last executing test programs:

1m20.075976575s ago: executing program 1 (id=2):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setfsgid(0xee00)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000040)='syscall\x00')
pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)

1m19.112653965s ago: executing program 1 (id=6):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000100)={[{@delalloc}, {@test_dummy_encryption_v1}]}, 0x3, 0x530, &(0x7f0000000740)="$eJzs3E1sHNUdAPD/rO3YzkfrpmnapGnrNK1qJaodO2kTqZXaIJA4gIQICDhathOFODGKHYlEATYCJdxQJMQVceTKgStwiRAnJK5BnJBQpAhySYKEWDTemd31enf9uet8/H7Set97szPvvX0z4/exuwE8sgbTP0k5fCMifh0RhfoXDJaf7t6+NHHv9qWJKJZKx79P5ne7k8Yz2WFiSxYZKkQU3kqqG2rMXrh4enx6eupcFh+ZO/PKyOyFi/881ZelHD16+NDokX+P/Svf5T/LrlSD/NJ63dn9+syeXU++dO3pie48Pc+tth5rlOTZD8bg4qL8UH76+zpldr/YVhNOujewIKxIev7XNldXtGq8YgdKBHRKqVQq9TbfXCzVu7woBXhgJdFsy9vZ/QF4OOX/6NPxb/5o1BHY1J7ux4a7daw8AErrfTd7RPxlPjGfB+mpG9+up8GIeLH44/vpI1Y4D3F1oE2FAgAeap8ey3uCdf2/gfLKyE/nr/8vff5VtoaSdjl+ExHbI+K3EbEjIn4XETsj4vcR8Ye643elY8gW+Q/WxSv5VxahCjfXqaoNpf2//2ZrW9X+34ICDHRlsW3pcLicNnUwe0+Goqf3xKnpqdEWeXz2+FfvLEiomXCr7f+ljzT/vC+YleNmd90E3eT43PiaKl3j1uWI3d319U+6I5LKSkASEbsiYvcKjlvbNT21/8M9lUjPwtctXf/5wUepwZJetFyqWKbSBxH/KLd/8Y0F7V/NMVmwPnlm/OTUyamzY5X1yZG+mJ46OJKeBQcb5vHFl1eeaZb/kvX/+Nv6XZ448snx7Mpau7T9N9ec/5Gv31brP5BEJJX12tmWh+tplHjl66tNxzSrPf83Jc/Nh/Nx6avjc3PnRiM2JU8tTh+r7pvH0+colus/tK/x9b892yd9J/4YEelJ/KeI+HOUR4hp2fdGxF8jYl+LN+Xzx/728urr315p/Sfr7n/lll/Q/tX1+maBJFsbbLCp6/TeG/cqN4//r7D+afsfng8NZSmN73/JgltEs5Lm/+3SlJ/X5R0EAACA+18hIrbWzCVtjUJheLg8B7QjNhemZ2bnDpyYOX92Mt0WMRA9hXymqzwf3JPk858DNfGxuvihbN743a7++fjwxMz05IbWHNgSvbE1ksJwxAtdNdd/6rulp5j72l9CoK0Wr6O1/Ljf/ufbWRigo1qto6ed+J3XOlgYoKOW/zma66+1tSBAx9Vc/82+4V9s/bkv4EHl91qAqqV/6Mc9Ax58pSbXcv8GlAXovBX9Lz/gRwDhYdIdz1bChQ0tCdBpxvLwSFrye/2tAn0R0fI1pd5qypvfVDf1xeIXR1850N/k2/tdsbqi9jfIa0MCac9qQ3LvX81e+a8pNH1NFFZ2wN4oB7obtOnoe1lmyzjOiTW+G8Vzsyd3rsPJX/e7Etln5de7BT9aj+t0VYHO34sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa4ZcAAAD//wTT2XQ=")

1m19.015605752s ago: executing program 1 (id=9):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m18.906244681s ago: executing program 1 (id=11):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455cb, 0x400000009)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0x1018084, &(0x7f000000cfc0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f696e6c696e655f646174612c6261636b67726f756e645f67633d6f6e2c6661756c745f747970653d30303030303030303030303030303030303030362c64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6e6f696e6c696e655f78617474722c6a71666d743d7666736f6c642c6e6f61636c2c00a1a75ac439087a5b11ab7891dd39dd9bc0d7"], 0x1, 0x5509, &(0x7f00000079c0)="$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")
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x8, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
mlockall(0x2)
r2 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
prlimit64(0x0, 0x7, 0x0, &(0x7f0000000100))
shmctl$SHM_LOCK(r2, 0xb)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
fcntl$lock(r3, 0x7, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
fcntl$lock(r3, 0x7, &(0x7f00000002c0)={0x0, 0x2, 0xff34, 0x40000005})

1m16.826869023s ago: executing program 1 (id=35):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x81, 0x234, &(0x7f0000000000)="$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")

1m16.704410239s ago: executing program 32 (id=35):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x81, 0x234, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvMGKZxyVejt0v0g9V6hlZsYGNVT+BfN2TDBaSYv2FjGyChkc5gPyMziABnEwMAw+U/EvQcskgwiYLPWXArKnHJVlOOf2KmW5avMOu8zzOiYlsbAaDCLg4GBQe+I7kw7A95uDjaImcWVVdmJOTmpRcVnGFDNn8y4n0mREeSyM3+vBj9gtGPojmVgZJDb4K+2+NsfqcqNm+ojp1dF1Eztbrq5dH0cwzb9v1dMpN5PzAj7/+CQoClDXv6HeTJK3zc3zPlQU/fExLGzUXkuf+vlv+/ex9QWJ6gxPRbvKmTjT3DTqvnk7ORm+XhuenX7lmLFBVlpLhOPTb34N+H4WgaGyRee2OrXnDkUrxjDKeVWOTfmrlu8INcy9fN1bxgYDkZ9nsgCjisoMODtZmJgYAf5q7wBGhkMzAwMDCoMDAxMDCwMaZk53FBhMCfVEKYXppqJgQMsoZecn5PSzsAITgIgAYPlDCwwM1INHzOwwjlGyBxjiwaYa9qhtAqU9oBQMhOh/McMDGwM3IjkBUs2LGAT+qE8jQZoimRgMATFWUViSUmRIQMrG4RlBBczEoDbzAS2lY1hLhOq544zMYyCUTAKRsEoGAWjYBSMglEwCkbBSAaAAAAA//8J27DJ")

1m1.982576645s ago: executing program 0 (id=181):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xe000003, 0xf, &(0x7f0000000180)=[0x1, 0x9, 0xf909, 0x899d, 0x80, 0x98a, 0x7, 0x1010, 0xfffffe00, 0x1, 0x4, 0x2, 0x6, 0x4, 0x0], 0x1, 0x4000007})

1m1.926549376s ago: executing program 0 (id=182):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210413, &(0x7f0000000040)=ANY=[], 0x2, 0x227, &(0x7f0000000400)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r3, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe)
sendfile(r3, r3, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)

1m0.973792649s ago: executing program 0 (id=194):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1828000003000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd0000000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x90)

1m0.876099736s ago: executing program 0 (id=196):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1m0.667564983s ago: executing program 0 (id=199):
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e066a250c00"], 0x9)

1m0.033713099s ago: executing program 0 (id=206):
clock_gettime(0x2, &(0x7f0000000000))

59.726311144s ago: executing program 33 (id=206):
clock_gettime(0x2, &(0x7f0000000000))

15.90174124s ago: executing program 2 (id=876):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0)

15.901591695s ago: executing program 2 (id=877):
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x44)

15.901374326s ago: executing program 2 (id=878):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb)

15.822828209s ago: executing program 2 (id=879):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
truncate(&(0x7f0000000200)='./file1\x00', 0x220fffffffc)

15.698319298s ago: executing program 2 (id=880):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt(r0, 0x1, 0x10, &(0x7f0000000600)=""/106, &(0x7f0000000340)=0x6a)

15.407317259s ago: executing program 2 (id=886):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xd}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x2)

15.048756968s ago: executing program 34 (id=886):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xd}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x2)

4.983397538s ago: executing program 4 (id=1011):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x300, 0x59555956, 0x7, 0x0, [{0x0, 0x1000}, {}, {0x1, 0x6}, {0x8}, {}, {0x0, 0x4}], 0x6, 0x6}})

4.9832427s ago: executing program 4 (id=1012):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

4.925507639s ago: executing program 4 (id=1015):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'hsr0\x00', 0x4})

4.824987388s ago: executing program 4 (id=1018):
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810450, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000000780)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
fchdir(r0)
close(r0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304c24, 0x0)

4.769474781s ago: executing program 4 (id=1020):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0xffffffffffffffff, 0x9, 0xb)

4.35785063s ago: executing program 4 (id=1029):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xe4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x5f, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x0, 0x1, {0xa, [0xc, 0xc, 0x8, 0xa, 0x6, 0xd, 0x6, 0x10, 0xb, 0x9, 0x4, 0x0, 0x0, 0x1, 0x8, 0xf], 0x0, [0x8, 0x0, 0x4, 0x4000, 0x6, 0x8, 0x8, 0x9, 0xfff2, 0x0, 0xf001, 0x2, 0x4, 0x9, 0x5, 0x101], [0x1, 0x1, 0x7, 0x30, 0x6, 0x7, 0x4, 0xa579, 0x6, 0x10, 0xa7, 0x36, 0x7, 0x81, 0x3ff, 0x9]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7fffffff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x83}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0xe4}}, 0x0)

4.251965266s ago: executing program 35 (id=1029):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xe4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x5f, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x0, 0x1, {0xa, [0xc, 0xc, 0x8, 0xa, 0x6, 0xd, 0x6, 0x10, 0xb, 0x9, 0x4, 0x0, 0x0, 0x1, 0x8, 0xf], 0x0, [0x8, 0x0, 0x4, 0x4000, 0x6, 0x8, 0x8, 0x9, 0xfff2, 0x0, 0xf001, 0x2, 0x4, 0x9, 0x5, 0x101], [0x1, 0x1, 0x7, 0x30, 0x6, 0x7, 0x4, 0xa579, 0x6, 0x10, 0xa7, 0x36, 0x7, 0x81, 0x3ff, 0x9]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7fffffff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x83}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0xe4}}, 0x0)

1.480016677s ago: executing program 5 (id=1054):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x48)
socketpair(0x15, 0x2, 0x6, &(0x7f0000000000))
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20)

1.478808382s ago: executing program 5 (id=1055):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x80000000, 0x2, 0x8, 0x2, 0x3, 0x4, 0x5}, 0x1c)

1.340154396s ago: executing program 5 (id=1056):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r1 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

1.239821146s ago: executing program 3 (id=1058):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x6e22, 0x2, @empty, 0xb}, 0x1c)
listen(r0, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r2, 0x200204)

1.107938294s ago: executing program 3 (id=1059):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

437.20402ms ago: executing program 5 (id=1060):
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)

347.060863ms ago: executing program 5 (id=1061):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000740)={0x104, r1, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xd8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc7, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a<y\x17p\x7f\xe9\xbc\xe1B\xb8\x97\x1a_+\xe0\xa4\xb07\xa8|X\xf5s\xde\xd7$\a\xb9\x19k\x1f\x86\xee,\xc8y\xc5e\x17\x91\xe0\x916\xe9\xf5\x81]\x178{\xbc\x03\x99\xd3\x98P$\xdf\xc7\xb2\x9a\x1b>\xb2\xf4\xa1\xb0\xe4\xc2x\xd0\xbf\x7f\x14\xa5-g\xe8\xd6}\xcb\xb3\x1f\xf8D\xb9\xeaC\x8e?\xeb\xdb\a\x1b'}]}]}]}]}, 0x104}}, 0x0)

281.808344ms ago: executing program 5 (id=1062):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)

281.597664ms ago: executing program 3 (id=1063):
r0 = io_uring_setup(0x653, &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20)

160.396156ms ago: executing program 3 (id=1064):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xa}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)

89.955314ms ago: executing program 3 (id=1065):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000)

0s ago: executing program 3 (id=1066):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x5}, 0xfffffffc}], 0x2, 0x42, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25414' (ED25519) to the list of known hosts.
syzkaller login: [   48.670825][ T5787] cgroup: Unknown subsys name 'net'
[   48.781883][ T5787] cgroup: Unknown subsys name 'cpuset'
[   48.788159][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.519447][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.097166][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.116078][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.119932][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.123498][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.128032][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.131030][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.134647][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.137795][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.143257][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.147078][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.194068][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.199410][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.202738][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.207214][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.213578][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.545708][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.641590][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   55.648555][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   55.729994][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.733393][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.736885][ T5846] bridge_slave_0: entered allmulticast mode
[   55.740254][ T5846] bridge_slave_0: entered promiscuous mode
[   55.752871][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.755904][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.758718][ T5846] bridge_slave_1: entered allmulticast mode
[   55.761630][ T5846] bridge_slave_1: entered promiscuous mode
[   55.823589][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.829535][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.832684][ T5843] bridge_slave_0: entered allmulticast mode
[   55.837717][ T5843] bridge_slave_0: entered promiscuous mode
[   55.843701][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.856316][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.859456][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.862625][ T5843] bridge_slave_1: entered allmulticast mode
[   55.866743][ T5843] bridge_slave_1: entered promiscuous mode
[   55.870992][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.883925][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.887125][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.889636][ T5853] bridge_slave_0: entered allmulticast mode
[   55.892606][ T5853] bridge_slave_0: entered promiscuous mode
[   55.915380][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.918269][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.921224][ T5853] bridge_slave_1: entered allmulticast mode
[   55.924165][ T5853] bridge_slave_1: entered promiscuous mode
[   55.944031][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.957309][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.961984][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.969030][ T5846] team0: Port device team_slave_0 added
[   55.972951][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.977919][ T5846] team0: Port device team_slave_1 added
[   56.036592][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.038817][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.048898][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.054163][ T5853] team0: Port device team_slave_0 added
[   56.058376][ T5843] team0: Port device team_slave_0 added
[   56.061907][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.064262][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.073215][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.082074][ T5853] team0: Port device team_slave_1 added
[   56.086251][ T5843] team0: Port device team_slave_1 added
[   56.138841][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.141776][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.153740][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.158994][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.161438][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.171426][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.177201][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.179724][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.189402][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.201309][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.204148][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.215374][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.229921][ T5846] hsr_slave_0: entered promiscuous mode
[   56.232475][ T5846] hsr_slave_1: entered promiscuous mode
[   56.308154][ T5853] hsr_slave_0: entered promiscuous mode
[   56.311234][ T5853] hsr_slave_1: entered promiscuous mode
[   56.314134][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   56.316734][ T5853] Cannot create hsr debugfs directory
[   56.330430][ T5843] hsr_slave_0: entered promiscuous mode
[   56.333243][ T5843] hsr_slave_1: entered promiscuous mode
[   56.336877][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   56.338992][ T5843] Cannot create hsr debugfs directory
[   56.595798][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.614367][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.630555][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.643572][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.682854][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.697100][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.708747][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.717404][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.795155][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.807753][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.817286][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.833110][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.897560][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.948528][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.954132][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.968219][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.971442][ T4876] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.992892][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.996006][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.023316][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   57.038681][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.041488][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.056059][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.058290][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.081932][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.118870][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   57.140354][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.143903][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.152669][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.155720][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.159658][ T5239] Bluetooth: hci0: command tx timeout
[   57.164045][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.167438][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.234939][ T5239] Bluetooth: hci2: command tx timeout
[   57.236179][   T55] Bluetooth: hci1: command tx timeout
[   57.248410][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.298474][ T5846] veth0_vlan: entered promiscuous mode
[   57.308962][ T5846] veth1_vlan: entered promiscuous mode
[   57.330005][ T5846] veth0_macvtap: entered promiscuous mode
[   57.333857][ T5846] veth1_macvtap: entered promiscuous mode
[   57.357322][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.361329][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.371937][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.382909][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.388034][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.391876][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.409352][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.453915][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.463714][ T5853] veth0_vlan: entered promiscuous mode
[   57.481283][ T5853] veth1_vlan: entered promiscuous mode
[   57.499176][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.501877][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.551365][ T5853] veth0_macvtap: entered promiscuous mode
[   57.551407][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.557114][ T5853] veth1_macvtap: entered promiscuous mode
[   57.564068][ T5843] veth0_vlan: entered promiscuous mode
[   57.566762][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.578176][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.595885][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.605787][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.615413][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.622221][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.631984][ T5843] veth1_vlan: entered promiscuous mode
[   57.641717][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.647725][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.727977][ T5843] veth0_macvtap: entered promiscuous mode
[   57.736550][ T5843] veth1_macvtap: entered promiscuous mode
[   57.750407][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.759609][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.829773][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.832631][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.878273][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.881810][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.900948][ T4876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.902709][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.911310][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.914315][ T4876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.273567][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.289415][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.336304][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.345968][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.481043][ T5925] pim6reg1: entered allmulticast mode
[   58.592418][ T5921] loop0: detected capacity change from 0 to 32768
[   58.624160][ T5929] loop1: detected capacity change from 0 to 512
[   58.634025][ T5929] =======================================================
[   58.634025][ T5929] WARNING: The mand mount option has been deprecated and
[   58.634025][ T5929]          and is ignored by this kernel. Remove the mand
[   58.634025][ T5929]          option from the mount to silence this warning.
[   58.634025][ T5929] =======================================================
[   58.662625][ T5921] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   58.663557][ T5929] EXT4-fs (loop1): Test dummy encryption mode enabled
[   58.673053][ T5929] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[   58.686046][ T5929] EXT4-fs (loop1): group descriptors corrupted!
[   58.723012][ T5939] loop1: detected capacity change from 0 to 1024
[   58.726830][ T5939] EXT4-fs: Ignoring removed bh option
[   58.742351][ T5939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   58.746224][ T5921] XFS (loop0): Ending clean mount
[   58.763963][ T5939] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   58.799763][ T5921] XFS (loop0): Quotacheck needed: Please wait.
[   58.833269][ T5921] XFS (loop0): Quotacheck: Done.
[   58.867049][ T5843] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   59.151308][ T5962] netlink: 9 bytes leftover after parsing attributes in process `syz.0.18'.
[   59.156180][ T5962] 0: renamed from hsr0 (while UP)
[   59.159182][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.164098][ T5962] 0: entered allmulticast mode
[   59.166200][ T5962] hsr_slave_0: entered allmulticast mode
[   59.168086][ T5962] hsr_slave_1: entered allmulticast mode
[   59.170593][ T5962] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   59.328586][   T55] Bluetooth: hci0: command tx timeout
[   59.330737][   T55] Bluetooth: hci2: command tx timeout
[   59.965047][ T5882] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   60.116902][ T5882] usb 3-1: Using ep0 maxpacket: 16
[   60.127581][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[   60.131166][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[   60.135499][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   60.138692][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   60.154016][ T5882] usb 3-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb
[   60.163939][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.169496][ T5882] usb 3-1: Product: syz
[   60.171236][ T5882] usb 3-1: Manufacturer: syz
[   60.173164][ T5882] usb 3-1: SerialNumber: syz
[   60.174100][ T5976] loop0: detected capacity change from 0 to 1024
[   60.181030][ T5882] usb 3-1: config 0 descriptor??
[   60.189784][ T5882] io_ti 3-1:0.0: required endpoints missing
[   60.216279][ T5976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.220388][ T5976] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.249166][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.367468][ T5986] netlink: 'syz.0.29': attribute type 1 has an invalid length.
[   60.370858][ T5986] netlink: 'syz.0.29': attribute type 1 has an invalid length.
[   60.398091][   T10] usb 3-1: USB disconnect, device number 2
[   60.667053][ T5994] loop0: detected capacity change from 0 to 32768
[   60.706750][ T5994] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[   60.710912][ T5994] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   60.725578][ T5994] XFS (loop0): Ending clean mount
[   60.729570][ T5994] XFS (loop0): Quotacheck needed: Please wait.
[   60.742251][ T5994] XFS (loop0): Quotacheck: Done.
[   60.776780][ T5843] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   60.819535][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   60.905746][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.989536][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34'.
[   60.993181][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34'.
[   60.998944][ T6004] netlink: 5 bytes leftover after parsing attributes in process `syz.0.34'.
[   61.300528][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.306631][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.310442][ T1273] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   61.311277][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.316943][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.319595][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.396422][ T5239] Bluetooth: hci2: command tx timeout
[   61.398487][ T5239] Bluetooth: hci0: command tx timeout
[   61.469516][ T1273] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[   61.472899][ T1273] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   61.480911][ T1273] usb 3-1: config 0 interface 0 has no altsetting 0
[   61.505484][ T1273] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   61.508775][ T6019] chnl_net:caif_netlink_parms(): no params data found
[   61.509461][ T1273] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   61.526370][ T1273] usb 3-1: Product: syz
[   61.530930][ T1273] usb 3-1: Manufacturer: syz
[   61.532962][ T1273] usb 3-1: SerialNumber: syz
[   61.542096][ T1273] usb 3-1: config 0 descriptor??
[   61.552308][ T1273] hub 3-1:0.0: bad descriptor, ignoring hub
[   61.555857][ T1273] hub 3-1:0.0: probe with driver hub failed with error -5
[   61.567915][ T1273] usb 3-1: selecting invalid altsetting 0
[   61.612985][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.616269][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.619642][ T6019] bridge_slave_0: entered allmulticast mode
[   61.623035][ T6019] bridge_slave_0: entered promiscuous mode
[   61.628271][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.631240][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.636148][ T6019] bridge_slave_1: entered allmulticast mode
[   61.644794][ T6019] bridge_slave_1: entered promiscuous mode
[   61.692535][ T6040] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.48'.
[   61.718262][ T6019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.752380][ T6019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.773126][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.839810][ T6019] team0: Port device team_slave_0 added
[   61.856587][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.872267][ T6019] team0: Port device team_slave_1 added
[   61.941171][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.952958][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.956977][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.968851][ T6019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.981238][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.984189][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.003713][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.093744][ T6019] hsr_slave_0: entered promiscuous mode
[   62.097125][ T6019] hsr_slave_1: entered promiscuous mode
[   62.099997][ T6019] debugfs: 'hsr0' already exists in 'hsr'
[   62.102416][ T6019] Cannot create hsr debugfs directory
[   62.227301][   T10] usb 3-1: USB disconnect, device number 3
[   62.274039][   T13] bridge_slave_1: left allmulticast mode
[   62.280077][   T13] bridge_slave_1: left promiscuous mode
[   62.282722][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.312204][   T13] bridge_slave_0: left allmulticast mode
[   62.317226][   T13] bridge_slave_0: left promiscuous mode
[   62.319925][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.435319][   T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   62.570371][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.576033][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.579863][   T13] bond0 (unregistering): Released all slaves
[   62.588371][   T10] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[   62.591081][   T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   62.597627][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'.
[   62.606258][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[   62.619261][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   62.622391][   T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   62.639182][   T10] usb 3-1: Product: syz
[   62.640560][   T10] usb 3-1: Manufacturer: syz
[   62.647578][   T10] usb 3-1: SerialNumber: syz
[   62.658638][   T10] usb 3-1: config 0 descriptor??
[   62.673526][   T10] hub 3-1:0.0: bad descriptor, ignoring hub
[   62.690142][   T10] hub 3-1:0.0: probe with driver hub failed with error -5
[   62.700425][   T10] usb 3-1: selecting invalid altsetting 0
[   62.810274][ T6059] loop0: detected capacity change from 0 to 1024
[   62.995746][ T1273] usb 3-1: USB disconnect, device number 4
[   63.061832][   T13] hsr_slave_0: left promiscuous mode
[   63.065427][   T13] hsr_slave_1: left promiscuous mode
[   63.067976][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.070454][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.075821][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.078661][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.087972][   T13] veth1_macvtap: left promiscuous mode
[   63.092043][   T13] veth0_macvtap: left promiscuous mode
[   63.093984][   T13] veth1_vlan: left promiscuous mode
[   63.096891][   T13] veth0_vlan: left promiscuous mode
[   63.155557][ T5882] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   63.306240][ T5882] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   63.309140][ T5882] usb 1-1: config 0 has no interface number 0
[   63.315979][ T5882] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[   63.318945][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.330068][ T5882] usb 1-1: config 0 descriptor??
[   63.338540][ T5882] usb 1-1: selecting invalid altsetting 1
[   63.341151][ T5882] dvb_ttusb_budget: ttusb_init_controller: error
[   63.343815][ T5882] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[   63.375194][   T13] team0 (unregistering): Port device team_slave_1 removed
[   63.389527][ T5882] DVB: Unable to find symbol cx22700_attach()
[   63.405144][   T55] Bluetooth: hci1: command tx timeout
[   63.413502][ T5882] DVB: Unable to find symbol tda10046_attach()
[   63.418588][ T5882] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[   63.456151][   T13] team0 (unregistering): Port device team_slave_0 removed
[   63.485811][   T55] Bluetooth: hci0: command tx timeout
[   63.488075][   T55] Bluetooth: hci2: command tx timeout
[   63.551589][ T2287] usb 1-1: USB disconnect, device number 2
[   63.801190][ T6019] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.808693][ T6019] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.818240][ T6019] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.825461][ T6019] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.020140][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.071428][ T6019] 8021q: adding VLAN 0 to HW filter on device team0
[   64.105384][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.108834][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.153456][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.157005][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.240836][ T6019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.255694][ T6019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.476318][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.502748][ T6098] loop2: detected capacity change from 0 to 32768
[   64.512330][ T6019] veth0_vlan: entered promiscuous mode
[   64.529934][ T6019] veth1_vlan: entered promiscuous mode
[   64.584709][ T6019] veth0_macvtap: entered promiscuous mode
[   64.590949][ T6019] veth1_macvtap: entered promiscuous mode
[   64.607545][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.620264][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.626508][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.630421][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.633813][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.657882][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.694908][  T621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.698065][  T621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.721395][  T621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.724535][  T621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.475388][   T55] Bluetooth: hci1: command tx timeout
[   65.754516][ T5909] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   65.767385][ T6155] loop2: detected capacity change from 0 to 256
[   65.777883][ T6155] exfat: Deprecated parameter 'utf8'
[   65.780155][ T6155] exfat: Deprecated parameter 'namecase'
[   65.782521][ T6155] exfat: Deprecated parameter 'namecase'
[   65.804646][ T6155] exfat: Deprecated parameter 'utf8'
[   65.813608][ T6155] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[   65.842537][ T6151] loop3: detected capacity change from 0 to 32768
[   65.877315][ T6151] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   65.904024][ T6151] XFS (loop3): Ending clean mount
[   65.909878][ T5909] usb 1-1: config 3 has an invalid interface number: 71 but max is 0
[   65.913093][ T5909] usb 1-1: config 3 has no interface number 0
[   65.916209][ T5909] usb 1-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   65.920096][ T5909] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac
[   65.929751][ T6151] XFS (loop3): Quotacheck needed: Please wait.
[   65.934603][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.947608][ T5909] ati_remote 1-1:3.71: ati_remote_probe: Unexpected endpoint_in
[   65.975391][ T6151] XFS (loop3): Quotacheck: Done.
[   66.008610][   T33] audit: type=1800 audit(1756997422.032:2): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.78" name="file1" dev="loop3" ino=6150 res=0 errno=0
[   66.075297][ T6019] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   66.149585][   T10] usb 1-1: USB disconnect, device number 3
[   66.321950][ T6185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.340289][ T6185] warning: `syz.2.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.424580][ T6181] loop3: detected capacity change from 0 to 40427
[   66.438830][ T6181] F2FS-fs (loop3): invalid crc value
[   66.472516][ T6181] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   66.477788][ T6181] F2FS-fs (loop3): Start checkpoint disabled!
[   66.482625][ T6181] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   66.502171][ T1089] kworker/u10:3: attempt to access beyond end of device
[   66.502171][ T1089] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   66.507838][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: kworker/u10:3 Not tainted syzkaller #0 PREEMPT(full) 
[   66.507851][ T1089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   66.507855][ T1089] Workqueue: writeback wb_workfn (flush-7:3)
[   66.507870][ T1089] Call Trace:
[   66.507873][ T1089]  <TASK>
[   66.507877][ T1089]  dump_stack_lvl+0x189/0x250
[   66.507889][ T1089]  ? __pfx_dump_stack_lvl+0x10/0x10
[   66.507897][ T1089]  ? __pfx_queue_work_on+0x10/0x10
[   66.507904][ T1089]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   66.507914][ T1089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   66.507928][ T1089]  f2fs_handle_critical_error+0x37c/0x540
[   66.507942][ T1089]  f2fs_write_end_io+0x886/0xb60
[   66.507956][ T1089]  __submit_merged_bio+0x27a/0x6a0
[   66.507968][ T1089]  __submit_merged_write_cond+0x255/0x530
[   66.507981][ T1089]  f2fs_write_data_pages+0x261d/0x3000
[   66.508005][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   66.508021][ T1089]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   66.508043][ T1089]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   66.508097][ T1089]  ? trace_f2fs_writepages+0x7f/0x200
[   66.508110][ T1089]  ? f2fs_write_node_pages+0x478/0x6e0
[   66.508126][ T1089]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   66.508141][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   66.508151][ T1089]  do_writepages+0x32e/0x550
[   66.508164][ T1089]  ? reacquire_held_locks+0x127/0x1d0
[   66.508171][ T1089]  ? writeback_sb_inodes+0x384/0x1010
[   66.508183][ T1089]  __writeback_single_inode+0x145/0xff0
[   66.508192][ T1089]  ? do_raw_spin_unlock+0x4d/0x240
[   66.508202][ T1089]  writeback_sb_inodes+0x6c7/0x1010
[   66.508222][ T1089]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   66.508249][ T1089]  ? rcu_is_watching+0x15/0xb0
[   66.508261][ T1089]  wb_writeback+0x43b/0xaf0
[   66.508273][ T1089]  ? queue_io+0x3d1/0x590
[   66.508283][ T1089]  ? __pfx_wb_writeback+0x10/0x10
[   66.508295][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   66.508309][ T1089]  wb_workfn+0x409/0xef0
[   66.508324][ T1089]  ? __pfx_wb_workfn+0x10/0x10
[   66.508334][ T1089]  ? __lock_acquire+0xab9/0xd20
[   66.508348][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   66.508358][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   66.508366][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   66.508372][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   66.508379][ T1089]  process_scheduled_works+0xae1/0x17b0
[   66.508398][ T1089]  ? __pfx_process_scheduled_works+0x10/0x10
[   66.508413][ T1089]  worker_thread+0x8a0/0xda0
[   66.508431][ T1089]  kthread+0x711/0x8a0
[   66.508442][ T1089]  ? __pfx_worker_thread+0x10/0x10
[   66.508448][ T1089]  ? __pfx_kthread+0x10/0x10
[   66.508457][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   66.508466][ T1089]  ? lockdep_hardirqs_on+0x9c/0x150
[   66.508475][ T1089]  ? __pfx_kthread+0x10/0x10
[   66.508483][ T1089]  ret_from_fork+0x3fc/0x770
[   66.508492][ T1089]  ? __pfx_ret_from_fork+0x10/0x10
[   66.508502][ T1089]  ? __switch_to_asm+0x39/0x70
[   66.508510][ T1089]  ? __switch_to_asm+0x33/0x70
[   66.508517][ T1089]  ? __pfx_kthread+0x10/0x10
[   66.508526][ T1089]  ret_from_fork_asm+0x1a/0x30
[   66.508542][ T1089]  </TASK>
[   66.508545][ T1089] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   66.629235][ T6181] VFS:Filesystem freeze failed
[   66.938620][ T6192] loop0: detected capacity change from 0 to 32768
[   66.944630][ T6192] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.93 (6192)
[   66.970021][ T6192] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   66.973584][ T6192] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   67.096729][ T6209] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   67.155739][ T6192] BTRFS info (device loop0): enabling ssd optimizations
[   67.158204][ T6192] BTRFS info (device loop0): enabling free space tree
[   67.318220][ T6226] netlink: 'syz.3.100': attribute type 2 has an invalid length.
[   67.505678][ T6231] tmpfs: Bad value for 'mpol'
[   67.554597][   T55] Bluetooth: hci1: command tx timeout
[   67.839985][   T47] IPVS: starting estimator thread 0...
[   67.842514][ T6235] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   67.905857][ T5843] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   67.971538][ T6239] IPVS: using max 38 ests per chain, 91200 per kthread
[   68.007845][ T6241] netlink: 'syz.2.106': attribute type 2 has an invalid length.
[   68.010890][ T6241] netlink: 'syz.2.106': attribute type 1 has an invalid length.
[   68.158364][ T6237] loop3: detected capacity change from 0 to 32768
[   68.166569][ T6237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.103 (6237)
[   68.175996][ T6237] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   68.180140][ T6237] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   68.233615][ T6237] BTRFS info (device loop3): enabling ssd optimizations
[   68.244808][ T6237] BTRFS info (device loop3): enabling free space tree
[   68.390303][ T6019] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   68.394877][ T1273] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   68.554626][ T1273] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   68.564493][ T1273] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   68.571693][ T1273] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   68.581146][ T1273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   68.594559][ T1273] usb 1-1: SerialNumber: syz
[   68.843523][ T1273] usb 1-1: 0:2 : does not exist
[   68.870265][ T1273] usb 1-1: USB disconnect, device number 4
[   68.907567][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   69.000667][ T6298] Zero length message leads to an empty skb
[   69.003440][ T6298] process 'syz.2.120' launched '/dev/fd/5' with NULL argv: empty string added
[   69.173452][ T6309] loop3: detected capacity change from 0 to 256
[   69.349280][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'.
[   69.600557][  T621] Bluetooth: hci3: Frame reassembly failed (-84)
[   69.635051][ T5239] Bluetooth: hci1: command tx timeout
[   70.152971][ T6320] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.240680][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.243770][ T2287] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   71.247146][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.383049][ T6343] netlink: 11 bytes leftover after parsing attributes in process `syz.2.139'.
[   71.428605][ T6345] loop2: detected capacity change from 0 to 2048
[   71.434973][ T2287] usb 4-1: Using ep0 maxpacket: 32
[   71.445188][ T2287] usb 4-1: config 0 has an invalid interface number: 16 but max is 0
[   71.451282][ T2287] usb 4-1: config 0 has no interface number 0
[   71.458152][ T2287] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   71.468768][ T2287] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[   71.476857][ T6346] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.483597][ T2287] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[   71.490434][ T2287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.495614][ T2287] usb 4-1: Product: syz
[   71.504614][ T2287] usb 4-1: Manufacturer: syz
[   71.506636][ T2287] usb 4-1: SerialNumber: syz
[   71.511257][ T2287] usb 4-1: config 0 descriptor??
[   71.514074][ T6341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   71.519090][ T6341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   71.527224][ T2287] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[   71.637295][ T5239] Bluetooth: hci3: command 0x1003 tx timeout
[   71.640103][   T55] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   71.746714][ T1273] usb 4-1: USB disconnect, device number 2
[   71.997874][ T6360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.146'.
[   72.015130][ T6360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.146'.
[   72.110019][ T6366] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   72.296376][ T6368] loop2: detected capacity change from 0 to 32768
[   72.299822][ T6368] btrfs: Deprecated parameter 'usebackuproot'
[   72.302573][ T6368] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   72.311387][ T6368] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.150 (6368)
[   72.322260][ T6368] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   72.326728][ T6368] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   72.404478][ T2287] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   72.426715][ T6368] BTRFS info (device loop2): rebuilding free space tree
[   72.443051][ T6368] BTRFS info (device loop2): enabling ssd optimizations
[   72.447053][ T6368] BTRFS info (device loop2): using spread ssd allocation scheme
[   72.450221][ T6368] BTRFS info (device loop2): enabling free space tree
[   72.453059][ T6368] BTRFS info (device loop2): force clearing of disk cache
[   72.456096][ T6368] BTRFS info (device loop2): enabling auto defrag
[   72.458762][ T6368] BTRFS info (device loop2): doing ref verification
[   72.461563][ T6368] BTRFS info (device loop2): trying to use backup root at mount time
[   72.465023][ T6368] BTRFS info (device loop2): max_inline set to 4096
[   72.546905][ T6395] BTRFS info (device loop2): space_info DATA+METADATA (sub-group id 0) has 159744 free, is not full
[   72.551581][ T6395] BTRFS info (device loop2): space_info total=3276800, used=53248, pinned=20480, reserved=1236992, may_use=1806336, readonly=0 zone_unusable=0
[   72.554752][ T2287] usb 1-1: Using ep0 maxpacket: 8
[   72.557776][ T6395] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1441792
[   72.561221][ T2287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[   72.563216][ T6395] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[   72.569595][ T6395] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[   72.573026][ T6395] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[   72.576426][ T6395] BTRFS info (device loop2): delayed_refs_rsv: size 65536 reserved 65536
[   72.599074][ T2287] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   72.606143][ T2287] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   72.650690][ T2287] usb 1-1: Product: syz
[   72.652155][ T2287] usb 1-1: Manufacturer: syz
[   72.653822][ T2287] usb 1-1: SerialNumber: syz
[   72.756573][ T5853] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   72.870722][ T2287] usb 1-1: palm_os_3_probe - error -71 getting connection information
[   72.874070][ T2287] visor 1-1:1.0: probe with driver visor failed with error -71
[   72.894704][ T2287] usb 1-1: USB disconnect, device number 5
[   73.542690][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'.
[   74.065305][ T2287] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   74.266044][ T2287] usb 1-1: Using ep0 maxpacket: 16
[   74.292590][ T2287] usb 1-1: config 0 has an invalid interface number: 49 but max is 0
[   74.296376][ T2287] usb 1-1: config 0 has no interface number 0
[   74.298648][ T2287] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[   74.311161][ T2287] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[   74.315405][ T2287] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   74.326739][ T2287] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[   74.332364][ T2287] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[   74.338730][ T2287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.345761][ T2287] usb 1-1: Product: syz
[   74.347415][ T2287] usb 1-1: Manufacturer: syz
[   74.349284][ T2287] usb 1-1: SerialNumber: syz
[   74.363785][ T2287] usb 1-1: config 0 descriptor??
[   74.367636][ T6417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   74.597134][ T2287] qcserial 1-1:0.49: Qualcomm USB modem converter detected
[   74.611411][ T2287] usb 1-1: USB disconnect, device number 6
[   74.619998][ T2287] qcserial 1-1:0.49: device disconnected
[   75.371603][ T6435] loop2: detected capacity change from 0 to 32768
[   75.410742][ T6435] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   75.430204][ T6435] XFS (loop2): Ending clean mount
[   75.437395][ T6435] XFS (loop2): Quotacheck needed: Please wait.
[   75.469836][ T6435] XFS (loop2): Quotacheck: Done.
[   75.515918][ T5853] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   75.615300][ T6457] geneve2: entered promiscuous mode
[   75.617510][ T6457] geneve2: entered allmulticast mode
[   75.720916][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'.
[   75.837365][ T6469] loop0: detected capacity change from 0 to 16
[   75.859927][ T6469] erofs (device loop0): mounted with root inode @ nid 36.
[   76.090680][ T6482] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[   76.096546][ T6482] erofs (device loop0): read error -117 @ 43 of nid 36
[   76.870864][ T6505] loop0: detected capacity change from 0 to 512
[   76.879350][ T6506] loop2: detected capacity change from 0 to 512
[   76.919863][ T6505] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.924982][ T6506] EXT4-fs (loop2): Test dummy encryption mode enabled
[   76.927416][ T6506] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   76.947119][ T6506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   76.963554][ T6506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002]
[   76.966415][ T6506] System zones: 1-12
[   76.969638][ T6506] EXT4-fs (loop2): 1 truncate cleaned up
[   76.972619][ T6506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.983545][ T6505] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   76.989956][ T6505] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   76.993466][ T6505] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.196: Failed to acquire dquot type 0
[   77.009263][ T6505] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   77.025961][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.066002][ T5843] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /63/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[   77.770225][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.882723][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.968069][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.168116][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.243705][ T6553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.417661][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.422274][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.427265][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.430609][   T13] bridge_slave_1: left allmulticast mode
[   78.433004][   T13] bridge_slave_1: left promiscuous mode
[   78.436328][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.436817][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.442712][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.463596][   T13] bridge_slave_0: left allmulticast mode
[   78.465943][   T13] bridge_slave_0: left promiscuous mode
[   78.467902][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.502262][ T6562] loop2: detected capacity change from 0 to 512
[   78.518670][ T6562] EXT4-fs: Ignoring removed mblk_io_submit option
[   78.525182][ T6562] EXT4-fs: inline encryption not supported
[   78.527761][ T6562] EXT4-fs: Ignoring removed mblk_io_submit option
[   78.547125][ T6562] EXT4-fs (loop2): Test dummy encryption mode enabled
[   78.550076][ T6562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   78.568159][ T6562] EXT4-fs (loop2): 1 truncate cleaned up
[   78.571858][ T6562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.735446][ T6562] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   78.861251][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.866836][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.871143][   T13] bond0 (unregistering): Released all slaves
[   79.087627][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.219'.
[   79.183002][ T6554] chnl_net:caif_netlink_parms(): no params data found
[   79.289020][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.320645][   T13] hsr_slave_0: left promiscuous mode
[   79.329466][   T13] hsr_slave_1: left promiscuous mode
[   79.341977][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.346014][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.352677][ T6598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.221'.
[   79.357895][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.362764][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.387360][   T13] veth1_macvtap: left promiscuous mode
[   79.389727][   T13] veth0_macvtap: left promiscuous mode
[   79.392060][   T13] veth1_vlan: left promiscuous mode
[   79.394334][   T13] veth0_vlan: left promiscuous mode
[   79.884328][   T13] team0 (unregistering): Port device team_slave_1 removed
[   79.910933][   T13] team0 (unregistering): Port device team_slave_0 removed
[   80.221986][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.227885][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.232185][ T6554] bridge_slave_0: entered allmulticast mode
[   80.239423][ T6554] bridge_slave_0: entered promiscuous mode
[   80.244020][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.247992][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.252984][ T6554] bridge_slave_1: entered allmulticast mode
[   80.257712][ T6554] bridge_slave_1: entered promiscuous mode
[   80.308175][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.315299][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.415308][ T6554] team0: Port device team_slave_0 added
[   80.419976][ T6554] team0: Port device team_slave_1 added
[   80.498279][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.501342][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.516408][   T55] Bluetooth: hci0: command tx timeout
[   80.548449][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.560426][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.562742][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.572625][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.646250][ T6554] hsr_slave_0: entered promiscuous mode
[   80.660703][ T6554] hsr_slave_1: entered promiscuous mode
[   80.941573][ T6654] loop2: detected capacity change from 0 to 2048
[   80.945720][ T6655] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.242'.
[   80.952583][ T6064] udevd[6064]: incorrect nilfs2 checksum on /dev/loop2
[   80.959508][ T6654] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   80.973672][ T6064] udevd[6064]: incorrect nilfs2 checksum on /dev/loop2
[   80.991116][ T6657] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.058467][ T6554] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.067613][ T6554] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.078298][ T6554] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.089498][ T6554] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.153781][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.157154][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.161084][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.164136][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.250192][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.256300][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.340832][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.389505][ T6690] loop2: detected capacity change from 0 to 8
[   81.427446][ T6554] 8021q: adding VLAN 0 to HW filter on device team0
[   81.466309][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.469435][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.487661][  T792] cfg80211: failed to load regulatory.db
[   81.534903][ T6690] SQUASHFS error: lzo decompression failed, data probably corrupt
[   81.542724][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.546004][ T4876] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.556517][ T6690] SQUASHFS error: Failed to read block 0x91: -5
[   81.558699][ T6690] SQUASHFS error: Unable to read metadata cache entry [8f]
[   81.561346][ T6690] SQUASHFS error: Unable to read inode 0x11f
[   82.462036][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.606556][   T55] Bluetooth: hci0: command tx timeout
[   82.835055][ T6720] usb usb1: usbfs: process 6720 (syz.2.258) did not claim interface 6 before use
[   82.860570][ T6554] veth0_vlan: entered promiscuous mode
[   82.867742][ T6554] veth1_vlan: entered promiscuous mode
[   82.910527][ T6554] veth0_macvtap: entered promiscuous mode
[   82.921750][ T6554] veth1_macvtap: entered promiscuous mode
[   82.939502][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.953005][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.970330][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.973306][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.006418][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.013267][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.084560][ T4876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.088487][ T4876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.134932][ T4876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.138335][ T4876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.176845][ T6733] netlink: 128 bytes leftover after parsing attributes in process `syz.2.264'.
[   84.089655][ T6753] loop2: detected capacity change from 0 to 32768
[   84.093662][ T6753] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.270 (6753)
[   84.139620][ T6753] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   84.143816][ T6753] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   84.189069][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'.
[   84.296895][ T6753] BTRFS info (device loop2): enabling ssd optimizations
[   84.299381][ T6753] BTRFS info (device loop2): enabling free space tree
[   84.341662][ T6781] @: renamed from vlan0 (while UP)
[   84.367112][ T5853] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   84.399990][ T6786] netlink: 536 bytes leftover after parsing attributes in process `syz.4.279'.
[   84.476800][ T6790] binder: 6789:6790 ioctl c00c620f 200000000040 returned -22
[   84.674978][   T55] Bluetooth: hci0: command tx timeout
[   84.764529][ T5909] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   84.874576][ T2287] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   84.915246][ T5909] usb 3-1: Using ep0 maxpacket: 8
[   84.929772][ T5909] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[   84.933244][ T5909] usb 3-1: config 0 has no interface number 0
[   84.938306][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   84.941710][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.947132][ T5909] usb 3-1: Product: syz
[   84.949042][ T5909] usb 3-1: Manufacturer: syz
[   84.951031][ T5909] usb 3-1: SerialNumber: syz
[   84.958666][ T5909] usb 3-1: config 0 descriptor??
[   85.034542][ T2287] usb 5-1: Using ep0 maxpacket: 8
[   85.055130][ T2287] usb 5-1: unable to get BOS descriptor or descriptor too short
[   85.065586][ T2287] usb 5-1: unable to read config index 0 descriptor/start: -71
[   85.069075][ T2287] usb 5-1: can't read configurations, error -71
[   85.168364][ T5909] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[   85.171138][ T5909] usb 3-1: Failed to initialize entity for entity 6
[   85.173962][ T5909] usb 3-1: Failed to register entities (-22).
[   85.370174][ T1273] usb 3-1: USB disconnect, device number 5
[   85.796339][ T6830] netlink: 'syz.3.299': attribute type 1 has an invalid length.
[   85.929788][ T6835] 9pnet_fd: Insufficient options for proto=fd
[   86.024214][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'.
[   86.060439][ T6839] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   86.192536][ T6841] netlink: 'syz.3.304': attribute type 4 has an invalid length.
[   86.658932][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'.
[   86.755288][   T55] Bluetooth: hci0: command tx timeout
[   87.031182][ T6855] Option '    ' to dns_resolver key: bad/missing value
[   87.279370][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   87.958635][ T6870] loop4: detected capacity change from 0 to 131072
[   87.967636][ T6870] F2FS-fs (loop4): invalid crc value
[   88.028256][ T6870] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   88.032966][ T6870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   88.076605][ T6870] F2FS-fs (loop4): f2fs_lookup: inode (ino=4) has zero i_nlink
[   88.465463][ T6904] loop2: detected capacity change from 0 to 2048
[   88.496065][ T6904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.503093][ T6904] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.523868][ T6904] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.332: bit already cleared for inode 15
[   88.562864][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.638828][ T6915] loop4: detected capacity change from 0 to 512
[   88.648623][ T6915] EXT4-fs: Ignoring removed i_version option
[   88.651272][ T6915] EXT4-fs: inline encryption not supported
[   88.677697][ T6915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.324: bg 0: block 131: padding at end of block bitmap is not set
[   88.685838][ T6915] EXT4-fs (loop4): Remounting filesystem read-only
[   88.688050][ T6915] EXT4-fs (loop4): 1 truncate cleaned up
[   88.691248][ T6915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.744570][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.885645][ T6938] loop4: detected capacity change from 0 to 512
[   88.922480][ T6938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   88.967273][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.222897][ T6959] loop2: detected capacity change from 0 to 1024
[   89.251680][ T6959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.387783][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.405833][ T2287] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   89.629503][ T2287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   89.632715][ T2287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   89.644749][ T2287] usb 5-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[   89.648391][ T2287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.651115][ T2287] usb 5-1: Product: syz
[   89.652455][ T2287] usb 5-1: Manufacturer: syz
[   89.654091][ T2287] usb 5-1: SerialNumber: syz
[   89.660340][ T2287] usb 5-1: config 0 descriptor??
[   89.670341][ T2287] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[   89.673377][ T2287] usb 5-1: Detected SIO
[   89.676320][ T2287] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[   89.678590][ T2287] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7
[   89.687661][ T2287] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   89.866456][ T6966] loop2: detected capacity change from 0 to 164
[   89.869937][ T6966] iso9660: Unknown parameter 'ma'
[   89.887514][ T1273] usb 5-1: USB disconnect, device number 4
[   89.897521][ T1273] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   89.905046][ T1273] ftdi_sio 5-1:0.0: device disconnected
[   90.692148][ T7000] loop2: detected capacity change from 0 to 4096
[   90.699443][ T7004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.707755][ T7000] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   90.759588][ T7000] ntfs3(loop2): ino=19, mi_enum_attr
[   90.761882][ T7000] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   90.927832][ T7025] netlink: 296 bytes leftover after parsing attributes in process `syz.3.378'.
[   90.982104][ T7029] loop4: detected capacity change from 0 to 1024
[   91.084894][ T1273] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   91.168558][ T7042] raw_sendmsg: syz.4.387 forgot to set AF_INET. Fix it!
[   91.208673][ T7044] loop4: detected capacity change from 0 to 512
[   91.217031][ T7044] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   91.226535][ T7044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[   91.229760][ T7044] System zones: 1-12
[   91.231199][ T7044] EXT4-fs (loop4): orphan cleanup on readonly fs
[   91.233946][ T7044] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.388: invalid indirect mapped block 12 (level 1)
[   91.238642][ T1273] usb 3-1: Using ep0 maxpacket: 16
[   91.242994][ T7044] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.388: invalid indirect mapped block 2 (level 2)
[   91.249273][ T1273] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.253400][ T1273] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   91.258083][ T7044] EXT4-fs (loop4): 1 truncate cleaned up
[   91.260602][ T7044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[   91.266488][ T1273] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   91.269386][ T1273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.272113][ T1273] usb 3-1: Product: syz
[   91.273465][ T1273] usb 3-1: Manufacturer: syz
[   91.275429][ T1273] usb 3-1: SerialNumber: syz
[   91.295966][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   91.361235][ T7047] input: syz1 as /devices/virtual/input/input4
[   91.419065][ T7051] capability: warning: `syz.4.391' uses deprecated v2 capabilities in a way that may be insecure
[   91.498754][ T1273] usb 3-1: 0:2 : does not exist
[   91.502972][ T1273] usb 3-1: unit 9 not found!
[   91.511481][ T1273] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4)
[   91.543605][ T1273] usb 3-1: USB disconnect, device number 6
[   91.958715][ T7073] TCP: TCP_TX_DELAY enabled
[   92.617660][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'.
[   92.621680][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'.
[   93.095879][ T7098] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   93.104658][ T7092] IPVS: stopping master sync thread 7098 ...
[   93.371672][ T7109] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.415'.
[   93.398577][ T7102] loop4: detected capacity change from 0 to 32768
[   93.411802][ T7102] bcachefs (/dev/loop4): error reading default superblock: Unsupported superblock version 0.0: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive)
[   93.430875][ T7102] bcachefs (/dev/loop4): error validating superblock: Bad number of member devices 126 (max 64)
[   93.437415][ T7102] bcachefs: bch2_fs_get_tree() error: invalid_sb_too_many_members
[   94.540321][ T7132] loop4: detected capacity change from 0 to 65536
[   94.601364][ T7132] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   94.618517][ T7132] XFS (loop4): Ending clean mount
[   94.669960][ T6554] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   95.010110][ T7164] loop4: detected capacity change from 0 to 4096
[   95.013168][ T7164] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[   95.204292][ T7182] syz_tun: entered allmulticast mode
[   95.209412][ T7181] syz_tun: left allmulticast mode
[   95.268182][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'.
[   95.272333][ T7189] netlink: 'syz.4.438': attribute type 21 has an invalid length.
[   95.837572][ T7207] netlink: 'syz.4.444': attribute type 12 has an invalid length.
[   95.838956][ T7201] ALSA: seq fatal error: cannot create timer (-19)
[   96.092461][ T7223] capability: warning: `syz.4.453' uses 32-bit capabilities (legacy support in use)
[   96.106269][ T7225] Driver unsupported XDP return value 0 on prog  (id 45) dev N/A, expect packet loss!
[   96.411114][ T7243] syz.4.461 uses obsolete (PF_INET,SOCK_PACKET)
[   96.643998][ T7252] loop4: detected capacity change from 0 to 256
[   96.677126][ T7252] FAT-fs (loop4): Directory bread(block 64) failed
[   96.680352][ T7252] FAT-fs (loop4): Directory bread(block 65) failed
[   96.683324][ T7252] FAT-fs (loop4): Directory bread(block 66) failed
[   96.688528][ T7252] FAT-fs (loop4): Directory bread(block 67) failed
[   96.691478][ T7252] FAT-fs (loop4): Directory bread(block 68) failed
[   96.694328][ T7252] FAT-fs (loop4): Directory bread(block 69) failed
[   96.697352][ T7252] FAT-fs (loop4): Directory bread(block 70) failed
[   96.700172][ T7252] FAT-fs (loop4): Directory bread(block 71) failed
[   96.703086][ T7252] FAT-fs (loop4): Directory bread(block 72) failed
[   96.707088][ T7252] FAT-fs (loop4): Directory bread(block 73) failed
[   96.780123][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.466'.
[   96.829381][ T7256] loop4: detected capacity change from 0 to 64
[   97.190147][ T7270] Trying to free block not in datazone
[   97.687147][ T7281] loop2: detected capacity change from 0 to 40427
[   97.696261][ T7281] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   97.699401][ T7281] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   97.706047][ T7281] F2FS-fs (loop2): invalid crc value
[   97.833473][ T7287] netlink: 'syz.4.478': attribute type 10 has an invalid length.
[   97.833842][ T7281] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   97.860069][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.860815][ T7281] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   97.863603][ T7287] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   97.865507][ T7281] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   98.859869][ T7281] F2FS-fs (loop2): Image doesn't support compression
[   98.868755][ T7281] F2FS-fs (loop2): Start checkpoint disabled!
[  100.014256][ T7322] loop2: detected capacity change from 0 to 256
[  100.030918][ T7322] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.062003][ T7322] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  100.076565][ T7322] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  100.151146][ T7326] vlan1: entered allmulticast mode
[  100.153374][ T7326] veth0_vlan: entered allmulticast mode
[  100.228751][ T7334] IPVS: Unknown mcast interface: dvmrp0
[  100.424564][  T792] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  100.616864][  T792] usb 3-1: config 32 has an invalid interface number: 251 but max is 0
[  100.620978][  T792] usb 3-1: config 32 has no interface number 0
[  100.624297][  T792] usb 3-1: config 32 interface 251 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[  100.643156][ T7352] fuse: Bad value for 'fd'
[  100.725081][  T792] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=6f.ea
[  100.734912][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.738810][  T792] usb 3-1: Product: syz
[  100.741009][  T792] usb 3-1: Manufacturer: syz
[  100.743441][  T792] usb 3-1: SerialNumber: syz
[  100.843303][ T7330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  100.879168][  T792] iowarrior 3-1:32.251: no interrupt-in endpoint found
[  101.090388][ T5910] usb 3-1: USB disconnect, device number 7
[  101.431305][   T33] audit: type=1800 audit(2000000017.240:3): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.506" name="file1" dev="tmpfs" ino=1071 res=0 errno=0
[  101.853028][ T7379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.517'.
[  102.018374][ T7380] loop2: detected capacity change from 0 to 32768
[  102.038874][ T7380] (syz.2.518,7380,0):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 9.0, should be 0.90
[  102.044084][ T7380] (syz.2.518,7380,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  102.064294][ T7380] (syz.2.518,7380,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  102.076354][ T7380] (syz.2.518,7380,0):ocfs2_fill_super:1177 ERROR: status = -22
[  102.296964][ T7400] netlink: 27 bytes leftover after parsing attributes in process `syz.2.528'.
[  102.389942][ T7408] netlink: 136 bytes leftover after parsing attributes in process `syz.2.531'.
[  102.393680][ T7408] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  102.445465][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.535'.
[  102.805980][ T7429] loop2: detected capacity change from 0 to 32768
[  102.831257][ T7429] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  102.857081][ T7451] netlink: 18316 bytes leftover after parsing attributes in process `syz.3.548'.
[  102.863584][ T7429] XFS (loop2): Ending clean mount
[  102.872116][ T7429] XFS (loop2): Quotacheck needed: Please wait.
[  102.889554][ T7429] XFS (loop2): Quotacheck: Done.
[  102.921816][ T5853] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.139251][ T7467] netlink: 5 bytes leftover after parsing attributes in process `syz.3.556'.
[  103.373887][ T7485] loop4: detected capacity change from 0 to 64
[  103.390516][ T7485] MINIX-fs: bad superblock or unable to read bitmaps
[  103.821018][ T7490] netlink: 160 bytes leftover after parsing attributes in process `syz.3.565'.
[  103.830046][ T7490] netlink: 'syz.3.565': attribute type 1 has an invalid length.
[  103.833821][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.565'.
[  103.924001][ T1273] libceph: connect (1)[c::]:6789 error -101
[  103.928785][ T1273] libceph: mon0 (1)[c::]:6789 connect error
[  104.045160][ T2287] libceph: connect (1)[c::]:6789 error -101
[  104.187269][ T5910] libceph: connect (1)[c::]:6789 error -101
[  104.190867][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  104.227533][ T2287] libceph: mon0 (1)[c::]:6789 connect error
[  104.229050][ T5910] libceph: connect (1)[c::]:6789 error -101
[  104.258316][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  104.485606][ T2287] libceph: connect (1)[c::]:6789 error -101
[  104.487920][ T2287] libceph: mon0 (1)[c::]:6789 connect error
[  104.536483][ T5910] libceph: connect (1)[c::]:6789 error -101
[  104.544659][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  104.695138][ T5910] libceph: connect (1)[c::]:6789 error -101
[  104.700335][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  104.713178][ T7515] trusted_key: syz.2.573 sent an empty control message without MSG_MORE.
[  104.737020][ T7496] ceph: No mds server is up or the cluster is laggy
[  104.737094][ T7505] ceph: No mds server is up or the cluster is laggy
[  104.741150][ T7501] ceph: No mds server is up or the cluster is laggy
[  105.545215][ T7553] loop4: detected capacity change from 0 to 256
[  105.559470][ T7553] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  105.583922][ T7553] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  105.645122][ T7548] fuse: root generation should be zero
[  105.910540][ T7560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.594'.
[  106.009152][ T7564] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (65)
[  106.200372][ T7572] process '/newroot/252/file0' started with executable stack
[  106.471244][ T7571] loop4: detected capacity change from 0 to 40427
[  106.478569][ T7571] F2FS-fs (loop4): Image doesn't support compression
[  106.482870][ T7571] F2FS-fs (loop4): build fault injection rate: 690
[  106.488187][ T7571] F2FS-fs (loop4): invalid crc value
[  106.598839][ T7571] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  106.608333][ T7571] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  106.858087][ T7608] loop2: detected capacity change from 0 to 512
[  107.078537][ T7608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.083945][ T7608] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.189339][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.309796][ T7634] netlink: 240 bytes leftover after parsing attributes in process `syz.2.626'.
[  107.328493][ T7634] netlink: 56 bytes leftover after parsing attributes in process `syz.2.626'.
[  107.375805][   T55] Bluetooth: hci1: Malformed LE Event: 0x1b
[  107.385285][ T7624] loop4: detected capacity change from 0 to 32768
[  107.442242][ T7624] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page
[  107.442242][ T7624] 
[  107.458368][ T7624] ERROR: (device loop4): remounting filesystem as read-only
[  107.467936][ T7624] ialloc: diAlloc returned -5!
[  107.567465][ T2287] IPVS: starting estimator thread 0...
[  107.600643][ T7649] tipc: Failed to remove unknown binding: 66,1,1/0:1293790632/1293790634
[  107.655163][ T7647] IPVS: using max 42 ests per chain, 100800 per kthread
[  107.694773][ T5910] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  107.739368][   T33] audit: type=1326 audit(2000000023.550:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.3.636" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8289f8ebe9 code=0x0
[  107.844499][ T5910] usb 3-1: Using ep0 maxpacket: 16
[  107.850267][ T5910] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  107.854020][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.860418][ T5882] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  107.863737][ T5910] usb 3-1: Product: syz
[  107.867651][ T5910] usb 3-1: Manufacturer: syz
[  107.869272][ T5910] usb 3-1: SerialNumber: syz
[  107.872714][ T5910] usb 3-1: config 0 descriptor??
[  107.882958][ T5910] as10x_usb: device has been detected
[  107.886335][ T5910] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  107.899819][ T5910] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  107.917629][ T5910] as10x_usb: error during firmware upload part1
[  107.920856][ T5910] Registered device Sky IT Digital Key (green led)
[  108.024540][ T5882] usb 5-1: Using ep0 maxpacket: 8
[  108.033498][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  108.039074][ T5882] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[  108.042942][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.048485][ T5882] usb 5-1: config 0 descriptor??
[  108.091827][ T2287] usb 3-1: USB disconnect, device number 8
[  108.108775][ T2287] Unregistered device Sky IT Digital Key (green led)
[  108.110230][ T2287] as10x_usb: device has been disconnected
[  108.475718][ T5882] sony 0003:1345:3008.0001: hiddev0,hidraw0: USB HID v80.07 Device [HID 1345:3008] on usb-dummy_hcd.4-1/input0
[  108.484064][ T5882] sony 0003:1345:3008.0001: failed to claim input
[  108.677002][ T5882] usb 5-1: USB disconnect, device number 5
[  108.823041][ T7675] loop2: detected capacity change from 0 to 128
[  108.861955][   T33] audit: type=1800 audit(2000000280.672:5): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.644" name="memory.events" dev="loop2" ino=1048621 res=0 errno=0
[  108.863132][ T7675] syz.2.644: attempt to access beyond end of device
[  108.863132][ T7675] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128
[  108.879036][   T33] audit: type=1804 audit(2000000280.672:6): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.644" name="/newroot/196/file2/memory.events" dev="loop2" ino=1048621 res=1 errno=0
[  109.285531][ T7693] trusted_key: encrypted_key: keyword 'neW' not recognized
[  109.361289][ T7699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.473927][ T7713] batadv1: entered promiscuous mode
[  109.768814][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'.
[  109.936032][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.4.679'.
[  109.939614][ T7746] netlink: 3 bytes leftover after parsing attributes in process `syz.4.679'.
[  109.943060][ T7748] loop2: detected capacity change from 0 to 512
[  110.087440][ T7758] loop4: detected capacity change from 0 to 1024
[  110.102254][ T7758] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  110.126843][ T7758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  110.134465][ T7758] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[  110.138103][ T7758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  110.172251][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.234961][ T7769] Unsupported ieee802154 address type: 0
[  111.012075][ T7787] overlayfs: failed to clone upperpath
[  112.203004][ T7830] loop4: detected capacity change from 0 to 2048
[  112.222156][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'.
[  112.231615][ T7830] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  112.240965][ T7830] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.258458][   T33] audit: type=1800 audit(2000000284.074:7): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.713" name="file1" dev="loop4" ino=1346 res=0 errno=0
[  112.321141][ T7840] atomic_op ffff888111b9a198 conn xmit_atomic 0000000000000000
[  112.568979][ T7860] netlink: 'syz.4.727': attribute type 10 has an invalid length.
[  112.608648][ T7860] team0: Port device wlan1 added
[  113.115953][ T7881] loop2: detected capacity change from 0 to 2048
[  113.176686][ T7881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.281341][ T7885] loop4: detected capacity change from 0 to 2048
[  113.288575][ T7885] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.754827][ T5882] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  114.252149][ T5882] usb 3-1: Using ep0 maxpacket: 32
[  114.256213][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.261708][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.266132][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  114.269904][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.279457][ T5882] usb 3-1: config 0 descriptor??
[  114.287980][ T5882] hub 3-1:0.0: USB hub found
[  114.490682][ T5882] hub 3-1:0.0: config failed, can't read hub descriptor (err -90)
[  114.501796][  T792] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  114.651584][  T792] usb 5-1: Using ep0 maxpacket: 32
[  114.655615][  T792] usb 5-1: config 6 interface 0 has no altsetting 0
[  114.662366][  T792] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=20.3d
[  114.666129][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.669490][  T792] usb 5-1: Product: syz
[  114.673973][  T792] usb 5-1: Manufacturer: syz
[  114.677421][  T792] usb 5-1: SerialNumber: syz
[  114.696227][ T5882] usbhid 3-1:0.0: can't add hid device: -71
[  114.698951][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  114.731730][ T5882] usb 3-1: USB disconnect, device number 9
[  114.950851][  T792] snd-usb-audio 5-1:6.0: probe with driver snd-usb-audio failed with error -22
[  114.955582][  T792] usb 5-1: USB disconnect, device number 6
[  114.968605][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.246886][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'.
[  115.768242][ T7940] loop4: detected capacity change from 0 to 2048
[  115.787578][ T7940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.875283][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'.
[  115.915009][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'.
[  116.173611][ T7955] libceph: resolve '' (ret=-3): failed
[  116.489238][ T7975] syzkaller1: entered promiscuous mode
[  116.492807][ T7975] syzkaller1: entered allmulticast mode
[  116.695438][ T7993] input: syz1 as /devices/virtual/input/input5
[  116.867953][   T33] audit: type=1400 audit(2000000288.666:8): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7978 comm="syz.4.778"
[  117.125547][ T8005] pimreg: entered allmulticast mode
[  117.137624][ T8005] pimreg: left allmulticast mode
[  117.556567][ T8036] loop2: detected capacity change from 0 to 256
[  117.720315][ T8052] loop4: detected capacity change from 0 to 128
[  117.724880][ T8052] FAT-fs (loop4): bogus number of reserved sectors
[  117.739976][ T8052] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  117.745432][ T8052] FAT-fs (loop4): Can't find a valid FAT filesystem
[  117.887903][ T8058] overlayfs: failed to clone upperpath
[  118.097606][ T8063] loop4: detected capacity change from 0 to 8192
[  118.255169][ T8071] loop4: detected capacity change from 0 to 164
[  118.913504][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'.
[  118.956536][ T8089] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  118.964136][ T8089] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  119.080910][ T8101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.826'.
[  119.368304][ T8109] loop2: detected capacity change from 0 to 32768
[  119.458106][ T8109] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  119.765646][ T5853] ocfs2: Unmounting device (7,2) on (node local)
[  119.863009][ T8131] tap0: tun_chr_ioctl cmd 2147767521
[  120.034988][ T8147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.847'.
[  120.038400][ T8147] netlink: 43 bytes leftover after parsing attributes in process `syz.2.847'.
[  120.043218][ T8147] netlink: 'syz.2.847': attribute type 5 has an invalid length.
[  120.047065][ T8147] netlink: 43 bytes leftover after parsing attributes in process `syz.2.847'.
[  120.075551][ T8149] loop2: detected capacity change from 0 to 256
[  120.079070][ T8149] exfat: Deprecated parameter 'utf8'
[  120.085857][ T8149] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  120.172627][ T8143] loop4: detected capacity change from 0 to 32768
[  120.194634][ T8143] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  120.234410][ T6554] ocfs2: Unmounting device (7,4) on (node local)
[  120.348670][ T1273] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  120.397189][ T8169] evm: overlay not supported
[  120.410564][ T8169] overlayfs: failed to get index nlink (file2/file1, err=-61)
[  120.501786][ T1273] usb 3-1: unable to get BOS descriptor or descriptor too short
[  120.505755][ T1273] usb 3-1: not running at top speed; connect to a high speed hub
[  120.516200][ T1273] usb 3-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config
[  120.521081][ T1273] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  120.524948][ T1273] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  120.535221][ T1273] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  120.539558][ T1273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.543035][ T1273] usb 3-1: SerialNumber: syz
[  120.699857][ T5909] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  120.755032][ T1273] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[  120.757262][ T1273] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  120.762849][ T1273] cdc_ncm 3-1:1.0: bind() failure
[  120.766744][ T1273] usb 3-1: USB disconnect, device number 10
[  120.848485][ T5909] usb 5-1: Using ep0 maxpacket: 8
[  120.852713][ T5909] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  120.856029][ T5909] usb 5-1: config 2 has no interface number 0
[  120.859042][ T5909] usb 5-1: config 2 interface 31 has no altsetting 0
[  120.864289][ T5909] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  120.867947][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.871866][ T5909] usb 5-1: Product: syz
[  120.873865][ T5909] usb 5-1: Manufacturer: syz
[  120.875843][ T5909] usb 5-1: SerialNumber: syz
[  121.424585][ T8198] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.729558][ T5909] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22
[  121.739650][ T5909] usb 5-1: USB disconnect, device number 7
[  121.909521][ T8216] loop2: detected capacity change from 0 to 2048
[  121.917648][ T8216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.001995][ T8216] loop2: detected capacity change from 2048 to 64
[  122.004072][ T8217] syz.2.879: attempt to access beyond end of device
[  122.004072][ T8217] loop2: rw=0, sector=1437, nr_sectors = 1 limit=64
[  122.065771][ T6082] syz.2.60: attempt to access beyond end of device
[  122.065771][ T6082] loop2: rw=2049, sector=128, nr_sectors = 1 limit=64
[  122.072342][ T6082] Buffer I/O error on dev loop2, logical block 128, lost sync page write
[  122.165587][ T8219] misc userio: The device must be registered before sending interrupts
[  122.339850][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.622124][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.696817][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.759151][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.945664][   T12] bridge_slave_1: left allmulticast mode
[  122.952269][   T12] bridge_slave_1: left promiscuous mode
[  122.961360][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.999153][   T12] bridge_slave_0: left allmulticast mode
[  123.006537][   T12] bridge_slave_0: left promiscuous mode
[  123.012361][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.026554][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  123.041421][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  123.045494][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  123.051130][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.082931][ T8250] netlink: 'syz.4.894': attribute type 1 has an invalid length.
[  123.111066][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  123.303707][ T8260] loop4: detected capacity change from 0 to 1024
[  123.472837][ T8262] loop4: detected capacity change from 0 to 1024
[  123.476639][ T8262] EXT4-fs: Ignoring removed oldalloc option
[  123.480473][ T8262] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  123.494656][ T8262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.581026][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.588614][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.592312][   T12] bond0 (unregistering): Released all slaves
[  123.599155][   T12] bond1 (unregistering): Released all slaves
[  123.630767][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.080373][ T8244] chnl_net:caif_netlink_parms(): no params data found
[  124.154093][   T12] hsr_slave_0: left promiscuous mode
[  124.157351][   T12] hsr_slave_1: left promiscuous mode
[  124.160085][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.163231][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.177529][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.180762][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.201860][   T12] veth1_macvtap: left promiscuous mode
[  124.203838][   T12] veth0_macvtap: left promiscuous mode
[  124.205786][   T12] veth1_vlan: left promiscuous mode
[  124.208282][   T12] veth0_vlan: left promiscuous mode
[  124.707257][   T12] team0 (unregistering): Port device team_slave_1 removed
[  124.742677][   T12] team0 (unregistering): Port device team_slave_0 removed
[  125.164010][   T55] Bluetooth: hci2: command tx timeout
[  125.367143][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.369599][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.372341][ T8244] bridge_slave_0: entered allmulticast mode
[  125.409366][ T8244] bridge_slave_0: entered promiscuous mode
[  125.430574][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.443133][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.445577][ T8244] bridge_slave_1: entered allmulticast mode
[  125.467576][ T8244] bridge_slave_1: entered promiscuous mode
[  125.534297][ T8244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.550944][ T8244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.623423][ T8297] loop4: detected capacity change from 0 to 262144
[  125.633123][ T8297] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.908 (8297)
[  125.643037][ T8297] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  125.646848][ T8297] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  125.704167][ T8244] team0: Port device team_slave_0 added
[  125.717595][ T8297] BTRFS info (device loop4): enabling ssd optimizations
[  125.720435][ T8297] BTRFS info (device loop4): enabling free space tree
[  125.728364][ T8244] team0: Port device team_slave_1 added
[  125.821582][ T6554] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  125.839568][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.850963][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.887498][ T8244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.907561][   T12] IPVS: stop unused estimator thread 0...
[  125.916087][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.919066][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.965253][ T8244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.107417][ T8244] hsr_slave_0: entered promiscuous mode
[  126.110551][ T8244] hsr_slave_1: entered promiscuous mode
[  126.113538][ T8244] debugfs: 'hsr0' already exists in 'hsr'
[  126.132434][ T8244] Cannot create hsr debugfs directory
[  126.206140][  T792] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  126.365347][  T792] usb 5-1: Using ep0 maxpacket: 32
[  126.376525][  T792] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[  126.380230][  T792] usb 5-1: config 0 has no interface number 0
[  126.382906][  T792] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  126.414285][  T792] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  126.430722][  T792] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  126.434459][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.450842][  T792] usb 5-1: Product: syz
[  126.453989][  T792] usb 5-1: Manufacturer: syz
[  126.457663][  T792] usb 5-1: SerialNumber: syz
[  126.468559][  T792] usb 5-1: config 0 descriptor??
[  126.482309][ T8333] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  126.492913][  T792] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  126.506319][  T792] usb 5-1: invalid MIDI in EP 0
[  126.511939][ T8244] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  126.549636][ T8244] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  126.567607][ T8244] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  126.568268][ T8348] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  126.575009][ T8348] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  126.579220][ T8348] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  126.586540][ T8244] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  126.604696][  T792] snd-usb-audio 5-1:0.16: probe with driver snd-usb-audio failed with error -22
[  126.660938][ T6349] udevd[6349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  126.704877][ T1273] usb 5-1: USB disconnect, device number 8
[  126.754385][ T8244] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.777430][ T8244] 8021q: adding VLAN 0 to HW filter on device team0
[  126.787479][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.790651][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.807987][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.811044][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.943979][ T8244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.104338][ T8244] veth0_vlan: entered promiscuous mode
[  127.113135][ T8244] veth1_vlan: entered promiscuous mode
[  127.134154][ T8244] veth0_macvtap: entered promiscuous mode
[  127.140085][ T8244] veth1_macvtap: entered promiscuous mode
[  127.153910][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.165305][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.174099][ T5874] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.179944][ T5874] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.184789][ T5874] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.190032][ T5874] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.225406][   T55] Bluetooth: hci2: command tx timeout
[  127.284106][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.292260][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.318997][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.321680][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.853519][ T8382] loop5: detected capacity change from 0 to 40427
[  127.862400][ T8382] F2FS-fs (loop5): invalid crc value
[  127.975670][ T8382] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  127.979974][ T8382] F2FS-fs (loop5): Start checkpoint disabled!
[  127.987430][ T8382] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  128.050099][ T8381] syz.5.923: attempt to access beyond end of device
[  128.050099][ T8381] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  128.110576][ T1090] kworker/u10:4: attempt to access beyond end of device
[  128.110576][ T1090] loop5: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  128.120767][ T1090] kworker/u10:4: attempt to access beyond end of device
[  128.120767][ T1090] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  128.129577][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  128.129593][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.129598][ T1090] Workqueue: writeback wb_workfn (flush-7:5)
[  128.129612][ T1090] Call Trace:
[  128.129615][ T1090]  <TASK>
[  128.129619][ T1090]  dump_stack_lvl+0x189/0x250
[  128.129632][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.129640][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  128.129648][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.129657][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.129670][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  128.129684][ T1090]  f2fs_write_end_io+0x886/0xb60
[  128.129697][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  128.129709][ T1090]  __submit_merged_write_cond+0x255/0x530
[  128.129721][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  128.129742][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.129757][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  128.129777][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  128.129791][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  128.129801][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  128.129818][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.129828][ T1090]  do_writepages+0x32e/0x550
[  128.129839][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[  128.129846][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[  128.129858][ T1090]  __writeback_single_inode+0x145/0xff0
[  128.129866][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  128.129882][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  128.129890][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.129909][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  128.129932][ T1090]  ? rcu_is_watching+0x15/0xb0
[  128.129943][ T1090]  wb_writeback+0x43b/0xaf0
[  128.129954][ T1090]  ? queue_io+0x3d1/0x590
[  128.129964][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  128.129975][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.129986][ T1090]  wb_workfn+0x409/0xef0
[  128.129998][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  128.130007][ T1090]  ? __lock_acquire+0xab9/0xd20
[  128.130020][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  128.130029][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.130037][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  128.130043][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  128.130050][ T1090]  process_scheduled_works+0xae1/0x17b0
[  128.130067][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  128.130101][ T1090]  worker_thread+0x8a0/0xda0
[  128.130113][ T1090]  ? __kthread_parkme+0x7b/0x200
[  128.130124][ T1090]  kthread+0x711/0x8a0
[  128.130134][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  128.130140][ T1090]  ? __pfx_kthread+0x10/0x10
[  128.130149][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.130157][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.130165][ T1090]  ? __pfx_kthread+0x10/0x10
[  128.130174][ T1090]  ret_from_fork+0x3fc/0x770
[  128.130182][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  128.130192][ T1090]  ? __switch_to_asm+0x39/0x70
[  128.130200][ T1090]  ? __switch_to_asm+0x33/0x70
[  128.130207][ T1090]  ? __pfx_kthread+0x10/0x10
[  128.130216][ T1090]  ret_from_fork_asm+0x1a/0x30
[  128.130231][ T1090]  </TASK>
[  128.130700][ T1090] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  128.781374][ T8425] openvswitch: netlink: Tunnel attr 171 out of range max 16
[  129.062459][ T8441] loop4: detected capacity change from 0 to 256
[  129.112351][ T8441] FAT-fs (loop4): Directory bread(block 64) failed
[  129.130095][ T8441] FAT-fs (loop4): Directory bread(block 65) failed
[  129.136258][ T8441] FAT-fs (loop4): Directory bread(block 66) failed
[  129.140794][ T8441] FAT-fs (loop4): Directory bread(block 67) failed
[  129.143623][ T8441] FAT-fs (loop4): Directory bread(block 68) failed
[  129.152819][ T8441] FAT-fs (loop4): Directory bread(block 69) failed
[  129.158446][ T8441] FAT-fs (loop4): Directory bread(block 70) failed
[  129.161048][ T8441] FAT-fs (loop4): Directory bread(block 71) failed
[  129.163429][ T8441] FAT-fs (loop4): Directory bread(block 72) failed
[  129.166580][ T8441] FAT-fs (loop4): Directory bread(block 73) failed
[  129.238312][ T8445] loop4: detected capacity change from 0 to 512
[  129.269273][ T8445] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.950: casefold flag without casefold feature
[  129.284322][ T8445] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.950: couldn't read orphan inode 15 (err -117)
[  129.304458][   T55] Bluetooth: hci2: command tx timeout
[  129.310721][ T8445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.346765][ T6554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.444694][ T8470] loop4: detected capacity change from 0 to 131072
[  130.450103][ T8470] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  130.452496][ T8470] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  130.459309][ T8470] F2FS-fs (loop4): invalid crc value
[  130.516964][ T8487] xt_time: invalid argument - start or stop time greater than 23:59:59
[  130.522822][ T8470] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.528754][ T8470] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  130.531811][ T8470] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  130.552697][ T8470] F2FS-fs (loop4): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix
[  130.733720][ T8494] loop5: detected capacity change from 0 to 4096
[  130.786564][ T8494] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  130.795246][ T8494] ntfs3(loop5): Failed to load $Secure (-22).
[  130.797331][ T8494] ntfs3(loop5): Failed to initialize $Secure (-22).
[  131.373609][ T8522] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  131.463485][   T55] Bluetooth: hci2: command tx timeout
[  132.200865][ T8556] loop5: detected capacity change from 0 to 512
[  132.217158][ T8556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  132.258338][ T8556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.266856][ T8562] loop4: detected capacity change from 0 to 136
[  132.269686][ T8556] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.314259][   T33] audit: type=1800 audit(2000000304.134:9): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.997" name="file1" dev="loop5" ino=15 res=0 errno=0
[  132.365477][ T8244] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.585816][ T8577] loop5: detected capacity change from 0 to 4096
[  132.591056][ T8577] ntfs3: Unknown parameter './bus'
[  132.676180][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.678983][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.896208][ T8602] loop4: detected capacity change from 0 to 256
[  132.899541][ T8602] exfat: Deprecated parameter 'namecase'
[  132.901549][ T8602] exfat: Deprecated parameter 'namecase'
[  132.916491][ T8602] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  132.990255][ T6554] exFAT-fs (loop4): error, data size is invalid(16777215)
[  132.997330][ T6554] exFAT-fs (loop4): error, data size is invalid(16777215)
[  132.998668][   T33] audit: type=1326 audit(2000000304.824:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.5.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c38ebe9 code=0x7ffc0000
[  133.027079][   T33] audit: type=1326 audit(2000000304.824:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.5.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c38ebe9 code=0x7ffc0000
[  133.034977][   T33] audit: type=1326 audit(2000000304.834:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.5.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8a0c38ebe9 code=0x7ffc0000
[  133.042071][   T33] audit: type=1326 audit(2000000304.834:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.5.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c38ebe9 code=0x7ffc0000
[  133.061011][   T33] audit: type=1326 audit(2000000304.834:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.5.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c38ebe9 code=0x7ffc0000
[  133.071843][   T33] audit: type=1326 audit(2000000304.834:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.5.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f8a0c38ebe9 code=0x7ffc0000
[  133.080591][   T33] audit: type=1326 audit(2000000304.834:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.5.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c38ebe9 code=0x7ffc0000
[  133.088133][   T33] audit: type=1326 audit(2000000304.834:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.5.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c38ebe9 code=0x7ffc0000
[  133.441695][ T5874] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.556013][ T5874] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.710667][ T5874] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.755428][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  133.761100][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  133.767100][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  133.771571][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  133.775215][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  133.814600][ T5874] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.124555][ T5874] bridge_slave_1: left allmulticast mode
[  134.126977][ T5874] bridge_slave_1: left promiscuous mode
[  134.130136][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.181009][ T5874] bridge_slave_0: left allmulticast mode
[  134.187105][ T5874] bridge_slave_0: left promiscuous mode
[  134.189833][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.524146][ T8659] loop5: detected capacity change from 0 to 2048
[  134.557382][ T8659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.803361][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.825815][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.830870][ T5874] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  134.835956][ T5874] bond0 (unregistering): Released all slaves
[  134.935542][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'.
[  134.938712][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'.
[  134.943047][ T8635] chnl_net:caif_netlink_parms(): no params data found
[  135.012457][ T5874] team0: Port device wlan1 removed
[  135.246287][ T8635] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.249300][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.259464][ T8635] bridge_slave_0: entered allmulticast mode
[  135.265610][ T8635] bridge_slave_0: entered promiscuous mode
[  135.296827][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.300997][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.310072][ T8635] bridge_slave_1: entered allmulticast mode
[  135.316722][ T8635] bridge_slave_1: entered promiscuous mode
[  135.339403][ T5874] hsr_slave_0: left promiscuous mode
[  135.351322][ T5874] hsr_slave_1: left promiscuous mode
[  135.358008][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.360941][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.367036][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.370135][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.390500][ T5874] veth1_macvtap: left promiscuous mode
[  135.396558][ T5874] veth0_macvtap: left promiscuous mode
[  135.400441][ T5874] veth1_vlan: left promiscuous mode
[  135.403851][ T5874] veth0_vlan: left promiscuous mode
[  135.432751][  T621] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  135.446117][  T621] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28
[  135.450822][  T621] EXT4-fs (loop5): This should not happen!! Data will be lost
[  135.450822][  T621] 
[  135.458086][  T621] EXT4-fs (loop5): Total free blocks count 0
[  135.460681][  T621] EXT4-fs (loop5): Free/Dirty block details
[  135.466223][  T621] EXT4-fs (loop5): free_blocks=2415919504
[  135.471884][  T621] EXT4-fs (loop5): dirty_blocks=12416
[  135.475980][  T621] EXT4-fs (loop5): Block reservation details
[  135.479670][  T621] EXT4-fs (loop5): i_reserved_data_blocks=776
[  135.539814][ T1089] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2080 with max blocks 2048 with error 28
[  135.767820][ T8695] syz.3.1052 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  135.876027][   T55] Bluetooth: hci0: command tx timeout
[  136.158170][ T8700] IPv6: addrconf: prefix option has invalid lifetime
[  136.166390][ T8700] IPv6: addrconf: prefix option has invalid lifetime
[  136.596008][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  136.688866][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  137.411124][ T8635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.417530][ T8635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.474288][ T8635] team0: Port device team_slave_0 added
[  137.480748][ T8635] team0: Port device team_slave_1 added
[  137.539418][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.542829][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.568100][ T8635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.580913][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.588215][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.604461][ T8635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.643089][ T8635] hsr_slave_0: entered promiscuous mode
[  137.648109][ T8635] hsr_slave_1: entered promiscuous mode
[  137.776002][ T5874] ------------[ cut here ]------------
[  137.778429][ T5874] WARNING: CPU: 0 PID: 5874 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  137.783733][ T5874] Modules linked in:
[  137.786416][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  137.790612][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.795108][ T5874] Workqueue: netns cleanup_net
[  137.797186][ T5874] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  137.799495][ T5874] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb d6 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 94 e1 f7 e8 24 68 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 16 68 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  137.807091][ T5874] RSP: 0018:ffffc90003eff898 EFLAGS: 00010293
[  137.809650][ T5874] RAX: ffffffff8a2245ec RBX: ffff88810a532440 RCX: ffff8880215fb980
[  137.813345][ T5874] RDX: 0000000000000000 RSI: ffffffff8dba7696 RDI: ffff8880215fb980
[  137.816840][ T5874] RBP: ffffc90003eff9b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  137.820151][ T5874] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffffffff8f631a00
[  137.823739][ T5874] R13: 1ffff920007dff40 R14: ffff88810a5338c0 R15: dffffc0000000000
[  137.827030][ T5874] FS:  0000000000000000(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  137.830906][ T5874] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  137.833733][ T5874] CR2: 0000001b34720ff8 CR3: 00000001118a0000 CR4: 00000000000006f0
SYZFAIL: failed to recv rpc
[  137.837048][ T5874] Call Trace:
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  137.838652][ T5874]  <TASK>
[  137.840022][ T5874]  xfrm_net_exit+0x2d/0x70
[  137.841926][ T5874]  ops_undo_list+0x49a/0x990
[  137.843823][ T5874]  ? __pfx_ops_undo_list+0x10/0x10
[  137.845899][ T5874]  ? do_raw_spin_unlock+0x4d/0x240
[  137.848021][ T5874]  cleanup_net+0x4c5/0x800
[  137.849801][ T5874]  ? __pfx_cleanup_net+0x10/0x10
[  137.852038][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.854217][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  137.856733][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  137.859007][ T5874]  process_scheduled_works+0xae1/0x17b0
[  137.861424][ T5874]  ? __pfx_process_scheduled_works+0x10/0x10
[  137.863886][ T5874]  worker_thread+0x8a0/0xda0
[  137.865726][ T5874]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  137.868265][ T5874]  ? __kthread_parkme+0x7b/0x200
[  137.870360][ T5874]  kthread+0x711/0x8a0
[  137.872021][ T5874]  ? __pfx_worker_thread+0x10/0x10
[  137.874136][ T5874]  ? __pfx_kthread+0x10/0x10
[  137.876041][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.878171][ T5874]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.880516][ T5874]  ? __pfx_kthread+0x10/0x10
[  137.883033][ T5874]  ret_from_fork+0x3fc/0x770
[  137.884891][ T5874]  ? __pfx_ret_from_fork+0x10/0x10
[  137.886885][ T5874]  ? __switch_to_asm+0x39/0x70
[  137.888853][ T5874]  ? __switch_to_asm+0x33/0x70
[  137.890975][ T5874]  ? __pfx_kthread+0x10/0x10
[  137.892960][ T5874]  ret_from_fork_asm+0x1a/0x30
[  137.894945][ T5874]  </TASK>
[  137.896203][ T5874] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  137.899141][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  137.902300][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.905880][ T5874] Workqueue: netns cleanup_net
[  137.907617][ T5874] Call Trace:
[  137.908822][ T5874]  <TASK>
[  137.909898][ T5874]  dump_stack_lvl+0x99/0x250
[  137.911649][ T5874]  ? __asan_memcpy+0x40/0x70
[  137.913329][ T5874]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.915399][ T5874]  ? __pfx__printk+0x10/0x10
[  137.917050][ T5874]  vpanic+0x281/0x750
[  137.918567][ T5874]  ? __pfx__printk+0x10/0x10
[  137.920555][ T5874]  ? __pfx_vpanic+0x10/0x10
[  137.922495][ T5874]  ? is_bpf_text_address+0x292/0x2b0
[  137.924690][ T5874]  panic+0xb9/0xc0
[  137.926268][ T5874]  ? __pfx_panic+0x10/0x10
[  137.928110][ T5874]  __warn+0x31b/0x4b0
[  137.929799][ T5874]  ? xfrm_state_fini+0x26d/0x2f0
[  137.931846][ T5874]  ? xfrm_state_fini+0x26d/0x2f0
[  137.933989][ T5874]  report_bug+0x2be/0x4f0
[  137.935834][ T5874]  ? xfrm_state_fini+0x26d/0x2f0
[  137.937897][ T5874]  ? xfrm_state_fini+0x26d/0x2f0
[  137.939933][ T5874]  ? xfrm_state_fini+0x26f/0x2f0
[  137.942034][ T5874]  handle_bug+0x84/0x160
[  137.943815][ T5874]  exc_invalid_op+0x1a/0x50
[  137.945682][ T5874]  asm_exc_invalid_op+0x1a/0x20
[  137.947710][ T5874] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  137.949963][ T5874] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb d6 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 94 e1 f7 e8 24 68 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 16 68 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  137.958153][ T5874] RSP: 0018:ffffc90003eff898 EFLAGS: 00010293
[  137.960724][ T5874] RAX: ffffffff8a2245ec RBX: ffff88810a532440 RCX: ffff8880215fb980
[  137.963954][ T5874] RDX: 0000000000000000 RSI: ffffffff8dba7696 RDI: ffff8880215fb980
[  137.967092][ T5874] RBP: ffffc90003eff9b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  137.969803][ T5874] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffffffff8f631a00
[  137.972562][ T5874] R13: 1ffff920007dff40 R14: ffff88810a5338c0 R15: dffffc0000000000
[  137.975473][ T5874]  ? xfrm_state_fini+0x26c/0x2f0
[  137.977562][ T5874]  ? xfrm_state_fini+0x26c/0x2f0
[  137.979645][ T5874]  xfrm_net_exit+0x2d/0x70
[  137.981542][ T5874]  ops_undo_list+0x49a/0x990
[  137.983546][ T5874]  ? __pfx_ops_undo_list+0x10/0x10
[  137.985664][ T5874]  ? do_raw_spin_unlock+0x4d/0x240
[  137.987699][ T5874]  cleanup_net+0x4c5/0x800
[  137.989524][ T5874]  ? __pfx_cleanup_net+0x10/0x10
[  137.991620][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.993862][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  137.996202][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  137.998531][ T5874]  process_scheduled_works+0xae1/0x17b0
[  138.000948][ T5874]  ? __pfx_process_scheduled_works+0x10/0x10
[  138.003437][ T5874]  worker_thread+0x8a0/0xda0
[  138.005403][ T5874]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  138.008004][ T5874]  ? __kthread_parkme+0x7b/0x200
[  138.009964][ T5874]  kthread+0x711/0x8a0
[  138.011574][ T5874]  ? __pfx_worker_thread+0x10/0x10
[  138.013400][ T5874]  ? __pfx_kthread+0x10/0x10
[  138.015195][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  138.017369][ T5874]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.019344][ T5874]  ? __pfx_kthread+0x10/0x10
[  138.020821][ T5874]  ret_from_fork+0x3fc/0x770
[  138.022323][ T5874]  ? __pfx_ret_from_fork+0x10/0x10
[  138.024074][ T5874]  ? __switch_to_asm+0x39/0x70
[  138.025953][ T5874]  ? __switch_to_asm+0x33/0x70
[  138.027847][ T5874]  ? __pfx_kthread+0x10/0x10
[  138.030335][ T5874]  ret_from_fork_asm+0x1a/0x30
[  138.032383][ T5874]  </TASK>
[  138.034438][ T5874] Kernel Offset: disabled
[  138.036259][ T5874] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:51:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003efeff0
R8 =ffff888021788237 R9 =1ffff110042f1046 R10=dffffc0000000000 R11=ffffffff854f3b80
R12=dffffc0000000000 R13=ffffffff99afd8d0 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34720ff8 CR3=00000001118a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 0000000000000000 XMM05=0000000000000000 00007f98c5c12e53
XMM06=0000000000000000 00007f98c5c12e4d XMM07=0000000000000000 00007f98c5c12e61
XMM08=0000000000000000 00007f98c5c12ee7 XMM09=0000000000000000 00007f98c5c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=0000000000000009 RCX=0000000000000009 RDX=0000000000000008
RSI=ffff888033ea27d8 RDI=ffff888033ea1cc0 RBP=0000000000000200 RSP=ffffc90003dbf010
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc90003dbf298 R11=ffffffff81ac3aa0
R12=0000000000000004 R13=0000000000000001 R14=ffff888033ea27d8 R15=ffff888033ea27f8
RIP=ffffffff819d8d5c RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f828adcc6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fecae2b0ba8 CR3=000000010d406000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f828a012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
