last executing test programs:

18.4278533s ago: executing program 3 (id=554):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0xb970acdd662fb944)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

17.524943584s ago: executing program 3 (id=555):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550df33dd47ded539aef131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x60f6, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0)

16.000989299s ago: executing program 3 (id=562):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)

15.592623593s ago: executing program 2 (id=566):
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}}}, 0x0)

15.37677088s ago: executing program 2 (id=568):
syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000280)={[{@nodatacow}, {@compress}]}, 0x1, 0x51aa, &(0x7f0000005280)="$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")
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
capset(0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}})

14.068651897s ago: executing program 2 (id=579):
eventfd2(0xffffff80, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

13.095184017s ago: executing program 2 (id=584):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10)
socket$kcm(0xa, 0x1, 0x106)

13.094277887s ago: executing program 3 (id=594):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f00000006c0)={[{@user_xattr}, {@data_err_abort}, {@resuid}, {@errors_remount}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@jqfmt_vfsv0}, {@discard}, {@data_err_abort}]}, 0x1, 0x54f, &(0x7f0000001080)="$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")
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"})
chdir(&(0x7f0000000380)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.kill\x00', 0x275a, 0x0)

11.96550986s ago: executing program 2 (id=586):
prctl$PR_SET_SECUREBITS(0x1c, 0x7)
setfsuid(0xee00)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)={0xb0, 0x0, 0x0, [{{}, {0x0, 0x0, 0x1, 0x0, '/'}}]}, 0xb0)
getresuid(&(0x7f00000002c0), &(0x7f0000000480), &(0x7f00000004c0)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)

11.326793612s ago: executing program 3 (id=590):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4008f510, &(0x7f0000000100)={0x4000})

11.248875898s ago: executing program 2 (id=591):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20400a, &(0x7f00000008c0)={[{@stripe={'stripe', 0x3d, 0x40000003}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@data_err_ignore}, {@noinit_itable}, {@grpjquota}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x4)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141141, 0x0)
pwritev(r1, &(0x7f0000000980), 0x0, 0x0, 0x0)
fallocate(r0, 0x8, 0x0, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$vga_arbiter(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='lock io'], 0x8)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0)
write$vga_arbiter(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='unlock mem'], 0xb)

10.749844299s ago: executing program 3 (id=592):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001480)='net/netlink\x00')
read$FUSE(r1, &(0x7f00000042c0)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
fchown(r0, r2, 0x0)

8.320929078s ago: executing program 4 (id=602):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
dup3(r0, r1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5)
getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x3, 0x2}}, @TCA_TBF_RATE64={0xc, 0x4, 0x7455989c7a276006}]}}]}, 0x64}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5}}}, 0x24}}, 0x0)

8.216920997s ago: executing program 0 (id=604):
socket$inet6(0xa, 0x3, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
dup(0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000000480)=ANY=[], 0x0, 0x603, &(0x7f0000000780)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_PIE_ON(r3, 0x7005)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x722)

7.144533325s ago: executing program 0 (id=605):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

5.632976519s ago: executing program 4 (id=608):
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
open(0x0, 0x0, 0x0)
creat(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<qK\x80\x8fQ|\xf5d\x10\x10\xb1\xe6\xa4`\xd3\xf9\xa5\xd1I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'Q%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd30\xa2\x17\xca\xed\xdf\x91\xf9\x8c\xa1T\xfa\xc30\xfb&\xb7\x0f\xf9\xc9[R\xa8\xa3\xf4@dd9\xdd\vt\xa9\xa32\xc1\x1cA\xd2q\x9b\x9bV\x8c(\xb2\'\xf5~\xf6\xcf\xb0\x86\xdd\xab>\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0)
mmap(&(0x7f000047d000/0x9000)=nil, 0x9000, 0x200000f, 0x2012, r5, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001})
epoll_wait(r6, &(0x7f00000004c0)=[{}], 0x1, 0x1000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0x0, 0x2})
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3)

3.675168549s ago: executing program 1 (id=609):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x34)
fcntl$setsig(r3, 0xa, 0x21)
fcntl$notify(0xffffffffffffffff, 0x402, 0x34)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000000005000400000000000900020073797a3100000000050005000a000000050001000600000014000300686173683a697000"], 0x4c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)

3.674894159s ago: executing program 0 (id=610):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x140, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_MODES_OURS={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'ecb-camellia-aesni\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x54, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "1c9720d4331a91712c9bb3c887cab32a06a058569537b8fc0dac87771399f91e968732bbf8ecf2f0d6e70cc84adae299c510ce8dc738bf104a1c49745c7f62b78d3da528c92e6587f4"}]}]}, 0x140}}, 0x0)

2.977077516s ago: executing program 4 (id=611):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(r0, 0x0, 0x0)

2.380469085s ago: executing program 4 (id=612):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x41045508, &(0x7f0000000080))

2.363200836s ago: executing program 1 (id=613):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)

2.31688926s ago: executing program 0 (id=614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$TIOCSBRK(r3, 0x5427)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff000086dd607377c2004d110400000008000000000000ffffac1414aafe8000"/53], 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})

1.173950104s ago: executing program 4 (id=615):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0), 0xfec8)
recvmmsg(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003f80)=""/241, 0xf1}], 0x1}}], 0x1, 0x0, 0x0)

1.076152092s ago: executing program 4 (id=616):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "dd0300"}]}}, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGREPORT(r2, 0x4805, 0x0)
ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f00000000c0))

1.075431692s ago: executing program 0 (id=626):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
socket$tipc(0x1e, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r5)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r6, 0x0, 0x0, 0x0)

1.074725432s ago: executing program 1 (id=618):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

909.245535ms ago: executing program 1 (id=619):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8400c61)
fallocate(r0, 0x3, 0x80000, 0x8000c62)

345.087472ms ago: executing program 1 (id=620):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup2(r0, r1)
sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a3bb6b7fbf033", 0x96}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4adc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259f5eaf5f3a71155845156bf64809dee25c0eadad25cac50b01aabdb713c8c9965a19e114c8bbc35054f68bf889f1a6ed430aff1952b2498efc46cbaebc815cb2ea2ff01000067d49ffb192dad5fcac955fee31e5922", 0x89}], 0x5}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d06e8c3dc885a29d9b5a4c0cdc701c0a29e04f23dac714e90c70202e052be86141ead3c90a0e23650d6a5c10ba19943c89ab235f149ddaa2bf84d5e52bce3fbecc01eb03e0cd322dbc4b9c1bd3263a9d7bbc6de3e50842793e1ee7997649a6ab1077", 0x62}], 0x1}}], 0x2, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001700)=ANY=[], 0x388}}, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000ac0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x68, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x36}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff24c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5d439b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f81}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x20004040)

63.970855ms ago: executing program 0 (id=621):
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
open(0x0, 0x0, 0x0)
creat(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<qK\x80\x8fQ|\xf5d\x10\x10\xb1\xe6\xa4`\xd3\xf9\xa5\xd1I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'Q%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd30\xa2\x17\xca\xed\xdf\x91\xf9\x8c\xa1T\xfa\xc30\xfb&\xb7\x0f\xf9\xc9[R\xa8\xa3\xf4@dd9\xdd\vt\xa9\xa32\xc1\x1cA\xd2q\x9b\x9bV\x8c(\xb2\'\xf5~\xf6\xcf\xb0\x86\xdd\xab>\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0)
mmap(&(0x7f000047d000/0x9000)=nil, 0x9000, 0x200000f, 0x2012, r5, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001})
epoll_wait(r6, &(0x7f00000004c0)=[{}], 0x1, 0x1000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0x0, 0x2})
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3)

0s ago: executing program 1 (id=622):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
fanotify_mark(r2, 0x11, 0x40000023, r1, 0x0)
readv(r2, &(0x7f0000001900)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x1e, &(0x7f0000000000)={[{@barrier}]}, 0x0, 0x492, &(0x7f00000001c0)="$eJzs3MtvG8UfAPDv2kn6bvLrrzz6gAYKogKRtGmBHpBoEQgOICHBoRxDklalaYOaINEqgsChHFEl7ogjEn8BJ7gg4ITEFe6oUoV6aeG0aL1rx0ns1M7LCf58pG1mdmc98/XueGd3agfQtQazf5KI3RHxe0T059mFBQbzP/fuzI79fWd2LIk0ffuvpFLu7p3ZsbzgQLm6367iNWMuzx+aXlrv9LXrl0YnJyeuFvnhmcsfDE9fu/7sxcujFyYuTFwZOX361MkTLzw/8lzzxietx5m16e7Bj6cOH3j93Ztvjp27+d7P32a7D/bk2+fjaF3P8psHG6wrVxNPtlvZ5rXkKCTVN6a88Y2hPeXiPO6t9P/+KNed1f3x6mcdbRywrtI0Tbc125jEXLpAT91ewNaX6M3QpaqX+uz+t7psyMBjk7h9Nr8ByuK+t3d27F4t/p4oFWWye6M961R/NqI6N/fPV9kSK3wOAQDQju/P5n+Xjv9K8WBduTOVUVDEQET8LyL2RcT/I2J/RDwQUSn7UEQ8XLdPK9MziydJlo5/SrdWElersvHfi8XcVnUp6q0WGSgXuT2V+HuT8xcnJ45HxN6IOBa927J8UpvtWuqHV377otm2wbrxX7Zk9VfHgkU7bvUsekA3Pjozusqwa25/GnGwp1H8SW0mIDuOByLi4JEWXrDBQb/49DeHmxW/f/zLuM8EXCvSryOeyo//XCyKP16qpZabnxzeHpMTx4erZ8VSv/x646267IJZsbbjb2POsxXZ8d/Z8PyvVTSQ1M/XNpjLvZ8bf3ze9J5mped/X/JOJd1XrPtodGbm6omIvuSNYv2ZfP21iBiZ37dSbmS+fBb/saON+/++mH8nDkVEdhI/EhGPRsSRou2PRcTjEXF0mfh/evmJ91ce//rK4h9v6/i3nyhf+vG7BZUOLBN/Eg2O/6lK6lixppXPv1YbuNr3DwAAALaCUkTsjqQ0VEuXSkND+f+X3x87S5NT0zPPnJ/68Mp4/h2BgegtVZ909dc9Dz1RPDEoF/mR4ja/uv1k8dz4y/KOSn5obGpyvNPBQ5fb1aT/Z/70/Q3471uDeTRgi1pp/0/T9JM1bgqwwVz/oXvp/9C9GvT/HYvyTX8jANjaGl3/3dhDdzD+h+6l/0P30v+he7XU/9Pt698QYCOt5nv9a5bIPn+WK5NERGdbuDCRph2qva/zsdcSUdoUzViQSDZHM1afyC7J+ZrXit8h2vBmdPqTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYG38GwAA//9NJtjS")

kernel console output (not intermixed with test programs):

4104] device hsr_slave_0 left promiscuous mode
[  137.075003][ T4104] device hsr_slave_1 left promiscuous mode
[  137.090750][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.098547][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.108495][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.116350][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.139294][ T4104] device bridge_slave_1 left promiscuous mode
[  137.155976][ T4104] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.175167][ T4104] device bridge_slave_0 left promiscuous mode
[  137.184137][ T4104] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.246333][ T4104] device hsr_slave_0 left promiscuous mode
[  137.265398][ T4104] device hsr_slave_1 left promiscuous mode
[  137.285668][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.309923][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.319862][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.337537][ T4104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.348394][ T4104] device bridge_slave_1 left promiscuous mode
[  137.553301][ T4104] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.710690][ T4104] device bridge_slave_0 left promiscuous mode
[  137.767542][ T4104] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.143963][ T4857] loop3: detected capacity change from 0 to 65536
[  138.234860][ T4857] XFS (loop3): Mounting V5 Filesystem
[  138.290674][ T4857] XFS (loop3): Ending clean mount
[  138.312210][ T4104] device veth1_macvtap left promiscuous mode
[  138.318303][ T4104] device veth0_macvtap left promiscuous mode
[  138.372981][ T4104] device veth1_vlan left promiscuous mode
[  138.379093][ T4104] device veth0_vlan left promiscuous mode
[  138.399875][ T4104] device veth1_macvtap left promiscuous mode
[  138.417405][ T4104] device veth0_macvtap left promiscuous mode
[  138.429418][ T4104] device veth1_vlan left promiscuous mode
[  138.439200][ T4104] device veth0_vlan left promiscuous mode
[  138.468120][ T4882] overlayfs: failed to resolve './file2': -2
[  138.510733][ T4857] syz.3.204 (4857) used greatest stack depth: 18008 bytes left
[  138.592349][ T3638] XFS (loop3): Unmounting Filesystem
[  139.106116][ T4881] loop0: detected capacity change from 0 to 32768
[  139.132504][ T4881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.208 (4881)
[  139.199845][ T4881] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.242211][ T4881] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  139.279319][ T4881] BTRFS info (device loop0): setting nodatacow, compression disabled
[  139.301128][ T4881] BTRFS info (device loop0): enabling auto defrag
[  139.336172][ T4881] BTRFS info (device loop0): max_inline at 0
[  139.350151][ T4881] BTRFS info (device loop0): using free space tree
[  139.461665][ T4893] loop3: detected capacity change from 0 to 512
[  139.506903][ T4893] EXT4-fs (loop3): 1 truncate cleaned up
[  139.513507][ T4893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  140.081792][ T3891] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.651945][ T3638] EXT4-fs (loop3): unmounting filesystem.
[  140.892284][ T4104] team0 (unregistering): Port device team_slave_1 removed
[  140.956205][ T4104] team0 (unregistering): Port device team_slave_0 removed
[  141.071576][ T4525] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  141.337496][ T4104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.597920][ T4104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.607008][ T4525] usb 4-1: config 0 has no interfaces?
[  141.613835][ T4525] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  141.625521][ T4525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.643378][ T4915] input: syz0 as /devices/virtual/input/input5
[  141.654648][ T4525] usb 4-1: config 0 descriptor??
[  142.304579][ T4104] bond0 (unregistering): Released all slaves
[  142.635706][   T26] usb 4-1: USB disconnect, device number 6
[  142.862248][ T4926] loop3: detected capacity change from 0 to 512
[  142.914555][ T4926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  142.923225][ T4920] dccp_close: ABORT with 1 bytes unread
[  142.938049][ T4926] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff)
[  143.038292][ T4926] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.216: Directory hole found for htree leaf block 0
[  143.098723][ T4926] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.216: Directory hole found for htree leaf block 0
[  143.254035][ T4104] team0 (unregistering): Port device team_slave_1 removed
[  143.361081][ T4104] team0 (unregistering): Port device team_slave_0 removed
[  143.419220][ T4104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.498745][ T4104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.963384][ T4926] ieee802154 phy0 wpan0: encryption failed: -22
[  144.126884][ T4104] bond0 (unregistering): Released all slaves
[  144.233855][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  144.241536][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  144.256274][ T4564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.482865][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  144.510871][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  144.637723][ T4564] device veth0_vlan entered promiscuous mode
[  144.647433][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  144.658111][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  144.686855][ T4685] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  144.715004][ T4685] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  144.750934][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  144.762109][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  144.788521][ T4564] device veth1_vlan entered promiscuous mode
[  144.797278][ T4777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.817594][ T4777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.829272][ T4685] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  144.856096][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  144.881208][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  144.942214][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.962429][ T4685] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  145.064065][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  145.083468][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  145.106196][ T4564] device veth0_macvtap entered promiscuous mode
[  145.110443][ T4049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.130257][ T4049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.160831][ T4564] device veth1_macvtap entered promiscuous mode
[  145.187874][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  145.202349][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  145.238150][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  145.331633][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.391908][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.425840][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.447155][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.466702][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.478930][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.499362][ T4945] vim2m vim2m.0: vidioc_s_fmt queue busy
[  145.508728][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.563284][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.625023][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.682262][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  145.701297][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  145.911986][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.957808][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.980100][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.998145][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.008455][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.031926][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.049689][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.061329][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.075703][ T3638] EXT4-fs (loop3): unmounting filesystem.
[  146.083134][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.097227][ T4564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.113041][ T4564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.130708][ T4564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.142144][ T4564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.194564][ T4685] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.230520][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  146.259100][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  146.296225][ T4951] tipc: Started in network mode
[  146.302342][ T4951] tipc: Node identity ac14140f, cluster identity 4711
[  146.329477][ T4951] tipc: New replicast peer: 255.255.255.255
[  146.356366][ T4951] tipc: Enabled bearer <udp:syz2>, priority 10
[  146.475839][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  146.501876][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  146.515078][ T4685] 8021q: adding VLAN 0 to HW filter on device team0
[  146.595441][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  146.613081][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  146.640725][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.648115][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.669369][ T4935] loop0: detected capacity change from 0 to 65536
[  146.711565][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  146.720856][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  146.761235][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  146.770031][ T4527] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.777152][ T4527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.786241][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  146.795534][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.836529][ T4685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  146.860395][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.868637][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.892482][ T4935] XFS (loop0): Mounting V5 Filesystem
[  146.960877][ T4935] XFS (loop0): Ending clean mount
[  147.003252][ T4685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  147.053434][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.077310][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.109415][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.137156][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.167807][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.201590][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.225418][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.257075][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  147.276063][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.311510][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.333824][ T3891] XFS (loop0): Unmounting Filesystem
[  147.343484][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.410468][ T4777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.440585][ T4777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.471485][   T26] tipc: Node number set to 2886997007
[  147.510791][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  147.802242][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  147.809779][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  147.867718][ T4685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.171130][   T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  148.363262][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  148.373875][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.438474][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  148.458348][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.476273][ T4685] device veth0_vlan entered promiscuous mode
[  148.489461][ T4685] device veth1_vlan entered promiscuous mode
[  148.501488][ T3967] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  148.541574][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.552386][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.561202][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  148.597476][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.610516][   T14] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  148.611806][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.640272][   T14] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  148.645268][ T4685] device veth0_macvtap entered promiscuous mode
[  148.675472][   T14] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  148.677400][ T4685] device veth1_macvtap entered promiscuous mode
[  148.693354][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.722564][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.750217][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.770233][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.770582][ T4983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  148.788510][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.825593][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.852020][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.880384][ T3967] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.898677][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.919390][ T3967] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.945251][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.030265][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.055427][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.100624][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.118255][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  149.134454][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  149.150542][ T3967] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  149.159651][ T3967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.161104][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.197755][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.212588][ T3967] usb 2-1: Product: syz
[  149.219083][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.230116][ T3967] usb 2-1: Manufacturer: syz
[  149.230141][ T3967] usb 2-1: SerialNumber: syz
[  149.239839][ T3629] usb 3-1: USB disconnect, device number 2
[  149.266077][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.286533][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.312313][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.332820][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.380029][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.400225][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.440093][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.456095][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.477999][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.495105][ T4994] loop3: detected capacity change from 0 to 32768
[  149.523009][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.540124][ T4994] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.227 (4994)
[  149.552876][ T4685] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.591803][ T4685] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.613723][ T4994] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.626084][ T4685] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.652722][ T4685] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.669526][ T4994] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  149.694548][ T4994] BTRFS info (device loop3): force zlib compression, level 3
[  149.719433][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.734554][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.742816][ T4994] BTRFS info (device loop3): enabling auto defrag
[  149.757493][ T4994] BTRFS info (device loop3): enabling disk space caching
[  149.796841][ T4994] BTRFS info (device loop3): max_inline at 0
[  149.823568][ T4994] BTRFS info (device loop3): force clearing of disk cache
[  149.853925][ T4994] BTRFS info (device loop3): turning on sync discard
[  149.893774][ T4994] BTRFS info (device loop3): disk space caching is enabled
[  149.945125][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.971804][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.020280][ T3629] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  150.040434][ T3965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  150.074801][ T4994] BTRFS info (device loop3): enabling ssd optimizations
[  150.082608][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.102956][ T4994] BTRFS info (device loop3): rebuilding free space tree
[  150.114763][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.137730][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  150.306163][ T4994] BTRFS info (device loop3): disabling free space tree
[  150.320810][ T4994] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  150.332167][ T4994] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  150.370453][ T3967] cdc_ncm 2-1:1.0: bind() failure
[  150.390422][ T3629] usb 1-1: config 0 has an invalid interface number: 29 but max is 0
[  150.411438][ T3629] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  150.422430][ T3967] cdc_ncm: probe of 2-1:1.1 failed with error -71
[  150.447234][ T3967] cdc_mbim: probe of 2-1:1.1 failed with error -71
[  150.455251][ T3629] usb 1-1: config 0 has no interface number 0
[  150.462267][ T3629] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023
[  150.472714][ T3967] usbtest: probe of 2-1:1.1 failed with error -71
[  150.479943][ T3629] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  150.516129][ T3967] usb 2-1: USB disconnect, device number 4
[  150.536590][ T3629] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  150.728277][ T3638] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  150.744441][ T3629] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=cb.61
[  150.758212][ T3629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.770788][ T3629] usb 1-1: Product: syz
[  150.775013][ T3629] usb 1-1: Manufacturer: syz
[  150.781107][ T3629] usb 1-1: SerialNumber: syz
[  150.817117][ T3629] usb 1-1: config 0 descriptor??
[  150.850505][ T5001] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  150.873824][ T3629] kvaser_usb 1-1:0.29: Cannot get usb endpoint(s)
[  151.126991][ T3724] usb 1-1: USB disconnect, device number 4
[  151.159600][ T5038] loop1: detected capacity change from 0 to 1024
[  151.192473][ T5040] overlayfs: missing 'lowerdir'
[  152.236632][ T5048] loop2: detected capacity change from 0 to 512
[  152.428094][ T5048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  152.450253][ T5048] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff)
[  152.555081][ T5048] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.235: inode #1792: comm syz.2.235: iget: illegal inode #
[  152.669324][ T5048] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.235: error while reading EA inode 1792 err=-117
[  152.725797][ T5048] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.235: inode #1792: comm syz.2.235: iget: illegal inode #
[  152.750123][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  152.790767][ T5048] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.235: error while reading EA inode 1792 err=-117
[  152.925644][ T4564] EXT4-fs (loop2): unmounting filesystem.
[  153.190458][    T7] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[  153.213715][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.241921][    T7] usb 5-1: config 0 descriptor??
[  153.302676][    T7] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  153.542679][ T5072] loop2: detected capacity change from 0 to 512
[  153.650455][ T5072] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #2: comm syz.2.243: corrupted xattr block 255
[  153.666778][ T5072] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  153.675269][ T5072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  153.684946][ T5072] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #2: comm syz.2.243: corrupted xattr block 255
[  154.007164][ T3724] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  154.020563][    T7] gspca_sonixj: reg_w1 err -71
[  154.025864][    T7] sonixj: probe of 5-1:0.0 failed with error -71
[  154.056100][    T7] usb 5-1: USB disconnect, device number 3
[  155.138901][ T5085] sched: RT throttling activated
[  155.701396][ T4564] EXT4-fs (loop2): unmounting filesystem.
[  155.723181][ T3724] usb 4-1: Using ep0 maxpacket: 8
[  155.860366][ T3724] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  155.868523][ T3724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.920266][ T3724] usb 4-1: config 0 has no interface number 0
[  155.944282][ T3724] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  156.008593][ T3724] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  156.050232][ T3724] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.093136][ T3724] usb 4-1: config 0 interface 52 has no altsetting 0
[  156.175910][ T5104] dccp_flush_write_queue: CCID did not manage to send all packets
[  156.231588][ T5100] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872256 (1073744512 ns) > initial count (152 ns). Using initial count to start timer.
[  156.250674][ T3724] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  156.278936][ T3724] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  156.303910][ T5107] sctp: [Deprecated]: syz.4.256 (pid 5107) Use of int in max_burst socket option deprecated.
[  156.303910][ T5107] Use struct sctp_assoc_value instead
[  156.326551][ T3724] usb 4-1: Product: syz
[  156.331304][ T3724] usb 4-1: Manufacturer: syz
[  156.336139][ T3724] usb 4-1: SerialNumber: syz
[  156.345573][ T3724] usb 4-1: config 0 descriptor??
[  156.611299][ T3724] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  156.631337][ T3724] synaptics_usb: probe of 4-1:0.52 failed with error -5
[  156.763483][ T5120] loop0: detected capacity change from 0 to 2048
[  156.894867][   T14] usb 4-1: USB disconnect, device number 7
[  157.003755][ T5120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  157.028571][ T5120] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff)
[  157.200281][ T5120] EXT4-fs (loop0): shut down requested (2)
[  157.237700][ T5120] fs-verity: sha512 using implementation "sha512-avx2"
[  157.359440][ T3891] EXT4-fs (loop0): unmounting filesystem.
[  157.900165][   T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  158.309494][   T14] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  158.339892][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[  158.399269][   T14] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  158.547680][ T5146] loop2: detected capacity change from 0 to 512
[  158.554602][ T5146] EXT4-fs: Ignoring removed i_version option
[  158.589610][ T5146] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  158.667462][ T5148] loop0: detected capacity change from 0 to 2048
[  158.678066][ T5146] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  158.698088][ T5146] EXT4-fs (loop2): 1 truncate cleaned up
[  158.705908][ T5146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  158.736260][ T5146] syz.2.272 (pid 5146) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  158.778112][ T5148] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  158.790238][ T5148] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038 (0x7fffffff)
[  158.880466][   T14] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  158.896076][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.906137][   T14] usb 4-1: Manufacturer: à°‰
[  158.935853][   T14] usb 4-1: SerialNumber: syz
[  158.956055][   T14] usb 4-1: config 0 descriptor??
[  159.013049][   T14] em28xx 4-1:0.0: New device à°‰  @ 480 Mbps (2013:0251, interface 0, class 0)
[  159.043994][   T14] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  159.103335][ T3891] EXT4-fs (loop0): unmounting filesystem.
[  159.330271][   T14] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  159.350721][   T14] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  159.359021][ T5169] loop0: detected capacity change from 0 to 512
[  159.360920][   T27] audit: type=1326 audit(1722700687.588:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb4d779f9 code=0x7ffc0000
[  159.379020][ T5146] fscrypt (loop2, inode 18): Missing crypto API support for AES-128-CTS-CBC (API name: "cts(cbc(aes))")
[  159.387350][    C1] vkms_vblank_simulate: vblank timer overrun
[  159.406004][   T14] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  159.442261][   T14] em28xx 4-1:0.0: No AC97 audio processor
[  159.488826][   T27] audit: type=1326 audit(1722700687.618:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effb4d779f9 code=0x7ffc0000
[  159.489291][   T14] usb 4-1: USB disconnect, device number 8
[  159.531871][ T5169] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  159.563050][ T5169] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038 (0x7fffffff)
[  159.608606][   T14] em28xx 4-1:0.0: Disconnecting em28xx
[  159.624748][   T14] em28xx 4-1:0.0: Freeing device
[  159.630302][   T27] audit: type=1326 audit(1722700687.618:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb4d779f9 code=0x7ffc0000
[  159.681278][ T4564] EXT4-fs (loop2): unmounting filesystem.
[  159.814268][   T27] audit: type=1326 audit(1722700687.628:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effb4d779f9 code=0x7ffc0000
[  159.836521][    C1] vkms_vblank_simulate: vblank timer overrun
[  159.844202][   T27] audit: type=1326 audit(1722700687.668:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb4d779f9 code=0x7ffc0000
[  159.888737][   T27] audit: type=1326 audit(1722700687.668:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effb4d6e9a7 code=0x7ffc0000
[  159.937966][ T5182] loop2: detected capacity change from 0 to 1024
[  159.945280][   T27] audit: type=1326 audit(1722700687.668:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7effb4d13349 code=0x7ffc0000
[  160.007409][   T27] audit: type=1326 audit(1722700687.668:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effb4d779f9 code=0x7ffc0000
[  160.039476][ T3891] EXT4-fs (loop0): unmounting filesystem.
[  160.097120][   T27] audit: type=1326 audit(1722700687.668:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effb4d6e9a7 code=0x7ffc0000
[  160.119369][    C1] vkms_vblank_simulate: vblank timer overrun
[  160.238028][   T27] audit: type=1326 audit(1722700687.668:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7effb4d13349 code=0x7ffc0000
[  160.710104][ T3685] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  160.895726][ T5185] loop3: detected capacity change from 0 to 32768
[  160.951737][ T3685] usb 3-1: Using ep0 maxpacket: 16
[  161.034881][ T5185] XFS (loop3): Mounting V5 Filesystem
[  161.184391][ T5185] XFS (loop3): Ending clean mount
[  161.235001][ T5212] UHID_CREATE from different security context by process 37 (syz.4.288), this is not allowed.
[  161.236916][ T3685] usb 3-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af
[  161.309726][ T3685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.318810][ T3685] usb 3-1: Product: syz
[  161.324265][ T3685] usb 3-1: Manufacturer: syz
[  161.334391][ T3685] usb 3-1: SerialNumber: syz
[  161.361481][ T3685] usb 3-1: config 0 descriptor??
[  161.412269][ T3685] dvb-usb: found a 'PCTV HDTV USB' in warm state.
[  161.429166][ T3685] pctv452e: pctv452e_power_ctrl: 1
[  161.429166][ T3685] 
[  161.480219][ T3685] usb 3-1: selecting invalid altsetting 3
[  161.486122][ T3685] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  161.486122][ T3685] 
[  161.525416][ T3685] dvb-usb: bulk message failed: -22 (5/0)
[  161.644619][ T3685] dvb-usb: PCTV HDTV USB error while loading driver (-22)
[  161.988493][ T3638] XFS (loop3): Unmounting Filesystem
[  162.051977][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'.
[  162.070265][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'.
[  162.150058][ T5233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'.
[  162.632994][    T7] usb 3-1: USB disconnect, device number 3
[  164.570735][ T5235] loop0: detected capacity change from 0 to 40427
[  164.606636][ T5235] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  164.623519][ T5235] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  164.672685][ T5235] F2FS-fs (loop0): Found nat_bits in checkpoint
[  164.834561][ T5235] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  164.846027][ T5235] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  164.909906][ T5273] Zero length message leads to an empty skb
[  164.991794][ T5275] loop1: detected capacity change from 0 to 64
[  165.079723][ T5275] hfs: request for non-existent node 293 in B*Tree
[  165.210596][ T5275] hfs: request for non-existent node 293 in B*Tree
[  165.217766][ T5275] hfs: get root inode failed
[  165.266765][ T5281] netlink: 'syz.2.313': attribute type 10 has an invalid length.
[  165.426621][ T5283] syz.0.298: attempt to access beyond end of device
[  165.426621][ T5283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  166.059437][ T5275] loop1: detected capacity change from 0 to 2048
[  166.137649][ T5275] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  166.164496][ T5280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.176452][ T5275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.184905][ T5281] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  166.353419][ T5284] team0: Port device wlan1 added
[  166.882004][ T5293] loop2: detected capacity change from 0 to 4096
[  166.981301][ T5304] netlink: 48 bytes leftover after parsing attributes in process `syz.1.321'.
[  167.923565][ T5300] loop0: detected capacity change from 0 to 8192
[  168.105154][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  168.105172][   T27] audit: type=1800 audit(1722700696.328:48): pid=5293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.319" name="bus" dev="loop2" ino=33 res=0 errno=0
[  168.110432][ T5300] loop0: detected capacity change from 8192 to 0
[  168.178356][   T27] audit: type=1800 audit(1722700696.328:49): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.319" name="bus" dev="loop2" ino=33 res=0 errno=0
[  168.361737][ T5316] loop1: detected capacity change from 0 to 2048
[  168.434061][ T5316] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.275994][ T5259] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.459686][ T5259] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.629658][ T5259] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.810385][ T4527] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  170.837673][ T5259] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.974573][ T3655] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  170.996193][ T3652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  171.006151][ T3655] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  171.015044][ T3655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  171.031395][ T3655] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  171.038883][ T3655] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  171.050503][ T3724] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  171.091216][ T4527] usb 3-1: Using ep0 maxpacket: 16
[  171.212989][ T4527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.234486][ T4527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.245431][ T4527] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  171.265158][ T4527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.279728][ T4527] usb 3-1: config 0 descriptor??
[  171.295441][ T3724] usb 4-1: Using ep0 maxpacket: 8
[  171.420339][ T3724] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  171.436649][ T3724] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  171.464038][ T3724] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  171.490394][ T3724] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  171.517780][ T3724] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.525496][ T5346] loop1: detected capacity change from 0 to 40427
[  171.556914][ T3724] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  171.585602][ T5346] F2FS-fs (loop1): invalid crc value
[  171.597453][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.634272][ T5346] F2FS-fs (loop1): Found nat_bits in checkpoint
[  171.786881][ T5346] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  171.805547][ T4527] elecom 0003:056E:00E6.0003: item fetching failed at offset 2/5
[  171.835167][ T5346] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  171.855078][ T4527] elecom: probe of 0003:056E:00E6.0003 failed with error -22
[  171.890392][ T3724] usb 4-1: GET_CAPABILITIES returned 0
[  171.896095][ T3724] usbtmc 4-1:16.0: can't read capabilities
[  172.017702][ T3724] usb 3-1: USB disconnect, device number 4
[  172.027673][ T4518] syz-executor: attempt to access beyond end of device
[  172.027673][ T4518] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  172.158215][ T4527] usb 4-1: USB disconnect, device number 9
[  172.254363][ T5353] chnl_net:caif_netlink_parms(): no params data found
[  173.359111][ T3642] Bluetooth: hci3: command tx timeout
[  173.490248][ T5353] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.497493][ T5353] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.568599][ T5353] device bridge_slave_0 entered promiscuous mode
[  173.869179][ T5399] netlink: 9 bytes leftover after parsing attributes in process `syz.3.347'.
[  173.982405][ T5399] device gretap0 entered promiscuous mode
[  174.060509][ T5353] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.071628][ T5353] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.115672][ T5353] device bridge_slave_1 entered promiscuous mode
[  174.152915][ T5405] netlink: 5 bytes leftover after parsing attributes in process `syz.3.347'.
[  174.205476][ T5405] 0ªX¹¦D: renamed from gretap0
[  174.227851][ T5405] device 
30ªX¹¦D left promiscuous mode
[  174.259060][ T5405] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  174.590467][ T5353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.653134][ T5259] device hsr_slave_0 left promiscuous mode
[  174.675766][ T5259] device hsr_slave_1 left promiscuous mode
[  174.684768][ T5259] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.703579][ T5259] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.719596][ T5259] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.739558][ T5259] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.779511][ T5259] device bridge_slave_1 left promiscuous mode
[  174.787306][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.834982][ T5442] loop3: detected capacity change from 0 to 512
[  174.844075][ T5259] device bridge_slave_0 left promiscuous mode
[  174.853419][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.868448][ T5442] EXT4-fs: Ignoring removed bh option
[  174.916296][ T5259] device veth1_macvtap left promiscuous mode
[  174.930238][ T3757] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  174.944813][ T5259] device veth0_macvtap left promiscuous mode
[  174.979867][ T5259] device veth1_vlan left promiscuous mode
[  174.992119][ T5259] device veth0_vlan left promiscuous mode
[  175.221630][ T5447] loop1: detected capacity change from 0 to 512
[  175.319534][ T5447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  175.330931][ T5447] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff)
[  175.371582][ T3642] Bluetooth: hci3: command tx timeout
[  175.754115][ T5448] loop3: detected capacity change from 0 to 32768
[  175.764353][ T5448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.359 (5448)
[  175.867577][ T5448] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.887851][ T5448] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  175.898921][ T5448] BTRFS info (device loop3): use zlib compression, level 3
[  175.915822][ T5448] BTRFS info (device loop3): using free space tree
[  176.027103][ T3788] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  176.119702][ T4518] EXT4-fs (loop1): unmounting filesystem.
[  176.255799][ T5448] BTRFS info (device loop3): enabling ssd optimizations
[  176.465395][ T5259] team0 (unregistering): Port device team_slave_1 removed
[  176.477598][ T3788] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  176.497854][ T3788] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  176.527077][ T3788] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  176.539510][ T3788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.590445][ T5458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  176.624507][ T5259] team0 (unregistering): Port device team_slave_0 removed
[  176.717522][ T5259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.791235][ T3638] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.840804][ T5259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.047335][ T3629] usb 5-1: USB disconnect, device number 4
[  177.379830][ T5488] loop1: detected capacity change from 0 to 512
[  177.440620][ T5488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  177.449666][ T5488] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff)
[  177.450180][ T3642] Bluetooth: hci3: command tx timeout
[  178.364735][ T4518] EXT4-fs (loop1): unmounting filesystem.
[  178.482928][ T5494] loop1: detected capacity change from 0 to 512
[  178.504332][ T5494] EXT4-fs: Ignoring removed orlov option
[  178.588490][ T5494] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  178.597067][ T5494] System zones: 0-2, 18-18, 34-34
[  178.639139][ T5494] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  178.684620][ T5494] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  178.695832][ T5494] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.366: Failed to acquire dquot type 1
[  178.732367][ T5494] EXT4-fs (loop1): 1 truncate cleaned up
[  178.748448][ T5494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  178.758009][ T5494] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff)
[  178.895637][ T5259] bond0 (unregistering): Released all slaves
[  179.005702][ T5353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.088507][ T5501] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  179.100319][ T5501] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  179.110502][ T5501] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.366: Failed to acquire dquot type 1
[  179.530183][ T3642] Bluetooth: hci3: command tx timeout
[  179.549166][ T5504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.368'.
[  179.637910][ T4518] EXT4-fs (loop1): unmounting filesystem.
[  179.740646][ T5353] team0: Port device team_slave_0 added
[  179.860129][ T5353] team0: Port device team_slave_1 added
[  180.033156][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.068351][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.179465][ T5353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.194086][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.201198][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.228164][ T5353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.080069][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  181.082022][ T5353] device hsr_slave_0 entered promiscuous mode
[  181.275282][ T5353] device hsr_slave_1 entered promiscuous mode
[  181.285116][ T5353] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.362118][ T5535] loop1: detected capacity change from 0 to 8
[  182.209709][ T5353] Cannot create hsr debugfs directory
[  182.232601][   T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  182.266157][ T5530] SQUASHFS error: Unable to read directory block [631:26]
[  182.284315][ T5530] SQUASHFS error: Failed to read block 0x4e8: -5
[  182.293863][   T27] audit: type=1800 audit(1722700710.518:50): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.374" name="file1" dev="loop1" ino=5 res=0 errno=0
[  182.332480][ T5530] SQUASHFS error: Failed to read block 0x6e6: -5
[  182.341432][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.348839][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.355882][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.362349][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.370209][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.377245][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.385125][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.392488][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.399325][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.405618][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.413078][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.420003][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.426269][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.433639][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.440501][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.446828][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.454201][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.461073][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.467379][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.474762][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.481624][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.487900][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.495293][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.502252][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.508688][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.516062][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.522945][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.529450][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.536855][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.543744][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.550071][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.557411][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.564307][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.570677][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.577991][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.584910][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.591391][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.598742][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.605647][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.612177][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.619513][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.626556][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.632850][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.640490][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.647319][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.653630][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.661294][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.668167][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.674646][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.682043][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.688878][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.695174][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.702536][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.709375][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.715669][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.723027][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.730092][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.736342][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.743736][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.750707][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.756945][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.764345][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.771485][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.777731][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.785205][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.792241][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.798484][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.805893][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.812767][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.819019][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.826407][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.833321][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.839568][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.846945][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.853814][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.860121][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.867454][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.874360][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.880650][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.888086][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.894991][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.901271][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.908668][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.915552][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.921892][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.929203][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.936082][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.942519][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.949841][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.956739][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.963039][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.970498][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.977358][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  182.983672][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  182.991033][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  182.997875][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  183.004282][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  183.011741][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  183.018634][ T5530] SQUASHFS error: Failed to read block 0x0: -5
[  183.025475][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  183.032948][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  183.039938][ T5530] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  183.047337][ T5530] SQUASHFS error: read_indexes: reading block [6e4:0]
[  183.070068][ T3724] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  183.280075][   T14] usb 5-1: Using ep0 maxpacket: 16
[  183.301176][    T7] usb 3-1: unable to read config index 0 descriptor/start: -71
[  183.308805][    T7] usb 3-1: can't read configurations, error -71
[  183.343087][ T3724] usb 4-1: Using ep0 maxpacket: 32
[  183.401737][ T5550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.420269][   T14] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  183.428505][   T14] usb 5-1: config 0 has no interface number 0
[  183.620286][   T14] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=1b.b2
[  183.629393][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.630398][ T3724] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3
[  183.660087][ T3724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.678573][ T3724] usb 4-1: Product: syz
[  183.680043][   T14] usb 5-1: Product: syz
[  183.682953][ T3724] usb 4-1: Manufacturer: syz
[  183.696783][   T14] usb 5-1: Manufacturer: syz
[  183.710032][ T3724] usb 4-1: SerialNumber: syz
[  183.727777][ T3724] usb 4-1: config 0 descriptor??
[  183.730065][   T14] usb 5-1: SerialNumber: syz
[  183.748643][   T14] usb 5-1: config 0 descriptor??
[  183.802918][ T3724] radio-si470x 4-1:0.0: could not find interrupt in endpoint
[  183.831370][ T3724] radio-si470x: probe of 4-1:0.0 failed with error -5
[  184.010180][ T3724] radio-raremono 4-1:0.0: this is not Thanko's Raremono.
[  184.034679][ T3724] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  184.051220][   T14] usb 5-1: USB disconnect, device number 5
[  184.110229][ T3724] usb 4-1: USB disconnect, device number 10
[  184.324766][ T5553] loop2: detected capacity change from 0 to 32768
[  184.364796][ T5353] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  184.403662][ T5553] XFS (loop2): Mounting V5 Filesystem
[  184.437914][ T5353] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  184.484734][ T5353] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  184.519352][ T5553] XFS (loop2): Ending clean mount
[  184.537209][ T5353] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  184.763097][ T5585] capability: warning: `syz.3.383' uses 32-bit capabilities (legacy support in use)
[  184.911372][ T4564] XFS (loop2): Unmounting Filesystem
[  184.917988][ T5353] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.966754][ T5590] loop1: detected capacity change from 0 to 512
[  185.055290][ T5353] 8021q: adding VLAN 0 to HW filter on device team0
[  185.070624][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  185.078837][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  185.091223][ T5590] EXT4-fs (loop1): 1 truncate cleaned up
[  185.096947][ T5590] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  185.230240][ T5590] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.385: Directory hole found for htree leaf block 0
[  185.300137][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  185.325749][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  185.710675][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.717948][ T4526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.805510][ T5599] loop3: detected capacity change from 0 to 512
[  185.897367][ T5599] EXT4-fs (loop3): filesystem is read-only
[  185.922724][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  185.931307][ T5599] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 65535
[  185.950657][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  185.961819][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.969048][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.977082][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  185.986256][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  185.995471][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  186.004743][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  186.012824][ T3655] Bluetooth: hci1: command 0x0406 tx timeout
[  186.018913][ T3655] Bluetooth: hci2: command 0x0406 tx timeout
[  186.052436][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  186.061477][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  186.080400][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  186.093682][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  186.102896][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  186.111665][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  186.127788][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  186.160897][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  186.229307][ T5353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  186.248568][ T4518] EXT4-fs (loop1): unmounting filesystem.
[  186.311414][ T5604] loop3: detected capacity change from 0 to 128
[  186.383518][ T5604] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  187.440285][ T3724] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  187.710698][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  187.718248][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  187.785766][ T5353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.790094][ T3724] usb 5-1: Using ep0 maxpacket: 32
[  187.947862][ T3730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.951472][ T3724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.989466][ T3724] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  188.010749][ T5638] netlink: 'syz.2.396': attribute type 11 has an invalid length.
[  188.064184][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  188.080934][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  188.162715][ T3730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.190565][ T3724] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  188.212548][ T3724] usb 5-1: New USB device strings: Mfr=1, Product=224, SerialNumber=2
[  188.238309][ T3724] usb 5-1: Product: syz
[  188.241998][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  188.251272][ T3724] usb 5-1: Manufacturer: syz
[  188.255924][ T3724] usb 5-1: SerialNumber: syz
[  188.263605][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  188.284461][ T5353] device veth0_vlan entered promiscuous mode
[  188.381663][ T3730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.432763][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  188.441606][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  188.455558][ T5353] device veth1_vlan entered promiscuous mode
[  188.531749][ T3730] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.585244][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  188.601158][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  188.630979][ T3724] usb 5-1: 0:2 : does not exist
[  188.650730][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  188.661790][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  188.696254][ T5353] device veth0_macvtap entered promiscuous mode
[  188.705987][ T3724] usb 5-1: USB disconnect, device number 6
[  188.742838][ T5353] device veth1_macvtap entered promiscuous mode
[  188.926933][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.959544][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.996729][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.046766][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.086579][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.151270][ T3642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.160228][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.170547][ T3642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.190118][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.203968][ T3642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.219748][ T3642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.228326][ T3642] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  189.238600][ T3642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.246790][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.258023][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.269163][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.283689][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.295161][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  189.304110][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  189.329449][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  189.343242][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  189.368812][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.400764][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.450100][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.490116][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.517465][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.538706][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.568161][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.588976][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.630082][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.646141][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.672905][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.731756][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  189.748576][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  189.777305][ T5353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.800371][ T5353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.819377][ T5353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.844835][ T5353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.290359][ T4104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.298644][ T4104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.400263][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  190.674694][ T4104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.725927][   T27] audit: type=1326 audit(1722700718.948:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5693 comm="syz.4.408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effb4d779f9 code=0x0
[  190.762358][ T4104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.800757][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  190.821391][ T5656] chnl_net:caif_netlink_parms(): no params data found
[  190.836743][ T5701] loop1: detected capacity change from 0 to 256
[  191.062590][ T5711] tipc: Started in network mode
[  191.075566][ T5711] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[  191.088879][ T5711] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  191.290217][ T3655] Bluetooth: hci1: command tx timeout
[  191.305802][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.320392][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.333194][ T5656] device bridge_slave_0 entered promiscuous mode
[  191.448105][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.470336][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.507392][ T5656] device bridge_slave_1 entered promiscuous mode
[  191.785347][ T3730] team0: Port device wlan1 removed
[  191.923402][ T5656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.283439][ T5656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.864449][ T5656] team0: Port device team_slave_0 added
[  193.411676][ T3655] Bluetooth: hci1: command tx timeout
[  193.630273][ T5718] loop1: detected capacity change from 0 to 40427
[  193.694435][ T5656] team0: Port device team_slave_1 added
[  193.724571][ T5718] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  193.859155][ T5718] F2FS-fs (loop1): Found nat_bits in checkpoint
[  193.873152][ T3730] device hsr_slave_0 left promiscuous mode
[  193.901177][ T3730] device hsr_slave_1 left promiscuous mode
[  193.920282][ T3730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.927840][ T3730] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.943901][ T5724] loop0: detected capacity change from 0 to 40427
[  193.952244][ T5751] loop2: detected capacity change from 0 to 4096
[  193.971163][ T3730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.979603][ T3730] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.990035][ T5724] F2FS-fs (loop0): Invalid log sectorsize (2)
[  193.996187][ T5724] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  194.020526][ T5751] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  194.027541][ T5718] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  194.036683][ T3730] device bridge_slave_1 left promiscuous mode
[  194.036900][ T3730] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.070753][ T3730] device bridge_slave_0 left promiscuous mode
[  194.088947][ T5724] F2FS-fs (loop0): Found nat_bits in checkpoint
[  194.091762][ T5718] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  194.095684][ T3730] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.136511][ T5718] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  194.162236][    C0] eth0: bad gso: type: 1, size: 1408
[  194.173408][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  194.174457][ T5718] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  194.179733][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  194.274049][ T5724] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  194.281880][ T5724] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  194.290152][ T3730] device veth1_macvtap left promiscuous mode
[  194.300413][ T3730] device veth0_macvtap left promiscuous mode
[  194.306822][ T3730] device veth1_vlan left promiscuous mode
[  194.491276][ T3730] device veth0_vlan left promiscuous mode
[  195.460399][ T3652] Bluetooth: hci1: command tx timeout
[  196.127340][ T5778] loop2: detected capacity change from 0 to 32768
[  196.141401][ T5778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.425 (5778)
[  196.180652][ T5778] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.207894][ T5778] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  196.238499][ T5778] BTRFS info (device loop2): using free space tree
[  196.448075][ T5778] BTRFS info (device loop2): enabling ssd optimizations
[  196.673125][ T3730] team0 (unregistering): Port device team_slave_1 removed
[  196.762724][ T5819] loop0: detected capacity change from 0 to 512
[  196.786028][ T3730] team0 (unregistering): Port device team_slave_0 removed
[  196.827028][ T5819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  196.836369][ T5819] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff)
[  196.915536][ T5819] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.432: Directory hole found for htree leaf block 0
[  196.963227][ T3730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.978007][ T5819] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.432: Directory hole found for htree leaf block 0
[  197.012674][ T5819] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.432: Directory hole found for htree leaf block 0
[  197.065634][ T3730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.101786][ T5353] EXT4-fs (loop0): unmounting filesystem.
[  197.225806][ T5825] syz.0.433 sent an empty control message without MSG_MORE.
[  197.348784][ T4564] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.540223][ T3652] Bluetooth: hci1: command tx timeout
[  197.974776][ T3730] bond0 (unregistering): Released all slaves
[  198.083213][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.100687][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.130911][ T5656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.312772][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.340525][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.407823][ T5656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.583662][ T5656] device hsr_slave_0 entered promiscuous mode
[  198.628777][ T5656] device hsr_slave_1 entered promiscuous mode
[  198.670229][ T5656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.694157][ T5656] Cannot create hsr debugfs directory
[  199.063720][ T3652] Bluetooth: hci5: unexpected event 0x30 length: 4 > 3
[  200.353409][ T5656] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  200.442622][ T5656] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  200.498019][ T5656] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  200.501585][ T5891] Driver unsupported XDP return value 0 on prog  (id 67) dev N/A, expect packet loss!
[  200.632761][ T5656] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  201.045598][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.113145][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  201.126508][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  201.140092][ T3652] Bluetooth: hci5: command tx timeout
[  201.157515][ T5656] 8021q: adding VLAN 0 to HW filter on device team0
[  201.201245][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  201.210075][ T5901] loop1: detected capacity change from 0 to 2048
[  201.231725][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.260776][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.268030][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.297556][ T5901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  201.317670][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  201.325518][ T5901] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038 (0x7fffffff)
[  201.331236][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.361369][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.380370][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.387552][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.396015][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  201.410303][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  201.449609][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  201.481755][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  201.501661][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  201.518455][ T5907] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.455: bg 0: block 288: padding at end of block bitmap is not set
[  201.538014][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  201.552167][ T5907] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -117
[  201.603125][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  201.650880][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  201.703811][ T5656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.768747][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  201.912080][ T5911] loop2: detected capacity change from 0 to 512
[  202.221382][ T5911] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  202.234164][ T5911] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  202.245716][ T5911] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.456: Corrupt directory, running e2fsck is recommended
[  202.393470][ T5911] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  202.417555][ T5911] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.456: corrupted in-inode xattr
[  202.436046][ T5911] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.456: couldn't read orphan inode 15 (err -117)
[  202.452909][ T5911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  202.461980][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  202.519578][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  202.543912][ T4518] EXT4-fs (loop1): unmounting filesystem.
[  202.546101][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  202.686003][ T4564] EXT4-fs (loop2): unmounting filesystem.
[  202.869613][ T5915] loop1: detected capacity change from 0 to 1024
[  202.914709][ T5915] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  203.460829][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  204.102680][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  204.160383][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.421941][ T5910] loop0: detected capacity change from 0 to 40427
[  204.444422][ T5656] device veth0_vlan entered promiscuous mode
[  204.480250][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  204.510202][ T5910] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  204.518011][ T5910] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  204.535336][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  204.560848][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  204.587791][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  204.617404][ T5656] device veth1_vlan entered promiscuous mode
[  204.639373][ T5910] F2FS-fs (loop0): Found nat_bits in checkpoint
[  204.651384][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  204.662076][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  204.669575][   T27] audit: type=1326 audit(1722700732.888:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e57779f9 code=0x7ffc0000
[  204.735902][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  204.755691][   T27] audit: type=1326 audit(1722700732.908:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f46e57779f9 code=0x7ffc0000
[  204.783273][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  204.803815][ T5656] device veth0_macvtap entered promiscuous mode
[  204.822332][ T5950] loop1: detected capacity change from 0 to 512
[  204.848091][ T5656] device veth1_macvtap entered promiscuous mode
[  204.867884][   T27] audit: type=1326 audit(1722700732.908:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e57779f9 code=0x7ffc0000
[  204.938141][   T27] audit: type=1326 audit(1722700732.908:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e57779f9 code=0x7ffc0000
[  204.948196][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.976540][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.012858][ T5950] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  205.023540][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.053964][ T5950] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038 (0x7fffffff)
[  205.065287][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.092535][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.107518][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.120493][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.131835][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.143086][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.154052][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.170952][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.200202][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  205.209323][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  205.222038][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  205.233861][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  205.245732][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.278980][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.293396][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.309453][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.319727][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.330719][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.341800][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.352446][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.365748][ T5950] overlayfs: failed to resolve './file0': -2
[  205.383642][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.396044][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.461776][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.807482][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  205.940906][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  205.968522][ T5656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.996694][ T5656] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.029042][ T5656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.066402][ T5656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.093453][ T4518] EXT4-fs (loop1): unmounting filesystem.
[  206.324306][ T5259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.365340][ T5259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.415237][  T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.438008][  T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.479210][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  206.495458][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  206.531361][ T5971] device syzkaller1 entered promiscuous mode
[  206.788535][ T3941] Bluetooth: hci6: Frame reassembly failed (-84)
[  206.872686][ T3941] Bluetooth: hci6: Frame reassembly failed (-84)
[  207.235675][ T5983] loop1: detected capacity change from 0 to 2048
[  207.288641][ T5983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.326960][ T5984] loop0: detected capacity change from 0 to 1024
[  207.447576][ T5986] loop3: detected capacity change from 0 to 512
[  207.508380][ T5986] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  207.563852][ T5994] loop1: detected capacity change from 0 to 1024
[  207.582006][ T5986] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.398: casefold flag without casefold feature
[  207.626121][ T5986] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.398: missing EA_INODE flag
[  207.650441][ T5986] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.398: error while reading EA inode 12 err=-117
[  207.672845][ T5986] EXT4-fs (loop3): 1 orphan inode deleted
[  207.679025][ T5986] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  207.712393][ T5986] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.398: Directory hole found for htree leaf block 0
[  207.747325][ T5996] hfsplus: xattr exists yet
[  207.859503][ T4049] hfsplus: b-tree write err: -5, ino 4
[  207.996214][ T5656] EXT4-fs (loop3): unmounting filesystem.
[  208.101324][ T6002] syz.3.484[6002] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  208.101443][ T6002] syz.3.484[6002] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  208.163227][ T6004] loop1: detected capacity change from 0 to 128
[  208.229746][ T6004] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  208.249794][ T6004] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038 (0x7fffffff)
[  208.319594][ T6011] loop0: detected capacity change from 0 to 512
[  208.334644][ T6011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  208.431252][ T6011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  208.451983][ T4518] EXT4-fs (loop1): unmounting filesystem.
[  208.461119][ T6011] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff)
[  208.488258][ T5998] loop2: detected capacity change from 0 to 32768
[  208.513401][ T5998] XFS (loop2): Mounting V5 Filesystem
[  208.574702][ T5353] EXT4-fs (loop0): unmounting filesystem.
[  208.626459][ T5998] XFS (loop2): Ending clean mount
[  208.679519][ T4564] XFS (loop2): Unmounting Filesystem
[  208.783030][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.491'.
[  208.813005][ T3655] Bluetooth: hci6: command 0x1003 tx timeout
[  208.822138][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  208.838518][ T6028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.491'.
[  208.885037][ T6028] loop1: detected capacity change from 0 to 2048
[  208.893840][ T6028] EXT4-fs: Ignoring removed mblk_io_submit option
[  209.009876][ T6028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  209.303173][ T6028] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[  209.310406][ T6028] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  209.385869][ T6028] vhci_hcd vhci_hcd.0: Device attached
[  209.424294][ T6038] vhci_hcd: connection closed
[  209.432383][ T4608] vhci_hcd: stop threads
[  209.484248][ T4608] vhci_hcd: release socket
[  209.526397][ T4608] vhci_hcd: disconnect device
[  209.572643][ T3967] vhci_hcd: vhci_device speed not set
[  210.157994][ T4518] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /70/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  210.956997][ T6030] loop0: detected capacity change from 0 to 32768
[  210.984091][ T6057] loop3: detected capacity change from 0 to 64
[  211.005544][ T4518] EXT4-fs (loop1): Remounting filesystem read-only
[  211.019461][ T4518] EXT4-fs error (device loop1): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256)
[  211.038661][ T4518] EXT4-fs error (device loop1): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256)
[  211.137503][ T6030] XFS (loop0): Mounting V5 Filesystem
[  211.167612][ T6057] hfs: request for non-existent node 131072 in B*Tree
[  211.179323][ T6057] hfs: request for non-existent node 131072 in B*Tree
[  211.381754][ T6030] XFS (loop0): Ending clean mount
[  211.452550][ T5353] XFS (loop0): Unmounting Filesystem
[  211.488802][ T4518] EXT4-fs (loop1): unmounting filesystem.
[  211.623816][ T4049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.841940][ T4049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.006617][ T4049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.051084][ T6070] loop3: detected capacity change from 0 to 512
[  212.088464][ T6070] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.504: casefold flag without casefold feature
[  212.115953][ T6070] EXT4-fs error (device loop3): __ext4_iget:5044: inode #12: block 2: comm syz.3.504: invalid block
[  212.166075][ T6070] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.504: error while reading EA inode 12 err=-117
[  212.181330][ T6070] EXT4-fs (loop3): 1 orphan inode deleted
[  212.187457][ T6070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  212.203735][ T4049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.205631][ T6070] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.504: Directory hole found for htree leaf block 0
[  212.287705][ T5656] EXT4-fs (loop3): unmounting filesystem.
[  212.525977][   T27] audit: type=1326 audit(1722700740.748:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e59b779f9 code=0x0
[  212.814217][ T4049] tipc: Disabling bearer <udp:syz2>
[  212.829163][ T4049] tipc: Left network mode
[  212.989727][ T3652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.003330][ T3652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.013442][ T3652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.029579][ T3652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.047510][ T3652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  213.056762][ T3652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.560882][ T6098] loop0: detected capacity change from 0 to 512
[  213.568385][ T6098] EXT4-fs: Ignoring removed orlov option
[  213.601177][ T6098] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.511: inode #1: comm syz.0.511: iget: illegal inode #
[  213.619086][ T6098] EXT4-fs (loop0): Remounting filesystem read-only
[  213.628141][ T6098] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.511: error while reading EA inode 1 err=-117
[  213.641461][ T6098] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz.0.511: couldn't truncate inode 15 (err -30)
[  213.674660][ T6098] EXT4-fs (loop0): 1 orphan inode deleted
[  213.682865][ T6098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  213.745990][ T5353] EXT4-fs (loop0): unmounting filesystem.
[  213.796583][ T6084] chnl_net:caif_netlink_parms(): no params data found
[  213.954380][ T6109] IPVS: Scheduler module ip_vs_ not found
[  214.248796][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.276512][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.301649][ T6084] device bridge_slave_0 entered promiscuous mode
[  214.367459][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.407243][ T6124] loop0: detected capacity change from 0 to 164
[  214.419108][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.437332][ T6084] device bridge_slave_1 entered promiscuous mode
[  214.469211][ T6112] loop3: detected capacity change from 0 to 32768
[  214.478019][ T6112] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.516 (6112)
[  214.497978][ T6112] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  214.518175][ T6112] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  214.529178][ T6112] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  214.542100][ T6112] BTRFS info (device loop3): use lzo compression, level 0
[  214.549332][ T6112] BTRFS info (device loop3): using free space tree
[  214.663597][ T4049] device hsr_slave_0 left promiscuous mode
[  214.678507][ T4049] device hsr_slave_1 left promiscuous mode
[  214.708727][ T4049] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.725151][ T4049] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.735390][ T6112] BTRFS info (device loop3): enabling ssd optimizations
[  214.736366][ T4049] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.756765][ T4049] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.766763][ T4049] device bridge_slave_1 left promiscuous mode
[  214.782104][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.795030][ T4049] device bridge_slave_0 left promiscuous mode
[  214.801683][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.854582][ T4049] device veth1_macvtap left promiscuous mode
[  214.860907][ T4049] device veth0_macvtap left promiscuous mode
[  214.868318][ T4049] device veth1_vlan left promiscuous mode
[  214.879284][ T4049] device veth0_vlan left promiscuous mode
[  214.905081][ T5656] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  215.140452][ T3655] Bluetooth: hci0: command tx timeout
[  215.834096][ T4049] team0 (unregistering): Port device team_slave_1 removed
[  215.938696][ T4049] team0 (unregistering): Port device team_slave_0 removed
[  216.046155][ T4049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.121223][ T4049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.233191][ T3655] Bluetooth: hci0: command tx timeout
[  217.277038][ T6160] loop3: detected capacity change from 0 to 8192
[  217.321097][ T6160] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  217.362330][ T6160] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  217.402096][ T6160] REISERFS (device loop3): using ordered data mode
[  217.408861][ T6160] reiserfs: using flush barriers
[  217.443484][ T6160] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  217.480547][ T6160] REISERFS (device loop3): checking transaction log (loop3)
[  218.192912][ T6160] REISERFS (device loop3): Using tea hash to sort names
[  218.210960][ T6160] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  218.425998][    C0] eth0: bad gso: type: 1, size: 1408
[  218.710954][ T4049] bond0 (unregistering): Released all slaves
[  218.813065][ T6084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.894881][ T6084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.076676][ T6084] team0: Port device team_slave_0 added
[  219.111191][ T6084] team0: Port device team_slave_1 added
[  219.199633][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.250088][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.298351][ T3655] Bluetooth: hci0: command tx timeout
[  219.360025][ T6084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.393672][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.455748][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.696466][ T6084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.419271][ T6084] device hsr_slave_0 entered promiscuous mode
[  220.461870][ T6084] device hsr_slave_1 entered promiscuous mode
[  220.509349][ T6201] loop2: detected capacity change from 0 to 64
[  220.653293][ T6203] binder_alloc: 6202: binder_alloc_buf size 8 failed, no address space
[  220.692546][ T6203] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0)
[  220.733668][ T6205] loop3: detected capacity change from 0 to 256
[  221.370168][ T3655] Bluetooth: hci0: command tx timeout
[  221.601138][ T6084] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  221.647800][ T6084] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  221.695713][ T6084] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  221.740924][ T6084] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  221.967149][ T6215] loop0: detected capacity change from 0 to 32768
[  222.003303][ T6215] XFS: attr2 mount option is deprecated.
[  222.039744][ T6215] XFS: ikeep mount option is deprecated.
[  222.071303][ T6215] XFS: noikeep mount option is deprecated.
[  222.135404][ T6084] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.166862][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  222.197400][ T6215] XFS (loop0): Mounting V5 Filesystem
[  222.793271][ T6215] XFS (loop0): Ending clean mount
[  222.841298][ T6215] XFS (loop0): Quotacheck needed: Please wait.
[  222.872315][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  222.886461][ T6084] 8021q: adding VLAN 0 to HW filter on device team0
[  222.962883][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  223.162355][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  223.171751][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.178901][ T3725] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.202259][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  223.210821][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  223.219693][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  223.241742][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.249067][ T3725] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.524954][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  223.841603][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  223.933411][ T6215] XFS (loop0): Quotacheck: Done.
[  223.973833][ T6253] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  223.992226][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  224.126391][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  224.138354][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  224.146845][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  224.156244][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  224.198258][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  224.232972][ T5353] XFS (loop0): Unmounting Filesystem
[  224.234308][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  224.268008][ T6084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  224.309199][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  224.361151][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  224.369897][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  225.010627][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  225.018336][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  225.053505][ T6274] loop0: detected capacity change from 0 to 4096
[  225.085997][ T6084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.095194][ T6274] ntfs: (device loop0): load_attribute_list(): Cannot read attribute list since runlist is missing.
[  225.144820][ T6274] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to load attribute list attribute.
[  225.187045][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  225.189754][ T6260] loop3: detected capacity change from 0 to 32768
[  225.200323][ T6274] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  225.216215][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  225.259882][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  225.269415][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  225.299871][ T6274] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  225.312536][   T27] audit: type=1804 audit(1722700753.518:57): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.555" name="/newroot/21/file0/file1" dev="loop3" ino=4 res=1 errno=0
[  225.345338][ T6084] device veth0_vlan entered promiscuous mode
[  225.345378][ T6274] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  225.363986][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  225.381094][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  225.406731][ T6084] device veth1_vlan entered promiscuous mode
[  225.437142][ T6274] ntfs: volume version 3.1.
[  225.449612][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  225.467742][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  225.480813][ T6274] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  225.488891][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  225.520166][ T6274] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  225.527118][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  225.580194][ T6084] device veth0_macvtap entered promiscuous mode
[  225.594519][  T134] ERROR: (device loop3): diUpdatePMap: inode 4 not marked as allocated in wmap!
[  225.594519][  T134] 
[  225.600078][ T6274] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  225.632759][ T6084] device veth1_macvtap entered promiscuous mode
[  225.652798][  T134] ERROR: (device loop3): diFree: wmap shows inode already free
[  225.652798][  T134] 
[  225.676736][ T6274] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  225.705368][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.725868][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.738411][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.756999][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.767561][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.785588][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.810039][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.830736][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.847004][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.858232][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.897830][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.929921][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  225.938587][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  225.978731][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  225.988928][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  226.011100][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.039797][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.062147][ T6284] dccp_invalid_packet: P.Data Offset(10) too large
[  226.067451][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.088122][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.111124][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.127693][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.139602][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.160192][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.180615][    C0] eth0: bad gso: type: 1, size: 1408
[  226.208101][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.245875][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.288645][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.320218][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  226.329106][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  226.374665][ T6084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.401166][ T6084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.409923][ T6084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.438784][ T6084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.659278][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.679325][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.733856][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  226.744602][ T4049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.761666][ T4049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.800513][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  226.880229][ T4528] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  226.992628][ T6288] loop2: detected capacity change from 0 to 32768
[  227.006455][ T6288] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.568 (6288)
[  227.041574][ T6288] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  227.061952][ T6288] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  227.072185][ T6288] BTRFS info (device loop2): setting nodatacow, compression disabled
[  227.086460][ T6288] BTRFS info (device loop2): use zlib compression, level 3
[  227.101365][ T6288] BTRFS info (device loop2): using free space tree
[  227.280678][ T4528] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  227.294035][ T4528] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.304471][ T4528] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  227.315070][ T4528] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.395848][ T6288] BTRFS info (device loop2): enabling ssd optimizations
[  227.416597][ T6331] device syzkaller0 entered promiscuous mode
[  227.490455][ T4528] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  227.499585][ T4528] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  227.539239][ T4528] usb 4-1: Product: syz
[  227.545221][ T4564] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  227.562825][ T4528] usb 4-1: Manufacturer: syz
[  227.627344][ T4528] cdc_wdm 4-1:1.0: skipping garbage
[  227.635728][ T4528] cdc_wdm 4-1:1.0: skipping garbage
[  227.673486][ T4528] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  227.681218][ T4528] cdc_wdm 4-1:1.0: Unknown control protocol
[  227.685288][ T6337] 9pnet_fd: Insufficient options for proto=fd
[  227.910275][ T6340] usb 4-1: USB disconnect, device number 11
[  228.125289][ T6347] loop1: detected capacity change from 0 to 2048
[  228.158506][ T6347] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  228.198188][ T6347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  228.780151][ T6353] loop3: detected capacity change from 0 to 1024
[  229.446241][ T6353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  229.830353][ T6363] loop3: detected capacity change from 1024 to 0
[  229.868652][    C1] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  229.879333][    C0] I/O error, dev loop3, sector 26 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  229.889037][    C0] I/O error, dev loop3, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  229.898661][    C0] I/O error, dev loop3, sector 22 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  229.928849][ T6366] EXT4-fs error (device loop3): ext4_get_inode_loc:4633: inode #12: block 7: comm syz.3.594: unable to read itable block
[  229.978848][ T4586] loop: Write error at byte offset 9223372036854776831, length 1024.
[  229.979287][    C0] I/O error, dev loop3, sector 20 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  229.997531][    C0] I/O error, dev loop3, sector 18 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  230.001307][    C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  230.007429][    C0] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  230.018759][    C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  230.028721][    C0] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  230.049406][    C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[  230.062471][ T6366] EXT4-fs (loop3): I/O error while writing superblock
[  230.069440][ T6366] EXT4-fs (loop3): Remounting filesystem read-only
[  230.089082][ T6366] EXT4-fs error (device loop3): ext4_read_inode_bitmap:203: comm syz.3.594: Cannot read inode bitmap - block_group = 0, inode_bitmap = 4
[  230.139668][  T102] loop: Write error at byte offset 9223372036854776831, length 1024.
[  230.156892][    C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[  230.168753][ T6366] EXT4-fs (loop3): I/O error while writing superblock
[  230.329719][ T5656] EXT4-fs (loop3): unmounting filesystem.
[  230.373409][ T3941] loop: Write error at byte offset 9223372036854841343, length 1024.
[  230.393026][    C0] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  230.474094][ T4426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.650356][ T3655] Bluetooth: hci0: command tx timeout
[  230.757893][ T4426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.870965][   T27] kauditd_printk_skb: 10 callbacks suppressed
[  230.870983][   T27] audit: type=1326 audit(1722700759.098:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effb4d779f9 code=0x0
[  230.924200][ T4426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.053943][ T4426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.140790][ T3685] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  231.225470][ T3642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  231.243973][ T3642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  231.256068][ T3642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  231.267978][ T3642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  231.279223][ T3642] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  231.287247][ T3642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  231.510733][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.529119][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.553488][ T3685] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  231.569770][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.580941][ T3685] usb 1-1: config 0 descriptor??
[  231.584050][ T3652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  231.603177][ T3652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  231.620395][ T3652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  231.631483][ T3652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  231.640391][ T3652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  231.647739][ T3652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  232.351847][ T3685] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[  232.363091][ T3685] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0
[  232.400205][ T6340] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  232.477191][ T6390] chnl_net:caif_netlink_parms(): no params data found
[  232.543171][ T3684] usb 1-1: USB disconnect, device number 5
[  232.765763][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.774637][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.788609][ T6390] device bridge_slave_0 entered promiscuous mode
[  232.816780][ T6392] chnl_net:caif_netlink_parms(): no params data found
[  232.833221][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.836656][ T6340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.841162][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.862641][ T6390] device bridge_slave_1 entered promiscuous mode
[  232.875278][ T6340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.890440][ T6340] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  232.909136][ T6340] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  232.918612][ T6340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.938077][ T6340] usb 2-1: config 0 descriptor??
[  233.028425][ T4426] bond0: (slave wlan1): Releasing backup interface
[  233.080859][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.108187][ T6418] usb usb9: check_ctrlrecip: process 6418 (syz.4.600) requesting ep 01 but needs 81
[  233.240334][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.293078][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.602'.
[  233.355066][ T6428] loop0: detected capacity change from 0 to 1024
[  233.370830][ T3655] Bluetooth: hci1: command tx timeout
[  233.385291][ T4426] device hsr_slave_0 left promiscuous mode
[  233.392139][ T4426] device hsr_slave_1 left promiscuous mode
[  233.398795][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.406467][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.412513][ T6340] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  233.422317][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.430199][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.438431][ T4426] device bridge_slave_1 left promiscuous mode
[  233.445493][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.455394][ T4426] device bridge_slave_0 left promiscuous mode
[  233.462179][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.548210][ T4426] device veth1_macvtap left promiscuous mode
[  233.563121][ T4426] device veth0_macvtap left promiscuous mode
[  233.587131][ T4426] device veth1_vlan left promiscuous mode
[  233.599367][ T4426] device veth0_vlan left promiscuous mode
[  233.623973][ T6340] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  233.645858][ T6340] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  233.660621][ T6340] usb 2-1: USB disconnect, device number 5
[  233.711744][ T3655] Bluetooth: hci4: command tx timeout
[  234.745612][ T6340] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  234.905794][ T4426] team0 (unregistering): Port device team_slave_1 removed
[  234.967374][ T4426] team0 (unregistering): Port device team_slave_0 removed
[  234.994855][ T6340] usb 1-1: Using ep0 maxpacket: 32
[  235.040570][ T4426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.075765][ T6442] binder: 6441:6442 ioctl c0306201 20000380 returned -14
[  235.130121][ T4426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.141064][ T6340] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  235.164389][ T6340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.184560][ T6340] usb 1-1: config 0 descriptor??
[  235.226260][ T6340] gspca_main: sq930x-2.14.0 probing 041e:403c
[  235.454049][ T3642] Bluetooth: hci1: command tx timeout
[  235.699493][ T4426] bond0 (unregistering): Released all slaves
[  235.770769][ T3642] Bluetooth: hci4: command tx timeout
[  235.792044][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.799251][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.808073][ T6392] device bridge_slave_0 entered promiscuous mode
[  235.828770][ T6390] team0: Port device team_slave_0 added
[  235.848318][ T6390] team0: Port device team_slave_1 added
[  235.864332][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.872000][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.880510][ T6392] device bridge_slave_1 entered promiscuous mode
[  235.983691][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.000541][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.029577][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.139831][ T6392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.187919][ T6392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.426938][ T6392] team0: Port device team_slave_0 added
[  237.516910][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.543974][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.759161][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.850129][ T3642] Bluetooth: hci4: command tx timeout
[  237.867858][ T6392] team0: Port device team_slave_1 added
[  238.132879][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.144114][ T3642] Bluetooth: hci1: command tx timeout
[  238.151368][ T6340] gspca_sq930x: ucbus_write failed -71
[  238.158154][ T6340] sq930x: probe of 1-1:0.0 failed with error -71
[  238.172307][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.203726][ T6340] usb 1-1: USB disconnect, device number 6
[  238.228009][ T6392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.302702][ T6390] device hsr_slave_0 entered promiscuous mode
[  238.315803][ T6390] device hsr_slave_1 entered promiscuous mode
[  238.325142][ T6390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  238.335476][ T6390] Cannot create hsr debugfs directory
[  238.669032][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.730883][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.986839][ T6392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.250790][ T3655] Bluetooth: hci4: command tx timeout
[  240.257493][ T3642] Bluetooth: hci1: command tx timeout
[  240.444198][ T6392] device hsr_slave_0 entered promiscuous mode
[  240.461853][ T6392] device hsr_slave_1 entered promiscuous mode
[  240.481564][ T6392] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.489275][ T6392] Cannot create hsr debugfs directory
[  240.653527][    C0] eth0: bad gso: type: 1, size: 1408
[  240.780759][ T6482] loop1: detected capacity change from 0 to 512
[  240.796270][ T6482] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  240.857447][ T6482] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.619: casefold flag without casefold feature
[  240.879539][ T6482] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.619: missing EA_INODE flag
[  240.900145][ T6482] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.619: error while reading EA inode 12 err=-117
[  240.921900][ T6482] EXT4-fs (loop1): 1 orphan inode deleted
[  240.931242][ T6482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  240.950187][ T6340] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  240.976344][ T6482] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.619: Directory hole found for htree leaf block 0
[  241.047502][ T6487] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.619: Directory hole found for htree leaf block 0
[  241.186005][ T6084] EXT4-fs (loop1): unmounting filesystem.
[  241.287520][ T6392] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.380755][ T6340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.472985][ T6392] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.501457][ T6340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.520243][ T6340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  241.533923][   T28] INFO: task syz.4.39:3894 blocked for more than 143 seconds.
[  241.545212][ T6340] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  241.557090][   T28]       Not tainted 6.1.103-syzkaller #0
[  241.578690][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.588322][ T6340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.597235][   T28] task:syz.4.39        state:D stack:25376 pid:3894  ppid:3640   flags:0x00004004
[  241.620935][ T6340] usb 5-1: config 0 descriptor??
[  241.627793][   T28] Call Trace:
[  241.633053][   T28]  <TASK>
[  241.636532][   T28]  __schedule+0x143f/0x4570
[  241.648284][   T28]  ? release_firmware_map_entry+0x186/0x186
[  241.659899][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  241.673301][   T28]  ? print_irqtrace_events+0x210/0x210
[  241.679147][   T28]  ? _raw_spin_lock_irq+0xdb/0x110
[  241.685518][   T28]  schedule+0xbf/0x180
[  241.691429][   T28]  io_schedule+0x88/0x100
[  241.696117][   T28]  folio_wait_bit_common+0x878/0x1290
[  241.731452][   T28]  ? folio_wait_bit+0x20/0x20
[  242.219726][   T28]  ? migration_entry_wait_on_locked+0x1160/0x1160
[  242.227149][   T28]  ? jfs_error+0x219/0x2e0
[  242.232561][   T28]  ? __get_metapage+0x551/0x1040
[  242.237786][   T28]  release_metapage+0x88/0x9b0
[  242.243910][   T28]  ? PageHeadHuge+0x8e/0x1c0
[  242.248874][   T28]  __get_metapage+0xb15/0x1040
[  242.256264][   T28]  jfs_readdir+0x2907/0x4620
[  242.262051][   T28]  ? dtInitRoot+0x690/0x690
[  242.264199][ T6496] loop1: detected capacity change from 0 to 512
[  242.267353][   T28]  ? down_write_killable_nested+0x90/0x90
[  242.285079][   T28]  ? end_current_label_crit_section+0x147/0x170
[  242.294325][ T6496] EXT4-fs (loop1): filesystem is read-only
[  242.301415][   T28]  ? common_file_perm+0x17d/0x1d0
[  242.308379][   T28]  ? iterate_dir+0x131/0x560
[  242.314192][   T28]  iterate_dir+0x224/0x560
[  242.319790][   T28]  __se_sys_getdents64+0x209/0x4f0
[  242.326386][ T6496] EXT4-fs (loop1): filesystem is read-only
[  242.331533][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  242.335499][ T3655] Bluetooth: hci3: command tx timeout
[  242.338463][   T28]  ? __x64_sys_getdents64+0x80/0x80
[  242.354307][ T6496] EXT4-fs (loop1): orphan cleanup on readonly fs
[  242.365724][   T28]  ? filldir+0x6f0/0x6f0
[  242.369354][ T6496] EXT4-fs error (device loop1): ext4_quota_enable:6964: comm syz.1.622: Bad quota inum: 16777216, type: 0
[  242.377069][   T28]  ? syscall_enter_from_user_mode+0x2e/0x230
[  242.387702][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  242.412105][   T28]  ? syscall_enter_from_user_mode+0x2e/0x230
[  242.441900][ T6340] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  242.455372][   T28]  do_syscall_64+0x3b/0xb0
[  242.459899][   T28]  ? clear_bhb_loop+0x45/0xa0
[  242.460278][ T6496] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-117, ino=16777216). Please run e2fsck to fix.
[  242.480185][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.480238][   T28] RIP: 0033:0x7ff4705779f9
[  242.480265][   T28] RSP: 002b:00007ff4703de048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  242.480293][   T28] RAX: ffffffffffffffda RBX: 00007ff470706058 RCX: 00007ff4705779f9
[  242.480310][   T28] RDX: 0000000000001000 RSI: 0000000020000f80 RDI: 0000000000000006
[  242.486957][   T28] RBP: 00007ff4705e58ee R08: 0000000000000000 R09: 0000000000000000
[  242.488461][ T6340] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  242.532978][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.541634][   T28] R13: 000000000000006e R14: 00007ff470706058 R15: 00007ffde57551a8
[  242.549669][   T28]  </TASK>
[  242.553307][ T6496] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  242.563437][   T28] 
[  242.563437][   T28] Showing all locks held in the system:
[  242.571470][ T6496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  242.581678][   T28] 3 locks held by kworker/u4:0/9:
[  242.591344][   T28] 1 lock held by rcu_tasks_kthre/12:
[  242.606780][   T28]  #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  242.620795][ T6340] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  242.640123][   T28] 1 lock held by rcu_tasks_trace/13:
[  242.660319][   T28]  #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  242.678921][   T28] 1 lock held by khungtaskd/28:
[  242.688344][   T28]  #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  242.709581][   T28] 2 locks held by getty/3396:
[  242.726123][   T28]  #0: ffff88814b5dd098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  242.774038][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  242.796243][   T28] 2 locks held by syz.4.39/3894:
[  242.804314][   T28]  #0: ffff88807c9519e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360
[  242.821619][   T28]  #1: ffff888071177480 (&type->i_mutex_dir_key#9){+.+.}-{3:3}, at: iterate_dir+0x131/0x560
[  242.843256][   T28] 3 locks held by kworker/u4:9/4426:
[  242.848920][   T28] 1 lock held by syz-executor/6084:
[  242.862581][   T28]  #0: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  242.881204][   T28] 2 locks held by kworker/0:16/6340:
[  242.888964][   T28]  #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  242.907008][   T28]  #1: ffffc9000382fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  242.927047][   T28] 4 locks held by syz-executor/6390:
[  242.932742][   T28]  #0: ffff88807e472460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[  242.952047][   T28]  #1: ffff88805551f088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0
[  242.970618][   T28]  #2: ffff88802029b748 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0
[  242.988511][   T28]  #3: ffffffff8de21548 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800
[  243.010107][   T28] 7 locks held by syz-executor/6392:
[  243.015559][   T28]  #0: ffff88807e472460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[  243.032895][   T28]  #1: ffff88805551dc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0
[  243.048003][   T28]  #2: ffff88802029b830 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0
[  243.058967][   T28]  #3: ffffffff8de21548 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480
[  243.072753][   T28]  #4: ffff88807be840e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880
[  243.083753][   T28]  #5: ffff88805bd722f8 (&devlink->lock_key#13){+.+.}-{3:3}, at: nsim_drv_remove+0x54/0x160
[  243.096123][   T28]  #6: ffffffff8d330480 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0
[  243.106669][   T28] 1 lock held by syz.4.616/6480:
[  243.116746][   T28]  #0: ffff888059cc1478 (&hiddev->existancelock){+.+.}-{3:3}, at: hiddev_ioctl+0x14c/0x1ef0
[  243.135476][   T28] 1 lock held by syz.4.616/6501:
[  243.143358][   T28]  #0: ffff888059cc1478 (&hiddev->existancelock){+.+.}-{3:3}, at: hiddev_ioctl+0x14c/0x1ef0
[  243.160941][ T6084] EXT4-fs (loop1): unmounting filesystem.
[  243.167509][   T28] 
[  243.189232][   T28] =============================================
[  243.189232][   T28] 
[  243.227619][   T28] NMI backtrace for cpu 0
[  243.232025][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0
[  243.232883][ T6392] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.240009][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  243.240025][   T28] Call Trace:
[  243.240034][   T28]  <TASK>
[  243.240043][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  243.240083][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  243.240115][   T28]  ? panic+0x764/0x764
[  243.240134][   T28]  ? vprintk_emit+0x622/0x740
[  243.240170][   T28]  ? printk_sprint+0x490/0x490
[  243.240204][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  243.295748][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  243.300752][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  243.306968][   T28]  ? _printk+0xd1/0x111
[  243.311147][   T28]  ? panic+0x764/0x764
[  243.315933][   T28]  ? __wake_up_klogd+0xcc/0x100
[  243.320796][   T28]  ? panic+0x764/0x764
[  243.324867][   T28]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[  243.330950][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  243.337033][   T28]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[  243.343117][   T28]  watchdog+0xf88/0xfd0
[  243.347286][   T28]  ? watchdog+0x1f8/0xfd0
[  243.351628][   T28]  kthread+0x28d/0x320
[  243.355800][   T28]  ? hungtask_pm_notify+0x50/0x50
[  243.360853][   T28]  ? kthread_blkcg+0xd0/0xd0
[  243.365446][   T28]  ret_from_fork+0x1f/0x30
[  243.370084][   T28]  </TASK>
[  243.374597][   T28] Sending NMI from CPU 0 to CPUs 1:
[  243.379883][    C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340
[  243.404483][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  243.411389][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0
[  243.419292][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  243.429979][   T28] Call Trace:
[  243.433278][   T28]  <TASK>
[  243.436215][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  243.441190][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  243.446780][   T28]  ? panic+0x764/0x764
[  243.451079][   T28]  ? llist_add_batch+0x160/0x1d0
[  243.456049][   T28]  ? vscnprintf+0x59/0x80
[  243.460390][   T28]  panic+0x318/0x764
[  243.464841][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  243.471039][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  243.476443][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  243.482715][   T28]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[  243.488898][   T28]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[  243.495071][   T28]  watchdog+0xfc7/0xfd0
[  243.499329][   T28]  ? watchdog+0x1f8/0xfd0
[  243.503721][   T28]  kthread+0x28d/0x320
[  243.507882][   T28]  ? hungtask_pm_notify+0x50/0x50
[  243.512915][   T28]  ? kthread_blkcg+0xd0/0xd0
[  243.517596][   T28]  ret_from_fork+0x1f/0x30
[  243.522034][   T28]  </TASK>
[  243.525330][   T28] Kernel Offset: disabled
[  243.529774][   T28] Rebooting in 86400 seconds..