][ T6694] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  174.138161][ T6691] loop1: detected capacity change from 0 to 32768
[  174.297795][ T6691] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  175.563074][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'.
[  175.963297][ T5791] ocfs2: Unmounting device (7,1) on (node local)
[  176.631631][  T786] libceph: connect (1)[c::]:6789 error -101
[  176.739675][  T786] libceph: mon0 (1)[c::]:6789 connect error
[  177.277148][ T6735] ceph: No mds server is up or the cluster is laggy
[  177.309282][ T5858] libceph: connect (1)[c::]:6789 error -101
[  177.315409][ T5858] libceph: mon0 (1)[c::]:6789 connect error
[  178.507901][ T6758] loop4: detected capacity change from 0 to 128
[  178.649806][ T6753] loop3: detected capacity change from 0 to 4096
[  178.941790][ T6758] hpfs: bad mount options.
[  178.962171][ T6753] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  181.400449][ T6753] ntfs3: loop3: Failed to read $UpCase (-4).
[  181.628832][    C0] sched: RT throttling activated
[  181.885962][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.168'.
[  182.368188][ T6779] loop2: detected capacity change from 0 to 1024
[  183.047392][ T5858] libceph: connect (1)[c::]:6789 error -101
[  183.527721][ T6785] ceph: No mds server is up or the cluster is laggy
[  183.538448][ T1143] hfsplus: b-tree write err: -5, ino 4
[  183.667429][ T5858] libceph: mon0 (1)[c::]:6789 connect error
[  185.073669][ T6805] loop4: detected capacity change from 0 to 4096
[  185.112560][ T6814] loop2: detected capacity change from 0 to 4096
[  185.149663][ T6814] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  185.361035][ T6819] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.704425][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'.
[  185.959137][   T28] audit: type=1800 audit(1760342089.784:15): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.177" name="file1" dev="loop4" ino=15 res=0 errno=0
[  186.238499][ T6829] netlink: 'syz.2.181': attribute type 10 has an invalid length.
[  186.267999][ T6829] syz_tun: entered promiscuous mode
[  186.321151][ T6829] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  186.396606][ T6832] loop4: detected capacity change from 0 to 1024
[  186.819420][ T6829] team0: Port device team_slave_0 removed
[  187.300596][   T36] hfsplus: b-tree write err: -5, ino 4
[  188.517770][ T6847] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  189.772061][ T6843] loop2: detected capacity change from 0 to 32768
[  189.872657][ T6843] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.919080][ T6843] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  189.978674][ T6843] BTRFS info (device loop2): using free space tree
[  189.981150][ T6876] loop3: detected capacity change from 0 to 1024
[  190.004809][ T6866] loop1: detected capacity change from 0 to 32768
[  190.036706][ T6866] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.189 (6866)
[  190.107539][ T6866] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  190.154580][ T6889] loop4: detected capacity change from 0 to 128
[  190.193972][ T6866] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  190.205616][ T6889] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  190.218044][ T6866] BTRFS info (device loop1): using free space tree
[  190.225433][ T6889] hpfs: filesystem error: improperly stopped
[  190.232391][ T6889] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  190.240993][ T6889] hpfs: You really don't want any checks? You are crazy...
[  190.249419][ T6889] hpfs: hpfs_map_sector(): read error
[  190.254842][ T6889] hpfs: code page support is disabled
[  190.262459][ T6889] hpfs: hpfs_map_4sectors(): unaligned read
[  190.268745][ T6889] hpfs: hpfs_map_4sectors(): unaligned read
[  190.300943][ T6889] hpfs: filesystem error: unable to find root dir
[  190.540975][ T6902] hpfs: hpfs_map_4sectors(): unaligned read
[  190.861671][ T6843] BTRFS error (device loop2): open_ctree failed: -4
[  190.879165][ T6866] BTRFS info (device loop1): enabling ssd optimizations
[  190.886186][ T6866] BTRFS info (device loop1): auto enabling async discard
[  190.969229][ T1116] hfsplus: b-tree write err: -5, ino 4
[  191.141197][   T28] audit: type=1800 audit(1760342094.964:16): pid=6866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.189" name="file1" dev="loop1" ino=260 res=0 errno=0
[  191.274338][   T28] audit: type=1800 audit(1760342094.974:17): pid=6866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.189" name="file1" dev="loop1" ino=260 res=0 errno=0
[  191.969744][ T6538] libceph: connect (1)[c::]:6789 error -101
[  192.269462][ T6538] libceph: mon0 (1)[c::]:6789 connect error
[  192.400243][ T6929] ceph: No mds server is up or the cluster is laggy
[  192.910106][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.132971][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'.
[  193.785291][ T6955] loop2: detected capacity change from 0 to 1024
[  194.529404][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  194.536815][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  194.942265][   T36] hfsplus: b-tree write err: -5, ino 4
[  195.758477][ T6952] loop3: detected capacity change from 0 to 32768
[  195.789697][ T6952] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  195.824449][ T6952] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  195.899133][ T6952] BTRFS info (device loop3): enabling auto defrag
[  195.919412][ T6952] BTRFS info (device loop3): force clearing of disk cache
[  195.959091][ T6952] BTRFS info (device loop3): max_inline at 0
[  195.995879][ T6952] BTRFS info (device loop3): turning on sync discard
[  196.036394][ T6952] BTRFS info (device loop3): using free space tree
[  196.835855][ T6952] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  196.836530][ T6952] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  196.919809][ T6952] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  196.957537][ T6952] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  197.030019][ T6984] loop1: detected capacity change from 0 to 32768
[  197.049250][ T6952] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  197.051648][ T6952] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  197.091133][ T6984] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.206 (6984)
[  197.189921][ T6952] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  197.191192][ T6952] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  197.231262][ T6984] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  197.302052][ T6952] BTRFS error (device loop3): open_ctree failed: -12
[  197.313253][ T6984] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  197.337180][ T6984] BTRFS info (device loop1): using free space tree
[  197.615058][ T5792] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (5792)
[  197.653550][ T6984] BTRFS info (device loop1): enabling ssd optimizations
[  197.669384][ T6984] BTRFS info (device loop1): auto enabling async discard
[  197.810216][   T28] audit: type=1800 audit(1760342101.624:18): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.206" name="file1" dev="loop1" ino=260 res=0 errno=0
[  197.959023][   T28] audit: type=1800 audit(1760342101.624:19): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.206" name="file1" dev="loop1" ino=260 res=0 errno=0
[  198.432645][ T7003] loop4: detected capacity change from 0 to 32768
[  198.516001][ T7003] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.209 (7003)
[  198.748587][   T28] audit: type=1800 audit(1760342102.564:20): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.206" name="file1" dev="loop1" ino=260 res=0 errno=0
[  198.797191][ T5802] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (5802)
[  199.347850][ T7009] loop2: detected capacity change from 0 to 32768
[  199.528549][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.684326][ T5859] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  200.848957][ T5859] usb 5-1: unable to get BOS descriptor or descriptor too short
[  200.882761][  T786] libceph: connect (1)[c::]:6789 error -101
[  200.910808][ T5859] usb 5-1: not running at top speed; connect to a high speed hub
[  200.979733][  T786] libceph: mon0 (1)[c::]:6789 connect error
[  201.017110][ T7053] ceph: No mds server is up or the cluster is laggy
[  201.017665][ T5859] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.089360][ T5859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  201.160298][ T5859] usb 5-1: string descriptor 0 read error: -22
[  201.485732][ T5859] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  201.569706][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.675773][ T5859] usb 5-1: 0:2 : does not exist
[  201.894261][ T5859] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  201.966575][ T5859] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  202.029182][ T5859] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  202.051510][ T5859] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  202.274126][ T5859] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  202.325567][ T5859] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  202.399406][ T5859] usb 5-1: USB disconnect, device number 2
[  202.661584][ T7084] capability: warning: `syz.2.217' uses deprecated v2 capabilities in a way that may be insecure
[  202.890975][ T7084] overlayfs: upper fs does not support tmpfile.
[  203.176671][ T7095] overlayfs: workdir and upperdir must reside under the same mount
[  203.229441][ T7096] loop2: detected capacity change from 0 to 1024
[  203.574855][ T1116] hfsplus: b-tree write err: -5, ino 4
[  203.954226][ T7075] loop4: detected capacity change from 0 to 32768
[  204.744632][ T6538] libceph: connect (1)[c::]:6789 error -101
[  204.760044][    T8] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  204.762092][   T27] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  204.776548][  T785] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  204.808761][   T27] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2
[  204.823445][ T6538] libceph: mon0 (1)[c::]:6789 connect error
[  204.824229][ T7075] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  204.846259][ T7075] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  204.868074][ T7109] ceph: No mds server is up or the cluster is laggy
[  204.888622][   T27] usb 2-1: USB disconnect, device number 3
[  204.889799][    T8] dvb_usb_az6027: probe of 4-1:0.0 failed with error -2
[  204.989046][ T7075] BTRFS info (device loop4): enabling auto defrag
[  204.995552][ T7075] BTRFS info (device loop4): force clearing of disk cache
[  205.017079][    T8] usb 4-1: USB disconnect, device number 3
[  205.034426][  T785] dvb_usb_az6027: probe of 3-1:0.0 failed with error -110
[  205.120088][ T7075] BTRFS info (device loop4): max_inline at 0
[  205.126257][ T7075] BTRFS info (device loop4): turning on sync discard
[  205.145315][ T7075] BTRFS info (device loop4): using free space tree
[  205.155087][ T7115] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  205.194490][  T785] usb 3-1: USB disconnect, device number 3
[  205.311862][ T7075] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  205.312483][ T7075] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  205.412831][ T7075] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  205.461922][ T7075] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  205.618525][ T7075] BTRFS error (device loop4): open_ctree failed: -12
[  206.779168][ T5795] Bluetooth: hci0: command 0x0406 tx timeout
[  207.528415][ T7152] loop1: detected capacity change from 0 to 1024
[  207.582553][ T7152] EXT4-fs: Ignoring removed nobh option
[  207.588144][ T7152] EXT4-fs: Ignoring removed oldalloc option
[  207.643244][ T7152] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  207.686110][ T7154] loop2: detected capacity change from 0 to 1024
[  207.806656][ T7152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.849446][ T7150] netlink: 'syz.4.231': attribute type 21 has an invalid length.
[  207.883838][ T7150] netlink: 128 bytes leftover after parsing attributes in process `syz.4.231'.
[  207.937410][ T7150] netlink: 'syz.4.231': attribute type 5 has an invalid length.
[  208.051798][ T7152] overlayfs: failed to resolve './file4': -2
[  208.223686][ T7150] netlink: 'syz.4.231': attribute type 6 has an invalid length.
[  208.290092][   T36] hfsplus: b-tree write err: -5, ino 4
[  208.300597][ T7150] netlink: 3 bytes leftover after parsing attributes in process `syz.4.231'.
[  208.515439][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.649041][ T5859] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  208.871792][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  208.897655][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.993818][ T5859] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  209.026815][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.870639][    T8] libceph: connect (1)[c::]:6789 error -101
[  209.889098][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  209.897219][ T5859] usb 3-1: config 0 descriptor??
[  209.921784][ T7177] ceph: No mds server is up or the cluster is laggy
[  210.370493][ T5859] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0
[  210.418416][ T5859] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0
[  210.459309][ T5859] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0
[  210.494527][ T5859] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0
[  210.504417][ T5859] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0
[  210.526101][ T7188] loop1: detected capacity change from 0 to 1024
[  210.575241][ T5859] lua 0003:1E7D:2C2E.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0
[  210.643109][ T5859] usb 3-1: USB disconnect, device number 4
[  210.717181][   T28] audit: type=1800 audit(1760342114.544:21): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.239" name="file1" dev="loop1" ino=20 res=0 errno=0
[  210.917665][ T7190] fido_id[7190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  211.428948][ T6538] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  211.469586][ T7204] loop4: detected capacity change from 0 to 1024
[  211.485815][ T7183] loop3: detected capacity change from 0 to 32768
[  211.497763][ T7183] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.237 (7183)
[  211.601689][ T7183] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  211.629138][ T6538] usb 2-1: Using ep0 maxpacket: 32
[  211.650419][ T6538] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  211.663039][ T7183] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  211.680672][ T6538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.707791][ T7183] BTRFS info (device loop3): using free space tree
[  211.736881][ T6538] usb 2-1: config 0 descriptor??
[  211.813571][ T7183] BTRFS info (device loop3): enabling ssd optimizations
[  211.821656][ T7183] BTRFS info (device loop3): auto enabling async discard
[  211.867798][   T28] audit: type=1800 audit(1760342115.694:22): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.237" name="file1" dev="loop3" ino=260 res=0 errno=0
[  211.900972][   T28] audit: type=1800 audit(1760342115.734:23): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.237" name="file1" dev="loop3" ino=260 res=0 errno=0
[  211.978648][ T6538] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  212.022020][ T6538] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  212.043507][ T6538] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  212.070132][ T6538] usb 2-1: media controller created
[  212.128500][ T6538] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  212.225026][ T6538] az6027: usb out operation failed. (-71)
[  212.248119][ T6538] az6027: usb out operation failed. (-71)
[  212.288249][ T6538] stb0899_attach: Driver disabled by Kconfig
[  212.290676][ T1143] hfsplus: b-tree write err: -5, ino 4
[  212.304456][ T6538] az6027: no front-end attached
[  212.304456][ T6538] 
[  212.354899][ T6538] az6027: usb out operation failed. (-71)
[  212.375186][ T6538] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  212.440068][ T6538] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  212.467230][   T28] audit: type=1800 audit(1760342116.294:24): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.237" name="file1" dev="loop3" ino=260 res=0 errno=0
[  212.475976][ T6538] dvb-usb: schedule remote query interval to 400 msecs.
[  212.543742][ T6538] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  212.585125][ T6538] usb 2-1: USB disconnect, device number 4
[  212.670968][ T7236] loop4: detected capacity change from 0 to 1024
[  212.729636][ T7236] EXT4-fs: Ignoring removed nobh option
[  212.767751][ T7236] EXT4-fs: Ignoring removed oldalloc option
[  212.775185][ T6538] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  212.792159][ T7236] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  212.900397][ T7236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.172514][ T5790] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.467227][ T6318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.338950][ T6538] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  216.396217][ T7262] loop3: detected capacity change from 0 to 1024
[  216.739483][ T6538] usb 3-1: Using ep0 maxpacket: 16
[  216.751295][ T6538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  216.770575][ T6538] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  216.788903][ T6538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.807195][ T6538] usb 3-1: Product: syz
[  216.813720][ T6538] usb 3-1: Manufacturer: syz
[  216.830823][ T6538] usb 3-1: SerialNumber: syz
[  216.841923][ T6538] usb 3-1: config 0 descriptor??
[  216.851117][ T6538] hub 3-1:0.0: bad descriptor, ignoring hub
[  216.858926][ T6538] hub: probe of 3-1:0.0 failed with error -5
[  216.895632][ T6538] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7
[  217.109321][ T6538] usb 3-1: USB disconnect, device number 5
[  217.167732][ T1087] hfsplus: b-tree write err: -5, ino 4
[  217.532471][ T7288] loop3: detected capacity change from 0 to 1024
[  217.570685][ T7288] EXT4-fs: Ignoring removed nobh option
[  217.608936][ T7288] EXT4-fs: Ignoring removed oldalloc option
[  217.631675][ T7288] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  217.862034][ T7288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.147399][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.753437][ T7281] loop2: detected capacity change from 0 to 32768
[  219.808106][ T7281] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.255 (7281)
[  219.895572][ T7281] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  219.971288][ T7281] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  220.042166][ T7281] BTRFS info (device loop2): enabling auto defrag
[  220.048712][ T7281] BTRFS info (device loop2): force clearing of disk cache
[  220.143151][ T7281] BTRFS info (device loop2): max_inline at 0
[  220.194446][ T7281] BTRFS info (device loop2): turning on sync discard
[  220.240168][ T7281] BTRFS info (device loop2): using free space tree
[  220.287102][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  220.332787][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  220.376381][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  220.449156][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  220.558401][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  220.580697][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  220.601102][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  220.641352][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  220.651403][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  220.662041][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  220.673093][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  220.684209][ T7281] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  220.762107][ T7281] BTRFS error (device loop2): open_ctree failed: -12
[  220.903570][ T7318] loop1: detected capacity change from 0 to 32768
[  220.921617][ T7343] loop3: detected capacity change from 0 to 1024
[  221.737053][   T36] hfsplus: b-tree write err: -5, ino 4
[  221.870926][ T7355] AppArmor: change_hat: Invalid input '_'
[  222.928239][ T7324] syz.4.263: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  223.043392][ T7324] CPU: 1 PID: 7324 Comm: syz.4.263 Not tainted syzkaller #0
[  223.050762][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  223.060954][ T7324] Call Trace:
[  223.064267][ T7324]  <TASK>
[  223.067233][ T7324]  dump_stack_lvl+0x16c/0x230
[  223.071964][ T7324]  ? show_regs_print_info+0x20/0x20
[  223.077201][ T7324]  ? load_image+0x3b0/0x3b0
[  223.081833][ T7324]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  223.088278][ T7324]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  223.094816][ T7324]  warn_alloc+0x210/0x300
[  223.099199][ T7324]  ? zone_watermark_ok_safe+0x230/0x230
[  223.104792][ T7324]  ? _raw_spin_unlock+0x28/0x40
[  223.109686][ T7324]  __vmalloc_node_range+0x662/0x1320
[  223.115040][ T7324]  ? free_vm_area+0x50/0x50
[  223.119576][ T7324]  ? _raw_spin_unlock+0x28/0x40
[  223.124457][ T7324]  ? __kasan_kmalloc+0x8f/0xa0
[  223.129254][ T7324]  __vmalloc_node_range+0x568/0x1320
[  223.134683][ T7324]  ? hash_netiface_create+0x361/0xff0
[  223.140102][ T7324]  ? __asan_memset+0x22/0x40
[  223.144761][ T7324]  ? free_vm_area+0x50/0x50
[  223.149307][ T7324]  ? kvmalloc_node+0x70/0x180
[  223.154029][ T7324]  ? rcu_is_watching+0x15/0xb0
[  223.159008][ T7324]  ? kvmalloc_node+0x70/0x180
[  223.163723][ T7324]  ? trace_kmalloc+0x1f/0xa0
[  223.168360][ T7324]  kvmalloc_node+0x13f/0x180
[  223.172993][ T7324]  ? hash_netiface_create+0x361/0xff0
[  223.178418][ T7324]  hash_netiface_create+0x361/0xff0
[  223.183653][ T7324]  ? __lock_acquire+0x7c80/0x7c80
[  223.188720][ T7324]  ? __nla_parse+0x40/0x50
[  223.193177][ T7324]  ? hash_netport6_gc+0x570/0x570
[  223.198240][ T7324]  ip_set_create+0xa87/0x18e0
[  223.202959][ T7324]  ? ip_set_create+0x4b2/0x18e0
[  223.207860][ T7324]  ? ip_set_protocol+0x5d0/0x5d0
[  223.212836][ T7324]  ? trace_contention_end+0x39/0xe0
[  223.218116][ T7324]  nfnetlink_rcv_msg+0xb49/0x1130
[  223.223178][ T7324]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.229274][ T7324]  ? nfnetlink_rcv_msg+0x20e/0x1130
[  223.234527][ T7324]  ? nfnetlink_unbind+0x160/0x160
[  223.239616][ T7324]  ? __dev_queue_xmit+0x1a64/0x35a0
[  223.244841][ T7324]  ? __netlink_deliver_tap+0x5ab/0x830
[  223.250336][ T7324]  ? netlink_deliver_tap+0x19c/0x1b0
[  223.255750][ T7324]  ? netlink_unicast+0x72c/0x8d0
[  223.260731][ T7324]  ? netlink_sendmsg+0x8c1/0xbe0
[  223.265705][ T7324]  ? ____sys_sendmsg+0x5bf/0x950
[  223.270682][ T7324]  ? ___sys_sendmsg+0x220/0x290
[  223.275592][ T7324]  ? __se_sys_sendmsg+0x1a5/0x270
[  223.280655][ T7324]  ? do_syscall_64+0x55/0xb0
[  223.285308][ T7324]  netlink_rcv_skb+0x216/0x480
[  223.290114][ T7324]  ? nfnetlink_unbind+0x160/0x160
[  223.295180][ T7324]  ? netlink_ack+0x1110/0x1110
[  223.300081][ T7324]  ? apparmor_capable+0x137/0x1a0
[  223.305134][ T7324]  ? bpf_lsm_capable+0x9/0x10
[  223.309902][ T7324]  ? security_capable+0x89/0xb0
[  223.314811][ T7324]  nfnetlink_rcv+0x274/0x2180
[  223.319535][ T7324]  ? __local_bh_enable_ip+0x12e/0x1c0
[  223.324937][ T7324]  ? lockdep_hardirqs_on+0x98/0x150
[  223.330175][ T7324]  ? __local_bh_enable_ip+0x12e/0x1c0
[  223.335575][ T7324]  ? _local_bh_enable+0xa0/0xa0
[  223.340465][ T7324]  ? __dev_queue_xmit+0x245/0x35a0
[  223.345608][ T7324]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  223.351199][ T7324]  ? __dev_queue_xmit+0x245/0x35a0
[  223.356355][ T7324]  ? ref_tracker_free+0x634/0x7d0
[  223.361423][ T7324]  ? __copy_skb_header+0xa7/0x550
[  223.366494][ T7324]  ? refcount_inc+0x70/0x70
[  223.371031][ T7324]  ? __skb_clone+0x63/0x790
[  223.375578][ T7324]  ? __skb_clone+0x480/0x790
[  223.380226][ T7324]  ? __netlink_deliver_tap+0x7e8/0x830
[  223.385985][ T7324]  ? netlink_deliver_tap+0x2e/0x1b0
[  223.391237][ T7324]  ? __lock_acquire+0x7c80/0x7c80
[  223.396308][ T7324]  ? netlink_deliver_tap+0x2e/0x1b0
[  223.401564][ T7324]  netlink_unicast+0x751/0x8d0
[  223.406384][ T7324]  netlink_sendmsg+0x8c1/0xbe0
[  223.411285][ T7324]  ? netlink_getsockopt+0x580/0x580
[  223.416528][ T7324]  ? aa_sock_msg_perm+0x94/0x150
[  223.421505][ T7324]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  223.426831][ T7324]  ? security_socket_sendmsg+0x80/0xa0
[  223.432326][ T7324]  ? netlink_getsockopt+0x580/0x580
[  223.437608][ T7324]  ____sys_sendmsg+0x5bf/0x950
[  223.442431][ T7324]  ? __asan_memset+0x22/0x40
[  223.447059][ T7324]  ? __sys_sendmsg_sock+0x30/0x30
[  223.452137][ T7324]  ? __import_iovec+0x5f2/0x860
[  223.457051][ T7324]  ? import_iovec+0x73/0xa0
[  223.461601][ T7324]  ___sys_sendmsg+0x220/0x290
[  223.466325][ T7324]  ? __sys_sendmsg+0x270/0x270
[  223.471191][ T7324]  __se_sys_sendmsg+0x1a5/0x270
[  223.476105][ T7324]  ? __x64_sys_sendmsg+0x80/0x80
[  223.481101][ T7324]  ? lockdep_hardirqs_on+0x98/0x150
[  223.486347][ T7324]  do_syscall_64+0x55/0xb0
[  223.490806][ T7324]  ? clear_bhb_loop+0x40/0x90
[  223.495533][ T7324]  ? clear_bhb_loop+0x40/0x90
[  223.500246][ T7324]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.506171][ T7324] RIP: 0033:0x7f521a78eec9
[  223.510634][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.530445][ T7324] RSP: 002b:00007f521b6b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.538896][ T7324] RAX: ffffffffffffffda RBX: 00007f521a9e5fa0 RCX: 00007f521a78eec9
[  223.546893][ T7324] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  223.554896][ T7324] RBP: 00007f521a811f91 R08: 0000000000000000 R09: 0000000000000000
[  223.562966][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.570971][ T7324] R13: 00007f521a9e6038 R14: 00007f521a9e5fa0 R15: 00007ffd649f0648
[  223.578997][ T7324]  </TASK>
[  223.630202][ T7324] Mem-Info:
[  223.633365][ T7324] active_anon:14725 inactive_anon:0 isolated_anon:0
[  223.633365][ T7324]  active_file:1362 inactive_file:39967 isolated_file:0
[  223.633365][ T7324]  unevictable:2304 dirty:101 writeback:0
[  223.633365][ T7324]  slab_reclaimable:10369 slab_unreclaimable:96501
[  223.633365][ T7324]  mapped:33108 shmem:8735 pagetables:697
[  223.633365][ T7324]  sec_pagetables:0 bounce:0
[  223.633365][ T7324]  kernel_misc_reclaimable:0
[  223.633365][ T7324]  free:1315198 free_pcp:7276 free_cma:0
[  223.803896][ T7324] Node 0 active_anon:60016kB inactive_anon:0kB active_file:5432kB inactive_file:159664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134716kB dirty:404kB writeback:0kB shmem:35704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11600kB pagetables:2788kB sec_pagetables:0kB all_unreclaimable? no
[  223.947541][ T7324] Node 1 active_anon:2184kB inactive_anon:0kB active_file:16kB inactive_file:204kB unevictable:7680kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  224.068192][ T7324] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  224.576001][ T7324] lowmem_reserve[]: 0 2525 2526 2526 2526
[  224.582012][ T7324] Node 0 DMA32 free:1352548kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:36204kB inactive_anon:0kB active_file:5432kB inactive_file:158360kB unevictable:1536kB writepending:404kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:35844kB local_pcp:17620kB free_cma:0kB
[  224.614027][ T7324] lowmem_reserve[]: 0 0 1 1 1
[  224.619027][ T7324] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  224.689266][ T7324] lowmem_reserve[]: 0 0 0 0 0
[  224.694086][ T7324] Node 1 Normal free:3885380kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:2184kB inactive_anon:0kB active_file:16kB inactive_file:204kB unevictable:7680kB writepending:0kB present:4194304kB managed:4117312kB mlocked:6144kB bounce:0kB free_pcp:21760kB local_pcp:12992kB free_cma:0kB
[  224.768900][ T7324] lowmem_reserve[]: 0 0 0 0 0
[  224.773701][ T7324] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  224.888553][ T7324] Node 0 DMA32: 4*4kB (ME) 11*8kB (E) 14*16kB (UE) 11*32kB (UE) 85*64kB (ME) 61*128kB (UME) 32*256kB (M) 18*512kB (M) 6*1024kB (UM) 4*2048kB (UME) 319*4096kB (M) = 1352296kB
[  224.908256][ T7324] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  224.920397][ T7324] Node 1 Normal: 262*4kB (UME) 63*8kB (UME) 44*16kB (UME) 90*32kB (UME) 28*64kB (UME) 5*128kB (UE) 2*256kB (UM) 1*512kB (E) 2*1024kB (UE) 2*2048kB (UE) 945*4096kB (M) = 3885456kB
[  224.939561][ T7324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  224.956915][ T7324] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  224.979813][ T7324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  224.989853][ T7324] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  224.999600][ T7324] 48420 total pagecache pages
[  225.005376][ T7324] 0 pages in swap cache
[  225.010324][ T7324] Free swap  = 124472kB
[  225.014652][ T7324] Total swap = 124996kB
[  225.019257][ T7324] 2097051 pages RAM
[  225.023200][ T7324] 0 pages HighMem/MovableOnly
[  225.028058][ T7324] 416136 pages reserved
[  225.032410][ T7324] 0 pages cma reserved
[  225.681677][ T7376] loop1: detected capacity change from 0 to 32768
[  225.729261][ T7376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.274 (7376)
[  225.763355][ T7376] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  226.199117][ T7376] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  226.240264][ T7376] BTRFS info (device loop1): enabling auto defrag
[  226.246781][ T7376] BTRFS info (device loop1): force clearing of disk cache
[  226.528902][ T7376] BTRFS info (device loop1): max_inline at 0
[  226.534981][ T7376] BTRFS info (device loop1): turning on sync discard
[  226.567959][ T7378] loop2: detected capacity change from 0 to 32768
[  226.619113][ T7376] BTRFS info (device loop1): using free space tree
[  226.897489][ T7380] loop3: detected capacity change from 0 to 32768
[  227.102288][ T7380] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  227.200504][ T7376] BTRFS info (device loop1): enabling ssd optimizations
[  227.231616][ T7376] BTRFS info (device loop1): rebuilding free space tree
[  227.271874][ T7380] XFS (loop3): Ending clean mount
[  227.283808][ T7380] XFS (loop3): Quotacheck needed: Please wait.
[  227.372636][ T7380] XFS (loop3): Quotacheck: Done.
[  227.377330][ T7410] loop2: detected capacity change from 0 to 1024
[  227.832152][ T5790] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  228.498079][ T7418] loop3: detected capacity change from 0 to 8
[  228.537545][ T7418] SQUASHFS error: Failed to read block 0x4de: -5
[  228.545839][ T7418] SQUASHFS error: Failed to read block 0x4de: -5
[  228.556727][ T7418] SQUASHFS error: Failed to read block 0x4de: -5
[  228.564721][ T7418] SQUASHFS error: Failed to read block 0x4de: -5
[  228.567485][   T28] audit: type=1800 audit(1760342132.384:25): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.279" name="file1" dev="loop3" ino=5 res=0 errno=0
[  229.974026][ T5791] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  230.880521][ T1143] hfsplus: b-tree write err: -5, ino 4
[  232.393192][ T7437] loop3: detected capacity change from 0 to 32768
[  232.633803][ T7443] loop4: detected capacity change from 0 to 32768
[  232.682529][   T28] audit: type=1800 audit(1760342136.514:26): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.287" name="file1" dev="loop4" ino=4 res=0 errno=0
[  233.410081][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.290'.
[  234.390404][ T7462] loop2: detected capacity change from 0 to 1024
[  236.577101][ T1087] hfsplus: b-tree write err: -5, ino 4
[  238.953753][ T7486] loop2: detected capacity change from 0 to 32768
[  240.232220][ T7507] loop3: detected capacity change from 0 to 1024
[  240.250564][ T7507] EXT4-fs: Ignoring removed nobh option
[  240.256184][ T7507] EXT4-fs: Ignoring removed oldalloc option
[  240.296614][ T7507] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  240.366503][ T7507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.601981][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.844507][ T7503] loop4: detected capacity change from 0 to 32768
[  240.969201][ T7503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.305 (7503)
[  241.026241][ T7515] loop2: detected capacity change from 0 to 1024
[  241.048391][ T7503] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.069325][ T7503] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  241.085395][ T7503] BTRFS info (device loop4): using free space tree
[  241.431457][ T7503] BTRFS info (device loop4): enabling ssd optimizations
[  241.502222][ T7503] BTRFS info (device loop4): auto enabling async discard
[  241.887038][   T28] audit: type=1800 audit(1760342145.714:27): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.305" name="file1" dev="loop4" ino=260 res=0 errno=0
[  241.947038][   T28] audit: type=1800 audit(1760342145.754:28): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.305" name="file1" dev="loop4" ino=260 res=0 errno=0
[  242.459792][   T28] audit: type=1800 audit(1760342146.294:29): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.305" name="file1" dev="loop4" ino=260 res=0 errno=0
[  242.915601][ T6318] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  244.290284][   T59] hfsplus: b-tree write err: -5, ino 4
[  244.546727][ T7556] loop2: detected capacity change from 0 to 1024
[  244.586722][ T7556] EXT4-fs: Ignoring removed nobh option
[  244.603854][ T7556] EXT4-fs: Ignoring removed oldalloc option
[  244.615505][ T7556] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  248.826976][ T7562] loop4: detected capacity change from 0 to 256
[  249.667843][ T7556] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2.
[  250.753544][ T7579] loop2: detected capacity change from 0 to 128
[  251.475445][ T5789] Bluetooth: Frame is too long (len 12, expected len 4)
[  252.541641][ T7593] loop4: detected capacity change from 0 to 1024
[  252.621606][ T7595] loop3: detected capacity change from 0 to 1024
[  252.639657][ T7595] EXT4-fs: Ignoring removed nobh option
[  252.645389][ T7595] EXT4-fs: Ignoring removed oldalloc option
[  252.700525][ T7595] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  252.730479][ T5858] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  252.802843][ T7595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.949366][ T5858] usb 3-1: Using ep0 maxpacket: 16
[  252.966754][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.970175][ T5858] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  253.039211][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.057536][ T5858] usb 3-1: Product: syz
[  253.063977][ T5858] usb 3-1: Manufacturer: syz
[  253.078936][ T5858] usb 3-1: SerialNumber: syz
[  253.117439][ T5858] usb 3-1: config 0 descriptor??
[  253.554437][ T5858] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  253.575587][ T5858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  253.609464][ T5858] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  253.617471][ T5858] usb 3-1: media controller created
[  253.658599][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  253.797411][ T7604] loop3: detected capacity change from 0 to 32768
[  254.112687][ T7606] loop1: detected capacity change from 0 to 32768
[  254.146008][ T7606] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.330 (7606)
[  254.180437][ T7606] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  254.203588][ T7606] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  254.220022][ T7606] BTRFS info (device loop1): force clearing of disk cache
[  254.234140][ T7606] BTRFS info (device loop1): turning on sync discard
[  254.250028][ T7606] BTRFS info (device loop1): turning on async discard
[  254.265242][ T5858] zl10353_read_register: readreg error (reg=127, ret==0)
[  254.277001][ T7606] BTRFS info (device loop1): enabling auto defrag
[  254.283897][ T5858] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  254.307959][ T7606] BTRFS info (device loop1): max_inline at 0
[  254.316513][ T5858] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  254.339127][ T7606] BTRFS info (device loop1): enabling disk space caching
[  254.346240][ T7606] BTRFS info (device loop1): disk space caching is enabled
[  254.357739][ T5858] usb 3-1: USB disconnect, device number 6
[  254.455838][   T59] hfsplus: b-tree write err: -5, ino 4
[  254.510454][ T5858] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  254.641923][ T7606] BTRFS info (device loop1): enabling ssd optimizations
[  254.681420][ T7606] BTRFS info (device loop1): rebuilding free space tree
[  254.747901][ T7606] BTRFS info (device loop1): disabling free space tree
[  254.790441][ T7606] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  254.837262][ T7606] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  255.081816][ T5791] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  255.905300][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  255.912284][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  256.697066][ T7644] loop1: detected capacity change from 0 to 1024
[  256.727163][ T7644] EXT4-fs: Ignoring removed nobh option
[  256.759130][ T7648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.336'.
[  256.784542][ T7644] EXT4-fs: Ignoring removed oldalloc option
[  256.824546][ T7644] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  257.665433][ T7644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.045793][ T7633] loop3: detected capacity change from 0 to 32768
[  258.109245][ T7633] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.331 (7633)
[  258.115940][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.123830][ T7657] loop2: detected capacity change from 0 to 1024
[  258.177835][ T7633] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.223683][ T7633] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  258.329006][ T7633] BTRFS info (device loop3): using free space tree
[  258.388651][ T7633] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  258.389548][ T7633] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  258.458426][ T7633] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  258.479552][ T7633] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  258.536343][ T7633] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  258.618612][ T7633] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  258.702676][ T7633] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  258.739690][ T7633] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  258.784864][ T7633] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  258.826852][ T7633] BTRFS error (device loop3): open_ctree failed: -12
[  258.832987][ T7655] loop4: detected capacity change from 0 to 32768
[  259.351363][ T7661] loop1: detected capacity change from 0 to 32768
[  259.382056][ T7661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.341 (7661)
[  259.443131][ T7661] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  259.491170][ T7661] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  259.513120][ T7661] BTRFS info (device loop1): allowing degraded mounts
[  259.548919][ T7661] BTRFS info (device loop1): enabling ssd optimizations
[  259.588996][ T7661] BTRFS info (device loop1): allowing degraded mounts
[  259.595866][ T7661] BTRFS info (device loop1): using free space tree
[  259.966444][ T7678] loop3: detected capacity change from 0 to 32768
[  260.011981][ T7678] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.342 (7678)
[  260.086939][ T7678] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.129253][ T7678] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  260.168988][ T7678] BTRFS info (device loop3): enabling auto defrag
[  260.196321][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  260.196439][ T7678] BTRFS info (device loop3): force clearing of disk cache
[  260.251416][ T7678] BTRFS info (device loop3): max_inline at 0
[  260.279300][ T7678] BTRFS info (device loop3): turning on sync discard
[  260.286963][ T7678] BTRFS info (device loop3): using free space tree
[  260.586040][ T7678] BTRFS info (device loop3): enabling ssd optimizations
[  260.653840][ T7678] BTRFS info (device loop3): rebuilding free space tree
[  262.699549][ T1087] hfsplus: b-tree write err: -5, ino 4
[  262.843832][ T5173] libceph: connect (1)[c::]:6789 error -101
[  263.131569][ T5173] libceph: mon0 (1)[c::]:6789 connect error
[  263.491467][ T7734] ceph: No mds server is up or the cluster is laggy
[  263.536151][ T5790] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  265.029006][ T7750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.349'.
[  265.463091][ T7741] loop1: detected capacity change from 0 to 32768
[  265.486516][ T7741] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.350 (7741)
[  265.526591][ T7741] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  265.538328][ T7741] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  265.552630][ T7741] BTRFS info (device loop1): using free space tree
[  265.747539][ T7741] BTRFS info (device loop1): enabling ssd optimizations
[  265.788906][ T7741] BTRFS info (device loop1): auto enabling async discard
[  265.894657][ T7748] loop2: detected capacity change from 0 to 32768
[  265.902556][   T28] audit: type=1800 audit(1760342169.734:30): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.350" name="file1" dev="loop1" ino=260 res=0 errno=0
[  266.006725][   T28] audit: type=1800 audit(1760342169.734:31): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.350" name="file1" dev="loop1" ino=260 res=0 errno=0
[  266.428595][   T28] audit: type=1800 audit(1760342170.254:32): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.350" name="file1" dev="loop1" ino=260 res=0 errno=0
[  267.786092][ T7784] loop2: detected capacity change from 0 to 1024
[  267.851765][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.870599][ T7769] loop3: detected capacity change from 0 to 32768
[  267.894225][ T7787] loop4: detected capacity change from 0 to 1024
[  267.910269][ T7769] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.353 (7769)
[  267.943884][ T7787] EXT4-fs: Ignoring removed nobh option
[  267.997440][ T7787] EXT4-fs: Ignoring removed oldalloc option
[  268.062632][ T7787] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  268.128857][ T7769] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  268.152439][ T7769] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  268.175856][ T7769] BTRFS info (device loop3): setting nodatacow, compression disabled
[  268.232679][ T7769] BTRFS info (device loop3): enabling auto defrag
[  268.308911][ T7769] BTRFS info (device loop3): force clearing of disk cache
[  268.316117][ T7769] BTRFS info (device loop3): enabling ssd optimizations
[  268.325769][ T7787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.405714][ T7769] BTRFS info (device loop3): using spread ssd allocation scheme
[  268.462308][ T7769] BTRFS info (device loop3): turning off barriers
[  268.509125][ T7769] BTRFS info (device loop3): disabling free space tree
[  268.795757][ T6318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.837415][ T7769] BTRFS error (device loop3): open_ctree failed: -4
[  271.159827][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.363'.
[  271.323418][ T1130] hfsplus: b-tree write err: -5, ino 4
[  271.474881][ T7814] loop1: detected capacity change from 0 to 262144
[  271.489920][ T7814] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.361 (7814)
[  271.518946][ T7814] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  271.529335][ T7814] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  271.538616][ T7814] BTRFS info (device loop1): turning on sync discard
[  271.561786][ T7814] BTRFS info (device loop1): using free space tree
[  271.744439][ T7814] BTRFS info (device loop1): enabling ssd optimizations
[  271.779833][ T7814] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  272.576600][ T5787] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 9 /dev/loop1 scanned by udevd (5787)
[  272.843675][ T7854] loop2: detected capacity change from 0 to 256
[  272.871082][ T7854] exfat: Unknown parameter 'zero_size_dir'
[  273.962898][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'.
[  274.509692][ T7869] loop4: detected capacity change from 0 to 1024
[  276.098954][ T5173] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  276.138058][ T7861] loop2: detected capacity change from 0 to 32768
[  276.312833][ T5173] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  276.380299][ T5173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.397117][ T7861] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  276.443381][ T5173] usb 2-1: Product: syz
[  276.447623][ T5173] usb 2-1: Manufacturer: syz
[  276.467344][ T7861] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  276.499315][ T5173] usb 2-1: SerialNumber: syz
[  276.639351][ T5173] usb 2-1: config 0 descriptor??
[  276.648495][ T1087] hfsplus: b-tree write err: -5, ino 4
[  276.683675][ T5173] usb 2-1: Waiting for MOTU Microbook II to boot up...
[  276.728949][ T5173] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22
[  276.747024][ T7861] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  276.755970][ T5173] snd-usb-audio: probe of 2-1:0.0 failed with error -22
[  276.781643][   T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  276.805791][   T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  276.904606][ T5173] usb 2-1: USB disconnect, device number 5
[  276.976354][   T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 170ms
[  277.002118][   T23] gfs2: fsid=syz:syz.0: jid=0: Done
[  277.008524][ T7861] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  277.040228][ T7861] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  277.359318][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.379'.
[  277.623782][ T7894] ip6t_rpfilter: unknown options
[  279.320248][ T7911] loop2: detected capacity change from 0 to 1024
[  279.920589][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.389'.
[  280.468568][ T7906] loop1: detected capacity change from 0 to 32768
[  280.525605][ T7906] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.386 (7906)
[  280.617583][ T7906] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  280.724124][ T7906] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  280.765902][ T7906] BTRFS info (device loop1): enabling auto defrag
[  280.801946][ T7906] BTRFS info (device loop1): force clearing of disk cache
[  280.854968][ T7906] BTRFS info (device loop1): max_inline at 0
[  280.861359][ T7906] BTRFS info (device loop1): turning on sync discard
[  280.868118][ T7906] BTRFS info (device loop1): using free space tree
[  282.017829][ T7906] BTRFS error (device loop1): open_ctree failed: -4
[  282.032843][ T1130] hfsplus: b-tree write err: -5, ino 4
[  283.269688][ T7952] loop1: detected capacity change from 0 to 64
[  283.356759][ T7954] loop4: detected capacity change from 0 to 1024
[  283.376458][ T7954] EXT4-fs: Ignoring removed nobh option
[  283.387488][ T7954] EXT4-fs: Ignoring removed oldalloc option
[  283.464082][ T7954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  283.668728][ T7954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.921347][   T27] libceph: connect (1)[c::]:6789 error -101
[  283.966168][   T27] libceph: mon0 (1)[c::]:6789 connect error
[  284.512161][ T7961] ceph: No mds server is up or the cluster is laggy
[  284.795528][ T6318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.942611][ T7979] loop3: detected capacity change from 0 to 32768
[  286.981967][ T7979] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.403 (7979)
[  287.010338][ T7983] loop4: detected capacity change from 0 to 32768
[  287.041969][ T7979] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  287.079141][ T7979] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  287.087858][ T7979] BTRFS info (device loop3): enabling auto defrag
[  287.108557][ T7979] BTRFS info (device loop3): force clearing of disk cache
[  287.126656][ T7979] BTRFS info (device loop3): max_inline at 0
[  287.132462][ T7983] o2cb: This node has not been configured.
[  287.138823][ T7979] BTRFS info (device loop3): turning on sync discard
[  287.145783][ T7979] BTRFS info (device loop3): using free space tree
[  287.160749][ T7983] o2cb: Cluster check failed. Fix errors before retrying.
[  287.168077][ T7983] (syz.4.404,7983,1):ocfs2_dlm_init:3358 ERROR: status = -22
[  287.178973][ T7983] (syz.4.404,7983,1):ocfs2_mount_volume:1793 ERROR: status = -22
[  287.197226][ T7983] (syz.4.404,7983,1):ocfs2_fill_super:1178 ERROR: status = -22
[  287.415244][ T7979] BTRFS info (device loop3): enabling ssd optimizations
[  287.437268][ T7979] BTRFS info (device loop3): rebuilding free space tree
[  288.584565][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.407'.
[  289.114826][ T5790] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  289.747223][   T23] libceph: connect (1)[c::]:6789 error -101
[  289.811340][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  290.253194][   T23] libceph: connect (1)[c::]:6789 error -101
[  290.276021][ T5787] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (5787)
[  290.297978][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  290.304873][ T8021] ceph: No mds server is up or the cluster is laggy
[  290.329169][   T28] audit: type=1326 audit(1760342194.144:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f78eec9 code=0x7ffc0000
[  290.726566][   T28] audit: type=1326 audit(1760342194.184:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f78eec9 code=0x7ffc0000
[  290.869802][   T28] audit: type=1326 audit(1760342194.694:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9d0f78eec9 code=0x7ffc0000
[  291.075971][ T1143] Bluetooth: hci3: Frame reassembly failed (-84)
[  291.931983][ T1143] Bluetooth: hci3: Frame reassembly failed (-84)
[  292.016557][   T28] audit: type=1326 audit(1760342195.844:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f78eec9 code=0x7ffc0000
[  292.148895][   T28] audit: type=1326 audit(1760342195.844:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0f78eec9 code=0x7ffc0000
[  292.944886][ T5789] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  292.951547][ T5795] Bluetooth: hci3: command 0x1003 tx timeout
[  293.976894][ T8048] loop3: detected capacity change from 0 to 1024
[  294.331907][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.416'.
[  296.686295][ T8058] loop1: detected capacity change from 0 to 32768
[  296.710452][ T8058] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  296.880349][ T5787] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  298.184829][ T8086] loop4: detected capacity change from 0 to 256
[  298.477492][ T7563] hfsplus: b-tree write err: -5, ino 4
[  298.787203][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  298.894688][ T5173] libceph: connect (1)[c::]:6789 error -101
[  298.934103][ T5173] libceph: mon0 (1)[c::]:6789 connect error
[  299.039057][   T23] usb 5-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x31, skipping
[  299.073108][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[  299.475636][ T8094] ceph: No mds server is up or the cluster is laggy
[  299.570692][ T5173] libceph: connect (1)[c::]:6789 error -101
[  299.576764][ T5173] libceph: mon0 (1)[c::]:6789 connect error
[  299.583744][   T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  299.602705][   T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  299.613195][   T23] usb 5-1: Product: syz
[  299.617450][   T23] usb 5-1: Manufacturer: syz
[  299.622155][   T23] usb 5-1: SerialNumber: syz
[  299.629820][   T23] usb 5-1: config 0 descriptor??
[  299.798695][   T23] snd-usb-audio: probe of 5-1:0.0 failed with error -22
[  300.854241][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  303.108165][ T6538] usb 5-1: USB disconnect, device number 3
[  303.479838][ T8123] loop3: detected capacity change from 0 to 1024
[  304.935845][ T8122] loop4: detected capacity change from 0 to 32768
[  304.995494][ T8122] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  305.034159][   T27] libceph: connect (1)[c::]:6789 error -101
[  305.043385][   T27] libceph: mon0 (1)[c::]:6789 connect error
[  305.211323][ T5792] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  305.339269][   T27] libceph: connect (1)[c::]:6789 error -101
[  305.345401][   T27] libceph: mon0 (1)[c::]:6789 connect error
[  305.533387][ T8134] ceph: No mds server is up or the cluster is laggy
[  306.853988][ T1130] hfsplus: b-tree write err: -5, ino 4
[  307.070689][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'.
[  308.190855][ T8163] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  308.540469][ T8158] loop4: detected capacity change from 0 to 32768
[  308.556959][ T8158] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.442 (8158)
[  308.606926][ T8157] loop1: detected capacity change from 0 to 40427
[  308.624029][ T8158] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  308.667080][ T8158] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  308.680631][ T8157] F2FS-fs (loop1): invalid crc value
[  308.686163][ T8158] BTRFS info (device loop4): using free space tree
[  308.709769][ T8157] F2FS-fs (loop1): Found nat_bits in checkpoint
[  309.044089][ T8157] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  309.089291][ T8158] BTRFS info (device loop4): enabling ssd optimizations
[  309.144563][ T8158] BTRFS info (device loop4): auto enabling async discard
[  309.288316][   T28] audit: type=1800 audit(1760342213.114:38): pid=8157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.443" name="file1" dev="loop1" ino=10 res=0 errno=0
[  309.327575][ T8155] syz.1.443: attempt to access beyond end of device
[  309.327575][ T8155] loop1: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  309.445037][   T28] audit: type=1800 audit(1760342213.224:39): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.442" name="file1" dev="loop4" ino=260 res=0 errno=0
[  310.281076][ T5791] syz-executor: attempt to access beyond end of device
[  310.281076][ T5791] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  310.332249][ T5791] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  310.345009][   T28] audit: type=1800 audit(1760342214.124:40): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.442" name="file1" dev="loop4" ino=260 res=0 errno=0
[  310.604848][ T6318] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  311.242356][ T8193] loop2: detected capacity change from 0 to 32768
[  311.293645][ T8193] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  311.563866][ T8205] loop1: detected capacity change from 0 to 1024
[  311.572065][ T5792] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  313.399919][ T8203] loop3: detected capacity change from 0 to 32768
[  313.429000][ T8203] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.452 (8203)
[  313.504800][ T8203] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  313.525266][ T8203] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  313.568737][ T8203] BTRFS info (device loop3): force clearing of disk cache
[  313.579560][ T8203] BTRFS info (device loop3): turning on sync discard
[  313.588863][ T8203] BTRFS info (device loop3): enabling auto defrag
[  313.595601][ T8203] BTRFS info (device loop3): max_inline at 0
[  313.622834][ T8203] BTRFS info (device loop3): enabling disk space caching
[  313.655593][ T8203] BTRFS info (device loop3): disk space caching is enabled
[  313.956742][ T8203] BTRFS info (device loop3): enabling ssd optimizations
[  314.197420][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.455'.
[  314.319968][ T8203] BTRFS info (device loop3): rebuilding free space tree
[  314.694349][ T8203] BTRFS info (device loop3): disabling free space tree
[  314.709539][ T8203] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  314.769765][ T8203] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  314.971845][ T5790] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  315.272005][   T48] hfsplus: b-tree write err: -5, ino 4
[  317.348692][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  317.355522][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  317.477245][ T8250] loop4: detected capacity change from 0 to 32768
[  317.579366][ T5795] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  317.589001][ T5795] Bluetooth: hci4: Injecting HCI hardware error event
[  317.597625][ T5795] Bluetooth: hci4: hardware error 0x00
[  317.614405][ T8250] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.465 (8250)
[  317.687133][ T6538] libceph: connect (1)[c::]:6789 error -101
[  317.699579][ T6538] libceph: mon0 (1)[c::]:6789 connect error
[  317.756408][ T8250] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  317.815512][ T8250] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  317.825802][ T8250] BTRFS info (device loop4): enabling auto defrag
[  317.832576][ T8250] BTRFS info (device loop4): use no compression
[  317.839536][ T8250] BTRFS info (device loop4): max_inline at 4096
[  317.845971][ T8250] BTRFS info (device loop4): using free space tree
[  317.855530][ T5157] udevd[5157]: worker [5787] terminated by signal 33 (Unknown signal 33)
[  317.865155][ T5157] udevd[5157]: worker [5787] failed while handling '/devices/virtual/block/loop4'
[  317.929401][ T8250] BTRFS info (device loop4): enabling ssd optimizations
[  317.947562][ T8250] BTRFS info (device loop4): auto enabling async discard
[  317.970224][ T6538] libceph: connect (1)[c::]:6789 error -101
[  317.988085][ T6538] libceph: mon0 (1)[c::]:6789 connect error
[  318.092748][ T8262] ceph: No mds server is up or the cluster is laggy
[  318.175342][ T6318] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  319.506511][ T8300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.467'.
[  319.667178][ T5795] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  321.639442][ T8309] loop4: detected capacity change from 0 to 32768
[  321.679048][ T8309] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.464 (8309)
[  321.775660][ T8309] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  321.789412][ T8307] loop3: detected capacity change from 0 to 32768
[  321.801494][ T8309] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  321.817468][ T8309] BTRFS info (device loop4): enabling auto defrag
[  321.829040][ T8307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.469 (8307)
[  321.841818][ T8309] BTRFS info (device loop4): force clearing of disk cache
[  321.872898][ T8309] BTRFS info (device loop4): max_inline at 0
[  321.889832][ T8307] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  321.903063][ T8309] BTRFS info (device loop4): turning on sync discard
[  321.921228][ T8309] BTRFS info (device loop4): using free space tree
[  321.931355][ T8307] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  321.973018][ T8307] BTRFS info (device loop3): allowing degraded mounts
[  321.991844][ T8307] BTRFS info (device loop3): enabling ssd optimizations
[  322.006170][ T8307] BTRFS info (device loop3): allowing degraded mounts
[  322.014447][ T8307] BTRFS info (device loop3): using free space tree
[  322.060468][ T5798] Bluetooth: hci0: command 0x0406 tx timeout
[  322.151791][ T8309] BTRFS info (device loop4): enabling ssd optimizations
[  322.191968][ T8309] BTRFS info (device loop4): rebuilding free space tree
[  322.910122][ T6318] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  322.941583][ T5790] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  323.454916][ T5792] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop4 scanned by udevd (5792)
[  324.815871][ T8369] ceph: No mds server is up or the cluster is laggy
[  324.817222][   T27] libceph: connect (1)[c::]:6789 error -101
[  324.839031][   T27] libceph: mon0 (1)[c::]:6789 connect error
[  324.842126][ T5802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (5802)
[  325.328632][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.478'.
[  328.020895][ T8391] loop3: detected capacity change from 0 to 32768
[  328.079192][ T8391] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  329.476896][ T5792] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  330.382519][ T8412] loop1: detected capacity change from 0 to 4096
[  330.552246][ T8415] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  330.726942][ T8412] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  330.804423][ T8412] Remounting filesystem read-only
[  330.842663][ T8412] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 524288
[  330.882256][ T8412] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15)
[  330.939390][ T8412] NILFS (loop1): error -5 truncating bmap (ino=15)
[  331.066957][ T8403] loop2: detected capacity change from 0 to 32768
[  331.076969][ T5791] NILFS (loop1): discard dirty page: offset=8192, ino=6
[  331.112036][ T8403] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  331.130000][ T5791] NILFS (loop1): discard dirty block: blocknr=25, size=4096
[  331.158354][ T5791] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  331.201951][ T5791] NILFS (loop1): discard dirty page: offset=0, ino=15
[  331.226062][ T5791] NILFS (loop1): discard dirty block: blocknr=18, size=4096
[  331.243809][ T5791] NILFS (loop1): discard dirty page: offset=4096, ino=15
[  331.303596][ T5792] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  331.329984][ T5791] NILFS (loop1): discard dirty block: blocknr=0, size=4096
[  331.347518][ T5791] NILFS (loop1): discard dirty page: offset=8192, ino=15
[  331.387433][ T5791] NILFS (loop1): discard dirty block: blocknr=0, size=4096
[  331.460816][ T5791] NILFS (loop1): discard dirty page: offset=0, ino=3
[  331.494221][ T5791] NILFS (loop1): discard dirty block: blocknr=28, size=4096
[  331.521739][ T5791] NILFS (loop1): discard dirty page: offset=4096, ino=3
[  331.542754][ T5791] NILFS (loop1): discard dirty block: blocknr=29, size=4096
[  331.565657][ T5791] NILFS (loop1): discard dirty page: offset=925696, ino=3
[  331.597707][ T5791] NILFS (loop1): discard dirty block: blocknr=36, size=4096
[  334.759791][ T8432] loop2: detected capacity change from 0 to 32768
[  334.803395][ T8432] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  335.535100][ T5792] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  335.819232][ T8447] loop4: detected capacity change from 0 to 512
[  335.829194][ T8447] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  335.868940][ T8447] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  335.921199][ T8447] EXT4-fs (loop4): 1 truncate cleaned up
[  335.951877][ T8447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.974262][ T8439] loop1: detected capacity change from 0 to 32768
[  336.002516][ T8439] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  336.243276][ T8441] loop3: detected capacity change from 0 to 32768
[  336.250768][ T5802] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  336.291703][ T8441] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.497 (8441)
[  336.349761][ T8452] loop1: detected capacity change from 0 to 4096
[  336.356287][ T8441] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  336.397524][ T8441] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  336.413184][ T8453] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  336.438914][ T8441] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  336.448379][ T8441] BTRFS info (device loop3): use zstd compression, level 3
[  336.459695][   T28] audit: type=1800 audit(1760342240.294:41): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.496" name="file1" dev="loop1" ino=15 res=0 errno=0
[  336.492325][ T8441] BTRFS info (device loop3): using free space tree
[  336.540692][ T8452] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  336.599243][ T8452] Remounting filesystem read-only
[  336.623671][ T8452] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 524288
[  336.656530][ T8452] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15)
[  336.676207][ T8441] BTRFS info (device loop3): enabling ssd optimizations
[  336.691046][ T8441] BTRFS info (device loop3): auto enabling async discard
[  336.701551][ T8452] NILFS (loop1): error -5 truncating bmap (ino=15)
[  336.849358][   T28] audit: type=1800 audit(1760342240.664:42): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.497" name="file1" dev="loop3" ino=260 res=0 errno=0
[  336.869741][    C1] vkms_vblank_simulate: vblank timer overrun
[  336.895473][ T5791] NILFS (loop1): discard dirty page: offset=8192, ino=6
[  336.939013][ T5791] NILFS (loop1): discard dirty block: blocknr=25, size=4096
[  336.964229][ T5791] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  337.319365][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.500'.
[  337.889854][ T5790] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  338.690763][ T8488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.502'.
[  340.166565][ T8499] loop1: detected capacity change from 0 to 4096
[  340.213304][ T8499] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  340.267579][ T6318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.335391][ T8499] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  340.471229][ T8502] ntfs3: loop1: ino=5, "/" directory corrupted
[  340.543688][ T5791] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22.
[  340.977502][ T8497] loop3: detected capacity change from 0 to 32768
[  341.079248][ T8497] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  341.115668][ T5859] libceph: connect (1)[c::]:6789 error -101
[  341.150767][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  341.225769][ T5792] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  341.536009][ T8507] ceph: No mds server is up or the cluster is laggy
[  342.338196][ T8516] loop1: detected capacity change from 0 to 64
[  342.691033][ T8524] loop2: detected capacity change from 0 to 1024
[  342.754240][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.512'.
[  344.598594][ T8541] loop3: detected capacity change from 0 to 16
[  344.693520][ T8541] erofs: (device loop3): mounted with root inode @ nid 36.
[  344.765693][ T8544] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  344.823038][ T8542] netlink: 76 bytes leftover after parsing attributes in process `syz.2.514'.
[  344.863923][ T8541] syz.3.519: attempt to access beyond end of device
[  344.863923][ T8541] loop3: rw=524288, sector=48, nr_sectors = 976 limit=16
[  344.927033][ T8541] syz.3.519: attempt to access beyond end of device
[  344.927033][ T8541] loop3: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  345.019804][ T8541] syz.3.519: attempt to access beyond end of device
[  345.019804][ T8541] loop3: rw=524288, sector=0, nr_sectors = 560 limit=16
[  345.913032][ T8549] loop1: detected capacity change from 0 to 32768
[  345.956529][ T8549] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  346.064903][ T8555] loop4: detected capacity change from 0 to 512
[  346.074910][ T8555] FAT-fs (loop4): Unrecognized mount option "rodiP¤ç¡ËYX$Kpr" or missing value
[  347.325885][ T5792] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  347.626457][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.525'.
[  348.879044][ T5858] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  349.942805][ T5858] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  350.052175][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.068847][ T5858] usb 5-1: Product: syz
[  350.073102][ T5858] usb 5-1: Manufacturer: syz
[  350.077747][ T5858] usb 5-1: SerialNumber: syz
[  350.091310][ T5858] usb 5-1: config 0 descriptor??
[  350.383623][ T5858] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  350.793240][ T8595] Bluetooth: hci3: Frame reassembly failed (-84)
[  350.820686][ T7563] Bluetooth: hci3: Frame reassembly failed (-84)
[  351.597768][ T8597] loop1: detected capacity change from 0 to 32768
[  351.754108][ T8597] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  351.837742][ T5858] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  351.861848][ T5858] usb 5-1: USB disconnect, device number 4
[  351.913306][   T28] audit: type=1800 audit(1760342255.724:43): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.536" name="file1" dev="loop1" ino=9553 res=0 errno=0
[  351.919037][ T8597] 
[  351.936180][ T8597] ======================================================
[  351.943195][ T8597] WARNING: possible circular locking dependency detected
[  351.950220][ T8597] syzkaller #0 Not tainted
[  351.954647][ T8597] ------------------------------------------------------
[  351.961675][ T8597] syz.1.536/8597 is trying to acquire lock:
[  351.967593][ T8597] ffff888076fa9818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_xattr_set+0xada/0x11f0
[  351.979794][ T8597] 
[  351.979794][ T8597] but task is already holding lock:
[  351.987159][ T8597] ffff88805b443ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0
[  351.996657][ T8597] 
[  351.996657][ T8597] which lock already depends on the new lock.
[  351.996657][ T8597] 
[  352.007065][ T8597] 
[  352.007065][ T8597] the existing dependency chain (in reverse order) is:
[  352.016081][ T8597] 
[  352.016081][ T8597] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}:
[  352.023999][ T8597]        down_read+0x46/0x2e0
[  352.028687][ T8597]        ocfs2_init_acl+0x2fa/0x720
[  352.033940][ T8597]        ocfs2_mknod+0x12e5/0x20f0
[  352.039066][ T8597]        ocfs2_create+0x196/0x410
[  352.044120][ T8597]        path_openat+0x1277/0x3190
[  352.049241][ T8597]        do_filp_open+0x1c5/0x3d0
[  352.054276][ T8597]        do_sys_openat2+0x12c/0x1c0
[  352.059649][ T8597]        __x64_sys_open+0x11f/0x140
[  352.064873][ T8597]        do_syscall_64+0x55/0xb0
[  352.069819][ T8597]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  352.076232][ T8597] 
[  352.076232][ T8597] -> #1 (jbd2_handle){++++}-{0:0}:
[  352.083561][ T8597]        jbd2_journal_lock_updates+0xab/0x380
[  352.089767][ T8597]        __ocfs2_flush_truncate_log+0x2b8/0x10b0
[  352.096459][ T8597]        ocfs2_flush_truncate_log+0x4f/0x60
[  352.102376][ T8597]        ocfs2_sync_fs+0x117/0x310
[  352.107486][ T8597]        sync_filesystem+0x1c2/0x220
[  352.112959][ T8597]        generic_shutdown_super+0x6f/0x2b0
[  352.118775][ T8597]        kill_block_super+0x44/0x90
[  352.123982][ T8597]        deactivate_locked_super+0x97/0x100
[  352.129919][ T8597]        cleanup_mnt+0x429/0x4c0
[  352.134946][ T8597]        task_work_run+0x1ce/0x250
[  352.140062][ T8597]        exit_to_user_mode_loop+0xe6/0x110
[  352.145993][ T8597]        exit_to_user_mode_prepare+0xf6/0x180
[  352.152162][ T8597]        syscall_exit_to_user_mode+0x1a/0x50
[  352.158161][ T8597]        do_syscall_64+0x61/0xb0
[  352.163215][ T8597]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  352.169632][ T8597] 
[  352.169632][ T8597] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}:
[  352.180154][ T8597]        __lock_acquire+0x2ddb/0x7c80
[  352.185624][ T8597]        lock_acquire+0x197/0x410
[  352.190657][ T8597]        down_write+0x97/0x1f0
[  352.195446][ T8597]        ocfs2_xattr_set+0xada/0x11f0
[  352.200821][ T8597]        __vfs_setxattr+0x431/0x470
[  352.206023][ T8597]        __vfs_setxattr_noperm+0x12d/0x5e0
[  352.211831][ T8597]        vfs_setxattr+0x16c/0x2f0
[  352.216877][ T8597]        path_setxattr+0x362/0x550
[  352.222002][ T8597]        __x64_sys_setxattr+0xbb/0xd0
[  352.227392][ T8597]        do_syscall_64+0x55/0xb0
[  352.232337][ T8597]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  352.238755][ T8597] 
[  352.238755][ T8597] other info that might help us debug this:
[  352.238755][ T8597] 
[  352.248996][ T8597] Chain exists of:
[  352.248996][ T8597]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8 --> jbd2_handle --> &oi->ip_xattr_sem
[  352.248996][ T8597] 
[  352.264748][ T8597]  Possible unsafe locking scenario:
[  352.264748][ T8597] 
[  352.272198][ T8597]        CPU0                    CPU1
[  352.277653][ T8597]        ----                    ----
[  352.283015][ T8597]   lock(&oi->ip_xattr_sem);
[  352.287613][ T8597]                                lock(jbd2_handle);
[  352.294207][ T8597]                                lock(&oi->ip_xattr_sem);
[  352.301317][ T8597]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8);
[  352.308608][ T8597] 
[  352.308608][ T8597]  *** DEADLOCK ***
[  352.308608][ T8597] 
[  352.316762][ T8597] 3 locks held by syz.1.536/8597:
[  352.321871][ T8597]  #0: ffff8880636d4418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  352.331143][ T8597]  #1: ffff88805b4442d8 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: vfs_setxattr+0x145/0x2f0
[  352.341598][ T8597]  #2: ffff88805b443ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0
[  352.351555][ T8597] 
[  352.351555][ T8597] stack backtrace:
[  352.357539][ T8597] CPU: 0 PID: 8597 Comm: syz.1.536 Not tainted syzkaller #0
[  352.364821][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  352.374878][ T8597] Call Trace:
[  352.378162][ T8597]  <TASK>
[  352.381097][ T8597]  dump_stack_lvl+0x16c/0x230
[  352.385820][ T8597]  ? load_image+0x3b0/0x3b0
[  352.390327][ T8597]  ? show_regs_print_info+0x20/0x20
[  352.395540][ T8597]  ? print_circular_bug+0x12b/0x1a0
[  352.400757][ T8597]  check_noncircular+0x2bd/0x3c0
[  352.405707][ T8597]  ? look_up_lock_class+0x75/0x140
[  352.410898][ T8597]  ? print_deadlock_bug+0x5d0/0x5d0
[  352.416106][ T8597]  ? lockdep_lock+0xe0/0x220
[  352.420703][ T8597]  ? lockdep_unlock+0x137/0x2d0
[  352.425562][ T8597]  ? _find_first_zero_bit+0xd3/0x100
[  352.430859][ T8597]  __lock_acquire+0x2ddb/0x7c80
[  352.435727][ T8597]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  352.441719][ T8597]  ? verify_lock_unused+0x140/0x140
[  352.446927][ T8597]  ? stack_trace_save+0x9c/0xe0
[  352.451816][ T8597]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  352.457982][ T8597]  ? lockdep_hardirqs_on+0x98/0x150
[  352.463195][ T8597]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  352.469352][ T8597]  lock_acquire+0x197/0x410
[  352.473857][ T8597]  ? ocfs2_xattr_set+0xada/0x11f0
[  352.478903][ T8597]  ? __might_sleep+0xe0/0xe0
[  352.483516][ T8597]  ? read_lock_is_recursive+0x20/0x20
[  352.488895][ T8597]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  352.494620][ T8597]  ? ocfs2_xattr_block_find+0x154/0x4c0
[  352.500175][ T8597]  down_write+0x97/0x1f0
[  352.504599][ T8597]  ? ocfs2_xattr_set+0xada/0x11f0
[  352.509627][ T8597]  ? down_read_killable+0x340/0x340
[  352.514831][ T8597]  ? ocfs2_xattr_ibody_find+0xcb/0x7c0
[  352.520298][ T8597]  ocfs2_xattr_set+0xada/0x11f0
[  352.525159][ T8597]  ? __ocfs2_xattr_set_handle+0xf10/0xf10
[  352.530880][ T8597]  ? __lock_acquire+0x1334/0x7c80
[  352.535910][ T8597]  ? verify_lock_unused+0x140/0x140
[  352.541118][ T8597]  ? aa_get_newest_label+0xf8/0x5c0
[  352.546321][ T8597]  ? end_current_label_crit_section+0x170/0x170
[  352.552580][ T8597]  ? evm_protected_xattr_common+0x170/0x190
[  352.558653][ T8597]  ? evm_protect_xattr+0x534/0x7a0
[  352.563776][ T8597]  ? ocfs2_xattr_security_get+0x40/0x40
[  352.569327][ T8597]  __vfs_setxattr+0x431/0x470
[  352.574016][ T8597]  __vfs_setxattr_noperm+0x12d/0x5e0
[  352.579424][ T8597]  vfs_setxattr+0x16c/0x2f0
[  352.583944][ T8597]  ? xattr_permission+0x470/0x470
[  352.588973][ T8597]  ? __mnt_want_write+0x223/0x2a0
[  352.594010][ T8597]  ? path_setxattr+0x314/0x550
[  352.598789][ T8597]  path_setxattr+0x362/0x550
[  352.603402][ T8597]  ? simple_xattrs_free+0x150/0x150
[  352.608629][ T8597]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  352.614617][ T8597]  ? lock_chain_count+0x20/0x20
[  352.619473][ T8597]  __x64_sys_setxattr+0xbb/0xd0
[  352.624329][ T8597]  do_syscall_64+0x55/0xb0
[  352.628756][ T8597]  ? clear_bhb_loop+0x40/0x90
[  352.633437][ T8597]  ? clear_bhb_loop+0x40/0x90
[  352.638111][ T8597]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  352.644004][ T8597] RIP: 0033:0x7f9d0f78eec9
[  352.648503][ T8597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.668111][ T8597] RSP: 002b:00007f9d105c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  352.676527][ T8597] RAX: ffffffffffffffda RBX: 00007f9d0f9e5fa0 RCX: 00007f9d0f78eec9
[  352.684673][ T8597] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100
[  352.692648][ T8597] RBP: 00007f9d0f811f91 R08: 0000000000000000 R09: 0000000000000000
[  352.700625][ T8597] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  352.708597][ T8597] R13: 00007f9d0f9e6038 R14: 00007f9d0f9e5fa0 R15: 00007ffebd81f1f8
[  352.716587][ T8597]  </TASK>
[  352.800829][ T8599] loop3: detected capacity change from 0 to 32768
[  352.802635][ T5795] Bluetooth: hci3: command 0x1003 tx timeout
[  352.813748][ T5798] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  352.897459][ T8599] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  353.092240][ T6322] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  353.599563][ T5791] ocfs2: Unmounting device (7,1) on (node local)