last executing test programs:

7m39.472052376s ago: executing program 2 (id=3):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1)
close(0x3)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0xe8, @empty, 0x10}, 0x1c)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x3c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x48, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000002700)='testpacketdata', 0xe, 0x0, &(0x7f0000002740)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14)

7m38.737919071s ago: executing program 2 (id=7):
mkdir(&(0x7f0000000100)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./my_sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
eventfd(0x7ff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020)

7m38.394144456s ago: executing program 2 (id=10):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f00000003c0)=@id, 0x10, 0x0}, 0x0)

7m36.50901774s ago: executing program 2 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ae)
clock_gettime(0xfffffffb, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff)

7m36.037263919s ago: executing program 32 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ae)
clock_gettime(0xfffffffb, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff)

6m35.221971601s ago: executing program 3 (id=159):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6)
socket$unix(0x1, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x8}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0)

6m30.802177945s ago: executing program 3 (id=166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4})
exit(0x1ff)
io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, &(0x7f0000001bc0), 0x2)
io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000001300)=[{0x0, 0x0, 0x0}], 0x1)

6m29.579106091s ago: executing program 3 (id=168):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./tracing/events/sched/filter\x00', 0x80081, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000001900)='./proc\x00', &(0x7f0000001940)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000001b40)='7', 0x1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
write(r0, 0x0, 0x0)

6m27.749894579s ago: executing program 3 (id=174):
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13)
r1 = socket(0x10, 0x3, 0x0)
r2 = epoll_create1(0x0)
dup3(r0, r1, 0x0)
r3 = epoll_create1(0x0)
r4 = dup3(r1, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

6m27.198652635s ago: executing program 3 (id=177):
prlimit64(0x0, 0xe, &(0x7f0000001900)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001940)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000001ac0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001b00)=0x6)
r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x180)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, 0x0)
setns(0xc9, 0x0)
r4 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x4, @private1, 0x2}, 0x1c)

6m26.092842089s ago: executing program 3 (id=178):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x1c1341, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000008c0), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000900)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000a80)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b00)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef)

6m10.872267744s ago: executing program 33 (id=178):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x1c1341, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000008c0), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000900)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000a80)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b00)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef)

4m28.857114351s ago: executing program 5 (id=362):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='1\x00', 0x1)
r1 = openat(0xffffffffffffffff, &(0x7f0000000400)='./config/nullb/my_zoned_dev\x00', 0x282, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
recvfrom$inet6(r2, 0x0, 0x0, 0x10020, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
write(r1, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0)
write(r5, &(0x7f00000002c0)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)

4m26.549007518s ago: executing program 5 (id=366):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2(0x0, 0x0)
pipe(0x0)
epoll_create(0x7)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x242, 0x0)
truncate(&(0x7f0000000580)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea)
creat(&(0x7f0000000000)='./file1\x00', 0x0)
write(0xffffffffffffffff, &(0x7f0000000480), 0x11000)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

4m18.712277564s ago: executing program 5 (id=381):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x36)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x5, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'})

4m15.137426382s ago: executing program 5 (id=372):
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)

4m13.416028308s ago: executing program 5 (id=375):
mq_open(&(0x7f0000000000)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x54, 0x0)
epoll_create(0x7)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x852}, 0x38)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8)
mkdir(0x0, 0x1ff)
mkdir(0x0, 0x1ff)
mount(&(0x7f0000019c80)=@loop={'/dev/loop', 0x0}, &(0x7f0000019cc0)='.\x00', &(0x7f0000019d00)='f2fs\x00', 0x0, &(0x7f0000019d40)='acl')
r4 = openat(0xffffffffffffff9c, &(0x7f0000019d80)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0)
read(r4, &(0x7f0000019e00), 0x64)

4m10.178405042s ago: executing program 5 (id=377):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240)=0x39cb, 0x4)
shutdown(0xffffffffffffffff, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x121602, 0x0)
socket$kcm(0x1e, 0x5, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)

3m53.720862123s ago: executing program 34 (id=377):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240)=0x39cb, 0x4)
shutdown(0xffffffffffffffff, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x121602, 0x0)
socket$kcm(0x1e, 0x5, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)

15.073558811s ago: executing program 0 (id=770):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80000)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000100), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000140)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000002000)=ANY=[@ANYRES32=r1], 0x35c}, 0x1, 0x0, 0x0, 0x844}, 0x984b96203a541124)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0x30}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0)

15.012875397s ago: executing program 4 (id=771):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x200000000000000)

13.845933487s ago: executing program 1 (id=773):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80000)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000100), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000140)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000002000)=ANY=[@ANYRES32=r1], 0x35c}, 0x1, 0x0, 0x0, 0x844}, 0x984b96203a541124)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0x30}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, 0x0)
munmap$binder(0x0, 0xffffffff)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, 0x0, &(0x7f00000003c0))

13.33049676s ago: executing program 4 (id=774):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4e5ffffffffffff7811b8000000000005005bda00000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x10800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x2, 0x195, &(0x7f0000001bc0)="$eJzskj9v00AYxn9nGydBEIHElIUMEX8GiOMAYoMx7GwsRIkJEQ6Q2BIkioQRQhkYECOfgK+BxBegQ1Wpa+eojbp0qVzd+Ww57Ufo/YY897733nPve/HbaBpVgNPNcsBzFDZ1doTAAW6LLLe2Mv2ldVfrT6AG/Nd1L3T+m9ZGNF+42ZImN1UC+mEYzJrAscpF88U7lYqefbVYK6u9zXIgF6+BNE1TmRuCLOcaHOU1NjAt1TQcuKWGSAsfOYgM7gLtePKxHc0XD8aT/igYBe99u/vEe+R5j/32m3EYeNmvKLWhR0HqfaBSpUDuXwG+6/iQbUSpNclVEDVeFWdd/YbUBeexSmeVOtLvb9FXxc3/L3jJHWRbn5LcR2ZbysVBjdRDYOug45T6y+6qqo2HfAiHKwQiP1bDKTzyf1IFflJy7z5NuJ7trXRNS2tP6x+tB6A+rf2T7U/GkX780NG9BFw+9+N41pHXZivBFyCOZ76V5/wbSfnB5K2/re3h/lkX3tZgMBgMBoPBYDAYLhtnAQAA///CnXTs")
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./trace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./trace/current_tracer\x00', 0x2, 0x0)
r4 = timerfd_create(0x0, 0x80000)
timerfd_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
readv(r4, &(0x7f0000001b40)=[{&(0x7f0000001b80)=""/52, 0x34}], 0x1)
write(r3, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)

13.146348459s ago: executing program 0 (id=775):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x143000, 0xb2)
r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001"], 0x0, 0x3c}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r3, 0x0, 0x0}, 0x20)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x80000019, 0x7, 0x0, 0x5, 0x6, 0x3, 0x657}, {0x1, 0xff, 0x3, 0x8, 0xb7b, 0x8000, 0x3}, {0x4000000f, 0x7fffffff, 0x1, 0x9e4, 0x0, 0x2, 0x5}]})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f00000000c0)="66916bc702af44c573a11d71776be58d823159ca12aee555601436ba7b098e1775187fd2259b3e2fb45a674998d47b699038a3ff0df9a7527c862f9db53c5a3e980191fa06feb45026202bfd462260d9fd31874a94668230838cb1e9ae0fbfe26596d24901e7745b3f93ed0d5be54e2dc46500ce5676812ab27324cdcf242266dfee18648924c8cd5dac2cd96076770e371db5ef071dd2e48f0bcbb368026ee4f75aea4cc93596a2", &(0x7f0000000180)=""/45, &(0x7f00000001c0)="3a377a42d8deddf9ed63fb19ef56255fc68650d40a38d3e6043b052bd62fd6e682b1f331f0054f9113860621e5d32a74a9d0549cd16fe34ce1bbfbe668c2593b46234c2a9d54e55ea1a1816976fb2a2dd7d53eef0fbbed16f2b448e85e8e401a395c04cb49e8e6aa6cd675e810b453d2762919bbd5eec2e02583a5cc872a2cf5a4efe1b9849bdc14bd5c6c5901ae90cd07e3db5ff833634f40aa2020f9690287b69d0ec8faa6e6a128a024dfeb3d401a346d9e083c7f16b65f92d9064ef955003e4e67047d8ce6ba", &(0x7f00000002c0)="7daf5ade4689330277cb1f10b9e1911b1633ad35bdafd1a81083c9d60056c00f13bbfe8850e5eb80a5665738f58edb23afe86e74f2fdee9e2a3de9b4b8d9d193dafe9a90596a8fa6e2f3d583dd4d944d3378ab18d2cd11e8a3f0f0d8630d0c7665f99eac8f404ccbe21794544087a4ba88af7f5de10963835d75a9134caf9a1d78662c80292c0eabeff631d066f7a65b706a0bfe3a593bb942c005eb6652e079f84224059369b64eec", 0x4, r0, 0x4}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102)
writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$usbmon(0x0, 0x80000001, 0x28100)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000540)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r5, 0x890b, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')

12.045877952s ago: executing program 4 (id=777):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x282, 0x82)
io_uring_setup(0x7579, &(0x7f0000000180)={0x0, 0x2c9f, 0x4000, 0x2, 0x207, 0x0, r0})
socket$inet_mptcp(0x2, 0x1, 0x106)
io_cancel(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r4, &(0x7f0000000600)=""/102392, 0x18ff8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000019600)={0xa, 0x4e21, 0x0, @remote, 0x4}, 0x1c)
listen(r6, 0xfffffffc)
close_range(r5, 0xffffffffffffffff, 0x0)

11.739772764s ago: executing program 0 (id=778):
sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0xa5, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket(0x18, 0x5, 0x1)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @multicast1}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000280), &(0x7f0000000300)={0x0, 0x3938700})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x10000, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/146, &(0x7f00000004c0)=0x92)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102)
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000800), 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000880))
r4 = syz_open_pts(r3, 0x2)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000008c0)=0xf)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000900)=0x1)

10.31905413s ago: executing program 4 (id=779):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, 0x0, 0x44040)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)

10.31234842s ago: executing program 7 (id=780):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r1, 0x0)
getpgid(0x0)
fstat(r1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
fcntl$getown(r0, 0x9)
lstat(&(0x7f00000037c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000003cc0)='ext4\x00', &(0x7f0000004300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000004400), 0x3, 0x42f, &(0x7f0000004440)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004880)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000048c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)
fdatasync(r2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000004900)=""/286, 0x11e, 0x100000000000001)

10.148962277s ago: executing program 1 (id=781):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semget(0x1, 0x5, 0x6b4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
write$yama_ptrace_scope(r2, &(0x7f00000000c0)='2\x00', 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x176}]}, 0x40}}, 0x0)

9.794516124s ago: executing program 6 (id=782):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x54, [0x39, 0x2, 0x4000401, 0x8, 0xe, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0xb7b6, 0x3, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x9ffffffc, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x4, 0x0, 0x2, 0x400, 0x0, 0x6, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x1a0fadaf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x6, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x2, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x881, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x0, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x5, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x1000000, 0x0, 0x1, 0x0, 0x4, 0x10, 0x5, 0xfffffffe, 0xfff, 0x1, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x0, 0x20, 0xffffe]}, 0x45c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xd82, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300, 0x0, 0x840}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6)
r5 = syz_io_uring_setup(0x31bc, &(0x7f0000000280)={0x0, 0xc3af, 0x8, 0x1, 0x278}, &(0x7f0000000780)=<r6=>0x0, &(0x7f00000007c0)=<r7=>0x0, &(0x7f0000000800)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000840)=@IORING_OP_GETXATTR={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, &(0x7f0000000900)='./file1\x00'}})
io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0)
memfd_create(0x0, 0x6)
read$usbmon(r1, &(0x7f0000000140)=""/47, 0x2f)

9.776344675s ago: executing program 0 (id=783):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000008180800000000000f8970000"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB])
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0)
keyctl$chown(0x4, r3, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x14, &(0x7f0000000140)=[{0x1f, '\x00', @st={0x4, [{0x0, @svalue=0x6977}, {0x0, @uvalue=0x5}, {0x2, @uvalue=0x4}, {0x3, @svalue=0x8000000000000000}]}, 0x8}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))

9.194195815s ago: executing program 1 (id=784):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r1 = syz_io_uring_setup(0x111, &(0x7f0000000080)={0x0, 0x39c4, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f00000001c0)='n', 0x1)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200))
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
timer_create(0x5, 0x0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000280)=0xfff, 0x5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

8.377002979s ago: executing program 6 (id=785):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000580)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0200100000000000003bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3)
recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x6, 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)

8.26904594s ago: executing program 7 (id=786):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80000)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000100), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000140)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000002000)=ANY=[@ANYRES32=r1], 0x35c}, 0x1, 0x0, 0x0, 0x844}, 0x984b96203a541124)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0x30}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0)

7.148096306s ago: executing program 6 (id=787):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000007c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, 0x0, 0x40000)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000540)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

6.779778924s ago: executing program 1 (id=788):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semget(0x1, 0x5, 0x6b4)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='2\x00', 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x176}]}, 0x40}}, 0x0)

5.946134869s ago: executing program 6 (id=789):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x143000, 0xb2)
r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001"], 0x0, 0x3c}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r3, 0x0, 0x0}, 0x20)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x80000019, 0x7, 0x0, 0x5, 0x6, 0x3, 0x657}, {0x1, 0xff, 0x3, 0x8, 0xb7b, 0x8000, 0x3}, {0x4000000f, 0x7fffffff, 0x1, 0x9e4, 0x0, 0x2, 0x5}]})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f00000000c0)="66916bc702af44c573a11d71776be58d823159ca12aee555601436ba7b098e1775187fd2259b3e2fb45a674998d47b699038a3ff0df9a7527c862f9db53c5a3e980191fa06feb45026202bfd462260d9fd31874a94668230838cb1e9ae0fbfe26596d24901e7745b3f93ed0d5be54e2dc46500ce5676812ab27324cdcf242266dfee18648924c8cd5dac2cd96076770e371db5ef071dd2e48f0bcbb368026ee4f75aea4cc93596a2", &(0x7f0000000180)=""/45, &(0x7f00000001c0)="3a377a42d8deddf9ed63fb19ef56255fc68650d40a38d3e6043b052bd62fd6e682b1f331f0054f9113860621e5d32a74a9d0549cd16fe34ce1bbfbe668c2593b46234c2a9d54e55ea1a1816976fb2a2dd7d53eef0fbbed16f2b448e85e8e401a395c04cb49e8e6aa6cd675e810b453d2762919bbd5eec2e02583a5cc872a2cf5a4efe1b9849bdc14bd5c6c5901ae90cd07e3db5ff833634f40aa2020f9690287b69d0ec8faa6e6a128a024dfeb3d401a346d9e083c7f16b65f92d9064ef955003e4e67047d8ce6ba", &(0x7f00000002c0)="7daf5ade4689330277cb1f10b9e1911b1633ad35bdafd1a81083c9d60056c00f13bbfe8850e5eb80a5665738f58edb23afe86e74f2fdee9e2a3de9b4b8d9d193dafe9a90596a8fa6e2f3d583dd4d944d3378ab18d2cd11e8a3f0f0d8630d0c7665f99eac8f404ccbe21794544087a4ba88af7f5de10963835d75a9134caf9a1d78662c80292c0eabeff631d066f7a65b706a0bfe3a593bb942c005eb6652e079f84224059369b64eec", 0x4, r0, 0x4}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102)
writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$usbmon(0x0, 0x80000001, 0x28100)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000540)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r5, 0x890b, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')

5.328840632s ago: executing program 0 (id=790):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0)
r3 = io_uring_setup(0x71f1, &(0x7f00000006c0)={0x0, 0x4bd6, 0x2, 0x1, 0x85})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1}, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000600)=0x2, 0x4)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x1018e58, &(0x7f0000000800)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f00000008c0)="$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")
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000002480))
syz_mount_image$msdos(&(0x7f00000024c0), &(0x7f0000002500)='.\x00', 0x224061, &(0x7f0000002540)=ANY=[], 0x0, 0x0, &(0x7f0000002580))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008045, &(0x7f0000000640)={0xa, 0x2, 0x401, @empty}, 0x1c)
getpgid(r0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000540))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
openat(0xffffffffffffffff, 0x0, 0x121202, 0x4)
ftruncate(r4, 0x2)
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00')

4.690686229s ago: executing program 4 (id=791):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80000)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000100), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000140)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000002000)=ANY=[@ANYRES32=r1], 0x35c}, 0x1, 0x0, 0x0, 0x844}, 0x984b96203a541124)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0x30}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, 0x0, &(0x7f00000003c0))

4.632536114s ago: executing program 1 (id=792):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semget(0x1, 0x5, 0x6b4)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='2\x00', 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x176}]}, 0x40}}, 0x0)

4.547054093s ago: executing program 7 (id=793):
sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0xa5, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket(0x18, 0x5, 0x1)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @multicast1}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000280), &(0x7f0000000300)={0x0, 0x3938700})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x10000, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)=""/146, &(0x7f00000004c0)=0x92)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102)
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000800), 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000880))
r4 = syz_open_pts(r3, 0x2)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000008c0)=0xf)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000900)=0x1)

4.334285605s ago: executing program 6 (id=794):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semget(0x1, 0x5, 0x6b4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
write$yama_ptrace_scope(r2, &(0x7f00000000c0)='2\x00', 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x176}]}, 0x40}}, 0x0)

3.262602655s ago: executing program 7 (id=795):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000, 0x2, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x4800)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.667476019s ago: executing program 0 (id=796):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x54, [0x39, 0x2, 0x4000401, 0x8, 0xe, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0xb7b6, 0x3, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x9ffffffc, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x4, 0x0, 0x2, 0x400, 0x0, 0x6, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x1a0fadaf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x6, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x2, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x881, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x0, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x5, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x1000000, 0x0, 0x1, 0x0, 0x4, 0x10, 0x5, 0xfffffffe, 0xfff, 0x1, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x0, 0x20, 0xffffe]}, 0x45c)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xd82, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300, 0x0, 0x840}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6)
r5 = syz_io_uring_setup(0x31bc, &(0x7f0000000280)={0x0, 0xc3af, 0x8, 0x1, 0x278}, &(0x7f0000000780)=<r6=>0x0, &(0x7f00000007c0)=<r7=>0x0, &(0x7f0000000800)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000840)=@IORING_OP_GETXATTR={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, &(0x7f0000000900)='./file1\x00'}})
io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0)
memfd_create(0x0, 0x6)
read$usbmon(r1, &(0x7f0000000140)=""/47, 0x2f)

1.609641925s ago: executing program 4 (id=797):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semget(0x1, 0x5, 0x6b4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
write$yama_ptrace_scope(r2, &(0x7f00000000c0)='2\x00', 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x176}]}, 0x40}}, 0x0)

1.506924666s ago: executing program 7 (id=798):
userfaultfd(0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x40000180)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

546.889194ms ago: executing program 1 (id=799):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semget(0x1, 0x5, 0x6b4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
write$yama_ptrace_scope(r2, &(0x7f00000000c0)='2\x00', 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x176}]}, 0x40}}, 0x0)

343.293835ms ago: executing program 7 (id=800):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000500)={r4, &(0x7f0000000540), &(0x7f0000000580)=""/10, 0x2}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000100))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})

0s ago: executing program 6 (id=801):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, 0x0, 0x44040)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)

kernel console output (not intermixed with test programs):

 veth0_vlan entered promiscuous mode
[   88.108882][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   88.120031][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.134062][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   88.143539][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.151978][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   88.166363][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   88.225861][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.238165][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.242185][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.254019][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.274456][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.275842][ T4288] device veth1_vlan entered promiscuous mode
[   88.307469][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.372304][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.380202][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.405667][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.420824][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   88.429792][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   88.462655][ T4288] device veth0_macvtap entered promiscuous mode
[   88.484350][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.492371][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.510947][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.518839][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.549218][ T4288] device veth1_macvtap entered promiscuous mode
[   88.557129][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   88.577269][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.588702][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.589723][ T4390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'.
[   88.607034][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.625278][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.648405][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.674120][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.710247][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.731027][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.741645][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.753125][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.763054][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.773666][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.783560][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.794596][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.808689][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.825079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.854215][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.867504][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.879036][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.890940][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.902796][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.914890][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.926476][ T4392] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.943719][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.955355][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.977174][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.994716][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.041592][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   89.057893][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   89.113944][ T4288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.153008][ T4288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.186445][ T4288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.217007][ T4288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.273082][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   89.347312][ T4404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'.
[   89.367673][ T4404] device gre0 entered promiscuous mode
[   89.472077][ T4404] netlink: 'syz.3.4': attribute type 10 has an invalid length.
[   89.483588][ T4404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'.
[   89.507224][ T4404] device dummy0 entered promiscuous mode
[   89.623966][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.665146][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.716141][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   89.748140][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.769803][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.793247][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.043071][ T4402] syz.1.2 (4402) used greatest stack depth: 20016 bytes left
[   90.847706][ T4345] rxe_eth0 speed is unknown, defaulting to 1000
[   91.463898][ T4429] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET)
[   91.473802][ T4426] loop3: detected capacity change from 0 to 1024
[   91.574214][ T4426] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.646286][ T4426] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   91.696700][ T4426] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   91.745267][ T4426] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   91.760503][ T4426] System zones: 0-1, 3-36
[   91.821470][ T4426] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   91.844118][  T957] cfg80211: failed to load regulatory.db
[   91.974327][ T4352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.047806][ T4426] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   92.222964][ T4275] EXT4-fs (loop3): unmounting filesystem.
[   92.234558][ T4352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.448677][ T4352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.518940][ T4455] device vlan2 entered promiscuous mode
[   92.544531][ T4455] device bridge0 entered promiscuous mode
[   92.668353][ T4352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.757330][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[   93.047219][ T4469] batman_adv: batadv0: Adding interface: dummy0
[   93.071000][ T4469] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.199771][ T4469] batman_adv: batadv0: Interface activated: dummy0
[   93.287798][ T4471] batadv0: mtu less than device minimum
[   93.326307][ T4471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.339118][ T4471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.351614][ T4471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.364059][ T4471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.376525][ T4471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.389092][ T4471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.401593][ T4471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.414108][ T4471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.426572][ T4471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.617455][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.627479][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.635549][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.646933][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.687021][   T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   93.696232][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.871972][ T4475] rxe_eth0 speed is unknown, defaulting to 1000
[   95.760643][   T50] Bluetooth: hci3: command 0x0409 tx timeout
[   96.367035][ T4521] loop1: detected capacity change from 0 to 1024
[   97.030003][ T4526] loop4: detected capacity change from 0 to 1024
[   97.397340][ T4529] loop1: detected capacity change from 0 to 512
[   97.437853][ T4529] EXT4-fs: Ignoring removed mblk_io_submit option
[   97.570786][ T4529] EXT4-fs error (device loop1): ext4_iget_extra_inode:4766: inode #15: comm syz.1.32: corrupted in-inode xattr
[   97.633051][ T4529] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.32: couldn't read orphan inode 15 (err -117)
[   97.654446][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.662974][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.693044][ T4529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   97.840517][   T50] Bluetooth: hci3: command 0x041b tx timeout
[   98.622708][ T4534] loop4: detected capacity change from 0 to 32768
[   98.665270][ T4534] (syz.4.34,4534,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "usrqu=writeback" or missing value
[   98.749528][ T4534] (syz.4.34,4534,1):ocfs2_fill_super:1176 ERROR: status = -22
[   98.872264][ T4346] net_ratelimit: 11 callbacks suppressed
[   98.936824][ T4281] EXT4-fs (loop1): unmounting filesystem.
[   99.161750][ T4542] input: syz1 as /devices/virtual/input/input5
[   99.260775][   T26] audit: type=1804 audit(1793823037.234:2): pid=4544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.37" name="bus" dev="ramfs" ino=35059 res=1 errno=0
[   99.349575][   T26] audit: type=1804 audit(1793823037.264:3): pid=4544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.37" name="bus" dev="ramfs" ino=35059 res=1 errno=0
[   99.920970][   T50] Bluetooth: hci3: command 0x040f tx timeout
[  100.858935][ T4510] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.007503][ T4510] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.735396][ T4510] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.744496][ T4510] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.753923][ T4510] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.763581][ T4510] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.000562][ T4289] Bluetooth: hci3: command 0x0419 tx timeout
[  102.013459][ T4557] bridge0: port 3(vxlan0) entered blocking state
[  102.021897][ T4557] bridge0: port 3(vxlan0) entered disabled state
[  102.037029][ T4557] device vxlan0 entered promiscuous mode
[  102.056766][ T4475] chnl_net:caif_netlink_parms(): no params data found
[  103.470832][ T4343] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  103.690418][ T4343] usb 4-1: Using ep0 maxpacket: 32
[  103.721229][ T4343] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  103.729806][ T4343] usb 4-1: config 0 has no interface number 0
[  103.783323][ T4343] usb 4-1: config 0 interface 12 has no altsetting 0
[  103.808129][ T4343] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  103.833589][ T4343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.855704][ T4343] usb 4-1: Product: syz
[  103.863103][ T4591] device syzkaller0 entered promiscuous mode
[  103.869188][ T4343] usb 4-1: Manufacturer: syz
[  103.884210][ T4343] usb 4-1: SerialNumber: syz
[  103.947441][ T4343] usb 4-1: config 0 descriptor??
[  104.000419][    C1] net_ratelimit: 33 callbacks suppressed
[  104.032380][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.039595][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.092176][ T4475] device bridge_slave_0 entered promiscuous mode
[  106.047315][ T4622] loop0: detected capacity change from 0 to 512
[  106.058601][ T4622] =======================================================
[  106.058601][ T4622] WARNING: The mand mount option has been deprecated and
[  106.058601][ T4622]          and is ignored by this kernel. Remove the mand
[  106.058601][ T4622]          option from the mount to silence this warning.
[  106.058601][ T4622] =======================================================
[  106.473149][ T4343] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  106.497438][ T4343] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  106.505570][ T4343] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  106.515644][ T4343] f81534: probe of 4-1:0.12 failed with error -71
[  106.546468][ T4343] usb 4-1: USB disconnect, device number 2
[  108.032497][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.039650][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.071872][ T4475] device bridge_slave_1 entered promiscuous mode
[  108.127741][ T4613] netlink: 'syz.1.53': attribute type 5 has an invalid length.
[  108.163276][ T4613] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.172742][ T4613] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.181744][ T4613] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.190566][ T4613] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.213050][ T4613] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.222811][ T4613] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.231879][ T4613] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.240894][ T4613] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.802100][ T4614] netlink: 'syz.1.53': attribute type 5 has an invalid length.
[  108.890562][ T4614] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.899381][ T4614] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.908578][ T4614] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.917856][ T4614] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.965438][ T4614] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.975063][ T4614] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.984040][ T4614] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.993004][ T4614] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.122491][   T34] net_ratelimit: 26 callbacks suppressed
[  109.246277][ T4475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.296314][ T4614] netlink: 'syz.1.53': attribute type 5 has an invalid length.
[  109.379693][ T4614] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.389188][ T4614] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.398129][ T4614] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.406919][ T4614] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.146285][ T4614] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.155345][ T4614] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.164350][ T4614] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.174379][ T4614] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.390932][ T4475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.873624][ T4662] tipc: Failed to remove unknown binding: 66,1,1/0:426359136/426359138
[  110.894840][ T4352] device hsr_slave_0 left promiscuous mode
[  110.920831][ T4656] Zero length message leads to an empty skb
[  110.962802][ T4662] tipc: Failed to remove unknown binding: 66,1,1/0:426359136/426359138
[  111.207143][ T4352] device hsr_slave_1 left promiscuous mode
[  111.241018][ T4662] tipc: Failed to remove unknown binding: 66,1,1/0:426359136/426359138
[  111.411650][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.547239][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.567653][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.646779][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.715070][ T4352] device bridge_slave_1 left promiscuous mode
[  111.753449][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.832118][ T4352] device bridge_slave_0 left promiscuous mode
[  111.858887][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.848607][ T4352] device veth1_macvtap left promiscuous mode
[  112.874049][ T4352] device veth0_macvtap left promiscuous mode
[  112.904096][ T4352] device veth1_vlan left promiscuous mode
[  112.924661][ T4352] device veth0_vlan left promiscuous mode
[  113.590547][ T4692] xt_CT: You must specify a L4 protocol and not use inversions on it
[  114.000355][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  114.010351][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  114.020355][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  114.030344][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  114.040342][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  114.050339][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  114.060336][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  114.070335][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  114.080342][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  114.090350][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  114.893112][    C1] net_ratelimit: 33 callbacks suppressed
[  117.106898][ T4352] team0 (unregistering): Port device team_slave_1 removed
[  117.170963][ T4352] team0 (unregistering): Port device team_slave_0 removed
[  117.232358][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.293770][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.719414][ T4352] bond0 (unregistering): Released all slaves
[  117.822424][ T4680] IPv6: NLM_F_CREATE should be specified when creating new route
[  117.841647][ T4475] team0: Port device team_slave_0 added
[  117.859584][ T4475] team0: Port device team_slave_1 added
[  117.956980][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'.
[  117.986779][ T4690] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.995922][ T4690] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.005034][ T4690] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.013837][ T4690] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.024449][ T4690] bridge0: port 3(vxlan0) entered blocking state
[  118.031030][ T4690] bridge0: port 3(vxlan0) entered forwarding state
[  119.206144][ T4475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.260884][ T4475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.389182][ T4475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.513549][ T4475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.534572][ T4475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.645720][ T4475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.000802][ T4524] net_ratelimit: 27 callbacks suppressed
[  120.032759][ T4475] device hsr_slave_0 entered promiscuous mode
[  120.072782][ T4475] device hsr_slave_1 entered promiscuous mode
[  120.094641][ T4475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.118646][ T4475] Cannot create hsr debugfs directory
[  121.340842][ T4746] libceph: resolve '1' (ret=-3): failed
[  124.572572][ T4475] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  125.120348][    C1] net_ratelimit: 16 callbacks suppressed
[  125.167842][ T4475] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  125.530890][ T4475] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  125.606778][ T4475] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  126.528931][   T26] audit: type=1326 audit(1793823320.500:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.0.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d859fb19 code=0x7ffc0000
[  126.630864][   T26] audit: type=1326 audit(1793823320.550:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.0.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d859fb19 code=0x7ffc0000
[  126.762909][   T26] audit: type=1326 audit(1793823320.550:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.0.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d859fb19 code=0x7ffc0000
[  126.887352][   T26] audit: type=1326 audit(1793823320.550:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.0.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d859fb19 code=0x7ffc0000
[  126.989725][   T26] audit: type=1326 audit(1793823320.550:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.0.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d859fb19 code=0x7ffc0000
[  128.240491][   T26] audit: type=1326 audit(1793823320.550:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.0.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d859fb19 code=0x7ffc0000
[  128.339322][   T26] audit: type=1326 audit(1793823320.550:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.0.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d859fb19 code=0x7ffc0000
[  128.527228][   T26] audit: type=1326 audit(1793823320.550:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.0.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d859fb19 code=0x7ffc0000
[  128.583368][ T4475] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.667545][   T26] audit: type=1326 audit(1793823320.550:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.0.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d859fb19 code=0x7ffc0000
[  128.771928][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  128.786710][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.824749][ T4818] loop0: detected capacity change from 0 to 512
[  128.837964][   T26] audit: type=1326 audit(1793823320.550:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4787 comm="syz.0.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe7d859fb19 code=0x7ffc0000
[  128.921710][ T4475] 8021q: adding VLAN 0 to HW filter on device team0
[  128.951453][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.974102][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.988377][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.996359][ T4682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.064686][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  129.098835][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  129.119762][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  129.133824][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.141073][ T4682] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.160992][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  129.195041][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  129.226683][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  129.292898][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  129.340033][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  129.377334][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  129.415399][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  129.452068][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  129.511270][ T4818] EXT4-fs: Ignoring removed oldalloc option
[  129.518524][ T4818] ext4: Unknown parameter 'fsuuid'
[  129.544795][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  129.577679][ T4475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  129.618788][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  129.640035][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  129.672767][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  129.824052][ T4289] Bluetooth: Unexpected continuation frame (len 16)
[  130.240352][    C1] net_ratelimit: 27 callbacks suppressed
[  130.969551][ T4852] device syzkaller0 entered promiscuous mode
[  131.269970][ T4865] device syzkaller0 entered promiscuous mode
[  131.774122][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  131.785391][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  131.796349][ T4875] loop3: detected capacity change from 0 to 512
[  131.843568][ T4475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.898650][ T4877] loop1: detected capacity change from 0 to 512
[  131.947553][ T4877] EXT4-fs: Ignoring removed nobh option
[  131.958548][ T4875] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.103: iget: bad i_size value: 38620345925642
[  131.973480][ T4875] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.103: couldn't read orphan inode 15 (err -117)
[  131.992644][ T4877] EXT4-fs (loop1): Test dummy encryption mode enabled
[  132.024627][ T4877] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  132.066004][ T4877] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  132.118554][ T4875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  132.160069][ T4877] EXT4-fs (loop1): 1 truncate cleaned up
[  132.191933][ T4877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  132.287194][ T4877] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  132.361295][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055501400: rx timeout, send abort
[  132.371785][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055501400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  132.383127][ T4875] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.103: bg 0: block 5: invalid block bitmap
[  132.451846][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055502000: rx timeout, send abort
[  132.460706][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055502000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  132.491115][ T4875] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 260 with error 28
[  132.602703][ T4875] EXT4-fs (loop3): This should not happen!! Data will be lost
[  132.602703][ T4875] 
[  132.690868][ T4875] EXT4-fs (loop3): Total free blocks count 0
[  132.724993][ T4875] EXT4-fs (loop3): Free/Dirty block details
[  132.772765][ T4875] EXT4-fs (loop3): free_blocks=0
[  132.777943][ T4875] EXT4-fs (loop3): dirty_blocks=264
[  132.805205][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  132.812106][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  132.832549][ T4875] EXT4-fs (loop3): Block reservation details
[  132.946536][ T4875] EXT4-fs (loop3): i_reserved_data_blocks=264
[  133.503405][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  133.844866][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  133.885292][ T4903] overlayfs: failed to clone upperpath
[  134.279593][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  134.297783][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  134.396035][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  134.422749][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  134.456803][ T4475] device veth0_vlan entered promiscuous mode
[  134.505907][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  134.524046][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  134.559615][ T4475] device veth1_vlan entered promiscuous mode
[  134.673269][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  134.710823][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  134.730849][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  134.781388][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  134.818591][ T4475] device veth0_macvtap entered promiscuous mode
[  134.848800][ T4475] device veth1_macvtap entered promiscuous mode
[  134.915496][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.956693][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.987396][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.022209][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.225423][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.237032][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.260168][ T4475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.311635][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  135.516826][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  135.520514][    C0] net_ratelimit: 23 callbacks suppressed
[  135.813432][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  135.971311][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  136.027347][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.185230][   T26] kauditd_printk_skb: 27 callbacks suppressed
[  136.185247][   T26] audit: type=1800 audit(1793823330.160:41): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.117" name=08 dev="sda1" ino=2048 res=0 errno=0
[  136.224709][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.269839][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.301057][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.330702][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.530341][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.594037][ T4475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.599970][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  137.713707][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  137.860614][ T4475] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.869360][ T4475] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.881458][ T4475] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.890196][ T4475] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.720822][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.858047][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.798416][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  140.840231][ T4975] netlink: 'syz.3.124': attribute type 1 has an invalid length.
[  140.849176][ T4971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.872398][ T4971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.960407][    C1] net_ratelimit: 53 callbacks suppressed
[  140.969418][ T4978] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  141.025613][ T4975] 8021q: adding VLAN 0 to HW filter on device bond1
[  141.042956][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  141.793567][ T4989] netlink: 'syz.1.129': attribute type 2 has an invalid length.
[  142.070285][    C1] sched: RT throttling activated
[  142.154955][ T4975] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.267864][ T4975] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.358217][ T4975] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.444426][ T4975] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.524478][ T4975] bond1: (slave geneve2): making interface the new active one
[  142.623991][ T4975] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  142.684369][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17'.
[  142.894828][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  143.745275][ T5027] loop1: detected capacity change from 0 to 128
[  144.790223][ T5043] syz.1.135: attempt to access beyond end of device
[  144.790223][ T5043] loop1: rw=2049, sector=145, nr_sectors = 464 limit=128
[  144.865278][ T5045] overlayfs: failed to clone upperpath
[  144.900448][  T957] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  145.188813][  T957] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.388810][  T957] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  145.678830][  T957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.694903][  T957] usb 1-1: Product: syz
[  145.699262][  T957] usb 1-1: Manufacturer: syz
[  145.703988][  T957] usb 1-1: SerialNumber: syz
[  145.847025][  T957] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  148.134908][    C1] net_ratelimit: 35 callbacks suppressed
[  148.275820][ T4350] kworker/u4:6: attempt to access beyond end of device
[  148.275820][ T4350] loop1: rw=1, sector=609, nr_sectors = 96 limit=128
[  149.018710][  T957] gspca_mr97310a: reg write [21] error -71
[  149.035141][  T957] mr97310a: probe of 1-1:1.0 failed with error -71
[  149.151896][  T957] usb 1-1: USB disconnect, device number 2
[  149.965700][ T5083] syz.3.149 (5083) used greatest stack depth: 17072 bytes left
[  150.005980][ T5082] overlayfs: failed to clone upperpath
[  151.254605][ T5100] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[  151.262447][ T5100] Error parsing options; rc = [-22]
[  151.898502][ T5096] device vlan0 entered promiscuous mode
[  152.061006][ T5106] loop3: detected capacity change from 0 to 512
[  152.110418][ T5106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  152.234324][ T5106] EXT4-fs (loop3): 1 truncate cleaned up
[  152.276063][ T5106] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  152.285445][ T5109] netlink: 2 bytes leftover after parsing attributes in process `syz.4.155'.
[  152.926377][ T5123] netlink: 'syz.4.156': attribute type 10 has an invalid length.
[  152.967298][ T5123] bridge0: port 3(netdevsim0) entered blocking state
[  153.128450][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  153.211384][    C0] net_ratelimit: 35 callbacks suppressed
[  153.242077][ T5123] bridge0: port 3(netdevsim0) entered disabled state
[  153.272771][ T5123] device netdevsim0 entered promiscuous mode
[  154.183178][ T5125] device bridge_slave_0 left promiscuous mode
[  154.238272][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.101908][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  155.109506][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.119196][ T5135] device bridge_slave_0 left promiscuous mode
[  155.128547][ T5135] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.182351][ T5135] device bridge_slave_1 left promiscuous mode
[  155.210710][ T5135] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.296192][ T5155] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.162' sets config #-1
[  155.324866][ T5135] bond0: (slave bond_slave_0): Releasing backup interface
[  155.619090][ T5135] bond0: (slave bond_slave_1): Releasing backup interface
[  156.395662][ T5135] team0: Port device team_slave_0 removed
[  156.492878][ T5135] team0: Port device team_slave_1 removed
[  156.534020][ T5135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.562855][ T5135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.916415][ T5135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.026033][ T5135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.408427][ T5141] team0: Mode changed to "activebackup"
[  158.400395][    C0] net_ratelimit: 34 callbacks suppressed
[  159.280824][ T5187] FAULT_INJECTION: forcing a failure.
[  159.280824][ T5187] name failslab, interval 1, probability 0, space 0, times 1
[  159.372325][ T5187] CPU: 1 PID: 5187 Comm: syz.3.168 Not tainted syzkaller #0
[  159.379810][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  159.389945][ T5187] Call Trace:
[  159.393273][ T5187]  <TASK>
[  159.396231][ T5187]  dump_stack_lvl+0x188/0x24e
[  159.400985][ T5187]  ? show_regs_print_info+0x12/0x12
[  159.406232][ T5187]  ? load_image+0x410/0x410
[  159.410803][ T5187]  ? __might_sleep+0xd0/0xd0
[  159.415469][ T5187]  ? __lock_acquire+0x7ea0/0x7ea0
[  159.420560][ T5187]  ? aa_file_perm+0x3ea/0xf00
[  159.425297][ T5187]  should_fail_ex+0x390/0x4c0
[  159.430015][ T5187]  should_failslab+0x5/0x20
[  159.434547][ T5187]  slab_pre_alloc_hook+0x59/0x300
[  159.439664][ T5187]  ? subsystem_filter_write+0x75/0xf0
[  159.445070][ T5187]  __kmem_cache_alloc_node+0x4f/0x270
[  159.450480][ T5187]  ? subsystem_filter_write+0x75/0xf0
[  159.455889][ T5187]  __kmalloc_node_track_caller+0xa0/0x240
[  159.461649][ T5187]  memdup_user_nul+0x28/0xf0
[  159.466280][ T5187]  subsystem_filter_write+0x75/0xf0
[  159.471511][ T5187]  ? subsystem_filter_read+0x210/0x210
[  159.476998][ T5187]  vfs_write+0x2dc/0x9a0
[  159.481273][ T5187]  ? file_end_write+0x250/0x250
[  159.486154][ T5187]  ? __fget_files+0x28/0x460
[  159.490777][ T5187]  ? __fget_files+0x3fc/0x460
[  159.495495][ T5187]  ? __fdget_pos+0x2ae/0x360
[  159.500118][ T5187]  ? ksys_write+0x70/0x260
[  159.504568][ T5187]  ksys_write+0x14d/0x260
[  159.508927][ T5187]  ? __ia32_sys_read+0x80/0x80
[  159.513714][ T5187]  ? lockdep_hardirqs_on+0x94/0x140
[  159.518942][ T5187]  do_syscall_64+0x4c/0xa0
[  159.523395][ T5187]  ? clear_bhb_loop+0x60/0xb0
[  159.528137][ T5187]  ? clear_bhb_loop+0x60/0xb0
[  159.532848][ T5187]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.538770][ T5187] RIP: 0033:0x7ff31579fb19
[  159.543231][ T5187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.562868][ T5187] RSP: 002b:00007ff31659b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  159.571319][ T5187] RAX: ffffffffffffffda RBX: 00007ff315a25fa0 RCX: 00007ff31579fb19
[  159.579322][ T5187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  159.587343][ T5187] RBP: 00007ff315837b70 R08: 0000000000000000 R09: 0000000000000000
[  159.595341][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.603340][ T5187] R13: 00007ff315a26038 R14: 00007ff315a25fa0 R15: 00007ffe1ad51258
[  159.611380][ T5187]  </TASK>
[  159.614962][ T4289] Bluetooth: Wrong link type (-71)
[  161.433989][ T5227] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[  164.425956][    C1] net_ratelimit: 41 callbacks suppressed
[  165.555054][ T5247] loop1: detected capacity change from 0 to 512
[  165.689105][ T5247] EXT4-fs: Ignoring removed oldalloc option
[  165.729131][ T5247] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  165.771165][ T5247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  165.786015][ T5247] EXT4-fs (loop1): orphan cleanup on readonly fs
[  165.797018][ T5247] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.182: bad orphan inode 267
[  166.090225][ T5247] EXT4-fs (loop1): Remounting filesystem read-only
[  166.185051][ T5247] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  167.629031][ T5262] loop0: detected capacity change from 0 to 1024
[  167.805519][ T5262] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  167.860013][ T5262] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.926423][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  168.940785][ T5269] EXT4-fs error (device loop0): ext4_free_blocks:6235: comm syz.0.185: Freeing blocks not in datazone - block = 0, count = 16
[  168.960067][   T26] audit: type=1800 audit(1793823362.910:42): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.185" name="file1" dev="loop0" ino=15 res=0 errno=0
[  169.581741][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  169.683969][    C1] net_ratelimit: 37 callbacks suppressed
[  171.405208][ T4289] Bluetooth: Wrong link type (-71)
[  171.413954][ T4289] Bluetooth: hci4: link tx timeout
[  171.419508][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.443656][ T5301] loop5: detected capacity change from 0 to 1024
[  172.542796][ T5301] hfsplus: creator requires a 4 character value
[  172.659620][ T5301] hfsplus: unable to parse mount options
[  173.052863][   T26] audit: type=1326 audit(1793823367.020:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.0.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d859fb19 code=0x7fc00000
[  173.400341][   T26] audit: type=1326 audit(1793823367.370:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.0.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7d8599897 code=0x7fc00000
[  173.451763][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  173.527768][   T26] audit: type=1326 audit(1793823367.370:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.0.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7d8540e99 code=0x7fc00000
[  173.633585][   T26] audit: type=1326 audit(1793823367.370:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.0.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe7d8540f5d code=0x7fc00000
[  173.660813][   T26] audit: type=1326 audit(1793823367.370:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.0.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe7d859fb19 code=0x7fc00000
[  173.711346][   T26] audit: type=1326 audit(1793823367.660:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.4.195" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57c39fb19 code=0x7fc00000
[  173.923552][ T5320] loop5: detected capacity change from 0 to 1024
[  174.450440][   T26] audit: type=1326 audit(1793823368.420:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.4.195" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa57c39fb19 code=0x7fc00000
[  174.880355][    C1] net_ratelimit: 31 callbacks suppressed
[  174.965635][ T5320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.499149][   T26] audit: type=1804 audit(1793823370.450:50): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.197" name="/newroot/13/file0/bus" dev="loop5" ino=861 res=1 errno=0
[  178.513439][ T4289] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7
[  180.000312][    C1] net_ratelimit: 35 callbacks suppressed
[  182.202557][   T26] audit: type=1800 audit(1793823376.180:51): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.207" name="report_length" dev="configfs" ino=36798 res=0 errno=0
[  182.365588][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.379618][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.390856][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.404405][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.414978][   T50] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  182.426063][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.563401][ T4289] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  182.572542][ T4289] Bluetooth: hci1: Injecting HCI hardware error event
[  182.583458][   T50] Bluetooth: hci1: hardware error 0x00
[  183.687831][ T5315] netlink: 'syz.1.196': attribute type 1 has an invalid length.
[  184.077497][ T5368] rxe_eth0 speed is unknown, defaulting to 1000
[  184.221901][ T5389] device syzkaller0 entered promiscuous mode
[  184.490630][ T4289] Bluetooth: hci5: command 0x0409 tx timeout
[  184.650670][   T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  185.120452][    C1] net_ratelimit: 31 callbacks suppressed
[  186.730568][ T5409] process 'syz.4.217' launched './file0' with NULL argv: empty string added
[  187.213550][   T50] Bluetooth: hci5: command 0x041b tx timeout
[  187.492048][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.549296][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.226051][ T5424] jffs2: notice: (5424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  189.734514][ T5424] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  190.188792][    C1] net_ratelimit: 32 callbacks suppressed
[  190.198104][   T50] Bluetooth: hci5: command 0x040f tx timeout
[  190.383998][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.733567][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.352912][ T5438] tc action pedit 'at' offset 9 out of bounds
[  191.359609][ T5438] tc action pedit 'at' offset 9 out of bounds
[  191.365838][ T5438] tc action pedit 'at' offset 9 out of bounds
[  191.371997][ T5438] tc action pedit 'at' offset 9 out of bounds
[  191.378158][ T5438] tc action pedit 'at' offset 9 out of bounds
[  191.384333][ T5438] tc action pedit 'at' offset 9 out of bounds
[  191.390487][ T5438] tc action pedit 'at' offset 9 out of bounds
[  191.396577][ T5438] tc action pedit 'at' offset 9 out of bounds
[  191.402754][ T5438] tc action pedit 'at' offset 9 out of bounds
[  191.408845][ T5438] tc action pedit 'at' offset 9 out of bounds
[  191.946756][ T5368] chnl_net:caif_netlink_parms(): no params data found
[  192.240850][   T50] Bluetooth: hci5: command 0x0419 tx timeout
[  193.428477][ T5482] loop0: detected capacity change from 0 to 2048
[  193.615138][ T5482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  193.787150][ T5492] loop1: detected capacity change from 0 to 16
[  193.961278][ T5492] erofs: (device loop1): mounted with root inode @ nid 36.
[  194.245501][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  194.257730][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  194.322624][ T5480] EXT4-fs (loop0): unmounting filesystem.
[  195.520327][    C0] net_ratelimit: 33 callbacks suppressed
[  199.188464][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.196388][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.258865][ T5368] device bridge_slave_0 entered promiscuous mode
[  199.462111][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.477499][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.672398][ T5527] loop1: detected capacity change from 0 to 32768
[  199.679856][ T5527] XFS: attr2 mount option is deprecated.
[  199.721719][ T5368] device bridge_slave_1 entered promiscuous mode
[  199.858203][ T5527] XFS (loop1): Mounting V5 Filesystem
[  199.967386][ T5527] XFS (loop1): Ending clean mount
[  199.983084][ T5527] XFS (loop1): Quotacheck needed: Please wait.
[  200.137174][ T5527] XFS (loop1): Quotacheck: Done.
[  200.640328][    C0] net_ratelimit: 29 callbacks suppressed
[  200.998831][ T4281] XFS (loop1): Unmounting Filesystem
[  201.168359][ T5368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.255445][ T5368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.476305][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  201.479770][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  203.149921][ T5368] team0: Port device team_slave_0 added
[  203.172794][ T5368] team0: Port device team_slave_1 added
[  203.503385][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.535993][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.791564][ T5368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.914283][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.929807][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.154135][ T5571] loop1: detected capacity change from 0 to 1024
[  204.924851][ T5571] hfsplus: creator requires a 4 character value
[  204.951912][ T5368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.022698][ T5571] hfsplus: unable to parse mount options
[  205.140624][    T9] device hsr_slave_0 left promiscuous mode
[  206.183195][    C1] net_ratelimit: 35 callbacks suppressed
[  206.262310][    T9] device hsr_slave_1 left promiscuous mode
[  206.338457][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.352748][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.409604][    T9] device bridge_slave_1 left promiscuous mode
[  206.543073][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.736147][    T9] device bridge_slave_0 left promiscuous mode
[  206.765247][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.117197][    T9] bond1 (unregistering): (slave geneve2): Releasing active interface
[  209.029118][    T9] bond1 (unregistering): Released all slaves
[  211.280316][    C1] net_ratelimit: 50 callbacks suppressed
[  213.826637][    T9] team0 (unregistering): Port device team_slave_1 removed
[  214.959453][    T9] team0 (unregistering): Port device team_slave_0 removed
[  215.034009][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.112020][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.879083][    T9] bond0 (unregistering): Released all slaves
[  216.129676][ T5598] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  216.144857][ T5598] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  216.205321][ T5625] IPVS: Error connecting to the multicast addr
[  216.400457][    C1] net_ratelimit: 38 callbacks suppressed
[  216.441735][ T5653] loop1: detected capacity change from 0 to 128
[  216.534509][ T5653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  216.572244][ T5653] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  216.656398][ T5368] device hsr_slave_0 entered promiscuous mode
[  216.711490][ T5368] device hsr_slave_1 entered promiscuous mode
[  216.736883][ T5368] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.770571][ T5368] Cannot create hsr debugfs directory
[  216.800780][ T4292] Bluetooth: hci3: command 0x0406 tx timeout
[  217.636262][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  218.943273][ T5682] loop1: detected capacity change from 0 to 128
[  218.960173][ T5679] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2
[  218.969356][ T5679] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0
[  219.080549][ T5682] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  221.832021][    C1] net_ratelimit: 26 callbacks suppressed
[  221.859892][   T11] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  222.979992][ T5713] loop1: detected capacity change from 0 to 512
[  223.944002][ T5712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.273'.
[  224.352183][ T5713] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  226.880303][    C0] net_ratelimit: 45 callbacks suppressed
[  226.995257][ T5368] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  227.013678][ T5368] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  227.043796][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  227.139556][ T5368] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  227.262580][ T5368] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  227.314767][ T5739] loop1: detected capacity change from 0 to 512
[  227.370717][ T5739] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  227.449874][ T5739] EXT4-fs (loop1): 1 truncate cleaned up
[  227.562230][ T5739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  228.092329][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  229.015799][ T5368] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.191322][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  230.621057][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  230.770119][ T5368] 8021q: adding VLAN 0 to HW filter on device team0
[  231.795716][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  231.826725][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  231.951459][ T4938] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.958677][ T4938] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.010353][    C0] net_ratelimit: 42 callbacks suppressed
[  232.289854][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  232.656571][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  232.762847][ T4938] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.770080][ T4938] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.840637][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  232.850050][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  232.868530][ T5792] loop1: detected capacity change from 0 to 512
[  232.891194][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  232.934660][ T5792] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  232.959482][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  232.987158][ T5792] EXT4-fs (loop1): 1 orphan inode deleted
[  232.993683][ T5792] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  234.075987][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  234.122623][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  234.159284][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  234.170129][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  234.179819][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  234.189191][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  234.356263][ T5368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.372279][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  235.031845][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  235.206222][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  235.231242][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  237.040296][    C0] net_ratelimit: 34 callbacks suppressed
[  238.454238][ T5847] loop1: detected capacity change from 0 to 1764
[  239.715062][ T5859] overlayfs: failed to clone upperpath
[  240.448679][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  240.500598][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  240.542129][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  240.560445][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  240.571046][   T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  240.579065][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  242.120682][    C1] net_ratelimit: 26 callbacks suppressed
[  242.360566][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'.
[  242.705869][   T50] Bluetooth: hci0: command 0x0409 tx timeout
[  243.052479][ T5871] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  243.278866][ T5857] rxe_eth0 speed is unknown, defaulting to 1000
[  243.712928][   T32] libceph: connect (1)[c::]:6789 error -101
[  243.720054][   T32] libceph: mon0 (1)[c::]:6789 connect error
[  243.729632][ T5878] ceph: No mds server is up or the cluster is laggy
[  244.750493][   T50] Bluetooth: hci0: command 0x041b tx timeout
[  244.757984][ T4343] libceph: connect (1)[c::]:6789 error -101
[  244.799933][ T4343] libceph: mon0 (1)[c::]:6789 connect error
[  245.105351][ T5896] overlayfs: missing 'lowerdir'
[  247.064935][   T50] Bluetooth: hci0: command 0x040f tx timeout
[  247.696218][ T4971] net_ratelimit: 44 callbacks suppressed
[  248.098669][   T26] audit: type=1800 audit(1793823442.070:52): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.302" name="dummy_udc" dev="gadgetfs" ino=33840 res=0 errno=0
[  249.120826][   T50] Bluetooth: hci0: command 0x0419 tx timeout
[  250.467570][ T5857] chnl_net:caif_netlink_parms(): no params data found
[  250.582198][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'.
[  250.656388][ T5932] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  253.100363][    C1] net_ratelimit: 38 callbacks suppressed
[  255.390565][ T5965] program syz.1.318 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  255.531570][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.568517][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.621324][ T5857] device bridge_slave_0 entered promiscuous mode
[  255.688665][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  255.696075][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  256.001159][   T50] Bluetooth: hci2: command 0x0409 tx timeout
[  256.276001][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.480531][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.540600][ T5857] device bridge_slave_1 entered promiscuous mode
[  257.866348][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.218436][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.640370][    C1] net_ratelimit: 46 callbacks suppressed
[  259.669098][ T6009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.774336][    T7] libceph: connect (1)[c::]:6789 error -101
[  259.799826][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  259.849883][  T130] libceph: connect (1)[c::]:6789 error -101
[  259.858408][  T130] libceph: mon0 (1)[c::]:6789 connect error
[  260.029202][ T6024] netlink: 'syz.4.329': attribute type 21 has an invalid length.
[  260.046291][ T6024] netlink: 156 bytes leftover after parsing attributes in process `syz.4.329'.
[  260.091032][ T5857] team0: Port device team_slave_0 added
[  260.151067][    T7] libceph: connect (1)[c::]:6789 error -101
[  260.161377][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  260.191884][ T5857] team0: Port device team_slave_1 added
[  260.313590][ T6012] ceph: No mds server is up or the cluster is laggy
[  261.380804][  T130] libceph: connect (1)[c::]:6789 error -101
[  261.386862][  T130] libceph: mon0 (1)[c::]:6789 connect error
[  261.557074][ T6037] loop1: detected capacity change from 0 to 512
[  261.570479][ T4682] device hsr_slave_0 left promiscuous mode
[  261.608859][ T6037] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  261.636238][ T4682] device hsr_slave_1 left promiscuous mode
[  261.669803][ T4682] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.691859][ T4682] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.716528][ T6037] EXT4-fs (loop1): 1 truncate cleaned up
[  261.723738][ T6037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  261.759626][ T4682] device bridge_slave_1 left promiscuous mode
[  261.778167][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.834053][ T4682] device bridge_slave_0 left promiscuous mode
[  261.846326][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.779730][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  263.256463][ T6063] FAULT_INJECTION: forcing a failure.
[  263.256463][ T6063] name failslab, interval 1, probability 0, space 0, times 0
[  263.270269][ T6063] CPU: 0 PID: 6063 Comm: syz.1.336 Not tainted syzkaller #0
[  263.277688][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  263.287886][ T6063] Call Trace:
[  263.291200][ T6063]  <TASK>
[  263.294179][ T6063]  dump_stack_lvl+0x188/0x24e
[  263.298903][ T6063]  ? show_regs_print_info+0x12/0x12
[  263.304150][ T6063]  ? load_image+0x410/0x410
[  263.308703][ T6063]  ? kasan_set_track+0x60/0x70
[  263.313500][ T6063]  ? __kasan_slab_alloc+0x6b/0x80
[  263.318555][ T6063]  ? slab_post_alloc_hook+0x4b/0x490
[  263.323870][ T6063]  ? kmem_cache_alloc+0x18b/0x2f0
[  263.328936][ T6063]  ? dst_alloc+0x101/0x160
[  263.333407][ T6063]  ? ip_route_output_key_hash_rcu+0x14e4/0x2410
[  263.339689][ T6063]  ? ip_route_output_key_hash+0x1ef/0x330
[  263.345451][ T6063]  should_fail_ex+0x390/0x4c0
[  263.350177][ T6063]  should_failslab+0x5/0x20
[  263.354712][ T6063]  slab_pre_alloc_hook+0x59/0x300
[  263.359773][ T6063]  ? ref_tracker_alloc+0x14f/0x490
[  263.364919][ T6063]  __kmem_cache_alloc_node+0x4f/0x270
[  263.370392][ T6063]  ? ref_tracker_alloc+0x14f/0x490
[  263.375568][ T6063]  kmalloc_trace+0x26/0xe0
[  263.380048][ T6063]  ref_tracker_alloc+0x14f/0x490
[  263.385029][ T6063]  ? ref_tracker_dir_print+0x150/0x150
[  263.390526][ T6063]  ? ip_check_mc_rcu+0x61f/0x660
[  263.395579][ T6063]  ? __kasan_slab_alloc+0x6b/0x80
[  263.400652][ T6063]  ? slab_post_alloc_hook+0x67/0x490
[  263.405978][ T6063]  ? slab_pre_alloc_hook+0x59/0x300
[  263.411497][ T6063]  ? rcu_is_watching+0x11/0xa0
[  263.416321][ T6063]  dst_init+0xb1/0x400
[  263.420442][ T6063]  dst_alloc+0x12a/0x160
[  263.424730][ T6063]  ip_route_output_key_hash_rcu+0x14e4/0x2410
[  263.430889][ T6063]  ? ip_route_output_key_hash+0x139/0x330
[  263.436647][ T6063]  ip_route_output_key_hash+0x1ef/0x330
[  263.442232][ T6063]  ? ip_route_input_rcu+0x3110/0x3110
[  263.447655][ T6063]  ? __lock_acquire+0x7ea0/0x7ea0
[  263.452725][ T6063]  ip_route_output_flow+0x26/0x150
[  263.457889][ T6063]  ? security_sk_classify_flow+0x77/0x90
[  263.463569][ T6063]  udp_sendmsg+0x1637/0x23d0
[  263.468188][ T6063]  ? verify_lock_unused+0x140/0x140
[  263.474131][ T6063]  ? ip_skb_dst_mtu+0xb60/0xb60
[  263.479016][ T6063]  ? udp_cmsg_send+0x350/0x350
[  263.483809][ T6063]  ? mark_lock+0x94/0x320
[  263.488182][ T6063]  ? __lock_acquire+0x1359/0x7ea0
[  263.493287][ T6063]  ? aa_label_sk_perm+0x501/0x6b0
[  263.498402][ T6063]  udpv6_sendmsg+0x7df/0x22c0
[  263.503130][ T6063]  ? udp_v6_early_demux+0xf00/0xf00
[  263.508385][ T6063]  ? aa_af_perm+0x340/0x340
[  263.512934][ T6063]  ? sock_rps_record_flow+0x19/0x3f0
[  263.518261][ T6063]  ? inet_send_prepare+0x57/0x250
[  263.523362][ T6063]  ? inet6_sendmsg+0x5b/0xd0
[  263.527993][ T6063]  sock_write_iter+0x2d5/0x3e0
[  263.532793][ T6063]  ? sock_read_iter+0x3a0/0x3a0
[  263.537687][ T6063]  ? common_file_perm+0x171/0x1c0
[  263.542752][ T6063]  vfs_write+0x482/0x9a0
[  263.547049][ T6063]  ? file_end_write+0x250/0x250
[  263.551937][ T6063]  ? __fget_files+0x3fc/0x460
[  263.556682][ T6063]  ? __fdget_pos+0x1d4/0x360
[  263.561324][ T6063]  ? ksys_write+0x70/0x260
[  263.565795][ T6063]  ksys_write+0x14d/0x260
[  263.570165][ T6063]  ? __ia32_sys_read+0x80/0x80
[  263.574967][ T6063]  ? lockdep_hardirqs_on+0x94/0x140
[  263.580201][ T6063]  do_syscall_64+0x4c/0xa0
[  263.584666][ T6063]  ? clear_bhb_loop+0x60/0xb0
[  263.589428][ T6063]  ? clear_bhb_loop+0x60/0xb0
[  263.594145][ T6063]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  263.600093][ T6063] RIP: 0033:0x7fe68259fb19
[  263.604552][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.624279][ T6063] RSP: 002b:00007fe6834d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  263.632734][ T6063] RAX: ffffffffffffffda RBX: 00007fe682826090 RCX: 00007fe68259fb19
[  263.640746][ T6063] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005
[  263.648762][ T6063] RBP: 00007fe682637b70 R08: 0000000000000000 R09: 0000000000000000
[  263.656755][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.664769][ T6063] R13: 00007fe682826128 R14: 00007fe682826090 R15: 00007ffcd054e128
[  263.672868][ T6063]  </TASK>
[  263.677335][ T6063] memory allocation failure, unreliable refcount tracker.
[  264.044509][    C1] net_ratelimit: 46 callbacks suppressed
[  269.120292][    C0] net_ratelimit: 41 callbacks suppressed
[  270.322162][ T4682] team0 (unregistering): Port device team_slave_1 removed
[  270.442038][ T6109] siw: device registration error -23
[  273.107692][ T4682] team0 (unregistering): Port device team_slave_0 removed
[  273.133525][ T6120] ceph: No mds server is up or the cluster is laggy
[  273.232322][ T4343] libceph: connect (1)[c::]:6789 error -101
[  273.238462][ T4343] libceph: mon0 (1)[c::]:6789 connect error
[  274.240290][    C1] net_ratelimit: 27 callbacks suppressed
[  274.665746][ T4682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.071022][ T4682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.420444][    C1] net_ratelimit: 26 callbacks suppressed
[  279.577764][ T6165] siw: device registration error -23
[  281.772556][ T4682] bond0 (unregistering): Released all slaves
[  283.551676][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.589784][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.844959][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.926909][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.986448][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.027771][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.951992][ T4350] net_ratelimit: 30 callbacks suppressed
[  285.078435][ T5857] device hsr_slave_0 entered promiscuous mode
[  285.131965][ T5857] device hsr_slave_1 entered promiscuous mode
[  285.180400][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  285.188043][ T5857] Cannot create hsr debugfs directory
[  287.083293][ T5857] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  287.114616][ T5857] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  287.151472][ T5857] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  287.182819][ T5857] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  287.389584][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.412767][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  287.431174][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  287.443157][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[  287.466825][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  287.479790][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  287.497354][ T4971] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.504577][ T4971] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.522224][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  287.538150][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  287.549673][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  287.569200][ T4971] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.576430][ T4971] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.594528][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  287.644179][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  287.655063][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  287.676606][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  287.691572][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  287.718512][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  287.737176][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  287.759963][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  287.776953][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  287.785804][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  287.801339][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  287.811751][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  288.129903][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  288.146408][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  288.165304][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.607445][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  288.619499][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  288.659121][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  288.668539][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  288.688692][ T5857] device veth0_vlan entered promiscuous mode
[  288.697917][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  288.707002][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  288.740711][ T5857] device veth1_vlan entered promiscuous mode
[  288.788011][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  288.798976][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  288.808459][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  288.817377][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  288.832339][ T5857] device veth0_macvtap entered promiscuous mode
[  288.851566][ T5857] device veth1_macvtap entered promiscuous mode
[  288.879039][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.896775][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.906763][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.922873][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.935156][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.949244][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.972731][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.985957][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  289.002072][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  289.016756][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  289.027558][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  289.048099][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.064889][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.081362][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.093431][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.104816][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.115376][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.129540][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.139244][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  289.153509][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  289.169173][ T5857] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.189717][ T5857] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.207063][ T5857] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.216111][ T5857] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.386287][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.406107][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.469820][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  289.499189][ T5048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.507802][ T5048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.536428][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  290.010353][    C0] net_ratelimit: 71 callbacks suppressed
[  290.635150][ T6272] netlink: 'syz.0.379': attribute type 21 has an invalid length.
[  290.642961][ T6272] IPv6: NLM_F_CREATE should be specified when creating new route
[  292.353497][ T6277] tipc: Started in network mode
[  292.358720][ T6277] tipc: Node identity 4, cluster identity 4711
[  292.365099][ T6277] tipc: Node number set to 4
[  292.446897][ T6280] tmpfs: Unknown parameter 'quota'
[  294.939137][ T6300] loop1: detected capacity change from 0 to 8
[  295.920289][    C1] net_ratelimit: 34 callbacks suppressed
[  296.080702][ T6314] SQUASHFS error: Unable to read directory block [631:26]
[  296.095053][ T6313] SQUASHFS error: Unable to read directory block [631:26]
[  296.108160][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.115597][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.126034][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.132859][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.139363][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.145896][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.150776][   T26] audit: type=1800 audit(1793823490.100:53): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.373" name="file1" dev="loop1" ino=5 res=0 errno=0
[  296.171808][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.178404][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.184953][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.191540][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.198070][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.205037][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.211645][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.218213][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.224733][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.231273][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.237811][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.244363][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.250892][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.257423][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.263943][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.270560][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.278687][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.285331][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.291989][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.298693][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.305340][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.311976][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.318547][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.325223][ T6313] SQUASHFS error: Failed to read block 0x4de: -5
[  296.570523][ T4381] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  296.786598][ T4381] usb 7-1: config 0 has no interfaces?
[  296.796297][ T4381] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  296.831947][ T4381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.870422][ T4381] usb 7-1: Product: syz
[  296.883357][ T4381] usb 7-1: Manufacturer: syz
[  296.890507][ T4381] usb 7-1: SerialNumber: syz
[  296.908570][ T4381] usb 7-1: config 0 descriptor??
[  298.272480][ T4341] usb 7-1: USB disconnect, device number 2
[  301.157871][    C0] net_ratelimit: 40 callbacks suppressed
[  303.029866][ T6369] ubi0: attaching mtd0
[  303.057506][ T6369] ubi0: scanning is finished
[  303.062279][ T6369] ubi0: empty MTD device detected
[  303.495845][ T6369] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  303.910642][ T6383] siw: device registration error -23
[  305.394271][ T6378] loop1: detected capacity change from 0 to 2048
[  306.883519][    C0] net_ratelimit: 42 callbacks suppressed
[  306.990659][ T6378] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1.
[  307.341967][ T6372] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  308.512378][ T6415] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  312.697139][    C1] net_ratelimit: 46 callbacks suppressed
[  313.590908][ T6461] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  317.127788][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  317.134237][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  318.073859][ T4523] net_ratelimit: 34 callbacks suppressed
[  320.904248][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.007721][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.019311][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.204143][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  321.213167][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  321.221260][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  321.629247][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  322.928529][ T6503] rxe_eth0 speed is unknown, defaulting to 1000
[  323.115874][ T4682] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.271042][ T4682] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.281466][    C0] net_ratelimit: 45 callbacks suppressed
[  323.360712][ T4292] Bluetooth: hci5: command 0x0409 tx timeout
[  323.432494][ T4682] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.576460][ T4682] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.810082][ T6503] chnl_net:caif_netlink_parms(): no params data found
[  324.196017][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.220389][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.229691][ T6503] device bridge_slave_0 entered promiscuous mode
[  324.242988][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.251456][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.260005][ T6503] device bridge_slave_1 entered promiscuous mode
[  324.437343][ T6503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.474485][ T6503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.585166][ T6503] team0: Port device team_slave_0 added
[  324.608137][ T6503] team0: Port device team_slave_1 added
[  324.777168][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.784448][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.816034][ T6503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.874377][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.882058][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.940342][ T6503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.238953][ T6503] device hsr_slave_0 entered promiscuous mode
[  325.258059][ T6503] device hsr_slave_1 entered promiscuous mode
[  325.284015][ T6503] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.296255][ T6503] Cannot create hsr debugfs directory
[  325.440461][ T4292] Bluetooth: hci5: command 0x041b tx timeout
[  326.134559][ T4682] device hsr_slave_0 left promiscuous mode
[  326.151490][ T4682] device hsr_slave_1 left promiscuous mode
[  326.212401][ T4682] device veth1_macvtap left promiscuous mode
[  326.218517][ T4682] device veth0_macvtap left promiscuous mode
[  326.240556][ T4682] device veth1_vlan left promiscuous mode
[  326.246554][ T4682] device veth0_vlan left promiscuous mode
[  326.962130][ T4292] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  326.979700][ T4292] Bluetooth: hci2: Injecting HCI hardware error event
[  326.991629][   T50] Bluetooth: hci2: hardware error 0x00
[  327.529842][ T4292] Bluetooth: hci5: command 0x040f tx timeout
[  328.278814][ T4682] bond0 (unregistering): Released all slaves
[  328.512238][ T6503] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  328.551865][ T6503] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  328.582933][ T6503] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  328.640306][    C1] net_ratelimit: 50 callbacks suppressed
[  328.641501][ T6503] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  328.946250][ T6503] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.984742][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  329.006483][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  329.020047][ T6503] 8021q: adding VLAN 0 to HW filter on device team0
[  329.036691][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  329.048087][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  329.056498][   T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  329.064067][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.071423][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.083854][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  329.102170][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  329.125466][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  329.151560][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.158767][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.193783][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  329.209185][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  329.229103][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  329.248869][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  329.268579][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  329.277019][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  329.293833][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  329.308243][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  329.319518][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  329.339073][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  329.355929][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  329.600747][   T50] Bluetooth: hci5: command 0x0419 tx timeout
[  329.676681][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  329.700143][   T77] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  329.715622][ T6503] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.195328][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  330.213390][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  330.255749][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  330.268188][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  330.282157][ T6503] device veth0_vlan entered promiscuous mode
[  330.291256][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  330.300007][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  330.314185][ T6503] device veth1_vlan entered promiscuous mode
[  330.366000][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  330.375503][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  330.385107][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  330.394483][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  330.407178][ T6503] device veth0_macvtap entered promiscuous mode
[  330.423178][ T6503] device veth1_macvtap entered promiscuous mode
[  330.457946][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.476898][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.487975][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.504408][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.515722][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.532772][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.546886][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.560028][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.589199][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_0
[  330.607495][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  330.618941][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  330.628893][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  330.642230][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.654649][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.664833][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.690285][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.714539][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.725273][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.735430][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.746008][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.757635][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.778130][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  330.790024][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  330.816887][ T6503] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.826251][ T6503] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.850445][ T6503] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.859202][ T6503] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.018662][ T4682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.031173][ T4682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.051851][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  331.107429][ T5161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.119300][ T5161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.129286][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  331.878404][ T6627] loop6: detected capacity change from 0 to 2048
[  332.985147][ T6627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  333.591460][ T6615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.840273][    C1] net_ratelimit: 60 callbacks suppressed
[  333.970470][ T6643] ubi0: attaching mtd0
[  334.009172][ T6643] ubi0: scanning is finished
[  334.721225][ T6643] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  337.309040][ T6664] loop6: detected capacity change from 0 to 512
[  338.432430][ T6664] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  338.525948][ T6664] EXT4-fs (loop6): 1 truncate cleaned up
[  338.536852][ T6664] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  338.618323][ T4381] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  339.375070][    C1] net_ratelimit: 41 callbacks suppressed
[  339.647994][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  339.867070][ T4381] usb 8-1: device descriptor read/all, error -71
[  343.544823][ T6719] loop1: detected capacity change from 0 to 512
[  343.632064][ T6719] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  343.907045][ T6719] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.437: invalid indirect mapped block 256 (level 1)
[  344.400251][    C1] net_ratelimit: 39 callbacks suppressed
[  344.562582][ T6719] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.437: invalid indirect mapped block 2683928664 (level 1)
[  344.737905][ T6719] EXT4-fs (loop1): 1 truncate cleaned up
[  344.765236][ T6719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  346.093957][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  348.657778][ T6755] loop1: detected capacity change from 0 to 256
[  348.720650][ T6755] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  349.529398][    C0] net_ratelimit: 40 callbacks suppressed
[  353.500296][ T4343] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  354.634046][    C0] net_ratelimit: 32 callbacks suppressed
[  354.958897][ T6798] Bluetooth: MGMT ver 1.22
[  356.080815][ T4343] usb 7-1: device descriptor read/all, error -71
[  356.198847][ T6805] input: syz0 as /devices/virtual/input/input6
[  357.038186][ T6814] loop6: detected capacity change from 0 to 512
[  357.127258][ T6814] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  357.190474][ T6814] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.457: invalid indirect mapped block 32768 (level 2)
** 7073 printk messages dropped **
[  358.251841][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  359.857653][    T9] net_ratelimit: 71 callbacks suppressed
[  360.477090][ T6855] loop1: detected capacity change from 0 to 256
[  361.525097][ T6855] FAT-fs (loop1): Directory bread(block 64) failed
[  361.562727][ T6855] FAT-fs (loop1): Directory bread(block 65) failed
[  361.570457][ T6855] FAT-fs (loop1): Directory bread(block 66) failed
[  361.577074][ T6855] FAT-fs (loop1): Directory bread(block 67) failed
[  361.629686][ T6855] FAT-fs (loop1): Directory bread(block 68) failed
[  361.661193][ T6855] FAT-fs (loop1): Directory bread(block 69) failed
[  361.690425][ T6865] loop7: detected capacity change from 0 to 512
[  361.705824][ T6855] FAT-fs (loop1): Directory bread(block 70) failed
[  361.734147][ T6855] FAT-fs (loop1): Directory bread(block 71) failed
[  361.742294][ T6865] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  361.778465][ T6855] FAT-fs (loop1): Directory bread(block 72) failed
[  361.829433][ T6865] EXT4-fs (loop7): 1 truncate cleaned up
[  361.849830][ T6855] FAT-fs (loop1): Directory bread(block 73) failed
[  361.866993][ T6865] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  362.844644][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  364.613431][ T6882] mmap: syz.6.471 (6882) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  365.120400][ T4350] net_ratelimit: 41 callbacks suppressed
[  365.520344][ T4292] Bluetooth: hci0: command 0x0406 tx timeout
[  367.210326][ T1176] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  367.439408][ T1176] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.489373][ T1176] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  367.529181][ T1176] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.861186][ T6925] loop1: detected capacity change from 0 to 2048
[  368.410404][ T1176] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  369.135591][ T1176] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.7-1/input0
[  369.154906][ T1176] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:056A:033B.0001/input/input7
[  369.560643][ T1176] usb 8-1: USB disconnect, device number 4
[  369.686338][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  369.954359][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  370.152130][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xb627 instead
[  370.162668][    C1] net_ratelimit: 35 callbacks suppressed
[  370.258175][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x99be instead
[  370.376838][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  370.435353][ T6939] fido_id[6939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  370.503476][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  370.563069][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  370.631244][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  370.692472][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  370.711190][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  370.770760][ T6938] jffs2: Further such events for this erase block will not be printed
[  370.779511][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  370.870565][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  370.912207][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xb627 instead
[  370.954016][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x99be instead
[  370.995213][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  371.036367][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  371.080785][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  371.121880][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  371.173863][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  371.225469][ T6938] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  371.266926][ T6938] jffs2: Further such events for this erase block will not be printed
[  371.301045][ T6938] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  371.350704][ T6938] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[  371.372093][ T6958] loop6: detected capacity change from 0 to 512
[  371.628396][ T6884] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  371.846725][ T6965] netlink: 'syz.4.487': attribute type 9 has an invalid length.
[  371.855184][ T6965] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.487'.
[  373.080845][ T6967] loop6: detected capacity change from 0 to 512
[  373.088823][ T6967] EXT4-fs: Ignoring removed bh option
[  373.127542][ T6967] EXT4-fs: old and new quota format mixing
[  375.360456][    C0] net_ratelimit: 40 callbacks suppressed
[  376.611865][ T6987] loop6: detected capacity change from 0 to 512
[  376.627836][ T6987] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  376.729723][ T6987] EXT4-fs (loop6): 1 truncate cleaned up
[  376.774701][ T6987] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  377.333869][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  379.045439][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  379.051857][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  380.582554][    C0] net_ratelimit: 34 callbacks suppressed
[  380.905669][ T7039] block device autoloading is deprecated and will be removed.
[  381.355852][ T7047] loop7: detected capacity change from 0 to 2048
[  381.391589][ T7047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.498746][ T7056] capability: warning: `syz.4.504' uses deprecated v2 capabilities in a way that may be insecure
[  384.095873][ T4292] Bluetooth: Wrong link type (-22)
[  386.080272][    C0] net_ratelimit: 37 callbacks suppressed
[  391.208089][    C0] net_ratelimit: 39 callbacks suppressed
[  391.992715][ T7131] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  392.019985][ T7131] CIFS mount error: No usable UNC path provided in device string!
[  392.019985][ T7131] 
[  392.030967][ T7131] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  392.737304][ T7136] loop1: detected capacity change from 0 to 2048
[  394.672061][ T7151] netlink: 104 bytes leftover after parsing attributes in process `syz.6.523'.
[  395.946615][ T7136] EXT4-fs: failed to create workqueue
[  395.990304][ T7136] EXT4-fs (loop1): mount failed
[  396.720545][    C0] net_ratelimit: 35 callbacks suppressed
[  398.298903][ T7182] loop1: detected capacity change from 0 to 512
[  398.563650][ T7182] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  398.675726][ T7182] EXT4-fs (loop1): 1 truncate cleaned up
[  398.684159][ T7182] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  399.798778][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  402.159838][ T7213] loop6: detected capacity change from 0 to 764
[  402.640254][    C1] net_ratelimit: 36 callbacks suppressed
[  402.885305][ T7140] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  402.921873][ T7209] loop6: detected capacity change from 0 to 2048
[  402.982969][ T7209] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  402.999039][ T7209] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  405.659521][ T7229] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  405.659521][ T7229] 
[  405.673599][ T7229] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  405.686514][ T7229] CIFS: Attempting to mount \\127.0.0.1\share
[  405.747209][ T7229] CIFS: VFS: Error connecting to socket. Aborting operation.
[  405.755112][ T7229] CIFS: VFS: cifs_mount failed w/return code = -111
[  408.000653][    C0] net_ratelimit: 45 callbacks suppressed
[  408.113823][ T7263] ip_tables: iptables: counters copy to user failed while replacing table
[  411.018729][   T26] audit: type=1800 audit(1793823605.326:54): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.548" name=08 dev="sda1" ino=2048 res=0 errno=0
[  411.915183][ T7277] loop6: detected capacity change from 0 to 512
[  412.040363][ T7277] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  412.188645][ T7277] EXT4-fs (loop6): 1 truncate cleaned up
[  412.201387][ T7277] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  413.025436][    C1] net_ratelimit: 34 callbacks suppressed
[  413.052907][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  413.607480][ T7293] siw: device registration error -23
[  417.906291][ T7318] loop6: detected capacity change from 0 to 512
[  417.963513][ T7318] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  418.298728][    C1] net_ratelimit: 37 callbacks suppressed
[  418.611908][ T7318] EXT4-fs (loop6): 1 truncate cleaned up
[  418.621769][ T7318] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  420.836599][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  420.919551][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  421.044956][ T7339] loop6: detected capacity change from 0 to 512
[  421.128832][ T7339] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  421.339987][ T7339] EXT4-fs (loop6): 1 truncate cleaned up
[  421.375265][ T7339] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  422.175166][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  422.313368][ T7354] tmpfs: Unknown parameter 'casefold'
[  422.721802][ T1176] libceph: connect (1)[c::]:6789 error -101
[  422.776660][ T1176] libceph: mon0 (1)[c::]:6789 connect error
[  422.934398][ T7359] ceph: No mds server is up or the cluster is laggy
[  423.431717][    C1] net_ratelimit: 56 callbacks suppressed
[  425.325109][ T7380] IPVS: Error connecting to the multicast addr
[  427.990602][ T7392] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  427.999741][ T7392] overlayfs: missing 'lowerdir'
[  428.452141][ T7400] loop1: detected capacity change from 0 to 164
[  428.480563][    C0] net_ratelimit: 39 callbacks suppressed
[  431.204704][ T7427] siw: device registration error -23
[  433.123919][ T7440] loop6: detected capacity change from 0 to 1024
[  433.600722][   T11] net_ratelimit: 28 callbacks suppressed
[  439.113563][    C0] net_ratelimit: 40 callbacks suppressed
[  440.006689][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  440.020862][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  441.172221][ T7489] syz.1.599: attempt to access beyond end of device
[  441.172221][ T7489] loop1: rw=0, sector=0, nr_sectors = 8 limit=0
[  441.185594][ T7489] F2FS-fs (loop1): Unable to read 1th superblock
[  441.192750][ T7489] syz.1.599: attempt to access beyond end of device
[  441.192750][ T7489] loop1: rw=0, sector=8, nr_sectors = 8 limit=0
[  441.205506][ T7489] F2FS-fs (loop1): Unable to read 2th superblock
[  444.954055][ T4682] net_ratelimit: 50 callbacks suppressed
[  447.923784][ T7548] Driver unsupported XDP return value 0 on prog  (id 35) dev N/A, expect packet loss!
[  448.007300][   T50] Bluetooth: hci5: command 0x0406 tx timeout
[  448.038548][ T7552] loop7: detected capacity change from 0 to 512
[  448.100618][ T7552] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  448.170014][ T7552] EXT4-fs (loop7): 1 truncate cleaned up
[  448.176788][ T7552] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  448.576689][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  448.984731][ T7568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.603'.
[  449.002666][ T7568] loop1: detected capacity change from 0 to 512
[  449.010368][ T7568] FAT-fs (loop1): Unrecognized mount option "shortname=mix%d" or missing value
[  450.339727][    C1] net_ratelimit: 43 callbacks suppressed
[  452.858806][ T7596] CIFS: Attempting to mount \\1#7.0.0.1\Ë7Ì
[  452.866351][ T7596] CIFS: VFS: No username specified
[  452.877683][ T7596] loop7: detected capacity change from 0 to 256
[  453.653812][ T7600] 9pnet_fd: Insufficient options for proto=fd
[  454.144307][ T7596] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  455.461673][    C1] net_ratelimit: 20 callbacks suppressed
[  457.023634][ T7609] loop1: detected capacity change from 0 to 2048
[  458.054437][ T7609] EXT4-fs: failed to create workqueue
[  458.086865][ T7609] EXT4-fs (loop1): mount failed
[  458.129721][ T7627] loop7: detected capacity change from 0 to 512
[  458.196386][ T7627] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  458.352610][ T7627] EXT4-fs (loop7): 1 truncate cleaned up
[  458.359433][ T7627] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  458.855679][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  460.794002][    C1] net_ratelimit: 54 callbacks suppressed
[  460.975193][ T7664] siw: device registration error -23
[  464.075530][ T7682] gadgetfs: bound to dummy_udc driver
[  464.346834][ T7678] gadgetfs: suspended from state 2
[  464.401807][ T1176] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  466.335473][    C0] net_ratelimit: 37 callbacks suppressed
[  467.301428][ T7723] siw: device registration error -23
[  467.492442][ T7728] loop6: detected capacity change from 0 to 1024
[  467.619493][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.651'.
[  467.638507][ T7728] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  470.338180][ T7761] fuse: Bad value for 'fd'
[  471.116930][    C1] Adjusting tsc more than 11% (6083271 vs 8464875)
[  471.791014][ T7781] loop1: detected capacity change from 0 to 1024
[  471.994871][    C0] net_ratelimit: 42 callbacks suppressed
[  472.590911][ T7781] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.657: lblock 2 mapped to illegal pblock 2 (length 1)
[  472.608166][ T7781] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  472.616468][ T7781] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.657: lblock 0 mapped to illegal pblock 48 (length 1)
[  472.631673][ T7781] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  472.641505][ T7781] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.657: Failed to acquire dquot type 0
[  472.656407][ T7781] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5985: Corrupt filesystem
[  472.692885][ T7781] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.657: mark_inode_dirty error
[  472.709153][ T7781] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  472.719572][ T7781] EXT4-fs (loop1): 1 orphan inode deleted
[  472.726043][ T7781] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  472.772776][   T77] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  472.900986][   T77] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  472.938134][   T77] EXT4-fs error (device loop1): ext4_release_dquot:6884: comm kworker/u4:4: Failed to release dquot type 0
[  473.024085][ T7779] EXT4-fs (loop1): re-mounted. Quota mode: none.
[  473.241651][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  473.377462][ T7796] loop7: detected capacity change from 0 to 1024
[  473.385020][ T7796] EXT4-fs: Ignoring removed nomblk_io_submit option
[  473.392328][ T7796] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  473.404551][ T7796] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  473.446148][ T7796] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  473.454445][ T7796] System zones: 0-1, 3-36
[  473.461910][ T7796] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  474.532371][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  474.617324][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  477.928915][ T7850] net_ratelimit: 52 callbacks suppressed
[  477.929533][ T7850] ip_tables: iptables: counters copy to user failed while replacing table
[  483.277204][ T7885] CIFS: Attempting to mount \\1#7.0.0.1\Ë7Ì
[  483.284360][ T7885] CIFS: VFS: No username specified
[  483.576106][    C0] net_ratelimit: 32 callbacks suppressed
[  486.448288][ T7899] loop1: detected capacity change from 0 to 512
[  486.467767][ T7899] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  487.208686][ T7899] EXT4-fs (loop1): 1 truncate cleaned up
[  487.287501][ T7899] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  487.712014][ T7909] loop6: detected capacity change from 0 to 512
[  487.745199][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  487.830605][ T7909] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  487.865677][ T7909] EXT4-fs (loop6): 1 truncate cleaned up
[  487.891201][ T7909] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  488.225576][ T7916] loop7: detected capacity change from 0 to 256
[  488.247812][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  489.266502][    T9] net_ratelimit: 39 callbacks suppressed
[  491.562499][ T7948] loop6: detected capacity change from 0 to 1024
[  492.649679][ T7948] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  492.670717][ T7948] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  492.776665][ T7962] loop7: detected capacity change from 0 to 512
[  492.865751][ T7962] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  493.050497][ T7962] EXT4-fs (loop7): 1 truncate cleaned up
[  493.057465][ T7962] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  494.004875][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  495.316557][ T7980] overlayfs: missing 'lowerdir'
[  495.325282][    C1] net_ratelimit: 32 callbacks suppressed
[  495.393825][ T7982] loop1: detected capacity change from 0 to 1024
[  495.401544][ T7982] EXT4-fs: Ignoring removed nomblk_io_submit option
[  495.604520][ T7982] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  495.616047][ T7982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  495.779674][ T7982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  495.789558][ T7982] System zones: 0-1, 3-36
[  495.804231][ T7982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  496.039351][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  497.211316][ T7979] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  497.831786][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  497.934582][ T8006] loop7: detected capacity change from 0 to 1024
[  498.033163][ T8006] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  498.998195][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  499.119708][ T4292] Bluetooth: hci3: command 0x1003 tx timeout
[  499.126610][   T50] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  499.367309][ T8022] loop1: detected capacity change from 0 to 512
[  499.673716][ T8030] fuse: Bad value for 'fd'
[  499.970071][ T8032] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  500.075830][ T8022] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  500.323497][ T8027] loop7: detected capacity change from 0 to 512
[  500.433596][ T8027] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  500.529210][ T8022] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.709: invalid indirect mapped block 32768 (level 2)
[  500.559666][ T8027] EXT4-fs (loop7): 1 truncate cleaned up
[  500.589059][ T8027] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  500.603487][ T8022] EXT4-fs (loop1): 1 orphan inode deleted
[  500.609295][ T8022] EXT4-fs (loop1): 1 truncate cleaned up
[  500.616319][ T8022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  500.710019][ T8041] loop6: detected capacity change from 0 to 256
[  501.339137][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  501.489233][ T4971] net_ratelimit: 58 callbacks suppressed
[  503.467374][ T8061] ubi0: attaching mtd0
[  503.491198][ T8061] ubi0: scanning is finished
[  503.901291][ T8061] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  504.015395][ T8061] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  504.058072][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.715'.
[  504.283551][ T8061] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  504.353302][ T8061] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  504.392155][ T8061] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  504.404324][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  504.436010][ T8061] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  504.836293][ T8061] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 666263727
[  504.909001][ T8061] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  504.920834][ T8062] ubi0: background thread "ubi_bgt0d" started, PID 8062
[  506.467209][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  506.473828][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  507.080461][ T8098] loop7: detected capacity change from 0 to 512
[  507.377705][ T8098] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  507.466680][ T8098] EXT4-fs (loop7): 1 truncate cleaned up
[  507.475045][ T8098] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  507.733899][    C1] net_ratelimit: 38 callbacks suppressed
[  507.972537][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  510.947980][ T8141] overlayfs: missing 'lowerdir'
[  511.139408][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.6.734'.
[  513.158114][ T8157] loop6: detected capacity change from 0 to 512
[  513.216011][ T8157] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  513.256271][ T8157] EXT4-fs (loop6): 1 truncate cleaned up
[  513.263082][    C1] net_ratelimit: 37 callbacks suppressed
[  513.315321][ T8157] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  513.727662][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  516.808867][  T957] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  517.036766][  T957] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.056950][  T957] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  517.069275][  T957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.382679][ T8194] loop6: detected capacity change from 0 to 8
[  517.473837][ T8194] squashfs image failed sanity check
[  518.389235][  T957] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  518.471176][  T957] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0
[  518.485054][  T957] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0002/input/input13
[  518.623058][  T957] usb 2-1: USB disconnect, device number 2
[  518.914681][ T4524] net_ratelimit: 43 callbacks suppressed
[  519.302726][ T8209] loop7: detected capacity change from 0 to 1024
[  519.406394][ T8209] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  519.495692][ T8209] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  519.570968][ T8221] siw: device registration error -23
[  521.140911][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  522.769448][ T8210] fido_id[8210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  523.176987][ T8242] bridge0: port 3(wlan1) entered blocking state
[  523.199944][ T8242] bridge0: port 3(wlan1) entered disabled state
[  523.264083][ T8242] device wlan1 entered promiscuous mode
[  523.400203][ T8243] bridge0: port 3(wlan1) entered disabled state
[  524.380191][    C0] net_ratelimit: 29 callbacks suppressed
[  524.783348][ T8243] device wlan1 left promiscuous mode
[  524.790665][ T8243] bridge0: port 3(wlan1) entered disabled state
[  524.950616][ T8255] rxe_eth0 speed is unknown, defaulting to 1000
[  525.492991][ T8264] block device autoloading is deprecated and will be removed.
[  525.508681][ T8264] md: md0 stopped.
[  525.515783][ T8264] md: md0 stopped.
[  527.675622][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  527.685926][ T8267] loop1: detected capacity change from 0 to 2048
[  527.857141][ T8267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  530.884196][    C1] net_ratelimit: 30 callbacks suppressed
[  530.932314][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  531.118338][ T8301] siw: device registration error -23
[  531.273266][ T8303] loop1: detected capacity change from 0 to 512
[  532.101066][ T8303] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13
[  532.109273][ T8303] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.764: inode #15: comm syz.1.764: iget: illegal inode #
[  532.134977][ T8303] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.764: couldn't read orphan inode 15 (err -117)
[  532.151216][ T8303] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  532.218842][ T8306] loop7: detected capacity change from 0 to 512
[  532.410436][ T8306] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  533.070236][ T8306] EXT4-fs (loop7): 1 truncate cleaned up
[  533.086090][ T8306] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  533.676005][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  533.946560][ T8328] loop7: detected capacity change from 0 to 8
[  534.113676][ T8328] squashfs image failed sanity check
[  534.461739][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  535.429306][ T8342] loop7: detected capacity change from 0 to 2048
[  536.256540][ T8347] loop6: detected capacity change from 0 to 512
[  536.285290][ T8347] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  536.340483][ T8342] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  536.349262][ T7763] net_ratelimit: 69 callbacks suppressed
[  538.037316][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  538.047271][ T8347] EXT4-fs (loop6): 1 truncate cleaned up
[  538.074228][ T8347] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  538.506882][ T8368] loop1: detected capacity change from 0 to 512
[  538.526198][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  538.577546][ T8368] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  538.594447][ T8365] loop7: detected capacity change from 0 to 512
[  538.641522][ T8365] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  538.669140][ T8368] EXT4-fs (loop1): 1 truncate cleaned up
[  538.675884][ T8368] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  539.105607][ T8365] EXT4-fs (loop7): 1 truncate cleaned up
[  539.129683][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  539.140286][ T8365] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  540.054919][ T6503] EXT4-fs (loop7): unmounting filesystem.
[  542.328578][    C1] net_ratelimit: 28 callbacks suppressed
[  542.441860][ T8403] loop1: detected capacity change from 0 to 512
[  542.562591][ T8403] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  542.652201][ T8403] EXT4-fs (loop1): 1 truncate cleaned up
[  542.701387][ T8403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  542.783151][ T8414] siw: device registration error -23
[  543.932210][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  544.971548][ T8427] loop6: detected capacity change from 0 to 512
[  546.341410][ T8439] loop1: detected capacity change from 0 to 512
[  546.374466][ T8427] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  546.392907][ T8439] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  546.419062][ T8439] EXT4-fs (loop1): 1 truncate cleaned up
[  546.636437][ T8439] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  546.850924][ T8427] EXT4-fs (loop6): 1 truncate cleaned up
[  547.046014][ T8427] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  547.769881][    C1] net_ratelimit: 48 callbacks suppressed
[  547.910550][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  548.360892][ T8455] loop1: detected capacity change from 0 to 512
[  548.388087][ T5857] EXT4-fs (loop6): unmounting filesystem.
[  548.432619][ T8455] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  548.546051][ T8455] EXT4-fs (loop1): 1 truncate cleaned up
[  548.600288][ T8455] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  548.788559][ T5171] ------------[ cut here ]------------
[  548.794946][ T5171] WARNING: CPU: 0 PID: 5171 at io_uring/io_uring.c:2918 io_ring_exit_work+0x32f/0x79a
[  548.804634][ T5171] Modules linked in:
[  548.808580][ T5171] CPU: 0 PID: 5171 Comm: kworker/u4:19 Not tainted syzkaller #0
[  548.816389][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  548.826558][ T5171] Workqueue: events_unbound io_ring_exit_work
[  548.832843][ T5171] RIP: 0010:io_ring_exit_work+0x32f/0x79a
[  548.838663][ T5171] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 c8 3a 11 00 48 85 c0 75 40 e8 ce 82 53 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 bf 82 53 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1
[  548.858344][ T5171] RSP: 0018:ffffc90004ee7ac0 EFLAGS: 00010293
[  548.864593][ T5171] RAX: ffffffff8a2ee5e1 RBX: 1ffff1100528c403 RCX: ffff88802d490000
[  548.872907][ T5171] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000
[  548.881193][ T5171] RBP: ffffc90004ee7c30 R08: ffffc90004ee7a47 R09: 1ffff920009dcf48
[  548.889495][ T5171] R10: dffffc0000000000 R11: fffff520009dcf49 R12: dffffc0000000000
[  548.889518][ T5171] R13: 0000000100005d3e R14: 0000000100005d44 R15: ffff888029462018
[  548.905544][ T5171] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  548.905567][ T5171] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  548.921176][ T5171] CR2: 00007efe96926ff8 CR3: 0000000029958000 CR4: 00000000003506f0
[  548.929216][ T5171] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  548.929254][ T5171] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  548.929269][ T5171] Call Trace:
[  548.929277][ T5171]  <TASK>
[  548.929297][ T5171]  ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0
[  548.937568][ T5171]  ? _raw_spin_unlock_irq+0x1f/0x40
[  548.949078][ T5171]  ? process_one_work+0x7b4/0x1160
[  548.969072][ T5171]  process_one_work+0x8ab/0x1160
[  548.974297][ T5171]  ? worker_detach_from_pool+0x240/0x240
[  548.979983][ T5171]  ? _raw_spin_lock_irq+0xb7/0xf0
[  548.985074][ T5171]  ? _raw_spin_lock_irqsave+0x100/0x100
[  548.990657][ T5171]  ? wq_worker_running+0x97/0x190
[  548.990689][ T5171]  worker_thread+0xaf5/0x12a0
[  548.990733][ T5171]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  548.996063][ T5171]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  548.996111][ T5171]  kthread+0x29d/0x330
[  549.007005][ T5171]  ? worker_clr_flags+0x1a0/0x1a0
[  549.017019][ T5171]  ? kthread_blkcg+0xd0/0xd0
[  549.017049][ T5171]  ret_from_fork+0x1f/0x30
[  549.017091][ T5171]  </TASK>
[  549.017313][ T4263] eth0: xmit ffff888028e013c0 42:01:0a:80:00:01
[  549.022396][ T5171] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  549.022431][ T5171] CPU: 0 PID: 5171 Comm: kworker/u4:19 Not tainted syzkaller #0
[  549.022507][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  549.022548][ T5171] Workqueue: events_unbound io_ring_exit_work
[  549.022647][ T5171] Call Trace:
[  549.022669][ T5171]  <TASK>
[  549.022697][ T5171]  dump_stack_lvl+0x188/0x24e
[  549.022792][ T5171]  ? memcpy+0x3c/0x60
[  549.022853][ T5171]  ? show_regs_print_info+0x12/0x12
[  549.022937][ T5171]  ? load_image+0x410/0x410
[  549.023041][ T5171]  panic+0x2d3/0x710
[  549.023115][ T5171]  ? bpf_jit_dump+0xd0/0xd0
[  549.023198][ T5171]  ? ret_from_fork+0x1f/0x30
[  549.023280][ T5171]  __warn+0x2f8/0x4f0
[  549.023333][ T5171]  ? io_ring_exit_work+0x32f/0x79a
[  549.023412][ T5171]  ? io_ring_exit_work+0x32f/0x79a
[  549.023480][ T5171]  report_bug+0x2ba/0x4f0
[  549.023569][ T5171]  ? io_ring_exit_work+0x32f/0x79a
[  549.023646][ T5171]  handle_bug+0x3a/0x70
[  549.023696][ T5171]  exc_invalid_op+0x16/0x40
[  549.023749][ T5171]  asm_exc_invalid_op+0x16/0x20
[  549.023828][ T5171] RIP: 0010:io_ring_exit_work+0x32f/0x79a
[  549.023914][ T5171] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 c8 3a 11 00 48 85 c0 75 40 e8 ce 82 53 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 bf 82 53 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1
[  549.023979][ T5171] RSP: 0018:ffffc90004ee7ac0 EFLAGS: 00010293
[  549.024030][ T5171] RAX: ffffffff8a2ee5e1 RBX: 1ffff1100528c403 RCX: ffff88802d490000
[  549.024072][ T5171] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000
[  549.024112][ T5171] RBP: ffffc90004ee7c30 R08: ffffc90004ee7a47 R09: 1ffff920009dcf48
[  549.024154][ T5171] R10: dffffc0000000000 R11: fffff520009dcf49 R12: dffffc0000000000
[  549.024195][ T5171] R13: 0000000100005d3e R14: 0000000100005d44 R15: ffff888029462018
[  549.024261][ T5171]  ? io_ring_exit_work+0x32f/0x79a
[  549.024374][ T5171]  ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0
[  549.024489][ T5171]  ? _raw_spin_unlock_irq+0x1f/0x40
[  549.024561][ T5171]  ? process_one_work+0x7b4/0x1160
[  549.024633][ T5171]  process_one_work+0x8ab/0x1160
[  549.024746][ T5171]  ? worker_detach_from_pool+0x240/0x240
[  549.024823][ T5171]  ? _raw_spin_lock_irq+0xb7/0xf0
[  549.024893][ T5171]  ? _raw_spin_lock_irqsave+0x100/0x100
[  549.024968][ T5171]  ? wq_worker_running+0x97/0x190
[  549.025029][ T5171]  worker_thread+0xaf5/0x12a0
[  549.025124][ T5171]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  549.025203][ T5171]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  549.025321][ T5171]  kthread+0x29d/0x330
[  549.025383][ T5171]  ? worker_clr_flags+0x1a0/0x1a0
[  549.025448][ T5171]  ? kthread_blkcg+0xd0/0xd0
[  549.025513][ T5171]  ret_from_fork+0x1f/0x30
[  549.025611][ T5171]  </TASK>
[  549.027672][ T5171] Kernel Offset: disabled
[  549.307737][ T5171] Rebooting in 86400 seconds..