last executing test programs:

1m39.90270972s ago: executing program 1 (id=777):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000000000000000000000000004"], &(0x7f0000000080)=0x2c)

1m39.822629802s ago: executing program 1 (id=779):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0xf73f)

1m39.11417592s ago: executing program 0 (id=786):
timer_create(0xb, &(0x7f0000000ac0)={0x0, 0x25, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000b00)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000b80)={{}, {0x77359400}}, &(0x7f0000000bc0))

1m39.023268536s ago: executing program 0 (id=787):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000400)={r3, @in={{0x2, 0x4e22, @empty}}, 0x101, 0x403}, 0x90)

1m39.022905432s ago: executing program 0 (id=788):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0)

1m38.93366103s ago: executing program 0 (id=789):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)
mlockall(0x7)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)

1m38.933432274s ago: executing program 1 (id=790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x40, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @private=0xa010102}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0)

1m38.833963382s ago: executing program 1 (id=791):
syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x92, 0x70, 0x18, 0x40, 0x1410, 0xa012, 0xc45f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x2, 0x1, 0x50, 0xcb, "", [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0x3a, 0x14, 0x8}}, {{0x9, 0x4, 0x7b, 0x6f, 0x1, 0x42, 0x34, 0xb9, 0x3, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x9, 0x9, 0x6, [@generic={0x9, 0x4, "41720bf7952d7b"}]}}]}}]}}]}}, 0x0)

1m38.730716362s ago: executing program 2 (id=792):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000240)={{0x2b, @private=0xa010102, 0x4e24, 0x4, 'dh\x00', 0x6, 0x2f, 0x5}, {@multicast2, 0x4e23, 0x0, 0x5, 0x9ce0, 0x7}}, 0x44)

1m38.601983982s ago: executing program 2 (id=793):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000800)={[{@dioread_lock}, {@noblock_validity}, {@dax_inode}, {@stripe={'stripe', 0x3d, 0x4100000000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@bh}, {@noload}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
mount$bpf(0x200000000000, &(0x7f00000003c0)='./file0\x00', 0x0, 0x9a8046, 0x0)

1m38.451021653s ago: executing program 2 (id=794):
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x40)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x444, &(0x7f0000000800)="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", 0xfe, 0x27, 0x8, 0x6, 0x4c6f, 0x2, 0x5, 'syz0\x00'})
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

1m38.26257822s ago: executing program 0 (id=795):
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000c80)='io\x00')
syz_fuse_handle_req(r6, &(0x7f0000003f80)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m38.262412175s ago: executing program 1 (id=796):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0xfffffffffffffec9, 0x0}, 0x10)

1m38.26211277s ago: executing program 2 (id=797):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1004002, &(0x7f00000002c0)={[{@utf8}, {@utf8}, {@discard}, {@fmask={'fmask', 0x3d, 0xff}}, {@dmask={'dmask', 0x3d, 0xf2}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@namecase}, {@errors_continue}, {@discard}]}, 0x1, 0x1542, &(0x7f0000004d00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80101, 0xb1)

1m36.803520939s ago: executing program 2 (id=798):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[], 0x0)

1m36.714126128s ago: executing program 1 (id=799):
r0 = socket$inet6_tcp(0xa, 0x1, 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x6)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0)

1m36.713858289s ago: executing program 2 (id=800):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0000008e9b00000800000009"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001240)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x7d, r0}, 0x38)

1m23.571688082s ago: executing program 0 (id=801):
socket$inet_icmp(0x2, 0x2, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m8.992758051s ago: executing program 32 (id=799):
r0 = socket$inet6_tcp(0xa, 0x1, 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x6)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0)

50.31172717s ago: executing program 33 (id=800):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0000008e9b00000800000009"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001240)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x7d, r0}, 0x38)

0s ago: executing program 34 (id=801):
socket$inet_icmp(0x2, 0x2, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11251' (ED25519) to the list of known hosts.
syzkaller login: [   48.734643][ T5581] cgroup: Unknown subsys name 'net'
[   48.848123][ T5581] cgroup: Unknown subsys name 'cpuset'
[   48.852277][ T5581] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.069838][ T5581] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.102567][ T5670] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.106680][ T5670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.110389][ T5671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.111313][ T5671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.111730][ T5671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.114921][ T5671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.115333][ T5671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.119155][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.123433][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.132715][ T5675] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.136157][ T5675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.144598][ T5675] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.148019][ T5675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.148131][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.155048][   T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.616682][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.616765][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.616942][ T5667] bridge_slave_0: entered allmulticast mode
[   62.617684][ T5667] bridge_slave_0: entered promiscuous mode
[   62.620746][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.620801][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.620867][ T5667] bridge_slave_1: entered allmulticast mode
[   62.621582][ T5667] bridge_slave_1: entered promiscuous mode
[   62.673252][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.696267][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.741802][ T5667] team0: Port device team_slave_0 added
[   62.744503][ T5667] team0: Port device team_slave_1 added
[   62.805085][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.805154][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.805202][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.843836][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.843885][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.843925][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.938454][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.938786][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.938923][ T5666] bridge_slave_0: entered allmulticast mode
[   62.946511][ T5666] bridge_slave_0: entered promiscuous mode
[   62.948456][ T5665] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.948523][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.948744][ T5665] bridge_slave_0: entered allmulticast mode
[   62.950289][ T5665] bridge_slave_0: entered promiscuous mode
[   62.952854][ T5665] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.952895][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.953045][ T5665] bridge_slave_1: entered allmulticast mode
[   62.954160][ T5665] bridge_slave_1: entered promiscuous mode
[   62.974162][ T5667] hsr_slave_0: entered promiscuous mode
[   62.974857][ T5667] hsr_slave_1: entered promiscuous mode
[   62.975865][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.975934][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.975994][ T5666] bridge_slave_1: entered allmulticast mode
[   62.976709][ T5666] bridge_slave_1: entered promiscuous mode
[   63.017529][ T5666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.018795][ T5665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.021245][ T5666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.034983][ T5665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.070696][ T5666] team0: Port device team_slave_0 added
[   63.072572][ T5666] team0: Port device team_slave_1 added
[   63.088581][ T5665] team0: Port device team_slave_0 added
[   63.092468][ T5665] team0: Port device team_slave_1 added
[   63.118554][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.118613][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.118654][ T5666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.120249][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.120258][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.120273][ T5666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.182482][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.182533][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.182585][ T5665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.183830][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.183837][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.183849][ T5665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.187950][ T5666] hsr_slave_0: entered promiscuous mode
[   63.188526][ T5666] hsr_slave_1: entered promiscuous mode
[   63.188824][ T5666] debugfs: 'hsr0' already exists in 'hsr'
[   63.188883][ T5666] Cannot create hsr debugfs directory
[   63.265873][ T5665] hsr_slave_0: entered promiscuous mode
[   63.266595][ T5665] hsr_slave_1: entered promiscuous mode
[   63.266973][ T5665] debugfs: 'hsr0' already exists in 'hsr'
[   63.266984][ T5665] Cannot create hsr debugfs directory
[   63.456763][ T5667] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.463679][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.467241][ T5667] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.473206][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.479798][ T5667] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.486403][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.497551][ T5667] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.502523][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.556064][ T5666] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.562114][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.562876][ T5666] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.567915][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.583148][ T5666] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.592404][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.593048][ T5666] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.597668][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.675692][ T5665] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.679548][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.681866][ T5665] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.688221][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.694279][ T5665] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.701287][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.702029][ T5665] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.708987][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.750814][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.793423][ T5667] 8021q: adding VLAN 0 to HW filter on device team0
[   63.810958][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.811079][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.834179][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.834255][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.849642][ T5666] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.882947][ T5666] 8021q: adding VLAN 0 to HW filter on device team0
[   63.895040][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.895134][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.907778][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.907886][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.929734][ T5665] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.960628][ T5665] 8021q: adding VLAN 0 to HW filter on device team0
[   63.974273][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.974378][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.977804][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.977844][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.136270][ T4995] Bluetooth: hci0: command tx timeout
[   64.216391][ T5670] Bluetooth: hci2: command tx timeout
[   64.219836][ T4995] Bluetooth: hci1: command tx timeout
[   64.243772][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.262617][ T5666] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.302719][ T5665] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.307031][ T5667] veth0_vlan: entered promiscuous mode
[   64.315022][ T5667] veth1_vlan: entered promiscuous mode
[   64.345526][ T5666] veth0_vlan: entered promiscuous mode
[   64.363042][ T5666] veth1_vlan: entered promiscuous mode
[   64.377572][ T5665] veth0_vlan: entered promiscuous mode
[   64.382001][ T5667] veth0_macvtap: entered promiscuous mode
[   64.383806][ T5665] veth1_vlan: entered promiscuous mode
[   64.393610][ T5667] veth1_macvtap: entered promiscuous mode
[   64.414231][ T5666] veth0_macvtap: entered promiscuous mode
[   64.430534][ T5666] veth1_macvtap: entered promiscuous mode
[   64.442466][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.448780][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.454409][ T5665] veth0_macvtap: entered promiscuous mode
[   64.464501][ T5665] veth1_macvtap: entered promiscuous mode
[   64.477824][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.495068][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.512324][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.533426][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.577223][ T5664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.639792][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.639863][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.684422][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.684482][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.688111][ T5721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.688285][ T5721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.688485][ T5721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.688499][ T5721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.715849][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.715895][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.757441][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.757489][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.790005][ T5664] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.805127][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.816228][ T5667] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.824260][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.858590][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.862040][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.868446][ T5721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.897974][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.898234][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.898572][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.898822][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.899146][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.954814][ T5777] netlink: 'syz.1.60': attribute type 2 has an invalid length.
[   64.962254][ T5777] netlink: 'syz.1.60': attribute type 2 has an invalid length.
[   64.962398][ T5777] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.60'.
[   65.013344][ T5779] loop0: detected capacity change from 0 to 2048
[   65.246778][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'.
[   65.301640][ T5789] loop2: detected capacity change from 0 to 164
[   65.505240][ T5779]  loop0: p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 
[   65.538858][ T5779] loop0: p2 start 53543428 is beyond EOD, truncated
[   65.610900][ T5779] loop0: p5 start 53543428 is beyond EOD, truncated
[   65.611617][ T5779] loop0: p6 start 53543428 is beyond EOD, truncated
[   65.617981][ T5779] loop0: p7 start 53543428 is beyond EOD, truncated
[   65.618000][ T5779] loop0: p8 start 53543428 is beyond EOD, truncated
[   65.618010][ T5779] loop0: p9 start 53543428 is beyond EOD, truncated
[   65.618020][ T5779] loop0: p10 start 53543428 is beyond EOD, truncated
[   65.618030][ T5779] loop0: p11 start 53543428 is beyond EOD, truncated
[   65.618040][ T5779] loop0: p12 start 53543428 is beyond EOD, truncated
[   65.618050][ T5779] loop0: p13 start 53543428 is beyond EOD, truncated
[   65.618060][ T5779] loop0: p14 start 53543428 is beyond EOD, truncated
[   65.618070][ T5779] loop0: p15 start 53543428 is beyond EOD, truncated
[   65.618080][ T5779] loop0: p16 start 53543428 is beyond EOD, truncated
[   65.618090][ T5779] loop0: p17 start 53543428 is beyond EOD, truncated
[   65.618100][ T5779] loop0: p18 start 53543428 is beyond EOD, truncated
[   65.618109][ T5779] loop0: p19 start 53543428 is beyond EOD, truncated
[   65.618118][ T5779] loop0: p20 start 53543428 is beyond EOD, truncated
[   65.618128][ T5779] loop0: p21 start 53543428 is beyond EOD, truncated
[   65.618137][ T5779] loop0: p22 start 53543428 is beyond EOD, truncated
[   65.618147][ T5779] loop0: p23 start 53543428 is beyond EOD, truncated
[   65.618156][ T5779] loop0: p24 start 53543428 is beyond EOD, truncated
[   65.618165][ T5779] loop0: p25 start 53543428 is beyond EOD, truncated
[   65.618175][ T5779] loop0: p26 start 53543428 is beyond EOD, truncated
[   65.618184][ T5779] loop0: p27 start 53543428 is beyond EOD, truncated
[   65.618194][ T5779] loop0: p28 start 53543428 is beyond EOD, truncated
[   65.618203][ T5779] loop0: p29 start 53543428 is beyond EOD, truncated
[   65.618212][ T5779] loop0: p30 start 53543428 is beyond EOD, truncated
[   65.645117][ T5779] loop0: p31 start 53543428 is beyond EOD, truncated
[   65.645133][ T5779] loop0: p32 start 53543428 is beyond EOD, truncated
[   65.645142][ T5779] loop0: p33 start 53543428 is beyond EOD, truncated
[   65.645153][ T5779] loop0: p34 start 53543428 is beyond EOD, truncated
[   65.645164][ T5779] loop0: p35 start 53543428 is beyond EOD, truncated
[   65.645173][ T5779] loop0: p36 start 53543428 is beyond EOD, truncated
[   65.645184][ T5779] loop0: p37 start 53543428 is beyond EOD, truncated
[   65.645195][ T5779] loop0: p38 start 53543428 is beyond EOD, truncated
[   65.645204][ T5779] loop0: p39 start 53543428 is beyond EOD, truncated
[   65.645215][ T5779] loop0: p40 start 53543428 is beyond EOD, truncated
[   65.645224][ T5779] loop0: p41 start 53543428 is beyond EOD, truncated
[   65.645233][ T5779] loop0: p42 start 53543428 is beyond EOD, truncated
[   65.645244][ T5779] loop0: p43 start 53543428 is beyond EOD, truncated
[   65.645253][ T5779] loop0: p44 start 53543428 is beyond EOD, truncated
[   65.645264][ T5779] loop0: p45 start 53543428 is beyond EOD, truncated
[   65.645273][ T5779] loop0: p46 start 53543428 is beyond EOD, truncated
[   65.645311][ T5779] loop0: p47 start 53543428 is beyond EOD, truncated
[   65.645320][ T5779] loop0: p48 start 53543428 is beyond EOD, truncated
[   65.645329][ T5779] loop0: p49 start 53543428 is beyond EOD, truncated
[   65.645338][ T5779] loop0: p50 start 53543428 is beyond EOD, truncated
[   65.645347][ T5779] loop0: p51 start 53543428 is beyond EOD, truncated
[   65.645356][ T5779] loop0: p52 start 53543428 is beyond EOD, truncated
[   65.645366][ T5779] loop0: p53 start 53543428 is beyond EOD, truncated
[   65.645376][ T5779] loop0: p54 start 53543428 is beyond EOD, truncated
[   65.645385][ T5779] loop0: p55 start 53543428 is beyond EOD, truncated
[   65.645393][ T5779] loop0: p56 start 53543428 is beyond EOD, truncated
[   65.648650][ T5779] loop0: p57 start 53543428 is beyond EOD, truncated
[   65.648660][ T5779] loop0: p58 start 53543428 is beyond EOD, truncated
[   65.648666][ T5779] loop0: p59 start 53543428 is beyond EOD, truncated
[   65.648672][ T5779] loop0: p60 start 53543428 is beyond EOD, truncated
[   65.648678][ T5779] loop0: p61 start 53543428 is beyond EOD, truncated
[   65.648684][ T5779] loop0: p62 start 53543428 is beyond EOD, truncated
[   65.648690][ T5779] loop0: p63 start 53543428 is beyond EOD, truncated
[   65.648696][ T5779] loop0: p64 start 53543428 is beyond EOD, truncated
[   65.648703][ T5779] loop0: p65 start 53543428 is beyond EOD, truncated
[   65.648709][ T5779] loop0: p66 start 53543428 is beyond EOD, truncated
[   65.648715][ T5779] loop0: p67 start 53543428 is beyond EOD, truncated
[   65.648721][ T5779] loop0: p68 start 53543428 is beyond EOD, truncated
[   65.648727][ T5779] loop0: p69 start 53543428 is beyond EOD, truncated
[   65.648733][ T5779] loop0: p70 start 53543428 is beyond EOD, truncated
[   65.648739][ T5779] loop0: p71 start 53543428 is beyond EOD, truncated
[   65.648745][ T5779] loop0: p72 start 53543428 is beyond EOD, truncated
[   65.648751][ T5779] loop0: p73 start 53543428 is beyond EOD, truncated
[   65.648757][ T5779] loop0: p74 start 53543428 is beyond EOD, truncated
[   65.648763][ T5779] loop0: p75 start 53543428 is beyond EOD, truncated
[   65.648769][ T5779] loop0: p76 start 53543428 is beyond EOD, truncated
[   65.648776][ T5779] loop0: p77 start 53543428 is beyond EOD, truncated
[   65.648788][ T5779] loop0: p78 start 53543428 is beyond EOD, truncated
[   65.648794][ T5779] loop0: p79 start 53543428 is beyond EOD, truncated
[   65.648800][ T5779] loop0: p80 start 53543428 is beyond EOD, truncated
[   65.648805][ T5779] loop0: p81 start 53543428 is beyond EOD, truncated
[   65.648811][ T5779] loop0: p82 start 53543428 is beyond EOD, truncated
[   65.648817][ T5779] loop0: p83 start 53543428 is beyond EOD, truncated
[   65.648823][ T5779] loop0: p84 start 53543428 is beyond EOD, truncated
[   65.648829][ T5779] loop0: p85 start 53543428 is beyond EOD, truncated
[   65.648835][ T5779] loop0: p86 start 53543428 is beyond EOD, truncated
[   65.648841][ T5779] loop0: p87 start 53543428 is beyond EOD, truncated
[   65.648847][ T5779] loop0: p88 start 53543428 is beyond EOD, truncated
[   65.648853][ T5779] loop0: p89 start 53543428 is beyond EOD, truncated
[   65.648859][ T5779] loop0: p90 start 53543428 is beyond EOD, truncated
[   65.648865][ T5779] loop0: p91 start 53543428 is beyond EOD, truncated
[   65.648871][ T5779] loop0: p92 start 53543428 is beyond EOD, truncated
[   65.648934][ T5779] loop0: p93 start 53543428 is beyond EOD, truncated
[   65.648943][ T5779] loop0: p94 start 53543428 is beyond EOD, truncated
[   65.648949][ T5779] loop0: p95 start 53543428 is beyond EOD, truncated
[   65.648955][ T5779] loop0: p96 start 53543428 is beyond EOD, truncated
[   65.648961][ T5779] loop0: p97 start 53543428 is beyond EOD, truncated
[   65.648967][ T5779] loop0: p98 start 53543428 is beyond EOD, truncated
[   65.648972][ T5779] loop0: p99 start 53543428 is beyond EOD, truncated
[   65.648978][ T5779] loop0: p100 start 53543428 is beyond EOD, truncated
[   65.648984][ T5779] loop0: p101 start 53543428 is beyond EOD, truncated
[   65.648991][ T5779] loop0: p102 start 53543428 is beyond EOD, truncated
[   65.648997][ T5779] loop0: p103 start 53543428 is beyond EOD, truncated
[   65.649003][ T5779] loop0: p104 start 53543428 is beyond EOD, truncated
[   65.649009][ T5779] loop0: p105 start 53543428 is beyond EOD, truncated
[   65.649015][ T5779] loop0: p106 start 53543428 is beyond EOD, truncated
[   65.649021][ T5779] loop0: p107 start 53543428 is beyond EOD, truncated
[   65.649027][ T5779] loop0: p108 start 53543428 is beyond EOD, truncated
[   65.649033][ T5779] loop0: p109 start 53543428 is beyond EOD, truncated
[   65.649039][ T5779] loop0: p110 start 53543428 is beyond EOD, truncated
[   65.649045][ T5779] loop0: p111 start 53543428 is beyond EOD, truncated
[   65.649052][ T5779] loop0: p112 start 53543428 is beyond EOD, truncated
[   65.649058][ T5779] loop0: p113 start 53543428 is beyond EOD, truncated
[   65.649064][ T5779] loop0: p114 start 53543428 is beyond EOD, truncated
[   65.649070][ T5779] loop0: p115 start 53543428 is beyond EOD, truncated
[   65.649076][ T5779] loop0: p116 start 53543428 is beyond EOD, truncated
[   65.649082][ T5779] loop0: p117 start 53543428 is beyond EOD, truncated
[   65.649088][ T5779] loop0: p118 start 53543428 is beyond EOD, truncated
[   65.649094][ T5779] loop0: p119 start 53543428 is beyond EOD, truncated
[   65.649100][ T5779] loop0: p120 start 53543428 is beyond EOD, truncated
[   65.649106][ T5779] loop0: p121 start 53543428 is beyond EOD, truncated
[   65.649112][ T5779] loop0: p122 start 53543428 is beyond EOD, truncated
[   65.649118][ T5779] loop0: p123 start 53543428 is beyond EOD, truncated
[   65.649125][ T5779] loop0: p124 start 53543428 is beyond EOD, truncated
[   65.649131][ T5779] loop0: p125 start 53543428 is beyond EOD, truncated
[   65.649137][ T5779] loop0: p126 start 53543428 is beyond EOD, truncated
[   65.649142][ T5779] loop0: p127 start 53543428 is beyond EOD, truncated
[   65.649148][ T5779] loop0: p128 start 53543428 is beyond EOD, truncated
[   65.649155][ T5779] loop0: p129 start 53543428 is beyond EOD, truncated
[   65.649161][ T5779] loop0: p130 start 53543428 is beyond EOD, truncated
[   65.649167][ T5779] loop0: p131 start 53543428 is beyond EOD, truncated
[   65.649173][ T5779] loop0: p132 start 53543428 is beyond EOD, truncated
[   65.649179][ T5779] loop0: p133 start 53543428 is beyond EOD, truncated
[   65.649185][ T5779] loop0: p134 start 53543428 is beyond EOD, truncated
[   65.649191][ T5779] loop0: p135 start 53543428 is beyond EOD, truncated
[   65.649197][ T5779] loop0: p136 start 53543428 is beyond EOD, truncated
[   65.649203][ T5779] loop0: p137 start 53543428 is beyond EOD, truncated
[   65.649209][ T5779] loop0: p138 start 53543428 is beyond EOD, truncated
[   65.649215][ T5779] loop0: p139 start 53543428 is beyond EOD, truncated
[   65.649221][ T5779] loop0: p140 start 53543428 is beyond EOD, truncated
[   65.649228][ T5779] loop0: p141 start 53543428 is beyond EOD, truncated
[   65.649234][ T5779] loop0: p142 start 53543428 is beyond EOD, truncated
[   65.649240][ T5779] loop0: p143 start 53543428 is beyond EOD, truncated
[   65.649246][ T5779] loop0: p144 start 53543428 is beyond EOD, truncated
[   65.649252][ T5779] loop0: p145 start 53543428 is beyond EOD, truncated
[   65.649258][ T5779] loop0: p146 start 53543428 is beyond EOD, truncated
[   65.649264][ T5779] loop0: p147 start 53543428 is beyond EOD, truncated
[   65.649270][ T5779] loop0: p148 start 53543428 is beyond EOD, truncated
[   65.649275][ T5779] loop0: p149 start 53543428 is beyond EOD, truncated
[   65.649312][ T5779] loop0: p150 start 53543428 is beyond EOD, truncated
[   65.649322][ T5779] loop0: p151 start 53543428 is beyond EOD, truncated
[   65.649332][ T5779] loop0: p152 start 53543428 is beyond EOD, truncated
[   65.649341][ T5779] loop0: p153 start 53543428 is beyond EOD, truncated
[   65.649351][ T5779] loop0: p154 start 53543428 is beyond EOD, truncated
[   65.649360][ T5779] loop0: p155 start 53543428 is beyond EOD, truncated
[   65.649367][ T5779] loop0: p156 start 53543428 is beyond EOD, truncated
[   65.649374][ T5779] loop0: p157 start 53543428 is beyond EOD, truncated
[   65.649380][ T5779] loop0: p158 start 53543428 is beyond EOD, truncated
[   65.649386][ T5779] loop0: p159 start 53543428 is beyond EOD, truncated
[   65.649392][ T5779] loop0: p160 start 53543428 is beyond EOD, truncated
[   65.649398][ T5779] loop0: p161 start 53543428 is beyond EOD, truncated
[   65.649404][ T5779] loop0: p162 start 53543428 is beyond EOD, truncated
[   65.649410][ T5779] loop0: p163 start 53543428 is beyond EOD, truncated
[   65.649416][ T5779] loop0: p164 start 53543428 is beyond EOD, truncated
[   65.649422][ T5779] loop0: p165 start 53543428 is beyond EOD, truncated
[   65.649428][ T5779] loop0: p166 start 53543428 is beyond EOD, truncated
[   65.649434][ T5779] loop0: p167 start 53543428 is beyond EOD, truncated
[   65.649440][ T5779] loop0: p168 start 53543428 is beyond EOD, truncated
[   65.649447][ T5779] loop0: p169 start 53543428 is beyond EOD, truncated
[   65.649453][ T5779] loop0: p170 start 53543428 is beyond EOD, truncated
[   65.649458][ T5779] loop0: p171 start 53543428 is beyond EOD, truncated
[   65.649464][ T5779] loop0: p172 start 53543428 is beyond EOD, truncated
[   65.649470][ T5779] loop0: p173 start 53543428 is beyond EOD, truncated
[   65.649476][ T5779] loop0: p174 start 53543428 is beyond EOD, truncated
[   65.649482][ T5779] loop0: p175 start 53543428 is beyond EOD, truncated
[   65.649489][ T5779] loop0: p176 start 53543428 is beyond EOD, truncated
[   65.651138][ T5779] loop0: p177 start 53543428 is beyond EOD, truncated
[   65.651150][ T5779] loop0: p178 start 53543428 is beyond EOD, truncated
[   65.651156][ T5779] loop0: p179 start 53543428 is beyond EOD, truncated
[   65.651162][ T5779] loop0: p180 start 53543428 is beyond EOD, truncated
[   65.651169][ T5779] loop0: p181 start 53543428 is beyond EOD, truncated
[   65.651175][ T5779] loop0: p182 start 53543428 is beyond EOD, truncated
[   65.651181][ T5779] loop0: p183 start 53543428 is beyond EOD, truncated
[   65.651188][ T5779] loop0: p184 start 53543428 is beyond EOD, truncated
[   65.651194][ T5779] loop0: p185 start 53543428 is beyond EOD, truncated
[   65.651201][ T5779] loop0: p186 start 53543428 is beyond EOD, truncated
[   65.651207][ T5779] loop0: p187 start 53543428 is beyond EOD, truncated
[   65.651213][ T5779] loop0: p188 start 53543428 is beyond EOD, truncated
[   65.651218][ T5779] loop0: p189 start 53543428 is beyond EOD, truncated
[   65.651224][ T5779] loop0: p190 start 53543428 is beyond EOD, truncated
[   65.651230][ T5779] loop0: p191 start 53543428 is beyond EOD, truncated
[   65.651237][ T5779] loop0: p192 start 53543428 is beyond EOD, truncated
[   65.651243][ T5779] loop0: p193 start 53543428 is beyond EOD, truncated
[   65.651249][ T5779] loop0: p194 start 53543428 is beyond EOD, truncated
[   65.651256][ T5779] loop0: p195 start 53543428 is beyond EOD, truncated
[   65.651261][ T5779] loop0: p196 start 53543428 is beyond EOD, truncated
[   65.651267][ T5779] loop0: p197 start 53543428 is beyond EOD, truncated
[   65.651273][ T5779] loop0: p198 start 53543428 is beyond EOD, truncated
[   65.651307][ T5779] loop0: p199 start 53543428 is beyond EOD, truncated
[   65.651314][ T5779] loop0: p200 start 53543428 is beyond EOD, truncated
[   65.651320][ T5779] loop0: p201 start 53543428 is beyond EOD, truncated
[   65.651326][ T5779] loop0: p202 start 53543428 is beyond EOD, truncated
[   65.651332][ T5779] loop0: p203 start 53543428 is beyond EOD, truncated
[   65.651338][ T5779] loop0: p204 start 53543428 is beyond EOD, truncated
[   65.651344][ T5779] loop0: p205 start 53543428 is beyond EOD, truncated
[   65.651350][ T5779] loop0: p206 start 53543428 is beyond EOD, truncated
[   65.651356][ T5779] loop0: p207 start 53543428 is beyond EOD, truncated
[   65.651362][ T5779] loop0: p208 start 53543428 is beyond EOD, truncated
[   65.651368][ T5779] loop0: p209 start 53543428 is beyond EOD, truncated
[   65.651374][ T5779] loop0: p210 start 53543428 is beyond EOD, truncated
[   65.651380][ T5779] loop0: p211 start 53543428 is beyond EOD, truncated
[   65.651386][ T5779] loop0: p212 start 53543428 is beyond EOD, truncated
[   65.651392][ T5779] loop0: p213 start 53543428 is beyond EOD, truncated
[   65.651399][ T5779] loop0: p214 start 53543428 is beyond EOD, truncated
[   65.651405][ T5779] loop0: p215 start 53543428 is beyond EOD, truncated
[   65.651410][ T5779] loop0: p216 start 53543428 is beyond EOD, truncated
[   65.651416][ T5779] loop0: p217 start 53543428 is beyond EOD, truncated
[   65.651422][ T5779] loop0: p218 start 53543428 is beyond EOD, truncated
[   65.651428][ T5779] loop0: p219 start 53543428 is beyond EOD, truncated
[   65.651434][ T5779] loop0: p220 start 53543428 is beyond EOD, truncated
[   65.651441][ T5779] loop0: p221 start 53543428 is beyond EOD, truncated
[   65.651447][ T5779] loop0: p222 start 53543428 is beyond EOD, truncated
[   65.651453][ T5779] loop0: p223 start 53543428 is beyond EOD, truncated
[   65.651459][ T5779] loop0: p224 start 53543428 is beyond EOD, truncated
[   65.651465][ T5779] loop0: p225 start 53543428 is beyond EOD, truncated
[   65.651471][ T5779] loop0: p226 start 53543428 is beyond EOD, truncated
[   65.651477][ T5779] loop0: p227 start 53543428 is beyond EOD, truncated
[   65.651483][ T5779] loop0: p228 start 53543428 is beyond EOD, truncated
[   65.651489][ T5779] loop0: p229 start 53543428 is beyond EOD, truncated
[   65.651495][ T5779] loop0: p230 start 53543428 is beyond EOD, truncated
[   65.651501][ T5779] loop0: p231 start 53543428 is beyond EOD, truncated
[   65.651507][ T5779] loop0: p232 start 53543428 is beyond EOD, truncated
[   65.651513][ T5779] loop0: p233 start 53543428 is beyond EOD, truncated
[   65.651519][ T5779] loop0: p234 start 53543428 is beyond EOD, truncated
[   65.651525][ T5779] loop0: p235 start 53543428 is beyond EOD, truncated
[   65.651531][ T5779] loop0: p236 start 53543428 is beyond EOD, truncated
[   65.651537][ T5779] loop0: p237 start 53543428 is beyond EOD, truncated
[   65.651543][ T5779] loop0: p238 start 53543428 is beyond EOD, truncated
[   65.651549][ T5779] loop0: p239 start 53543428 is beyond EOD, truncated
[   65.651556][ T5779] loop0: p240 start 53543428 is beyond EOD, truncated
[   65.651562][ T5779] loop0: p241 start 53543428 is beyond EOD, truncated
[   65.651568][ T5779] loop0: p242 start 53543428 is beyond EOD, truncated
[   65.651574][ T5779] loop0: p243 start 53543428 is beyond EOD, truncated
[   65.651580][ T5779] loop0: p244 start 53543428 is beyond EOD, truncated
[   65.651586][ T5779] loop0: p245 start 53543428 is beyond EOD, truncated
[   65.651591][ T5779] loop0: p246 start 53543428 is beyond EOD, truncated
[   65.651598][ T5779] loop0: p247 start 53543428 is beyond EOD, truncated
[   65.651604][ T5779] loop0: p248 start 53543428 is beyond EOD, truncated
[   65.651610][ T5779] loop0: p249 start 53543428 is beyond EOD, truncated
[   65.651615][ T5779] loop0: p250 start 53543428 is beyond EOD, truncated
[   65.651621][ T5779] loop0: p251 start 53543428 is beyond EOD, truncated
[   65.651626][ T5779] loop0: p252 start 53543428 is beyond EOD, truncated
[   65.651632][ T5779] loop0: p253 start 53543428 is beyond EOD, truncated
[   65.651637][ T5779] loop0: p254 start 53543428 is beyond EOD, truncated
[   65.651643][ T5779] loop0: p255 start 53543428 is beyond EOD, truncated
[   65.859372][ T5792] capability: warning: `syz.0.64' uses deprecated v2 capabilities in a way that may be insecure
[   66.219830][ T4995] Bluetooth: hci0: command tx timeout
[   66.297437][ T4995] Bluetooth: hci1: command tx timeout
[   66.297461][ T4995] Bluetooth: hci2: command tx timeout
[   66.346391][ T5801] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.68'.
[   66.368214][ T5802] loop0: detected capacity change from 0 to 16
[   66.368719][ T5802] =======================================================
[   66.368719][ T5802] WARNING: The mand mount option has been deprecated and
[   66.368719][ T5802]          and is ignored by this kernel. Remove the mand
[   66.368719][ T5802]          option from the mount to silence this warning.
[   66.368719][ T5802] =======================================================
[   66.400594][ T5802] erofs (device loop0): mounted with root inode @ nid 36.
[   66.641130][ T5819] netlink: 'syz.0.77': attribute type 1 has an invalid length.
[   66.695146][ T5823] loop2: detected capacity change from 0 to 1024
[   66.718504][ T5825] netlink: 'syz.0.80': attribute type 27 has an invalid length.
[   66.863023][ T5827] loop0: detected capacity change from 0 to 4096
[   66.877523][ T5827] EXT4-fs: Ignoring removed mblk_io_submit option
[   66.887533][ T5827] EXT4-fs (loop0): Test dummy encryption mode enabled
[   66.932031][ T5827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.981461][ T5666] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.336479][ T5850] loop2: detected capacity change from 0 to 256
[   67.337630][ T5850] vfat: Deprecated parameter 'posix'
[   67.337658][ T5850] FAT-fs: "posix" option is obsolete, not supported now
[   67.362969][ T5852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'.
[   67.485929][ T5844] loop0: detected capacity change from 0 to 128
[   67.512016][ T5856] loop2: detected capacity change from 0 to 128
[   67.526925][ T5856] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   67.533231][ T5856] hpfs: filesystem error: improperly stopped
[   67.533325][ T5856] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   67.533366][ T5856] hpfs: You really don't want any checks? You are crazy...
[   67.533560][ T5856] hpfs: hpfs_map_sector(): read error
[   67.533581][ T5856] hpfs: code page support is disabled
[   67.550662][ T5856] hpfs: hpfs_map_4sectors(): unaligned read
[   67.550778][ T5856] hpfs: hpfs_map_4sectors(): unaligned read
[   67.550824][ T5856] hpfs: filesystem error: unable to find root dir
[   67.724140][ T5863] sock: sock_timestamping_bind_phc: sock not bind to device
[   67.849455][ T5876] capability: warning: `syz.1.99' uses 32-bit capabilities (legacy support in use)
[   68.210468][ T5887] loop0: detected capacity change from 0 to 512
[   68.223844][ T5887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.229009][ T5887] EXT4-fs error (device loop0): ext4_xattr_set_entry:1676: inode #2: comm syz.0.107: corrupted xattr entries
[   68.250426][ T5666] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.295833][ T5670] Bluetooth: hci0: command tx timeout
[   68.375967][ T4995] Bluetooth: hci1: command tx timeout
[   68.379972][ T5670] Bluetooth: hci2: command tx timeout
[   68.861563][ T5900] Bluetooth: MGMT ver 1.23
[   69.165141][ T5926] loop2: detected capacity change from 0 to 512
[   69.176942][ T5926] EXT4-fs: Ignoring removed i_version option
[   69.195105][ T5926] EXT4-fs (loop2): 1 orphan inode deleted
[   69.198194][ T5926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.208699][ T5926] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.124: Directory hole found for htree leaf block 0
[   69.230208][ T5665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.337245][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'.
[   69.417024][ T5944] mmap: syz.1.130 (5944) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   69.854151][ T5955] netlink: 140 bytes leftover after parsing attributes in process `syz.1.136'.
[   69.878727][ T5955] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5)
[   69.890377][ T5955] bond1 (unregistering): Released all slaves
[   70.097981][ T5963] warning: `syz.2.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.387385][ T5670] Bluetooth: hci0: command tx timeout
[   70.455833][ T5670] Bluetooth: hci1: command tx timeout
[   70.495878][ T5062] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   70.647283][ T5062] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   70.652399][ T5062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.669956][ T5062] usb 1-1: config 0 descriptor??
[   70.688621][ T5062] cp210x 1-1:0.0: cp210x converter detected
[   71.086050][ T5062] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[   71.101518][ T5062] usb 1-1: cp210x converter now attached to ttyUSB0
[   71.160282][ T5998] loop2: detected capacity change from 0 to 512
[   71.164626][ T5998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   71.164643][ T5998] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   71.173560][ T5998] EXT4-fs (loop2): orphan cleanup on readonly fs
[   71.177241][ T5998] Quota error (device loop2): v2_read_file_info: Block with free entry 5 out of range (1, 5).
[   71.177461][ T5998] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   71.178575][ T5998] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   71.184511][ T5998] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   71.188666][ T5998] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.152: corrupted inode contents
[   71.188802][ T5998] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.193079][ T5998] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #12: comm syz.2.152: mark_inode_dirty error
[   71.193102][ T5998] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.193443][ T5998] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.152: corrupted inode contents
[   71.193462][ T5998] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.193567][ T5998] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.152: mark_inode_dirty error
[   71.193578][ T5998] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.193710][ T5998] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.152: corrupted inode contents
[   71.193720][ T5998] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.194222][ T5998] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem
[   71.194329][ T5998] loop2: lost filesystem error report for type 5 error -117
[   71.194430][ T5998] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.152: corrupted inode contents
[   71.194523][ T5998] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.194609][ T5998] EXT4-fs error (device loop2): ext4_truncate:4721: inode #12: comm syz.2.152: mark_inode_dirty error
[   71.194619][ T5998] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.194714][ T5998] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem
[   71.194722][ T5998] loop2: lost filesystem error report for type 5 error -117
[   71.194961][ T5998] EXT4-fs (loop2): 1 truncate cleaned up
[   71.197869][ T5998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.202328][ T5998] EXT4-fs (loop2): shut down requested (2)
[   71.226638][ T5665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.301877][ T5062] usb 1-1: USB disconnect, device number 2
[   71.316547][ T5062] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   71.325111][ T5062] cp210x 1-1:0.0: device disconnected
[   71.355856][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.397635][ T5722] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[   71.401851][ T5722] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[   71.413791][ T6007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.426984][ T6008] Invalid option length (771) for dns_resolver key
[   71.516297][  T517] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[   71.635645][  T517] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[   71.738386][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[   71.738487][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[   71.755770][  T517] wlan1: authentication with 08:02:11:00:00:00 timed out
[   72.550858][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'.
[   73.573535][ T6047] No source specified
[   73.652925][ T5670] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[   73.653787][ T5670] CPU: 0 UID: 0 PID: 5670 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) 
[   73.653860][ T5670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.653871][ T5670] Workqueue: hci2 hci_rx_work
[   73.653893][ T5670] Call Trace:
[   73.653901][ T5670]  <TASK>
[   73.653907][ T5670]  dump_stack_lvl+0xe8/0x150
[   73.653929][ T5670]  sysfs_create_dir_ns+0x271/0x2a0
[   73.653946][ T5670]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   73.653966][ T5670]  ? do_raw_spin_unlock+0x4d/0x200
[   73.653986][ T5670]  kobject_add_internal+0x622/0xcd0
[   73.654009][ T5670]  kobject_add+0x163/0x240
[   73.654033][ T5670]  ? __pfx_kobject_add+0x10/0x10
[   73.654055][ T5670]  ? get_device_parent+0x366/0x3a0
[   73.654075][ T5670]  device_add+0x3fa/0xb80
[   73.654091][ T5670]  hci_conn_add_sysfs+0xd5/0x210
[   73.654117][ T5670]  le_conn_complete_evt+0xfe3/0x16d0
[   73.654139][ T5670]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   73.654186][ T5670]  ? __mutex_unlock_slowpath+0x731/0x900
[   73.654207][ T5670]  ? skb_pull_data+0xf0/0x200
[   73.654223][ T5670]  hci_le_conn_complete_evt+0x187/0x470
[   73.654244][ T5670]  hci_event_packet+0x67a/0xf10
[   73.654257][ T5670]  ? trace_irq_disable+0x3b/0x140
[   73.654276][ T5670]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   73.654290][ T5670]  ? __pfx_hci_event_packet+0x10/0x10
[   73.654311][ T5670]  ? hci_send_to_monitor+0xe2/0x590
[   73.654332][ T5670]  hci_rx_work+0x3ee/0x1020
[   73.654350][ T5670]  ? process_scheduled_works+0x97a/0x1630
[   73.654367][ T5670]  process_scheduled_works+0xc3d/0x1630
[   73.654406][ T5670]  ? __pfx_process_scheduled_works+0x10/0x10
[   73.654427][ T5670]  ? assign_work+0x3cf/0x5d0
[   73.654448][ T5670]  worker_thread+0xa47/0xfb0
[   73.654482][ T5670]  kthread+0x38b/0x480
[   73.654496][ T5670]  ? __pfx_worker_thread+0x10/0x10
[   73.654512][ T5670]  ? __pfx_kthread+0x10/0x10
[   73.654524][ T5670]  ret_from_fork+0x514/0xb70
[   73.654538][ T5670]  ? __pfx_ret_from_fork+0x10/0x10
[   73.654551][ T5670]  ? __switch_to+0xc89/0x1420
[   73.654569][ T5670]  ? __pfx_kthread+0x10/0x10
[   73.654582][ T5670]  ret_from_fork_asm+0x1a/0x30
[   73.654603][ T5670]  </TASK>
[   73.659472][ T5670] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   73.659755][ T5670] Bluetooth: hci2: failed to register connection device
[   73.894299][ T6050] loop2: detected capacity change from 0 to 4096
[   73.908895][ T6050] NILFS (loop2): invalid segment: Checksum error in segment payload
[   73.908960][ T6050] NILFS (loop2): trying rollback from an earlier position
[   73.935297][ T6052] loop0: detected capacity change from 0 to 256
[   73.962685][ T6050] NILFS (loop2): recovery complete
[   73.967791][ T6052] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[   73.968862][ T6053] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.174503][ T6057] loop0: detected capacity change from 0 to 4096
[   74.271567][ T6065] loop2: detected capacity change from 0 to 512
[   74.356643][ T6057] ntfs3(loop0): Failed to load $Extend (-22).
[   74.356713][ T6057] ntfs3(loop0): Failed to initialize $Extend.
[   75.222406][ T6098] netlink: 44 bytes leftover after parsing attributes in process `syz.1.196'.
[   75.235510][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.237606][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.270032][ T6098] netlink: 44 bytes leftover after parsing attributes in process `syz.1.196'.
[   75.986912][ T6113] jffs2: notice: (6113) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   76.042319][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'.
[   76.112487][ T6120] netlink: 'syz.2.204': attribute type 6 has an invalid length.
[   76.140727][ T6122] loop0: detected capacity change from 0 to 512
[   76.141388][ T6122] EXT4-fs: Ignoring removed nobh option
[   76.142468][ T6122] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   76.142476][ T6122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   76.149646][ T6122] EXT4-fs (loop0): 1 truncate cleaned up
[   76.151929][ T6122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.178876][ T5666] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.200006][ T6126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.205'.
[   76.259170][ T6128] loop0: detected capacity change from 0 to 4096
[   76.287818][ T6128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.302091][ T6128] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   76.321948][ T5666] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.529321][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.217'.
[   76.675323][ T6160] netdevsim netdevsim0: Direct firmware load for ./cgroup failed with error -2
[   76.685358][ T6160] netdevsim netdevsim0: Falling back to sysfs fallback for: ./cgroup
[   76.868714][  T991] cfg80211: failed to load regulatory.db
[   76.904829][ T6181] loop2: detected capacity change from 0 to 128
[   76.928172][ T6181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   76.928289][ T6181] System zones: 1-3, 19-19, 35-36
[   76.935337][ T6181] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   76.939168][ T6181] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   76.981474][ T5665] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.148465][ T6191] loop2: detected capacity change from 0 to 512
[   77.399146][ T6206] loop2: detected capacity change from 0 to 1764
[   77.797342][ T6222] netlink: 'syz.0.251': attribute type 2 has an invalid length.
[   78.046303][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'.
[   78.322179][ T6260] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[   78.458015][ T6271] overlayfs: failed to clone upperpath
[   78.516916][ T5743] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   78.591833][ T6277] netlink: 'syz.2.275': attribute type 6 has an invalid length.
[   78.645382][ T6282] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   78.668229][ T5743] usb 1-1: unable to get BOS descriptor or descriptor too short
[   78.671507][ T5743] usb 1-1: not running at top speed; connect to a high speed hub
[   78.671588][ T5743] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   78.678246][ T5743] usb 1-1: config 0 has an invalid interface number: 88 but max is 0
[   78.681862][ T5743] usb 1-1: config 0 has no interface number 0
[   78.686186][ T5743] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[   78.686240][ T5743] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   78.686267][ T5743] usb 1-1: config 0 interface 88 has no altsetting 0
[   78.701746][ T5743] usb 1-1: string descriptor 0 read error: -22
[   78.701974][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   78.716014][ T5743] usb 1-1: config 0 descriptor??
[   78.726187][ T5743] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input4
[   78.821052][ T5650] udevd[5650]: Error opening device "/dev/input/event3": Input/output error
[   78.821193][ T5650] udevd[5650]: Unable to EVIOCGABS device "/dev/input/event3"
[   78.821305][ T5650] udevd[5650]: Unable to EVIOCGABS device "/dev/input/event3"
[   78.936259][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.944372][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.379814][   T35] audit: type=1326 audit(1788502516.823:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.2.292" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0661b9e159 code=0x0
[   79.480837][   T25] usb 1-1: USB disconnect, device number 3
[   79.616444][ T6321] tmpfs: Bad value for 'size'
[   79.693375][ T6327] loop0: detected capacity change from 0 to 512
[   79.700184][ T6327] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   80.025391][ T6344] xt_hashlimit: size too large, truncated to 1048576
[   80.166472][ T6348] loop0: detected capacity change from 0 to 64
[   80.585379][ T6355] loop0: detected capacity change from 0 to 32768
[   80.592833][ T6355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.313 (6355)
[   80.654026][ T6355] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   80.663646][ T6355] BTRFS info (device loop0): using sha256 checksum algorithm
[   80.752075][ T6355] BTRFS info (device loop0): enabling ssd optimizations
[   80.755137][ T6355] BTRFS info (device loop0): turning on sync discard
[   80.758985][ T6355] BTRFS info (device loop0): enabling free space tree
[   80.784893][   T35] audit: type=1800 audit(1788502518.223:3): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.313" name="file1" dev="loop0" ino=260 res=0 errno=0
[   81.038383][ T5666] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   81.509320][ T6386] loop0: detected capacity change from 0 to 512
[   81.694235][ T6395] loop2: detected capacity change from 0 to 256
[   81.703259][ T6395] exfat: Deprecated parameter 'utf8'
[   81.703337][ T6395] exfat: Deprecated parameter 'namecase'
[   81.705315][ T6395] exfat: Deprecated parameter 'namecase'
[   81.705329][ T6395] exfat: Deprecated parameter 'utf8'
[   81.714562][ T6395] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   81.714897][ T6395] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[   81.748581][   T35] audit: type=1800 audit(1788502519.193:4): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.324" name="file1" dev="loop2" ino=1048616 res=0 errno=0
[   81.767568][ T6398] evm: overlay not supported
[   81.833581][ T6404] gretap0: entered promiscuous mode
[   82.346267][   T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   82.498348][   T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   82.507534][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.507590][   T25] usb 3-1: Product: syz
[   82.507629][   T25] usb 3-1: Manufacturer: syz
[   82.507668][   T25] usb 3-1: SerialNumber: syz
[   82.523524][   T25] usb 3-1: config 0 descriptor??
[   82.531972][   T25] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   82.734738][ T6431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.838856][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'.
[   82.838956][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'.
[   82.950238][   T25] gspca_stk1135: reg_w 0x0 err -71
[   82.959387][   T25] gspca_stk1135: serial bus timeout: status=0x00
[   82.959436][   T25] gspca_stk1135: Sensor write failed
[   82.959497][   T25] gspca_stk1135: serial bus timeout: status=0x00
[   82.959524][   T25] gspca_stk1135: Sensor write failed
[   82.959559][   T25] gspca_stk1135: serial bus timeout: status=0x00
[   82.959586][   T25] gspca_stk1135: Sensor read failed
[   82.959622][   T25] gspca_stk1135: serial bus timeout: status=0x00
[   82.959654][   T25] gspca_stk1135: Sensor read failed
[   82.959678][   T25] gspca_stk1135: Detected sensor type unknown (0x0)
[   82.959718][   T25] gspca_stk1135: serial bus timeout: status=0x00
[   82.959744][   T25] gspca_stk1135: Sensor read failed
[   82.959779][   T25] gspca_stk1135: serial bus timeout: status=0x00
[   82.959805][   T25] gspca_stk1135: Sensor read failed
[   82.959843][   T25] gspca_stk1135: serial bus timeout: status=0x00
[   82.992635][   T25] gspca_stk1135: Sensor write failed
[   82.994473][   T25] gspca_stk1135: serial bus timeout: status=0x00
[   82.996616][   T25] gspca_stk1135: Sensor write failed
[   82.998389][   T25] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[   83.011149][   T25] usb 3-1: USB disconnect, device number 2
[   83.383390][   T35] audit: type=1800 audit(1788502520.823:5): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.353" name="bus" dev="tmpfs" ino=598 res=0 errno=0
[   84.058122][ T6487] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   84.508198][ T6499] loop2: detected capacity change from 0 to 512
[   84.531764][ T6499] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   84.546603][ T6499] EXT4-fs (loop2): 1 truncate cleaned up
[   84.547326][ T6499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.579374][ T5665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.968141][ T6525] syz.1.375 uses obsolete (PF_INET,SOCK_PACKET)
[   85.031442][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[   85.317215][ T6536] netlink: 'syz.1.379': attribute type 28 has an invalid length.
[   85.317435][ T6536] netlink: 'syz.1.379': attribute type 3 has an invalid length.
[   85.317618][ T6536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.379'.
[   85.930131][ T6556] Zero length message leads to an empty skb
[   86.257150][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'.
[   86.344433][ T6580] loop0: detected capacity change from 0 to 512
[   86.649258][ T6591] use of bytesused == 0 is deprecated and will be removed in the future,
[   86.649308][ T6591] use the actual size instead.
[   86.678959][ T6591] loop2: detected capacity change from 0 to 4096
[   87.276670][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'.
[   87.735692][ T5668] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   87.886942][ T5668] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[   87.888051][ T5668] usb 3-1: config 1 has an invalid descriptor of length 85, skipping remainder of the config
[   87.888082][ T5668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1145, setting to 1024
[   87.888099][ T5668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   87.888113][ T5668] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.888138][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.896739][ T6608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   88.162024][ T6624] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   88.358482][ T6640] loop0: detected capacity change from 0 to 256
[   88.369456][ T6640] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   88.569838][ T6653] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   88.586328][ T6653] batman_adv: batadv0: Adding interface: netdevsim0
[   88.586377][ T6653] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.586423][ T6653] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   88.634015][ T6657] overlayfs: failed to clone upperpath
[   88.860982][ T6686] netlink: 32 bytes leftover after parsing attributes in process `syz.0.450'.
[   89.005869][ T5670] Bluetooth: hci0: connection err: -111
[   90.538830][ T5668] usb 3-1: USB disconnect, device number 3
[   90.923416][ T6727] ubi0: attaching mtd0
[   90.932553][ T6727] ubi0: scanning is finished
[   90.932761][ T6727] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   91.247578][ T6727] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[   91.625984][ T6758] netlink: 'syz.1.482': attribute type 1 has an invalid length.
[   91.758903][ T6760] loop2: detected capacity change from 0 to 40427
[   91.762643][ T6760] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   91.762655][ T6760] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   91.764525][ T6760] F2FS-fs (loop2): invalid crc value
[   91.802137][ T6760] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   91.806603][ T6760] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   91.806796][ T6760] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   91.890678][   T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   92.032328][ T6771] syz.2.483: attempt to access beyond end of device
[   92.032328][ T6771] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[   92.289827][ T6773] lo speed is unknown, defaulting to 1000
[   92.290150][ T6773] lo speed is unknown, defaulting to 1000
[   92.300783][ T6773] lo speed is unknown, defaulting to 1000
[   92.308892][ T6773] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   92.309355][ T6773] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   92.309532][ T6773] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   92.319713][ T6773] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   92.339456][ T6773] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   92.411447][ T6773] lo speed is unknown, defaulting to 1000
[   92.412282][ T6773] lo speed is unknown, defaulting to 1000
[   92.413001][ T6773] lo speed is unknown, defaulting to 1000
[   92.448167][   T25] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[   92.449215][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.449227][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.449242][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.450497][   T25] usb 1-1: config 0 descriptor??
[   92.556831][ T5665] syz-executor: attempt to access beyond end of device
[   92.556831][ T5665] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   92.567098][ T5665] CPU: 0 UID: 0 PID: 5665 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   92.567144][ T5665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.567152][ T5665] Call Trace:
[   92.567158][ T5665]  <TASK>
[   92.567164][ T5665]  dump_stack_lvl+0xe8/0x150
[   92.567208][ T5665]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   92.567230][ T5665]  f2fs_write_end_bio+0x1211/0x16e0
[   92.567247][ T5665]  ? blkg_put+0x22/0x240
[   92.567272][ T5665]  __submit_merged_bio+0x258/0x6a0
[   92.567312][ T5665]  ? rcu_is_watching+0x16/0xb0
[   92.567329][ T5665]  __submit_merged_write_cond+0x3c9/0x4e0
[   92.567350][ T5665]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   92.567388][ T5665]  f2fs_write_data_pages+0x2a27/0x36f0
[   92.567401][ T5665]  ? __lock_acquire+0x6df/0x2e50
[   92.567433][ T5665]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   92.567471][ T5665]  ? __pfx_hlock_conflict+0x10/0x10
[   92.567482][ T5665]  ? __bfs+0x153/0x290
[   92.567490][ T5665]  ? __pfx_hlock_conflict+0x10/0x10
[   92.567510][ T5665]  ? lockdep_unlock+0x5c/0xd0
[   92.567523][ T5665]  ? __lock_acquire+0x14b9/0x2e50
[   92.567546][ T5665]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   92.567556][ T5665]  do_writepages+0x338/0x560
[   92.567578][ T5665]  ? do_raw_spin_unlock+0x4d/0x200
[   92.567593][ T5665]  filemap_fdatawrite+0x1e9/0x2f0
[   92.567605][ T5665]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   92.567637][ T5665]  ? do_raw_spin_unlock+0x4d/0x200
[   92.567652][ T5665]  f2fs_sync_dirty_inodes+0x30e/0x830
[   92.567670][ T5665]  f2fs_write_checkpoint+0xa3d/0x2710
[   92.567681][ T5665]  ? __lock_acquire+0x6df/0x2e50
[   92.567706][ T5665]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   92.567743][ T5665]  kill_f2fs_super+0x2dd/0x700
[   92.567759][ T5665]  ? __pfx_kill_f2fs_super+0x10/0x10
[   92.567775][ T5665]  ? call_rcu+0x64d/0x8b0
[   92.567786][ T5665]  ? lockdep_hardirqs_on+0x7b/0x110
[   92.567805][ T5665]  deactivate_locked_super+0xbc/0x110
[   92.567816][ T5665]  cleanup_mnt+0x3d3/0x460
[   92.567830][ T5665]  task_work_run+0x1d9/0x270
[   92.567872][ T5665]  ? __pfx_task_work_run+0x10/0x10
[   92.567888][ T5665]  exit_to_user_mode_loop+0x204/0x770
[   92.567898][ T5665]  ? rcu_is_watching+0x16/0xb0
[   92.567911][ T5665]  do_syscall_64+0x328/0x520
[   92.567922][ T5665]  ? trace_irq_disable+0x3b/0x140
[   92.567931][ T5665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.567943][ T5665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.567953][ T5665] RIP: 0033:0x7f0661b9f397
[   92.567964][ T5665] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   92.567973][ T5665] RSP: 002b:00007ffd3b678e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   92.567984][ T5665] RAX: 0000000000000000 RBX: 00007f0661c34474 RCX: 00007f0661b9f397
[   92.567991][ T5665] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3b678ee0
[   92.567996][ T5665] RBP: 00007ffd3b678ee0 R08: 00007ffd3b679ee0 R09: 00000000ffffffff
[   92.568003][ T5665] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3b679f70
[   92.568009][ T5665] R13: 00007f0661c34474 R14: 00000000000168c4 R15: 00007ffd3b679fb0
[   92.568025][ T5665]  </TASK>
[   92.582273][ T5665] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   92.796395][ T5722] loop2: lost filesystem error report for type 5 error -108
[   92.871651][   T25] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   92.882738][   T25] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   92.886927][   T25] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   92.890284][   T25] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   92.895999][   T25] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   92.896078][   T25] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   92.896118][   T25] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   92.896156][   T25] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   92.896193][   T25] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   92.896230][   T25] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   92.921255][   T25] sony 0003:054C:024B.0001: unexpected long global item
[   92.925234][   T25] sony 0003:054C:024B.0001: parse failed
[   92.928095][   T25] sony 0003:054C:024B.0001: probe with driver sony failed with error -22
[   93.059487][   T35] audit: type=1326 audit(1788502530.503:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661b9e159 code=0x7ffc0000
[   93.065603][   T35] audit: type=1326 audit(1788502530.503:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661b9e159 code=0x7ffc0000
[   93.084711][   T35] audit: type=1326 audit(1788502530.523:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661b9e159 code=0x7ffc0000
[   93.085142][   T35] audit: type=1326 audit(1788502530.523:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.486" exe="/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f0661b9e159 code=0x7ffc0000
[   93.085172][   T35] audit: type=1326 audit(1788502530.523:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661b9e159 code=0x7ffc0000
[   93.085198][   T35] audit: type=1326 audit(1788502530.523:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661b9e159 code=0x7ffc0000
[   93.087013][   T35] audit: type=1326 audit(1788502530.523:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661b9e159 code=0x7ffc0000
[   93.087309][   T35] audit: type=1326 audit(1788502530.533:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.486" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0661b9e159 code=0x7ffc0000
[   93.087437][   T35] audit: type=1326 audit(1788502530.533:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.486" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0661b9e159 code=0x7ffc0000
[   93.103613][ T5668] usb 1-1: USB disconnect, device number 4
[   93.392464][ T6788] loop2: detected capacity change from 0 to 1024
[   93.393314][ T6788] EXT4-fs: Ignoring removed orlov option
[   93.393330][ T6788] EXT4-fs: Ignoring removed i_version option
[   93.417600][ T6788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.467750][ T5665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.654909][   T35] audit: type=1326 audit(1788502531.093:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.0.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28af9e159 code=0x7ffc0000
[   93.762751][ T6809] loop0: detected capacity change from 0 to 1024
[   93.768529][ T6809] EXT4-fs: Ignoring removed bh option
[   93.775744][ T6809] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled
[   93.791713][ T6809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.863064][ T5666] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.168241][ T6824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.502'.
[   94.170395][ T6824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.502'.
[   94.337654][ T6834] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   94.337654][ T6834] The task syz.1.504 (6834) triggered the difference, watch for misbehavior.
[   95.368722][ T6869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.941920][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'.
[   95.968713][ T6891] netlink: 'syz.0.527': attribute type 13 has an invalid length.
[   96.081723][ T6900] netlink: 56 bytes leftover after parsing attributes in process `syz.1.531'.
[   96.272619][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'.
[   96.334879][ T6898] loop2: detected capacity change from 0 to 32768
[   96.409820][ T6898] ERROR: (device loop2): diAllocAG: numfree > numinos
[   96.409820][ T6898] 
[   96.409899][ T6898] ialloc: diAlloc returned -5!
[   96.418025][ T6923] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   96.423400][ T6923] overlayfs: conflicting options: userxattr,metacopy=on
[   96.730298][ T6938] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   96.951427][ T6960] FAULT_INJECTION: forcing a failure.
[   96.951427][ T6960] name failslab, interval 1, probability 0, space 0, times 0
[   96.951480][ T6960] CPU: 0 UID: 0 PID: 6960 Comm: syz.0.559 Not tainted syzkaller #0 PREEMPT(full) 
[   96.951507][ T6960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.951512][ T6960] Call Trace:
[   96.951516][ T6960]  <TASK>
[   96.951520][ T6960]  dump_stack_lvl+0xe8/0x150
[   96.951537][ T6960]  should_fail_ex+0x410/0x560
[   96.951550][ T6960]  should_failslab+0xa8/0x100
[   96.951562][ T6960]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[   96.951571][ T6960]  ? __kernfs_new_node+0xa9/0x980
[   96.951581][ T6960]  ? __kernfs_new_node+0xa9/0x980
[   96.951592][ T6960]  kstrdup+0x42/0x100
[   96.951601][ T6960]  __kernfs_new_node+0xa9/0x980
[   96.951611][ T6960]  ? vsnprintf+0xe42/0xef0
[   96.951624][ T6960]  ? __pfx___kernfs_new_node+0x10/0x10
[   96.951633][ T6960]  ? kernfs_root+0x1c/0x230
[   96.951645][ T6960]  ? kernfs_root+0x1c/0x230
[   96.951658][ T6960]  ? kernfs_root+0x1c/0x230
[   96.951673][ T6960]  kernfs_new_node+0xea/0x140
[   96.951691][ T6960]  __kernfs_create_file+0x4b/0x2e0
[   96.951710][ T6960]  cgroup_addrm_files+0x837/0xd70
[   96.951726][ T6960]  ? __pfx_cgroup_addrm_files+0x10/0x10
[   96.951736][ T6960]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   96.951757][ T6960]  ? idr_replace+0x136/0x1b0
[   96.951821][ T6960]  css_populate_dir+0x123/0x3d0
[   96.951845][ T6960]  cgroup_apply_control_enable+0x797/0xda0
[   96.951864][ T6960]  cgroup_mkdir+0xd2c/0xf90
[   96.951879][ T6960]  ? __pfx_cgroup_mkdir+0x10/0x10
[   96.951894][ T6960]  kernfs_iop_mkdir+0x213/0x360
[   96.951915][ T6960]  vfs_mkdir+0x40c/0x620
[   96.951936][ T6960]  filename_mkdirat+0x285/0x510
[   96.951956][ T6960]  ? __pfx_filename_mkdirat+0x10/0x10
[   96.951970][ T6960]  ? do_getname+0x151/0x250
[   96.951988][ T6960]  __se_sys_mkdirat+0x35/0x150
[   96.952005][ T6960]  do_syscall_64+0x166/0x520
[   96.952020][ T6960]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.952036][ T6960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.952048][ T6960] RIP: 0033:0x7fe28af9e159
[   96.952060][ T6960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.952067][ T6960] RSP: 002b:00007fe28bf4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   96.952078][ T6960] RAX: ffffffffffffffda RBX: 00007fe28b225fa0 RCX: 00007fe28af9e159
[   96.952087][ T6960] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[   96.952096][ T6960] RBP: 00007fe28b035024 R08: 0000000000000000 R09: 0000000000000000
[   96.952103][ T6960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.952110][ T6960] R13: 00007fe28b226038 R14: 00007fe28b225fa0 R15: 00007ffe6851f218
[   96.952130][ T6960]  </TASK>
[   96.952231][ T6960] cgroup: cgroup_addrm_files: failed to add throttle.read_bps_device, err=-12
[   97.139999][ T6969] loop0: detected capacity change from 0 to 128
[   97.151863][ T6969] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   97.151976][ T6969] hpfs: filesystem error: improperly stopped
[   97.151987][ T6969] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   97.151997][ T6969] hpfs: You really don't want any checks? You are crazy...
[   97.152216][ T6969] hpfs: hpfs_map_sector(): read error
[   97.152223][ T6969] hpfs: code page support is disabled
[   97.152296][ T6969] hpfs: hpfs_map_4sectors(): unaligned read
[   97.152341][ T6969] hpfs: hpfs_map_4sectors(): unaligned read
[   97.152347][ T6969] hpfs: filesystem error: unable to find root dir
[   97.161643][ T6969] hpfs: hpfs_map_4sectors(): unaligned read
[   97.162316][ T6969] hpfs: hpfs_map_sector(): read error
[   97.186632][ T5722] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   97.301352][ T6973] openvswitch: netlink: Unknown key attributes 2
[   97.350517][ T5722] usb 3-1: Using ep0 maxpacket: 32
[   97.352795][ T5722] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[   97.354170][ T5722] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[   97.354190][ T5722] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   97.354207][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0
[   97.354229][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.373876][ T5722] usb 3-1: config 0 descriptor??
[   97.769124][ T6979] loop0: detected capacity change from 0 to 32768
[   98.079628][ T6987] Illegal XDP return value 4294967282 on prog  (id 33) dev syz_tun, expect packet loss!
[   98.326267][ T6983] fuse: Bad value for 'fd'
[   98.326831][ T5722] hid_parser_main: 1161 callbacks suppressed
[   98.326847][ T5722] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0
[   98.326863][ T5722] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0
[   98.326878][ T5722] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0
[   98.326892][ T5722] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0
[   98.326908][ T5722] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0
[   98.326923][ T5722] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0
[   98.326937][ T5722] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0
[   98.326952][ T5722] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0
[   98.326965][ T5722] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0
[   98.326979][ T5722] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0
[   98.327538][ T5722] hid-alps 0003:044E:120B.0002: unbalanced collection at end of report description
[   98.327865][ T5722] hid-alps 0003:044E:120B.0002: parse failed
[   98.327955][ T5722] hid-alps 0003:044E:120B.0002: probe with driver hid-alps failed with error -22
[   98.378195][ T5722] usb 3-1: USB disconnect, device number 4
[   98.434015][ T6992] loop0: detected capacity change from 0 to 32768
[   98.463681][ T6992] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.481565][ T6992] XFS (loop0): Ending clean mount
[   98.515320][ T6992] XFS (loop0): User initiated shutdown received.
[   98.515867][ T6992] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:458).  Shutting down filesystem.
[   98.515889][ T6992] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   98.566567][ T5666] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.701095][   T35] kauditd_printk_skb: 4 callbacks suppressed
[   98.701155][   T35] audit: type=1800 audit(1788502536.143:20): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.576" name="addr_trtype" dev="configfs" ino=10070 res=0 errno=0
[   98.701192][   T35] audit: type=1800 audit(1788502536.143:21): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.576" name="addr_traddr" dev="configfs" ino=10071 res=0 errno=0
[   98.701228][   T35] audit: type=1800 audit(1788502536.143:22): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.576" name="addr_trsvcid" dev="configfs" ino=10072 res=0 errno=0
[   98.701314][   T35] audit: type=1800 audit(1788502536.143:23): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.576" name="addr_adrfam" dev="configfs" ino=10074 res=0 errno=0
[   98.722199][ T7008] loop2: detected capacity change from 0 to 512
[   98.733069][ T7006] nvmet_tcp: address family 255 not supported
[   98.738366][ T7008] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   98.753214][ T7008] EXT4-fs (loop2): 1 truncate cleaned up
[   98.765355][ T7008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.817817][ T5665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.974527][ T7030] loop2: detected capacity change from 0 to 512
[   98.983172][ T7030] EXT4-fs: Ignoring removed nobh option
[   98.987927][ T7030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   99.004508][ T7030] EXT4-fs (loop2): 1 truncate cleaned up
[   99.006928][ T7030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.033474][ T7030] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   99.066949][ T5665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.624990][ T7041] loop2: detected capacity change from 0 to 32768
[   99.678943][ T7041] jfs_strtoUCS: char2uni returned -22.
[   99.679152][ T7041] charset = euc-jp, char = 0xd4
[  100.135584][ T5743] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  100.286300][ T5743] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  100.291376][ T5743] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  100.296029][ T5743] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  100.300902][ T5743] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  100.306291][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.349385][ T5743] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  100.353502][ T5743] usb 3-1: invalid MIDI out EP 0
[  100.581450][ T5743] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  100.601394][ T5743] usb 3-1: USB disconnect, device number 5
[  101.690663][ T7099] loop2: detected capacity change from 0 to 512
[  101.693261][ T7099] EXT4-fs (loop2): Test dummy encryption mode enabled
[  101.713310][ T7099] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.616: inode has both inline data and extents flags
[  101.713365][ T7099] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  101.715467][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  101.715494][    C0] EXT4-fs (loop2): initial error at time 1788502539: ext4_orphan_get:1403: inode 15
[  101.715557][    C0] EXT4-fs (loop2): last error at time 1788502539: ext4_orphan_get:1403: inode 15
[  101.718946][ T7099] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.616: couldn't read orphan inode 15 (err -117)
[  101.718960][ T7099] loop2: lost filesystem error report for type 5 error -117
[  101.721529][ T7099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.770302][ T7099] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  101.821329][ T5665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.900295][ T7109] sctp: [Deprecated]: syz.1.622 (pid 7109) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.900295][ T7109] Use struct sctp_sack_info instead
[  101.903099][ T7111] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  101.903148][ T7111] CIFS mount error: No usable UNC path provided in device string!
[  101.903148][ T7111] 
[  101.903268][ T7111] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  102.167861][ T7125] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  102.245351][   T35] audit: type=1326 audit(1788502539.683:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.2.630" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0661b9e159 code=0x0
[  102.266062][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'.
[  102.369628][ T7139] sctp: [Deprecated]: syz.0.636 (pid 7139) Use of int in max_burst socket option deprecated.
[  102.369628][ T7139] Use struct sctp_assoc_value instead
[  102.411260][ T7141] netlink: 'syz.0.637': attribute type 2 has an invalid length.
[  102.513672][ T7146] process 'syz.1.639' launched '/dev/fd/4' with NULL argv: empty string added
[  103.141442][   T35] audit: type=1326 audit(1788502540.583:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.0.649" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe28af9e159 code=0x0
[  103.980864][ T7194] loop2: detected capacity change from 0 to 512
[  103.992452][ T7194] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  104.027527][ T7194] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  105.841744][ T7235] loop2: detected capacity change from 0 to 1764
[  106.016794][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'.
[  106.281385][ T7249] netlink: 144 bytes leftover after parsing attributes in process `syz.2.687'.
[  106.644113][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'.
[  107.520616][ T7285] overlayfs: metacopy with no lower data found - abort lookup (/file2)
[  107.856961][   T29] IPVS: starting estimator thread 0...
[  107.945556][ T7296] IPVS: using max 84 ests per chain, 201600 per kthread
[  108.067802][ T7307] loop2: detected capacity change from 0 to 1764
[  108.763187][   T35] audit: type=1326 audit(1788502546.203:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28af9e159 code=0x7ffc0000
[  108.777431][   T35] audit: type=1326 audit(1788502546.223:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28af9e159 code=0x7ffc0000
[  108.791472][   T35] audit: type=1326 audit(1788502546.233:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28af9e159 code=0x7ffc0000
[  108.801615][   T35] audit: type=1326 audit(1788502546.233:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28af9e159 code=0x7ffc0000
[  108.812335][   T35] audit: type=1326 audit(1788502546.263:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.726" exe="/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe28af9e159 code=0x7ffc0000
[  108.820315][   T35] audit: type=1326 audit(1788502546.263:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28af9e159 code=0x7ffc0000
[  108.829430][   T35] audit: type=1326 audit(1788502546.263:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28af9e159 code=0x7ffc0000
[  108.840831][   T35] audit: type=1326 audit(1788502546.293:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.726" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe28af9e159 code=0x7ffc0000
[  108.840879][   T35] audit: type=1326 audit(1788502546.293:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.726" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe28af9e159 code=0x7ffc0000
[  110.614783][ T7377] loop2: detected capacity change from 0 to 8
[  110.680431][ T7377] unable to read xattr id index table
[  110.804289][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.744'.
[  111.474126][ T7395] lo speed is unknown, defaulting to 1000
[  111.931830][ T7403] netlink: 'syz.0.753': attribute type 21 has an invalid length.
[  112.164301][ T7399] block nbd2: Receive control failed (result -32)
[  112.186017][ T7398] block nbd2: shutting down sockets
[  112.484462][ T7416] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.346123][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  113.496165][   T10] usb 3-1: Using ep0 maxpacket: 8
[  113.501551][   T10] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  113.506872][   T10] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  113.526547][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.526597][   T10] usb 3-1: Product: syz
[  113.526638][   T10] usb 3-1: Manufacturer: syz
[  113.526669][   T10] usb 3-1: SerialNumber: syz
[  113.542088][   T10] usb 3-1: config 0 descriptor??
[  113.560006][   T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  113.563788][   T10] usb 3-1: setting power ON
[  113.568070][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  113.636043][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  113.640559][   T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  113.651036][   T10] usb 3-1: media controller created
[  113.694168][ T7466] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  113.699198][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  113.774845][   T10] usb 3-1: selecting invalid altsetting 6
[  113.790133][   T10] usb 3-1: digital interface selection failed (-22)
[  113.790187][   T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  113.803108][   T10] usb 3-1: setting power OFF
[  113.803182][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  113.803225][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  113.803324][   T10] (NULL device *): no alternate interface
[  113.934221][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  113.973508][   T10] usb 3-1: USB disconnect, device number 6
[  114.485671][ T7486] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20004
[  114.584882][ T7488] loop2: detected capacity change from 0 to 512
[  114.604116][ T7488] ext4: Bad value for 'stripe'
[  114.750321][   T35] audit: type=1804 audit(1788502552.183:35): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.794" name="/newroot/197/file0" dev="tmpfs" ino=1057 res=1 errno=0
[  114.770286][ T7490] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1
[  114.779165][ T7490] ref_ctr increment failed for inode: 0x421 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810478cc80
[  114.788558][ T7490] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1
[  114.801194][ T7490] ref_ctr decrement failed for inode: 0x421 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810478cc80
[  114.809106][ T7490] uprobe: syz.2.794:7490 failed to unregister, leaking uprobe
[  115.934129][ T7496] loop2: detected capacity change from 0 to 256
[  115.939102][ T7496] exfat: Deprecated parameter 'utf8'
[  115.939160][ T7496] exfat: Deprecated parameter 'utf8'
[  115.939250][ T7496] exfat: Deprecated parameter 'namecase'
[  116.285928][ T7496] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d)
[  117.705454][    C1] sched: DL replenish lagged too much
[  133.363331][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  133.368832][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  187.395919][   T56] Bluetooth: hci0: command 0x0406 tx timeout
[  187.406057][   T56] Bluetooth: hci1: command 0x0406 tx timeout
[  194.747544][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  194.758476][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  256.238389][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  256.248977][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  318.537014][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  318.548081][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  340.727597][   T37] INFO: task kworker/1:6:5775 blocked for more than 144 seconds.
[  340.739095][   T37]       Not tainted syzkaller #0
[  340.745682][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  340.758140][   T37] task:kworker/1:6     state:D stack:23600 pid:5775  tgid:5775  ppid:2      task_flags:0x4208060 flags:0x00080000
[  340.777467][   T37] 
** replaying previous printk message **
[  340.777467][   T37] Workqueue: events_power_efficient reg_check_chans_work
[  340.798488][   T37] Call Trace:
[  340.806015][   T37]  <TASK>
[  340.806026][   T37]  __schedule+0x17db/0x58f0
[  340.806047][   T37]  ? do_raw_spin_unlock+0x4d/0x200
[  340.806061][   T37]  ? __pfx___schedule+0x10/0x10
[  340.806072][   T37]  ? schedule+0x90/0x2b0
[  340.806081][   T37]  schedule+0x164/0x2b0
[  340.806092][   T37]  schedule_preempt_disabled+0x13/0x30
[  340.806104][   T37]  __mutex_lock+0x7c1/0x1550
[  340.806121][   T37]  ? __mutex_lock+0x5d4/0x1550
[  340.806137][   T37]  ? reg_check_chans_work+0x1a1/0x1110
[  340.806153][   T37]  ? __pfx___mutex_lock+0x10/0x10
[  340.806166][   T37]  ? cfg80211_reg_check_beaconing+0xcf3/0x11d0
[  340.806180][   T37]  ? add_lock_to_list+0xc7/0x100
[  340.806204][   T37]  reg_check_chans_work+0x1a1/0x1110
[  340.806228][   T37]  ? __pfx_reg_check_chans_work+0x10/0x10
[  340.806244][   T37]  ? lock_acquire+0x115/0x350
[  340.806257][   T37]  ? rcu_is_watching+0x16/0xb0
[  340.806270][   T37]  ? process_scheduled_works+0x97a/0x1630
[  340.806285][   T37]  process_scheduled_works+0xc3d/0x1630
[  340.806319][   T37]  ? __pfx_process_scheduled_works+0x10/0x10
[  340.806338][   T37]  ? assign_work+0x3cf/0x5d0
[  340.806350][   T37]  worker_thread+0xa47/0xfb0
[  340.806372][   T37]  ? __kthread_parkme+0x71/0x1f0
[  340.806393][   T37]  kthread+0x38b/0x480
[  340.806405][   T37]  ? __pfx_worker_thread+0x10/0x10
[  340.806419][   T37]  ? __pfx_kthread+0x10/0x10
[  340.806432][   T37]  ret_from_fork+0x514/0xb70
[  340.806444][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  340.806451][   T37]  ? __switch_to+0xc89/0x1420
[  340.806462][   T37]  ? __pfx_kthread+0x10/0x10
[  340.806469][   T37]  ret_from_fork_asm+0x1a/0x30
[  340.806481][   T37]  </TASK>
[  340.806489][   T37] 
[  340.806489][   T37] Showing all locks held in the system:
[  340.806494][   T37] locks held by kworker/0:0/9: 4, on CPU#0:
[  340.806499][   T37]  #0: ffff8881691e5940 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.806523][   T37]  #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.806546][   T37]  #2: ffff888174529440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  340.806566][   T37]  #3: ffff88811e44dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x752/0x9b0
[  340.806584][   T37] locks held by kworker/0:1/10: 3, on CPU#0:
[  340.806589][   T37]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.806607][   T37]  #1: ffffc900000f7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.806625][   T37]  #2: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  340.806645][   T37] locks held by kworker/u8:1/13: 4, last CPU#0:
[  340.806650][   T37]  #0: ffff888114a5f140 ((wq_completion)krds_cp_wq#0/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.806668][   T37]  #1: ffffc90000127c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.806689][   T37]  #2: ffff8881072c5280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  340.806709][   T37]  #3: ffff8881156aa960 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_nodelay+0x2a/0x180
[  340.806729][   T37] locks held by pr/ttyS0/16: 5, last CPU#1:
[  340.806733][   T37]  #0: ffffffff8ec367b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  340.806783][   T37]  #1: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0
[  340.806812][   T37]  #2: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270
[  340.806845][   T37]  #3: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  340.806877][   T37]  #4: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  340.806912][   T37] locks held by kworker/u10:0/28: 3, last CPU#0:
[  340.806920][   T37]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.806948][   T37]  #1: ffffc90000a37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.806967][   T37]  #2: ffff8881bcc107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  340.806984][   T37] locks held by kworker/u9:2/31: 3, last CPU#0:
[  340.806989][   T37]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807007][   T37]  #1: ffffc90000a67c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807026][   T37]  #2: ffff8881bb7207a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  340.807042][   T37] locks held by kworker/1:1/34: 3, last CPU#1:
[  340.807047][   T37]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807065][   T37]  #1: ffffc90000a97c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807084][   T37]  #2: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890
[  340.807104][   T37] locks held by khungtaskd/37: 1, last CPU#0:
[  340.807109][   T37]  #0: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  340.807129][   T37] locks held by kworker/u9:3/65: 3, last CPU#0:
[  340.807134][   T37]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807152][   T37]  #1: ffffc90001777c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807171][   T37]  #2: ffff888115270258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  340.807200][   T37] locks held by kworker/0:2/807: 2, last CPU#0:
[  340.807205][   T37]  #0: ffff888174d12140 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807225][   T37]  #1: ffffc900055b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807249][   T37] locks held by kworker/u10:4/1011: 3, last CPU#0:
[  340.807254][   T37]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807272][   T37]  #1: ffffc9000714fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807290][   T37]  #2: ffff8881bb7307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  340.807309][   T37] locks held by kworker/u10:8/1115: 3, last CPU#1:
[  340.807314][   T37]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807332][   T37]  #1: ffffc9000765fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807350][   T37]  #2: ffff8881bd8607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  340.807380][   T37] locks held by klogd/5033: 1, last CPU#1:
[  340.807385][   T37]  #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  340.807402][   T37] locks held by udevd/5044: 5, last CPU#0:
[  340.807406][   T37]  #0: ffffffff8ee36150 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480
[  340.807425][   T37]  #1: ffff888176c89d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  340.807444][   T37]  #2: ffff88816c8029f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  340.807465][   T37]  #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  340.807480][   T37]  #4: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  340.807498][   T37] locks held by kworker/1:3/5062: 4, last CPU#1:
[  340.807503][   T37]  #0: ffff8881691e5940 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807523][   T37]  #1: ffffc9000701fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807545][   T37]  #2: ffff888174529440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  340.807563][   T37]  #3: ffff88811e44dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  340.807581][   T37] locks held by dhcpcd/5340: 3, last CPU#0:
[  340.807585][   T37]  #0: ffffffff8f4f3f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0
[  340.807604][   T37]  #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  340.807620][   T37]  #2: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  340.807637][   T37] locks held by dhcpcd/5341: 4, last CPU#0:
[  340.807642][   T37]  #0: ffffffff8ee36150 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480
[  340.807660][   T37]  #1: ffff88816be21d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  340.807678][   T37]  #2: ffff88816a1adcf8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  340.807700][   T37]  #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  340.807716][   T37] locks held by getty/5423: 2, on CPU#0:
[  340.807721][   T37]  #0: ffff8881740930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  340.807738][   T37]  #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  340.807794][   T37] locks held by kworker/u8:2/5664: 3, on CPU#1:
[  340.807801][   T37]  #0: ffff888173ef3140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807820][   T37]  #1: ffffc90005a77c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807838][   T37]  #2: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  340.807856][   T37] locks held by syz-executor/5665: 1, on CPU#1:
[  340.807861][   T37]  #0: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  340.807879][   T37] locks held by syz-executor/5666: 1, on CPU#0:
[  340.807884][   T37]  #0: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  340.807901][   T37] locks held by syz-executor/5667: 1, on CPU#1:
[  340.807906][   T37]  #0: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  340.807932][   T37] locks held by kworker/u8:3/5721: 2, last CPU#0:
[  340.807939][   T37]  #0: ffff888174125140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.807971][   T37]  #1: ffffc90005cb7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.808005][   T37] locks held by kworker/0:4/5722: 5, last CPU#0:
[  340.808014][   T37]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.808046][   T37]  #1: ffffc90005cd7c40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.808077][   T37]  #2: ffffc90005cd7770 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_atomic_helper_dirtyfb+0x106/0xfd0
[  340.808097][   T37]  #3: ffffc90005cd7798 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_atomic_helper_dirtyfb+0x106/0xfd0
[  340.808114][   T37]  #4: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  340.808133][   T37] locks held by kworker/0:6/5774: 4, last CPU#0:
[  340.808138][   T37]  #0: ffff88810ba04140 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.808158][   T37]  #1: ffffc90005f57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.808180][   T37]  #2: ffff888105ae9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  340.808203][   T37]  #3: ffff88817497b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  340.808221][   T37] locks held by kworker/1:6/5775: 4, on CPU#1:
[  340.808225][   T37]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.808244][   T37]  #1: ffffc90005f67c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.808262][   T37]  #2: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110
[  340.808280][   T37]  #3: ffff8881bb7307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x1a1/0x1110
[  340.808298][   T37] locks held by kworker/1:8/7510: 2, last CPU#1:
[  340.808303][   T37]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.808321][   T37]  #1: ffffc9000f107c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  340.808340][   T37] locks held by syz-executor/7511: 1, last CPU#0:
[  340.808345][   T37]  #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  340.808361][   T37] locks held by syz-executor/7513: 1, last CPU#1:
[  340.808366][   T37]  #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  340.808382][   T37] locks held by syz-executor/7514: 4, last CPU#0:
[  340.808386][   T37]  #0: ffff88816f66b2e0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590
[  340.808405][   T37]  #1: ffffffff8f4f3f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0xef/0x180
[  340.808424][   T37]  #2: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  340.808440][   T37]  #3: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  340.808458][   T37] 
[  340.808460][   T37] =============================================
[  340.808460][   T37] 
[  340.808463][   T37] NMI backtrace for cpu 0
[  340.808469][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  340.808478][   T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  340.808482][   T37] Call Trace:
[  340.808485][   T37]  <TASK>
[  340.808488][   T37]  dump_stack_lvl+0xe8/0x150
[  340.808499][   T37]  nmi_cpu_backtrace+0x274/0x2d0
[  340.808510][   T37]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  340.808522][   T37]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  340.808534][   T37]  sys_info+0x135/0x170
[  340.808543][   T37]  watchdog+0xfd7/0x1030
[  340.808553][   T37]  ? watchdog+0x1c7/0x1030
[  340.808561][   T37]  kthread+0x38b/0x480
[  340.808568][   T37]  ? __pfx_watchdog+0x10/0x10
[  340.808574][   T37]  ? __pfx_kthread+0x10/0x10
[  340.808581][   T37]  ret_from_fork+0x514/0xb70
[  340.808588][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  340.808595][   T37]  ? __switch_to+0xc89/0x1420
[  340.808605][   T37]  ? __pfx_kthread+0x10/0x10
[  340.808612][   T37]  ret_from_fork_asm+0x1a/0x30
[  340.808623][   T37]  </TASK>
[  340.808626][   T37] Sending NMI from CPU 0 to CPUs 1:
[  340.808667][    C1] NMI backtrace for cpu 1
[  340.808680][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  340.808693][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  340.808699][    C1] RIP: 0010:io_serial_out+0x7c/0xc0
[  340.808714][    C1] Code: 47 54 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1c 84 c4 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1
[  340.808719][    C1] RSP: 0018:ffffc90000157900 EFLAGS: 00000002
[  340.808726][    C1] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000
[  340.808731][    C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020
[  340.808735][    C1] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004
[  340.808738][    C1] R10: dffffc0000000000 R11: ffffffff857371f0 R12: dffffc0000000000
[  340.808743][    C1] R13: 0000000000000020 R14: ffffffff9ad3f0c0 R15: 0000000000000000
[  340.808771][    C1] FS:  0000000000000000(0000) GS:ffff8882a8ccc000(0000) knlGS:0000000000000000
[  340.808782][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  340.808790][    C1] CR2: 00007fa414dfc000 CR3: 000000016ba34000 CR4: 00000000000006f0
[  340.808825][    C1] Call Trace:
[  340.808831][    C1]  <TASK>
[  340.808835][    C1]  __serial8250_console_fifo_write+0x1e6/0x3e0
[  340.808848][    C1]  serial8250_console_write+0xaa1/0x1200
[  340.808857][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  340.808864][    C1]  ? __schedule+0x17f1/0x58f0
[  340.808873][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  340.808883][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  340.808891][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  340.808899][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  340.808906][    C1]  nbcon_kthread_func+0x679/0x880
[  340.808914][    C1]  ? nbcon_kthread_func+0x163/0x880
[  340.808920][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  340.808927][    C1]  ? __kthread_parkme+0x71/0x1f0
[  340.808936][    C1]  ? __kthread_parkme+0x199/0x1f0
[  340.808945][    C1]  kthread+0x38b/0x480
[  340.808951][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  340.808956][    C1]  ? __pfx_kthread+0x10/0x10
[  340.808962][    C1]  ret_from_fork+0x514/0xb70
[  340.808969][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  340.808974][    C1]  ? __switch_to+0xc89/0x1420
[  340.808983][    C1]  ? __pfx_kthread+0x10/0x10
[  340.808989][    C1]  ret_from_fork_asm+0x1a/0x30
[  340.808997][    C1]  </TASK>
[  340.809654][   T37] Kernel panic - not syncing: hung_task: blocked tasks
[  341.413955][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  341.417647][   T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  341.421726][   T37] Call Trace:
[  341.423102][   T37]  <TASK>
[  341.424284][   T37]  vpanic+0x56d/0xa60
[  341.425941][   T37]  ? __pfx_vpanic+0x10/0x10
[  341.427791][   T37]  ? console_srcu_read_unlock+0x3a/0x60
[  341.430040][   T37]  panic+0xc5/0xd0
[  341.431568][   T37]  ? __pfx_panic+0x10/0x10
[  341.433391][   T37]  ? wq_watchdog_touch+0xf9/0x160
[  341.435373][   T37]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  341.437859][   T37]  watchdog+0x1030/0x1030
[  341.439593][   T37]  ? watchdog+0x1c7/0x1030
[  341.441434][   T37]  kthread+0x38b/0x480
[  341.443092][   T37]  ? __pfx_watchdog+0x10/0x10
[  341.445002][   T37]  ? __pfx_kthread+0x10/0x10
[  341.446907][   T37]  ret_from_fork+0x514/0xb70
[  341.448702][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  341.450791][   T37]  ? __switch_to+0xc89/0x1420
[  341.452714][   T37]  ? __pfx_kthread+0x10/0x10
[  341.454672][   T37]  ret_from_fork_asm+0x1a/0x30
[  341.456692][   T37]  </TASK>
[  341.458715][   T37] Kernel Offset: disabled
[  341.460510][   T37] Rebooting in 86400 seconds..
